last executing test programs: 29.087955395s ago: executing program 0 (id=975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x200048c4) 28.599800916s ago: executing program 0 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/94, 0x5e, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz1\x00', {0x10, 0x4, 0x5, 0x4}, 0xe, [0x1000, 0xa, 0x5, 0x5, 0x3, 0x9, 0xf1, 0x51, 0xc, 0x9, 0x80000000, 0x8, 0x3800, 0x8, 0xf4a9, 0x101, 0x10000, 0x6, 0xa, 0x1, 0x8, 0x8, 0x870, 0x3, 0x7, 0x0, 0x1, 0x1, 0x5, 0x18, 0x0, 0x8, 0x77, 0x401, 0x52, 0x1, 0xffffffff, 0x5, 0x7fff, 0x1241, 0x4, 0x3599f3ab, 0x4000000, 0x1, 0x52f, 0x201, 0x1, 0xfffffffe, 0x40, 0x416f, 0x18, 0x5, 0x8, 0xf, 0x953d, 0x80, 0x1, 0x7, 0x7, 0x3, 0x1, 0x7fffffff, 0x81, 0x1], [0x5, 0x0, 0x6, 0x410, 0x4, 0x9a40, 0x2, 0x5, 0x78, 0x2, 0x6, 0x4, 0x6, 0x81, 0x36a7, 0x4, 0x8000, 0x9, 0x1, 0xff, 0x4, 0x500, 0x9, 0x8, 0x200, 0x1ff, 0x8e, 0x40, 0x7, 0x6, 0xf7, 0x6, 0xfd5, 0x6, 0xc4e, 0x4, 0x1, 0x3, 0x9, 0x1, 0x2, 0x1, 0x200, 0x5, 0x5, 0x6a, 0x93, 0x7ff, 0x7ff, 0x7, 0x4, 0x10001, 0x8, 0x5, 0xfffffffb, 0xfffffff8, 0x9, 0x5, 0x8001, 0x80000001, 0x1, 0x40, 0x2, 0x1], [0x5, 0x6, 0x6, 0x401, 0xd1f, 0x4, 0x2, 0x8000, 0x7, 0x47c0, 0x96bd, 0x9, 0xffffffe1, 0x8, 0x10001, 0x6, 0x3, 0xd, 0x2, 0xd78ed347, 0x8, 0x2, 0xffffffff, 0x6c3, 0x57b6d056, 0x100, 0x80, 0xfffffffb, 0x1, 0x6f25, 0x5, 0x10001, 0x6, 0x0, 0x40, 0x1, 0x7ff, 0x8, 0x8, 0xd65e, 0x0, 0x1, 0x893c, 0xfffffffe, 0x4, 0x1511, 0x3c2, 0x2, 0x0, 0x4, 0xe, 0x7, 0x7, 0x17, 0x5e, 0x7, 0xa, 0x9, 0x4, 0x200, 0x7f, 0x9, 0x3, 0x2], [0x2, 0xd3f8, 0x6, 0xdd20, 0xffffffff, 0x9, 0x5, 0x6, 0xb, 0x5d, 0xfff, 0xfb, 0x3, 0x1, 0x9, 0xcb7b, 0xdfa, 0x1ff, 0x8b9, 0x1, 0x6, 0x2, 0x81, 0x1, 0x1, 0x4d58, 0x8, 0x9, 0x1, 0x31, 0x7, 0x6, 0x2, 0x2, 0x0, 0xfffffff9, 0x1, 0x8, 0xea5, 0x0, 0x5, 0x2, 0x0, 0x9, 0x6, 0xd, 0x9, 0x6, 0x5, 0x2, 0x0, 0xb, 0x0, 0x1, 0x40, 0x4, 0xfffffff8, 0x5, 0x9, 0xf2, 0x4, 0x4, 0xffff, 0x1]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup=r4, 0xd, 0x1, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) sendmmsg(r2, 0x0, 0x0, 0x0) fsopen(0x0, 0x1) 26.408719962s ago: executing program 0 (id=981): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x40001) 24.894923828s ago: executing program 0 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014) setresuid(0xee00, 0xee00, 0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x100031a, 0x101a, 0x3, 0x36b}, 0x0, 0x0) 24.725935596s ago: executing program 0 (id=986): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31ac", 0x25}], 0x1}, 0x4) 23.95592785s ago: executing program 0 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000012c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 8.985699526s ago: executing program 3 (id=1045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2711, @hyper}, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) 8.812740893s ago: executing program 32 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000012c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 8.755894996s ago: executing program 2 (id=1048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2200004c, &(0x7f0000000040)=ANY=[], 0xfe, 0x152b, &(0x7f0000003e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0xe42, 0x1ff) 7.904939643s ago: executing program 3 (id=1049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 7.667397174s ago: executing program 2 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='freezer'}]}) 7.603939746s ago: executing program 1 (id=1052): getgroups(0x3ffffffffffffdbf, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]) 7.603713116s ago: executing program 1 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 7.551944859s ago: executing program 4 (id=1054): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sync_file_range(r0, 0x200000000, 0x2fd, 0x1) 7.088542059s ago: executing program 4 (id=1055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 5.823680274s ago: executing program 2 (id=1056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/94, 0x5e, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz1\x00', {0x10, 0x4, 0x5, 0x4}, 0xe, [0x1000, 0xa, 0x5, 0x5, 0x3, 0x9, 0xf1, 0x51, 0xc, 0x9, 0x80000000, 0x8, 0x3800, 0x8, 0xf4a9, 0x101, 0x10000, 0x6, 0xa, 0x1, 0x8, 0x8, 0x870, 0x3, 0x7, 0x0, 0x1, 0x1, 0x5, 0x18, 0x0, 0x8, 0x77, 0x401, 0x52, 0x1, 0xffffffff, 0x5, 0x7fff, 0x1241, 0x4, 0x3599f3ab, 0x4000000, 0x1, 0x52f, 0x201, 0x1, 0xfffffffe, 0x40, 0x416f, 0x18, 0x5, 0x8, 0xf, 0x953d, 0x80, 0x1, 0x7, 0x7, 0x3, 0x1, 0x7fffffff, 0x81, 0x1], [0x5, 0x0, 0x6, 0x410, 0x4, 0x9a40, 0x2, 0x5, 0x78, 0x2, 0x6, 0x4, 0x6, 0x81, 0x36a7, 0x4, 0x8000, 0x9, 0x1, 0xff, 0x4, 0x500, 0x9, 0x8, 0x200, 0x1ff, 0x8e, 0x40, 0x7, 0x6, 0xf7, 0x6, 0xfd5, 0x6, 0xc4e, 0x4, 0x1, 0x3, 0x9, 0x1, 0x2, 0x1, 0x200, 0x5, 0x5, 0x6a, 0x93, 0x7ff, 0x7ff, 0x7, 0x4, 0x10001, 0x8, 0x5, 0xfffffffb, 0xfffffff8, 0x9, 0x5, 0x8001, 0x80000001, 0x1, 0x40, 0x2, 0x1], [0x5, 0x6, 0x6, 0x401, 0xd1f, 0x4, 0x2, 0x8000, 0x7, 0x47c0, 0x96bd, 0x9, 0xffffffe1, 0x8, 0x10001, 0x6, 0x3, 0xd, 0x2, 0xd78ed347, 0x8, 0x2, 0xffffffff, 0x6c3, 0x57b6d056, 0x100, 0x80, 0xfffffffb, 0x1, 0x6f25, 0x5, 0x10001, 0x6, 0x0, 0x40, 0x1, 0x7ff, 0x8, 0x8, 0xd65e, 0x0, 0x1, 0x893c, 0xfffffffe, 0x4, 0x1511, 0x3c2, 0x2, 0x0, 0x4, 0xe, 0x7, 0x7, 0x17, 0x5e, 0x7, 0xa, 0x9, 0x4, 0x200, 0x7f, 0x9, 0x3, 0x2], [0x2, 0xd3f8, 0x6, 0xdd20, 0xffffffff, 0x9, 0x5, 0x6, 0xb, 0x5d, 0xfff, 0xfb, 0x3, 0x1, 0x9, 0xcb7b, 0xdfa, 0x1ff, 0x8b9, 0x1, 0x6, 0x2, 0x81, 0x1, 0x1, 0x4d58, 0x8, 0x9, 0x1, 0x31, 0x7, 0x6, 0x2, 0x2, 0x0, 0xfffffff9, 0x1, 0x8, 0xea5, 0x0, 0x5, 0x2, 0x0, 0x9, 0x6, 0xd, 0x9, 0x6, 0x5, 0x2, 0x0, 0xb, 0x0, 0x1, 0x40, 0x4, 0xfffffff8, 0x5, 0x9, 0xf2, 0x4, 0x4, 0xffff, 0x1]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup=r4, 0xd, 0x1, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.356587288s ago: executing program 1 (id=1057): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000700)=""/40, &(0x7f0000000740)=0x28) 4.356163469s ago: executing program 2 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2711, @hyper}, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendfile(r4, r5, 0x0, 0x20000023896) 4.355278149s ago: executing program 1 (id=1059): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 4.252489723s ago: executing program 3 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 3.86662696s ago: executing program 4 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 3.747829025s ago: executing program 3 (id=1062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) 3.747644485s ago: executing program 4 (id=1063): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000001800)) 3.614897341s ago: executing program 4 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.543587585s ago: executing program 3 (id=1065): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x40002012}) getresuid(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000001300)={0x2, 0x0, {0x0, 0x0, 0x4, 0x2000017, 0x10000000, 0x60, 0x0, 0xffffffff}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 3.363520972s ago: executing program 2 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) inotify_init() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 319.965326ms ago: executing program 4 (id=1067): timer_create(0x3, 0x0, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) unshare(0x62040200) 230.86218ms ago: executing program 2 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/94, 0x5e, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz1\x00', {0x10, 0x4, 0x5, 0x4}, 0xe, [0x1000, 0xa, 0x5, 0x5, 0x3, 0x9, 0xf1, 0x51, 0xc, 0x9, 0x80000000, 0x8, 0x3800, 0x8, 0xf4a9, 0x101, 0x10000, 0x6, 0xa, 0x1, 0x8, 0x8, 0x870, 0x3, 0x7, 0x0, 0x1, 0x1, 0x5, 0x18, 0x0, 0x8, 0x77, 0x401, 0x52, 0x1, 0xffffffff, 0x5, 0x7fff, 0x1241, 0x4, 0x3599f3ab, 0x4000000, 0x1, 0x52f, 0x201, 0x1, 0xfffffffe, 0x40, 0x416f, 0x18, 0x5, 0x8, 0xf, 0x953d, 0x80, 0x1, 0x7, 0x7, 0x3, 0x1, 0x7fffffff, 0x81, 0x1], [0x5, 0x0, 0x6, 0x410, 0x4, 0x9a40, 0x2, 0x5, 0x78, 0x2, 0x6, 0x4, 0x6, 0x81, 0x36a7, 0x4, 0x8000, 0x9, 0x1, 0xff, 0x4, 0x500, 0x9, 0x8, 0x200, 0x1ff, 0x8e, 0x40, 0x7, 0x6, 0xf7, 0x6, 0xfd5, 0x6, 0xc4e, 0x4, 0x1, 0x3, 0x9, 0x1, 0x2, 0x1, 0x200, 0x5, 0x5, 0x6a, 0x93, 0x7ff, 0x7ff, 0x7, 0x4, 0x10001, 0x8, 0x5, 0xfffffffb, 0xfffffff8, 0x9, 0x5, 0x8001, 0x80000001, 0x1, 0x40, 0x2, 0x1], [0x5, 0x6, 0x6, 0x401, 0xd1f, 0x4, 0x2, 0x8000, 0x7, 0x47c0, 0x96bd, 0x9, 0xffffffe1, 0x8, 0x10001, 0x6, 0x3, 0xd, 0x2, 0xd78ed347, 0x8, 0x2, 0xffffffff, 0x6c3, 0x57b6d056, 0x100, 0x80, 0xfffffffb, 0x1, 0x6f25, 0x5, 0x10001, 0x6, 0x0, 0x40, 0x1, 0x7ff, 0x8, 0x8, 0xd65e, 0x0, 0x1, 0x893c, 0xfffffffe, 0x4, 0x1511, 0x3c2, 0x2, 0x0, 0x4, 0xe, 0x7, 0x7, 0x17, 0x5e, 0x7, 0xa, 0x9, 0x4, 0x200, 0x7f, 0x9, 0x3, 0x2], [0x2, 0xd3f8, 0x6, 0xdd20, 0xffffffff, 0x9, 0x5, 0x6, 0xb, 0x5d, 0xfff, 0xfb, 0x3, 0x1, 0x9, 0xcb7b, 0xdfa, 0x1ff, 0x8b9, 0x1, 0x6, 0x2, 0x81, 0x1, 0x1, 0x4d58, 0x8, 0x9, 0x1, 0x31, 0x7, 0x6, 0x2, 0x2, 0x0, 0xfffffff9, 0x1, 0x8, 0xea5, 0x0, 0x5, 0x2, 0x0, 0x9, 0x6, 0xd, 0x9, 0x6, 0x5, 0x2, 0x0, 0xb, 0x0, 0x1, 0x40, 0x4, 0xfffffff8, 0x5, 0x9, 0xf2, 0x4, 0x4, 0xffff, 0x1]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup=r4, 0xd, 0x1, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 167.091912ms ago: executing program 1 (id=1069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) timer_create(0x7, 0x0, &(0x7f0000000140)=0x0) timer_getoverrun(r3) 122.512864ms ago: executing program 3 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 0s ago: executing program 1 (id=1071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) syz_clone(0x8000a000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 7708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.255400][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.278252][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.288422][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.300942][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.311045][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.321687][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.331697][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.342448][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.354248][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.379037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.408576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.420649][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.435800][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.453254][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.468937][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.476405][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.480126][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.498916][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.510306][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.520631][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.537771][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.555079][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.567899][ T4250] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 67.576869][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.588630][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.599632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.608149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.618145][ T4250] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.619512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.631525][ T4250] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.646063][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.655298][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.658800][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.674940][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.686403][ T4250] usb 1-1: config 0 descriptor?? [ 67.689825][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.716068][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.727318][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.731021][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.735310][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.748477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.757838][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.775713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.882753][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.912657][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.943150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.943573][ T386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.983180][ T386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.996172][ T4303] loop1: detected capacity change from 0 to 512 [ 68.000926][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.012225][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 68.042060][ T4303] EXT4-fs (loop1): inline encryption not supported [ 68.092372][ T4303] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 68.127887][ T4303] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2: invalid indirect mapped block 2683928664 (level 1) [ 68.153820][ T4303] EXT4-fs (loop1): Remounting filesystem read-only [ 68.162292][ T4303] EXT4-fs (loop1): 1 truncate cleaned up [ 68.168865][ T4303] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,. Quota mode: writeback. [ 68.191655][ T4250] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 68.207139][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.286310][ T4250] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.318968][ T4250] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.347736][ T21] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 68.355988][ T21] usb 3-1: config 13 has an invalid descriptor of length 255, skipping remainder of the config [ 68.379260][ T4250] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 68.423571][ T21] usb 3-1: config 13 has no interface number 0 [ 68.438095][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7'. [ 68.449691][ T21] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 68.463579][ T4250] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 68.476168][ T21] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.491987][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.517304][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.528548][ T4250] usb 1-1: USB disconnect, device number 2 [ 68.543593][ T21] usb 3-1: config 13 interface 50 has no altsetting 0 [ 68.595025][ T2236] Bluetooth: hci0: command 0x0419 tx timeout [ 68.624054][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.637969][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.668227][ T2236] Bluetooth: hci2: command 0x0419 tx timeout [ 68.678359][ T2236] Bluetooth: hci4: command 0x0419 tx timeout [ 68.713850][ T2236] Bluetooth: hci3: command 0x0419 tx timeout [ 68.729255][ T2236] Bluetooth: hci1: command 0x0419 tx timeout [ 68.754630][ T4316] fido_id[4316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 68.906569][ T21] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 68.917092][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.925122][ T21] usb 3-1: Product: syz [ 68.929627][ T21] usb 3-1: Manufacturer: syz [ 68.934251][ T21] usb 3-1: SerialNumber: syz [ 68.983816][ T4300] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 69.149806][ T4320] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.687208][ T26] audit: type=1800 audit(1763618525.340:2): pid=4303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 69.977921][ T21] usb 3-1: MIDIStreaming interface descriptor not found [ 70.058038][ T21] usb 3-1: USB disconnect, device number 2 [ 71.228361][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.235123][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.439068][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.686955][ C0] sched: RT throttling activated [ 72.789223][ T4366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.423301][ T4379] loop3: detected capacity change from 0 to 512 [ 73.554770][ T4379] EXT4-fs (loop3): Mount option "nodioread_nolock" incompatible with ext2 [ 73.597617][ T26] audit: type=1326 audit(1763618529.190:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 73.650873][ T26] audit: type=1326 audit(1763618529.190:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 73.674844][ T26] audit: type=1326 audit(1763618529.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.0.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 74.696733][ T4391] loop1: detected capacity change from 0 to 131072 [ 75.225436][ T4391] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 75.233924][ T4391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 75.271615][ T4391] F2FS-fs (loop1): invalid crc value [ 75.382853][ T4408] loop0: detected capacity change from 0 to 256 [ 75.615477][ T4408] FAT-fs (loop0): Directory bread(block 64) failed [ 75.622686][ T4408] FAT-fs (loop0): Directory bread(block 65) failed [ 75.629849][ T4408] FAT-fs (loop0): Directory bread(block 66) failed [ 75.636587][ T4408] FAT-fs (loop0): Directory bread(block 67) failed [ 75.643586][ T4408] FAT-fs (loop0): Directory bread(block 68) failed [ 75.650342][ T4408] FAT-fs (loop0): Directory bread(block 69) failed [ 75.657967][ T4408] FAT-fs (loop0): Directory bread(block 70) failed [ 75.664807][ T4408] FAT-fs (loop0): Directory bread(block 71) failed [ 75.672437][ T4408] FAT-fs (loop0): Directory bread(block 72) failed [ 75.679401][ T4408] FAT-fs (loop0): Directory bread(block 73) failed [ 77.683061][ T4391] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 78.712682][ T4409] device syzkaller0 entered promiscuous mode [ 80.000002][ T4438] loop0: detected capacity change from 0 to 128 [ 80.365979][ T4447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.50'. [ 81.380999][ T4447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.50'. [ 81.658113][ T4438] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 81.700083][ T7] cfg80211: failed to load regulatory.db [ 81.721378][ T4447] Zero length message leads to an empty skb [ 81.728618][ T4438] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.882374][ T4463] tipc: Failed to remove unknown binding: 66,1,1/0:98959032/98959034 [ 83.999067][ T4467] syz.4.55[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.004393][ T4467] syz.4.55[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.312692][ T4463] tipc: Failed to remove unknown binding: 66,1,1/0:98959032/98959034 [ 84.407192][ T4463] tipc: Failed to remove unknown binding: 66,1,1/0:98959032/98959034 [ 84.797312][ T26] audit: type=1326 audit(1763618540.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 85.525201][ T26] audit: type=1326 audit(1763618540.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 85.611921][ T26] audit: type=1326 audit(1763618540.630:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 85.644672][ T26] audit: type=1326 audit(1763618540.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 85.671354][ T26] audit: type=1326 audit(1763618540.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 85.771605][ T26] audit: type=1326 audit(1763618540.680:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 86.015765][ T26] audit: type=1326 audit(1763618540.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 86.115736][ T4498] device syzkaller0 entered promiscuous mode [ 87.126170][ T4508] tipc: Failed to remove unknown binding: 66,1,1/0:2939996218/2939996220 [ 87.423025][ T4509] mmap: syz.1.67 (4509) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 87.791734][ T4528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.77'. [ 88.856737][ T4534] loop0: detected capacity change from 0 to 256 [ 89.013055][ T4547] syz.2.81[4547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.013156][ T4547] syz.2.81[4547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.652992][ T4562] device syzkaller0 entered promiscuous mode [ 89.670772][ T4174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.037436][ T4174] usb 3-1: New USB device found, idVendor=1457, idProduct=5118, bcdDevice=cf.91 [ 90.046534][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.128406][ T4174] usb 3-1: config 0 descriptor?? [ 90.168764][ T4174] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 90.299016][ T4534] FAT-fs (loop0): Directory bread(block 64) failed [ 90.305650][ T4534] FAT-fs (loop0): Directory bread(block 65) failed [ 90.313702][ T4534] FAT-fs (loop0): Directory bread(block 66) failed [ 90.320404][ T4534] FAT-fs (loop0): Directory bread(block 67) failed [ 90.327148][ T4534] FAT-fs (loop0): Directory bread(block 68) failed [ 90.333690][ T4534] FAT-fs (loop0): Directory bread(block 69) failed [ 90.340388][ T4534] FAT-fs (loop0): Directory bread(block 70) failed [ 90.346980][ T4534] FAT-fs (loop0): Directory bread(block 71) failed [ 90.353598][ T4534] FAT-fs (loop0): Directory bread(block 72) failed [ 90.360287][ T4534] FAT-fs (loop0): Directory bread(block 73) failed [ 90.392759][ T7] usb 3-1: USB disconnect, device number 3 [ 91.404503][ T26] audit: type=1326 audit(1763618547.070:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 91.486029][ T26] audit: type=1326 audit(1763618547.070:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 91.517328][ T26] audit: type=1326 audit(1763618547.110:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00d2212f90 code=0x7ffc0000 [ 91.546171][ T26] audit: type=1326 audit(1763618547.110:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00d2212f90 code=0x7ffc0000 [ 91.573135][ T26] audit: type=1326 audit(1763618547.110:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 91.613242][ T26] audit: type=1326 audit(1763618547.110:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 91.769895][ T26] audit: type=1326 audit(1763618547.130:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 92.626791][ T26] audit: type=1326 audit(1763618547.130:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 92.864122][ T26] audit: type=1326 audit(1763618547.130:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 92.956040][ T26] audit: type=1326 audit(1763618547.130:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4591 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 93.242600][ T4612] syz.0.109 (4612) used greatest stack depth: 18560 bytes left [ 93.690111][ T4636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'. [ 94.277918][ T4636] loop4: detected capacity change from 0 to 128 [ 94.328511][ T4618] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 94.478830][ T4618] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 94.494211][ T4618] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 94.892586][ T4644] loop1: detected capacity change from 0 to 512 [ 94.963540][ T4644] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 95.037518][ T4644] EXT4-fs (loop1): inline encryption not supported [ 95.055562][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 95.065491][ T4644] EXT4-fs (loop1): Test dummy encryption mode enabled [ 95.102823][ T4644] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 95.104531][ T4652] device erspan0 entered promiscuous mode [ 95.126354][ T4644] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.141438][ T4652] device erspan0 left promiscuous mode [ 95.144329][ T4644] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.272772][ T4644] EXT4-fs (loop1): 1 truncate cleaned up [ 95.278751][ T4644] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 95.990067][ T4668] loop2: detected capacity change from 0 to 256 [ 96.182377][ T4668] FAT-fs (loop2): Directory bread(block 64) failed [ 96.189267][ T4668] FAT-fs (loop2): Directory bread(block 65) failed [ 96.196417][ T4668] FAT-fs (loop2): Directory bread(block 66) failed [ 96.203299][ T4668] FAT-fs (loop2): Directory bread(block 67) failed [ 96.210417][ T4668] FAT-fs (loop2): Directory bread(block 68) failed [ 96.217252][ T4668] FAT-fs (loop2): Directory bread(block 69) failed [ 96.224497][ T4668] FAT-fs (loop2): Directory bread(block 70) failed [ 96.231320][ T4668] FAT-fs (loop2): Directory bread(block 71) failed [ 96.238951][ T4668] FAT-fs (loop2): Directory bread(block 72) failed [ 96.245635][ T4668] FAT-fs (loop2): Directory bread(block 73) failed [ 96.926615][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 96.926633][ T26] audit: type=1326 audit(2000000003.380:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 97.120884][ T26] audit: type=1326 audit(2000000003.380:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 97.163318][ T4643] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 97.272104][ T26] audit: type=1326 audit(2000000003.420:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 97.424449][ T26] audit: type=1326 audit(2000000003.420:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 97.494589][ T26] audit: type=1326 audit(2000000003.420:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 97.516784][ T26] audit: type=1326 audit(2000000003.420:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 97.591357][ T26] audit: type=1326 audit(2000000003.420:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 97.613567][ T26] audit: type=1326 audit(2000000003.420:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 97.635727][ T26] audit: type=1326 audit(2000000003.420:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 97.662241][ T26] audit: type=1326 audit(2000000003.420:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 99.052139][ T4696] syz.4.133 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.208709][ T4701] loop1: detected capacity change from 0 to 256 [ 99.259308][ T4702] xt_NFQUEUE: number of total queues is 0 [ 99.541983][ T4701] FAT-fs (loop1): Directory bread(block 64) failed [ 99.636550][ T4713] loop2: detected capacity change from 0 to 256 [ 99.718957][ T4701] FAT-fs (loop1): Directory bread(block 65) failed [ 99.895924][ T4713] FAT-fs (loop2): Directory bread(block 64) failed [ 99.902841][ T4713] FAT-fs (loop2): Directory bread(block 65) failed [ 99.910039][ T4713] FAT-fs (loop2): Directory bread(block 66) failed [ 99.916778][ T4713] FAT-fs (loop2): Directory bread(block 67) failed [ 99.924336][ T4713] FAT-fs (loop2): Directory bread(block 68) failed [ 99.931263][ T4713] FAT-fs (loop2): Directory bread(block 69) failed [ 99.938647][ T4713] FAT-fs (loop2): Directory bread(block 70) failed [ 99.945379][ T4713] FAT-fs (loop2): Directory bread(block 71) failed [ 99.952563][ T4713] FAT-fs (loop2): Directory bread(block 72) failed [ 99.959294][ T4713] FAT-fs (loop2): Directory bread(block 73) failed [ 100.201774][ T4701] FAT-fs (loop1): Directory bread(block 66) failed [ 100.437772][ T4701] FAT-fs (loop1): Directory bread(block 67) failed [ 100.511031][ T4701] FAT-fs (loop1): Directory bread(block 68) failed [ 100.569789][ T4701] FAT-fs (loop1): Directory bread(block 69) failed [ 100.576478][ T4701] FAT-fs (loop1): Directory bread(block 70) failed [ 100.650257][ T4701] FAT-fs (loop1): Directory bread(block 71) failed [ 100.687125][ T4701] FAT-fs (loop1): Directory bread(block 72) failed [ 100.700895][ T4701] FAT-fs (loop1): Directory bread(block 73) failed [ 101.520270][ T2236] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.977284][ T2236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.007127][ T2236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.027706][ T2236] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 102.031129][ T4745] syz.1.150 uses obsolete (PF_INET,SOCK_PACKET) [ 102.048670][ T2236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.125967][ T2236] usb 5-1: config 0 descriptor?? [ 102.757272][ T2236] usbhid 5-1:0.0: can't add hid device: -71 [ 102.763323][ T2236] usbhid: probe of 5-1:0.0 failed with error -71 [ 102.811958][ T2236] usb 5-1: USB disconnect, device number 2 [ 104.676431][ T4756] device syzkaller0 entered promiscuous mode [ 105.369080][ T4767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.160'. [ 105.689525][ T4775] loop1: detected capacity change from 0 to 256 [ 105.954498][ T4775] FAT-fs (loop1): Directory bread(block 64) failed [ 105.961353][ T4775] FAT-fs (loop1): Directory bread(block 65) failed [ 105.968946][ T4775] FAT-fs (loop1): Directory bread(block 66) failed [ 105.975661][ T4775] FAT-fs (loop1): Directory bread(block 67) failed [ 105.983023][ T4775] FAT-fs (loop1): Directory bread(block 68) failed [ 105.989724][ T4775] FAT-fs (loop1): Directory bread(block 69) failed [ 105.996713][ T4775] FAT-fs (loop1): Directory bread(block 70) failed [ 106.003416][ T4775] FAT-fs (loop1): Directory bread(block 71) failed [ 106.010422][ T4775] FAT-fs (loop1): Directory bread(block 72) failed [ 106.017180][ T4775] FAT-fs (loop1): Directory bread(block 73) failed [ 108.420104][ T4788] loop1: detected capacity change from 0 to 1024 [ 108.497719][ T4788] ======================================================= [ 108.497719][ T4788] WARNING: The mand mount option has been deprecated and [ 108.497719][ T4788] and is ignored by this kernel. Remove the mand [ 108.497719][ T4788] option from the mount to silence this warning. [ 108.497719][ T4788] ======================================================= [ 108.590943][ T4790] device syzkaller0 entered promiscuous mode [ 108.891731][ T4788] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.988720][ T4804] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 111.945867][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.626525][ T4837] device syzkaller0 entered promiscuous mode [ 114.033677][ T4241] Bluetooth: hci5: command 0x1003 tx timeout [ 114.057295][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 114.202472][ T4853] netlink: 'syz.3.187': attribute type 27 has an invalid length. [ 114.525243][ T4849] loop2: detected capacity change from 0 to 4096 [ 114.768393][ T4849] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.791861][ T4849] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 114.809614][ T4849] System zones: 0-5 [ 114.844289][ T4849] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 114.899989][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.908495][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.107229][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 116.113353][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 117.674278][ T4853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.748634][ T4853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.179127][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 118.220034][ T4853] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.229320][ T4853] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.238249][ T4853] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.247185][ T4853] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.401633][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.410130][ T4854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.418397][ T4854] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.429176][ T4854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.170271][ T4921] device syzkaller0 entered promiscuous mode [ 119.724238][ T4926] device syzkaller0 entered promiscuous mode [ 121.860689][ T4965] device syzkaller0 entered promiscuous mode [ 122.561873][ T4985] loop1: detected capacity change from 0 to 256 [ 122.644487][ T4985] FAT-fs (loop1): Directory bread(block 64) failed [ 122.651145][ T4985] FAT-fs (loop1): Directory bread(block 65) failed [ 122.658413][ T4985] FAT-fs (loop1): Directory bread(block 66) failed [ 122.664977][ T4985] FAT-fs (loop1): Directory bread(block 67) failed [ 122.671691][ T4985] FAT-fs (loop1): Directory bread(block 68) failed [ 122.678284][ T4985] FAT-fs (loop1): Directory bread(block 69) failed [ 122.684921][ T4985] FAT-fs (loop1): Directory bread(block 70) failed [ 122.691547][ T4985] FAT-fs (loop1): Directory bread(block 71) failed [ 122.698244][ T4985] FAT-fs (loop1): Directory bread(block 72) failed [ 122.704803][ T4985] FAT-fs (loop1): Directory bread(block 73) failed [ 122.772149][ T4992] loop3: detected capacity change from 0 to 256 [ 122.912454][ T4992] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.260062][ T4272] attempt to access beyond end of device [ 123.260062][ T4272] loop1: rw=1, want=1288, limit=256 [ 123.363014][ T5001] tipc: Started in network mode [ 123.368386][ T5001] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 123.377992][ T5001] tipc: Enabling of bearer rejected, failed to enable media [ 123.469464][ T4272] attempt to access beyond end of device [ 123.469464][ T4272] loop1: rw=1, want=1768, limit=256 [ 123.750114][ T4272] attempt to access beyond end of device [ 123.750114][ T4272] loop1: rw=1, want=1928, limit=256 [ 123.882316][ T4272] attempt to access beyond end of device [ 123.882316][ T4272] loop1: rw=1, want=5280, limit=256 [ 124.212088][ T4272] attempt to access beyond end of device [ 124.212088][ T4272] loop1: rw=1, want=21760, limit=256 [ 124.496878][ T4272] attempt to access beyond end of device [ 124.496878][ T4272] loop1: rw=1, want=33800, limit=256 [ 124.714698][ T5014] device syzkaller0 entered promiscuous mode [ 125.997184][ T5042] loop1: detected capacity change from 0 to 256 [ 126.079795][ T5042] FAT-fs (loop1): Directory bread(block 64) failed [ 126.086407][ T5042] FAT-fs (loop1): Directory bread(block 65) failed [ 126.093335][ T5042] FAT-fs (loop1): Directory bread(block 66) failed [ 126.100195][ T5042] FAT-fs (loop1): Directory bread(block 67) failed [ 126.106816][ T5042] FAT-fs (loop1): Directory bread(block 68) failed [ 126.113467][ T5042] FAT-fs (loop1): Directory bread(block 69) failed [ 126.120127][ T5042] FAT-fs (loop1): Directory bread(block 70) failed [ 126.126777][ T5042] FAT-fs (loop1): Directory bread(block 71) failed [ 126.133529][ T5042] FAT-fs (loop1): Directory bread(block 72) failed [ 126.140692][ T5042] FAT-fs (loop1): Directory bread(block 73) failed [ 126.334332][ T5051] device veth0 entered promiscuous mode [ 126.388826][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 126.537147][ T4754] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.760098][ T144] attempt to access beyond end of device [ 126.760098][ T144] loop1: rw=1, want=1288, limit=256 [ 126.797680][ T144] attempt to access beyond end of device [ 126.797680][ T144] loop1: rw=1, want=1768, limit=256 [ 126.819451][ T144] attempt to access beyond end of device [ 126.819451][ T144] loop1: rw=1, want=1928, limit=256 [ 126.860032][ T144] attempt to access beyond end of device [ 126.860032][ T144] loop1: rw=1, want=5120, limit=256 [ 126.961917][ T5069] loop3: detected capacity change from 0 to 256 [ 127.011305][ T4754] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.033005][ T5069] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.046310][ T4754] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 127.050083][ T4290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.084911][ T5069] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 127.103992][ T4754] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.127306][ T5069] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 127.139745][ T4754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.159335][ T4754] usb 3-1: config 0 descriptor?? [ 127.230235][ T4754] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 127.434611][ T4754] usb 3-1: USB disconnect, device number 4 [ 127.447246][ T4290] usb 5-1: config 0 has an invalid interface number: 134 but max is 0 [ 128.102480][ T4290] usb 5-1: config 0 has no interface number 0 [ 128.190440][ T4290] usb 5-1: config 0 has an invalid interface number: 134 but max is 0 [ 128.206450][ T4290] usb 5-1: config 0 has no interface number 0 [ 128.327447][ T4290] usb 5-1: config 0 has an invalid interface number: 134 but max is 0 [ 128.335699][ T4290] usb 5-1: config 0 has no interface number 0 [ 128.377005][ T4290] usb 5-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=e2.1e [ 128.386263][ T4290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.479658][ T4290] usb 5-1: config 0 descriptor?? [ 128.593171][ T5090] loop0: detected capacity change from 0 to 256 [ 128.687266][ T5090] FAT-fs (loop0): Directory bread(block 64) failed [ 128.693931][ T5090] FAT-fs (loop0): Directory bread(block 65) failed [ 128.701088][ T5090] FAT-fs (loop0): Directory bread(block 66) failed [ 128.707879][ T5090] FAT-fs (loop0): Directory bread(block 67) failed [ 128.714523][ T5090] FAT-fs (loop0): Directory bread(block 68) failed [ 128.721135][ T5090] FAT-fs (loop0): Directory bread(block 69) failed [ 128.727783][ T5090] FAT-fs (loop0): Directory bread(block 70) failed [ 128.734362][ T5090] FAT-fs (loop0): Directory bread(block 71) failed [ 128.741026][ T5090] FAT-fs (loop0): Directory bread(block 72) failed [ 128.746330][ T4290] usb 5-1: USB disconnect, device number 3 [ 128.747603][ T5090] FAT-fs (loop0): Directory bread(block 73) failed [ 129.289253][ T386] handle_bad_sector: 7 callbacks suppressed [ 129.289272][ T386] attempt to access beyond end of device [ 129.289272][ T386] loop0: rw=1, want=1288, limit=256 [ 129.360512][ T386] attempt to access beyond end of device [ 129.360512][ T386] loop0: rw=1, want=1768, limit=256 [ 129.408863][ T386] attempt to access beyond end of device [ 129.408863][ T386] loop0: rw=1, want=1928, limit=256 [ 129.495557][ T386] attempt to access beyond end of device [ 129.495557][ T386] loop0: rw=1, want=7944, limit=256 [ 129.588535][ T386] attempt to access beyond end of device [ 129.588535][ T386] loop0: rw=1, want=15256, limit=256 [ 129.682274][ T386] attempt to access beyond end of device [ 129.682274][ T386] loop0: rw=1, want=22000, limit=256 [ 129.727676][ T4754] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.844196][ T386] attempt to access beyond end of device [ 129.844196][ T386] loop0: rw=1, want=33800, limit=256 [ 129.997118][ T4754] usb 5-1: Using ep0 maxpacket: 8 [ 130.137359][ T4754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.177039][ T4754] usb 5-1: config 0 has no interfaces? [ 130.203744][ T4754] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 130.247133][ T4754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.281437][ T4754] usb 5-1: config 0 descriptor?? [ 130.565988][ T21] usb 5-1: USB disconnect, device number 4 [ 130.949684][ T5135] loop0: detected capacity change from 0 to 256 [ 130.957527][ T4754] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.082379][ T5143] loop1: detected capacity change from 0 to 256 [ 131.163609][ T5135] FAT-fs (loop0): Directory bread(block 64) failed [ 131.170402][ T5135] FAT-fs (loop0): Directory bread(block 65) failed [ 131.177075][ T5135] FAT-fs (loop0): Directory bread(block 66) failed [ 131.183655][ T5135] FAT-fs (loop0): Directory bread(block 67) failed [ 131.190384][ T5135] FAT-fs (loop0): Directory bread(block 68) failed [ 131.196961][ T5135] FAT-fs (loop0): Directory bread(block 69) failed [ 131.203817][ T5135] FAT-fs (loop0): Directory bread(block 70) failed [ 131.210469][ T5135] FAT-fs (loop0): Directory bread(block 71) failed [ 131.217124][ T5135] FAT-fs (loop0): Directory bread(block 72) failed [ 131.223664][ T5135] FAT-fs (loop0): Directory bread(block 73) failed [ 131.317597][ T4754] usb 3-1: Using ep0 maxpacket: 16 [ 131.368229][ T5143] FAT-fs (loop1): Directory bread(block 64) failed [ 131.375014][ T5143] FAT-fs (loop1): Directory bread(block 65) failed [ 131.383098][ T5143] FAT-fs (loop1): Directory bread(block 66) failed [ 131.390350][ T5143] FAT-fs (loop1): Directory bread(block 67) failed [ 131.397420][ T5143] FAT-fs (loop1): Directory bread(block 68) failed [ 131.404170][ T5143] FAT-fs (loop1): Directory bread(block 69) failed [ 131.411279][ T5143] FAT-fs (loop1): Directory bread(block 70) failed [ 131.418072][ T5143] FAT-fs (loop1): Directory bread(block 71) failed [ 131.425137][ T5143] FAT-fs (loop1): Directory bread(block 72) failed [ 131.431905][ T5143] FAT-fs (loop1): Directory bread(block 73) failed [ 132.647119][ T4754] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 132.655863][ T4754] usb 3-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 132.727565][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.733952][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.787036][ T4754] usb 3-1: config 0 has no interface number 0 [ 132.855753][ T1254] attempt to access beyond end of device [ 132.855753][ T1254] loop0: rw=1, want=1288, limit=256 [ 132.948186][ T1254] attempt to access beyond end of device [ 132.948186][ T1254] loop0: rw=1, want=1768, limit=256 [ 133.047347][ T4754] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 133.091718][ T4754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 133.101401][ T1254] attempt to access beyond end of device [ 133.101401][ T1254] loop0: rw=1, want=1928, limit=256 [ 133.128345][ T4754] usb 3-1: Product: syz [ 133.132550][ T4754] usb 3-1: Manufacturer: syz [ 133.169613][ T4754] usb 3-1: SerialNumber: syz [ 133.199395][ T4754] usb 3-1: config 0 descriptor?? [ 133.263947][ T4754] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 133.276685][ T4754] usb 3-1: No valid video chain found. [ 133.375144][ T23] usb 3-1: USB disconnect, device number 5 [ 135.185187][ T5176] loop3: detected capacity change from 0 to 256 [ 135.253995][ T5176] FAT-fs (loop3): Directory bread(block 64) failed [ 135.260660][ T5176] FAT-fs (loop3): Directory bread(block 65) failed [ 135.267375][ T5176] FAT-fs (loop3): Directory bread(block 66) failed [ 135.273945][ T5176] FAT-fs (loop3): Directory bread(block 67) failed [ 135.280655][ T5176] FAT-fs (loop3): Directory bread(block 68) failed [ 135.287281][ T5176] FAT-fs (loop3): Directory bread(block 69) failed [ 135.293881][ T5176] FAT-fs (loop3): Directory bread(block 70) failed [ 135.300537][ T5176] FAT-fs (loop3): Directory bread(block 71) failed [ 135.307314][ T5176] FAT-fs (loop3): Directory bread(block 72) failed [ 135.313877][ T5176] FAT-fs (loop3): Directory bread(block 73) failed [ 135.753014][ T5192] device syzkaller0 entered promiscuous mode [ 135.894073][ T4315] handle_bad_sector: 5 callbacks suppressed [ 135.894091][ T4315] attempt to access beyond end of device [ 135.894091][ T4315] loop3: rw=1, want=1288, limit=256 [ 135.928402][ T4315] attempt to access beyond end of device [ 135.928402][ T4315] loop3: rw=1, want=1768, limit=256 [ 135.950169][ T4315] attempt to access beyond end of device [ 135.950169][ T4315] loop3: rw=1, want=1928, limit=256 [ 135.991878][ T4315] attempt to access beyond end of device [ 135.991878][ T4315] loop3: rw=1, want=7248, limit=256 [ 136.058064][ T4315] attempt to access beyond end of device [ 136.058064][ T4315] loop3: rw=1, want=15424, limit=256 [ 136.494085][ T4315] attempt to access beyond end of device [ 136.494085][ T4315] loop3: rw=1, want=29312, limit=256 [ 137.045948][ T4315] attempt to access beyond end of device [ 137.045948][ T4315] loop3: rw=1, want=33800, limit=256 [ 137.278214][ T5213] loop4: detected capacity change from 0 to 1024 [ 137.328053][ T5213] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 137.350981][ T5213] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.438406][ T5213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 137.446623][ T5213] System zones: 0-1, 3-36 [ 137.513395][ T5213] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 137.792767][ T5232] loop2: detected capacity change from 0 to 512 [ 137.851006][ T5232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.896445][ T5232] EXT4-fs (loop2): 1 truncate cleaned up [ 137.930788][ T5232] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.037856][ T26] kauditd_printk_skb: 174 callbacks suppressed [ 138.037873][ T26] audit: type=1800 audit(2000000038.520:227): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.329" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 138.103972][ T5246] loop4: detected capacity change from 0 to 512 [ 138.174414][ T5246] EXT4-fs (loop4): Ignoring removed orlov option [ 138.187473][ T5246] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 138.240638][ T5246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 138.277651][ T5246] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.332: corrupted in-inode xattr [ 138.346182][ T5246] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.332: couldn't read orphan inode 15 (err -117) [ 138.362302][ T5246] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 139.512399][ T5264] device syzkaller0 entered promiscuous mode [ 139.633620][ T5267] netlink: 'syz.4.339': attribute type 4 has an invalid length. [ 140.240197][ T5282] loop0: detected capacity change from 0 to 256 [ 140.312231][ T5282] FAT-fs (loop0): Directory bread(block 64) failed [ 140.319004][ T5282] FAT-fs (loop0): Directory bread(block 65) failed [ 140.325655][ T5282] FAT-fs (loop0): Directory bread(block 66) failed [ 140.332332][ T5282] FAT-fs (loop0): Directory bread(block 67) failed [ 140.339084][ T5282] FAT-fs (loop0): Directory bread(block 68) failed [ 140.345623][ T5282] FAT-fs (loop0): Directory bread(block 69) failed [ 140.352288][ T5282] FAT-fs (loop0): Directory bread(block 70) failed [ 140.358887][ T5282] FAT-fs (loop0): Directory bread(block 71) failed [ 140.365486][ T5282] FAT-fs (loop0): Directory bread(block 72) failed [ 140.372562][ T5282] FAT-fs (loop0): Directory bread(block 73) failed [ 141.851451][ T144] attempt to access beyond end of device [ 141.851451][ T144] loop0: rw=1, want=1288, limit=256 [ 141.902350][ T144] attempt to access beyond end of device [ 141.902350][ T144] loop0: rw=1, want=1768, limit=256 [ 141.951201][ T144] attempt to access beyond end of device [ 141.951201][ T144] loop0: rw=1, want=1928, limit=256 [ 142.003957][ T144] attempt to access beyond end of device [ 142.003957][ T144] loop0: rw=1, want=5024, limit=256 [ 142.072498][ T144] attempt to access beyond end of device [ 142.072498][ T144] loop0: rw=1, want=7096, limit=256 [ 142.144937][ T144] attempt to access beyond end of device [ 142.144937][ T144] loop0: rw=1, want=9480, limit=256 [ 142.206345][ T144] attempt to access beyond end of device [ 142.206345][ T144] loop0: rw=1, want=13264, limit=256 [ 142.291123][ T144] attempt to access beyond end of device [ 142.291123][ T144] loop0: rw=1, want=17496, limit=256 [ 142.357326][ T144] attempt to access beyond end of device [ 142.357326][ T144] loop0: rw=1, want=21592, limit=256 [ 142.404045][ T144] attempt to access beyond end of device [ 142.404045][ T144] loop0: rw=1, want=23664, limit=256 [ 142.427898][ T5295] device syzkaller0 entered promiscuous mode [ 142.620252][ T5298] device syzkaller0 entered promiscuous mode [ 142.938606][ T5301] loop2: detected capacity change from 0 to 16 [ 143.013718][ T5301] erofs: (device loop2): mounted with root inode @ nid 36. [ 143.152669][ T5303] loop1: detected capacity change from 0 to 1024 [ 143.354784][ T5303] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.471405][ T5303] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.354: Allocating blocks 385-513 which overlap fs metadata [ 143.579767][ T5313] EXT4-fs (loop1): pa ffff8880749e62a0: logic 16, phys. 129, len 24 [ 143.588266][ T5313] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 143.660059][ T5317] loop3: detected capacity change from 0 to 512 [ 143.793592][ T5317] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.803144][ T5317] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.877986][ T5317] EXT4-fs (loop3): 1 truncate cleaned up [ 143.883701][ T5317] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,min_batch_time=0x0000000000000fff,max_batch_time=0x0000000000000001,test_dummy_encryption=v1,errors=remount-ro,errors=continue,. Quota mode: none. [ 144.313458][ T5317] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 144.329234][ T5338] device syzkaller0 entered promiscuous mode [ 144.371063][ T26] audit: type=1800 audit(2000000044.860:228): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.356" name="file1" dev="loop3" ino=19 res=0 errno=0 [ 145.247042][ T4174] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.371976][ T5366] loop3: detected capacity change from 0 to 256 [ 145.493883][ T5366] FAT-fs (loop3): Directory bread(block 64) failed [ 145.500598][ T5366] FAT-fs (loop3): Directory bread(block 65) failed [ 145.507357][ T5366] FAT-fs (loop3): Directory bread(block 66) failed [ 145.513900][ T5366] FAT-fs (loop3): Directory bread(block 67) failed [ 145.520532][ T5366] FAT-fs (loop3): Directory bread(block 68) failed [ 145.527139][ T5366] FAT-fs (loop3): Directory bread(block 69) failed [ 145.533737][ T5366] FAT-fs (loop3): Directory bread(block 70) failed [ 145.540312][ T5366] FAT-fs (loop3): Directory bread(block 71) failed [ 145.546942][ T5366] FAT-fs (loop3): Directory bread(block 72) failed [ 145.553497][ T5366] FAT-fs (loop3): Directory bread(block 73) failed [ 145.955738][ T4174] usb 3-1: Using ep0 maxpacket: 32 [ 146.107154][ T4174] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 146.117064][ T4174] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.249576][ T4174] usb 3-1: config 0 has no interface number 0 [ 146.316774][ T4174] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 146.399141][ T4174] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.442441][ T5373] device syzkaller0 entered promiscuous mode [ 146.508049][ T4174] usb 3-1: config 0 interface 196 has no altsetting 0 [ 146.737234][ T4174] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 146.768053][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 146.802867][ T4174] usb 3-1: Product: syz [ 146.818831][ T4174] usb 3-1: Manufacturer: syz [ 146.840738][ T4174] usb 3-1: SerialNumber: syz [ 146.870062][ T4174] usb 3-1: config 0 descriptor?? [ 146.896549][ T4410] handle_bad_sector: 1 callbacks suppressed [ 146.896568][ T4410] attempt to access beyond end of device [ 146.896568][ T4410] loop3: rw=1, want=1288, limit=256 [ 146.921426][ T4410] attempt to access beyond end of device [ 146.921426][ T4410] loop3: rw=1, want=1768, limit=256 [ 146.946058][ T4410] attempt to access beyond end of device [ 146.946058][ T4410] loop3: rw=1, want=1928, limit=256 [ 146.966803][ T4410] attempt to access beyond end of device [ 146.966803][ T4410] loop3: rw=1, want=4880, limit=256 [ 147.015255][ T4410] attempt to access beyond end of device [ 147.015255][ T4410] loop3: rw=1, want=7248, limit=256 [ 147.128058][ T5381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.381'. [ 147.177783][ T4174] ipheth 3-1:0.196: Unable to find endpoints [ 147.200234][ T4410] attempt to access beyond end of device [ 147.200234][ T4410] loop3: rw=1, want=33800, limit=256 [ 147.231710][ T4174] usb 3-1: USB disconnect, device number 6 [ 147.476059][ T26] audit: type=1326 audit(2000000047.960:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 147.547683][ T5388] device syzkaller0 entered promiscuous mode [ 147.567060][ T26] audit: type=1326 audit(2000000047.960:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 147.643934][ T26] audit: type=1326 audit(2000000047.960:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 147.693112][ T26] audit: type=1326 audit(2000000047.980:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 147.736212][ T26] audit: type=1326 audit(2000000047.990:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 147.761849][ T26] audit: type=1326 audit(2000000047.990:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 147.851892][ T26] audit: type=1326 audit(2000000047.990:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 147.881305][ T26] audit: type=1326 audit(2000000047.990:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 147.909856][ T26] audit: type=1326 audit(2000000047.990:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 149.175221][ T5415] loop3: detected capacity change from 0 to 256 [ 149.239214][ T5415] FAT-fs (loop3): Directory bread(block 64) failed [ 149.245882][ T5415] FAT-fs (loop3): Directory bread(block 65) failed [ 149.252868][ T5415] FAT-fs (loop3): Directory bread(block 66) failed [ 149.259762][ T5415] FAT-fs (loop3): Directory bread(block 67) failed [ 149.266389][ T5415] FAT-fs (loop3): Directory bread(block 68) failed [ 149.273090][ T5415] FAT-fs (loop3): Directory bread(block 69) failed [ 149.280279][ T5415] FAT-fs (loop3): Directory bread(block 70) failed [ 149.287078][ T5415] FAT-fs (loop3): Directory bread(block 71) failed [ 149.293721][ T5415] FAT-fs (loop3): Directory bread(block 72) failed [ 149.300736][ T5415] FAT-fs (loop3): Directory bread(block 73) failed [ 149.605551][ T9] attempt to access beyond end of device [ 149.605551][ T9] loop3: rw=1, want=1288, limit=256 [ 149.649709][ T9] attempt to access beyond end of device [ 149.649709][ T9] loop3: rw=1, want=1768, limit=256 [ 149.693270][ T9] attempt to access beyond end of device [ 149.693270][ T9] loop3: rw=1, want=1928, limit=256 [ 149.787235][ T9] attempt to access beyond end of device [ 149.787235][ T9] loop3: rw=1, want=16288, limit=256 [ 149.999572][ T5429] device syzkaller0 entered promiscuous mode [ 150.235987][ T5433] loop3: detected capacity change from 0 to 256 [ 150.395301][ T5433] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 150.843801][ T5439] device syzkaller0 entered promiscuous mode [ 152.436025][ T5457] loop1: detected capacity change from 0 to 256 [ 152.530722][ T5457] FAT-fs (loop1): Directory bread(block 64) failed [ 152.537464][ T5457] FAT-fs (loop1): Directory bread(block 65) failed [ 152.544134][ T5457] FAT-fs (loop1): Directory bread(block 66) failed [ 152.550811][ T5457] FAT-fs (loop1): Directory bread(block 67) failed [ 152.557999][ T5457] FAT-fs (loop1): Directory bread(block 68) failed [ 152.564571][ T5457] FAT-fs (loop1): Directory bread(block 69) failed [ 152.571309][ T5457] FAT-fs (loop1): Directory bread(block 70) failed [ 152.577917][ T5457] FAT-fs (loop1): Directory bread(block 71) failed [ 152.584539][ T5457] FAT-fs (loop1): Directory bread(block 72) failed [ 152.591158][ T5457] FAT-fs (loop1): Directory bread(block 73) failed [ 153.093807][ T4714] attempt to access beyond end of device [ 153.093807][ T4714] loop1: rw=1, want=1288, limit=256 [ 153.109213][ T4714] attempt to access beyond end of device [ 153.109213][ T4714] loop1: rw=1, want=1768, limit=256 [ 153.123657][ T4714] attempt to access beyond end of device [ 153.123657][ T4714] loop1: rw=1, want=1928, limit=256 [ 153.150160][ T4714] attempt to access beyond end of device [ 153.150160][ T4714] loop1: rw=1, want=7488, limit=256 [ 153.180501][ T4714] attempt to access beyond end of device [ 153.180501][ T4714] loop1: rw=1, want=10864, limit=256 [ 153.221679][ T4714] attempt to access beyond end of device [ 153.221679][ T4714] loop1: rw=1, want=15008, limit=256 [ 153.323718][ T4714] attempt to access beyond end of device [ 153.323718][ T4714] loop1: rw=1, want=22816, limit=256 [ 153.370578][ T5476] device syzkaller0 entered promiscuous mode [ 153.426551][ T4714] attempt to access beyond end of device [ 153.426551][ T4714] loop1: rw=1, want=30088, limit=256 [ 153.466833][ T4714] attempt to access beyond end of device [ 153.466833][ T4714] loop1: rw=1, want=33800, limit=256 [ 154.854816][ T5484] device syzkaller0 entered promiscuous mode [ 154.918432][ T26] kauditd_printk_skb: 165 callbacks suppressed [ 154.918446][ T26] audit: type=1326 audit(2000000055.410:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 154.969167][ T26] audit: type=1326 audit(2000000055.460:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 155.006149][ T26] audit: type=1326 audit(2000000055.490:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 155.116775][ T26] audit: type=1326 audit(2000000055.490:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 155.211680][ T26] audit: type=1326 audit(2000000055.490:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 155.235042][ T26] audit: type=1326 audit(2000000055.490:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 155.273868][ T26] audit: type=1326 audit(2000000055.490:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 155.432636][ T26] audit: type=1326 audit(2000000055.490:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 156.165966][ T5505] netlink: 9 bytes leftover after parsing attributes in process `syz.0.423'. [ 156.175805][ T5505] device gretap0 entered promiscuous mode [ 156.227134][ T5505] netlink: 5 bytes leftover after parsing attributes in process `syz.0.423'. [ 156.236052][ T5505] 0{X: renamed from gretap0 [ 156.292567][ T5505] device 30{X left promiscuous mode [ 156.320092][ T5505] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 156.387099][ T5510] device syzkaller0 entered promiscuous mode [ 156.473360][ T5511] device syzkaller0 entered promiscuous mode [ 157.050416][ T5522] loop4: detected capacity change from 0 to 256 [ 157.227213][ T2285] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 157.240830][ T5522] FAT-fs (loop4): Directory bread(block 64) failed [ 157.247543][ T5522] FAT-fs (loop4): Directory bread(block 65) failed [ 157.254172][ T5522] FAT-fs (loop4): Directory bread(block 66) failed [ 157.260933][ T5522] FAT-fs (loop4): Directory bread(block 67) failed [ 157.268125][ T5522] FAT-fs (loop4): Directory bread(block 68) failed [ 157.274882][ T5522] FAT-fs (loop4): Directory bread(block 69) failed [ 157.281642][ T5522] FAT-fs (loop4): Directory bread(block 70) failed [ 157.288260][ T5522] FAT-fs (loop4): Directory bread(block 71) failed [ 157.296198][ T5522] FAT-fs (loop4): Directory bread(block 72) failed [ 157.302874][ T5522] FAT-fs (loop4): Directory bread(block 73) failed [ 157.817148][ T2285] usb 1-1: Using ep0 maxpacket: 32 [ 157.928947][ T5534] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 157.947136][ T2285] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 157.955380][ T2285] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.000217][ T2285] usb 1-1: config 0 has no interface number 0 [ 158.017008][ T2285] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.047051][ T2285] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.080630][ T2285] usb 1-1: config 0 interface 196 has no altsetting 0 [ 158.199241][ T5537] device syzkaller0 entered promiscuous mode [ 158.317226][ T2285] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 158.346820][ T2285] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 158.377759][ T2285] usb 1-1: Product: syz [ 158.381971][ T2285] usb 1-1: Manufacturer: syz [ 158.386581][ T2285] usb 1-1: SerialNumber: syz [ 158.436055][ T2285] usb 1-1: config 0 descriptor?? [ 158.767778][ T2285] ipheth 1-1:0.196: Unable to find endpoints [ 158.805059][ T2285] usb 1-1: USB disconnect, device number 3 [ 159.218974][ T5546] device syzkaller0 entered promiscuous mode [ 159.447023][ T4856] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 159.552532][ T5550] device syzkaller0 entered promiscuous mode [ 159.697223][ T4856] usb 3-1: Using ep0 maxpacket: 16 [ 159.857193][ T4856] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.947197][ T4856] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 159.961015][ T4856] usb 3-1: config 13 has an invalid descriptor of length 255, skipping remainder of the config [ 159.991805][ T4856] usb 3-1: config 13 has no interface number 0 [ 160.005241][ T5557] netlink: 104 bytes leftover after parsing attributes in process `syz.3.444'. [ 160.010749][ T4856] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 160.064805][ T4856] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.104261][ T4856] usb 3-1: config 13 interface 50 has no altsetting 0 [ 160.156223][ T5563] device syzkaller0 entered promiscuous mode [ 160.287243][ T4856] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 160.312611][ T4856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.426774][ T4856] usb 3-1: Product: syz [ 160.443755][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 160.450288][ T4856] usb 3-1: Manufacturer: syz [ 160.458818][ T4856] usb 3-1: SerialNumber: syz [ 161.127506][ T5545] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.402217][ T5574] overlayfs: missing 'lowerdir' [ 161.510585][ T4856] usb 3-1: MIDIStreaming interface descriptor not found [ 161.533665][ T5576] device syzkaller0 entered promiscuous mode [ 161.583626][ T4856] usb 3-1: USB disconnect, device number 7 [ 161.639870][ T5580] capability: warning: `syz.3.454' uses 32-bit capabilities (legacy support in use) [ 161.888415][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.974188][ T26] audit: type=1326 audit(2000000062.460:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a191a9749 code=0x7ffc0000 [ 161.997900][ T5583] loop3: detected capacity change from 0 to 512 [ 162.098412][ T26] audit: type=1326 audit(2000000062.500:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a191a9749 code=0x7ffc0000 [ 162.183675][ T26] audit: type=1326 audit(2000000062.500:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a191a7f90 code=0x7ffc0000 [ 162.213525][ T5583] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 162.220628][ T26] audit: type=1326 audit(2000000062.500:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a191a7f90 code=0x7ffc0000 [ 162.385752][ T1254] attempt to access beyond end of device [ 162.385752][ T1254] loop4: rw=1048577, want=1288, limit=256 [ 162.924717][ T1254] attempt to access beyond end of device [ 162.924717][ T1254] loop4: rw=1048577, want=1768, limit=256 [ 163.078081][ T1254] attempt to access beyond end of device [ 163.078081][ T1254] loop4: rw=1048577, want=1928, limit=256 [ 163.100799][ T26] audit: type=1326 audit(2000000062.500:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a191a9749 code=0x7ffc0000 [ 163.128034][ T26] audit: type=1326 audit(2000000062.500:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a191a9749 code=0x7ffc0000 [ 163.190478][ T1254] attempt to access beyond end of device [ 163.190478][ T1254] loop4: rw=1048577, want=4048, limit=256 [ 163.235450][ T26] audit: type=1326 audit(2000000062.500:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9a191a9749 code=0x7ffc0000 [ 163.297472][ T5598] device syzkaller0 entered promiscuous mode [ 163.326242][ T26] audit: type=1326 audit(2000000062.500:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a191a9749 code=0x7ffc0000 [ 163.349236][ T5600] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.454356][ T26] audit: type=1326 audit(2000000062.500:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a191a9749 code=0x7ffc0000 [ 163.477113][ T26] audit: type=1326 audit(2000000062.500:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9a191a9749 code=0x7ffc0000 [ 163.981662][ T1254] attempt to access beyond end of device [ 163.981662][ T1254] loop4: rw=1048577, want=6104, limit=256 [ 164.088232][ T1254] attempt to access beyond end of device [ 164.088232][ T1254] loop4: rw=1048577, want=8168, limit=256 [ 164.114450][ T1254] attempt to access beyond end of device [ 164.114450][ T1254] loop4: rw=1048577, want=10752, limit=256 [ 164.153922][ T1254] attempt to access beyond end of device [ 164.153922][ T1254] loop4: rw=1048577, want=14488, limit=256 [ 164.199854][ T1254] attempt to access beyond end of device [ 164.199854][ T1254] loop4: rw=1048577, want=22992, limit=256 [ 164.235448][ T1254] attempt to access beyond end of device [ 164.235448][ T1254] loop4: rw=1048577, want=25040, limit=256 [ 164.408302][ T5610] bridge: RTM_NEWNEIGH with invalid ether address [ 164.542926][ T5617] loop3: detected capacity change from 0 to 256 [ 164.565173][ T5617] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.608404][ T5617] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 164.645206][ T5617] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 164.713497][ T5621] device syzkaller0 entered promiscuous mode [ 166.245566][ T5653] device syzkaller0 entered promiscuous mode [ 166.310353][ T5656] loop4: detected capacity change from 0 to 1024 [ 166.351488][ T5654] loop1: detected capacity change from 0 to 256 [ 166.424726][ T5656] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.444588][ T5656] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.456049][ T5654] FAT-fs (loop1): Directory bread(block 64) failed [ 166.463133][ T5654] FAT-fs (loop1): Directory bread(block 65) failed [ 166.469851][ T5654] FAT-fs (loop1): Directory bread(block 66) failed [ 166.476426][ T5654] FAT-fs (loop1): Directory bread(block 67) failed [ 166.483609][ T5654] FAT-fs (loop1): Directory bread(block 68) failed [ 166.490254][ T5654] FAT-fs (loop1): Directory bread(block 69) failed [ 166.496972][ T5654] FAT-fs (loop1): Directory bread(block 70) failed [ 166.501831][ T5656] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.474: inode has both inline data and extents flags [ 166.503537][ T5654] FAT-fs (loop1): Directory bread(block 71) failed [ 166.503626][ T5654] FAT-fs (loop1): Directory bread(block 72) failed [ 166.530171][ T5654] FAT-fs (loop1): Directory bread(block 73) failed [ 166.596501][ T5656] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.474: inode has both inline data and extents flags [ 166.936637][ T5658] device veth3 entered promiscuous mode [ 167.320680][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 167.320696][ T26] audit: type=1326 audit(2000000002.060:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf290b749 code=0x7ffc0000 [ 167.995933][ T26] audit: type=1326 audit(2000000002.100:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf290b749 code=0x7ffc0000 [ 168.032027][ T26] audit: type=1326 audit(2000000002.360:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bf2909f90 code=0x7ffc0000 [ 168.059140][ T26] audit: type=1326 audit(2000000002.460:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bf2909f90 code=0x7ffc0000 [ 168.223511][ T26] audit: type=1326 audit(2000000002.500:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf290b749 code=0x7ffc0000 [ 168.318298][ T26] audit: type=1326 audit(2000000002.510:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf290b749 code=0x7ffc0000 [ 168.379522][ T26] audit: type=1326 audit(2000000002.550:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8bf290b749 code=0x7ffc0000 [ 168.514623][ T26] audit: type=1326 audit(2000000002.550:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf290b749 code=0x7ffc0000 [ 168.550312][ T26] audit: type=1326 audit(2000000002.550:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf290b749 code=0x7ffc0000 [ 168.572826][ T26] audit: type=1326 audit(2000000002.560:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bf290b749 code=0x7ffc0000 [ 168.626308][ T5704] loop2: detected capacity change from 0 to 256 [ 168.717185][ T5704] FAT-fs (loop2): Directory bread(block 64) failed [ 168.720257][ T5706] device syzkaller0 entered promiscuous mode [ 168.723773][ T5704] FAT-fs (loop2): Directory bread(block 65) failed [ 168.736426][ T5704] FAT-fs (loop2): Directory bread(block 66) failed [ 168.743007][ T5704] FAT-fs (loop2): Directory bread(block 67) failed [ 168.749719][ T5704] FAT-fs (loop2): Directory bread(block 68) failed [ 168.756265][ T5704] FAT-fs (loop2): Directory bread(block 69) failed [ 168.762900][ T5704] FAT-fs (loop2): Directory bread(block 70) failed [ 168.769480][ T5704] FAT-fs (loop2): Directory bread(block 71) failed [ 168.776083][ T5704] FAT-fs (loop2): Directory bread(block 72) failed [ 168.782842][ T5704] FAT-fs (loop2): Directory bread(block 73) failed [ 169.128008][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 169.459520][ T5714] device syzkaller0 entered promiscuous mode [ 169.497177][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.518608][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.559441][ T1108] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 169.598706][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 169.599290][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.645090][ T5724] loop4: detected capacity change from 0 to 2048 [ 169.661661][ T1108] usb 2-1: config 0 descriptor?? [ 169.883118][ T5724] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.048891][ T5724] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.240039][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 171.083445][ T5740] netlink: 44 bytes leftover after parsing attributes in process `syz.2.508'. [ 171.136311][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 171.171349][ T5740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.508'. [ 171.217081][ T5740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.508'. [ 172.332272][ T5748] loop2: detected capacity change from 0 to 256 [ 172.432875][ T5748] FAT-fs (loop2): Directory bread(block 64) failed [ 172.439568][ T5748] FAT-fs (loop2): Directory bread(block 65) failed [ 172.446174][ T5748] FAT-fs (loop2): Directory bread(block 66) failed [ 172.452812][ T5748] FAT-fs (loop2): Directory bread(block 67) failed [ 172.459466][ T5748] FAT-fs (loop2): Directory bread(block 68) failed [ 172.466010][ T5748] FAT-fs (loop2): Directory bread(block 69) failed [ 172.472667][ T5748] FAT-fs (loop2): Directory bread(block 70) failed [ 172.479248][ T5748] FAT-fs (loop2): Directory bread(block 71) failed [ 172.485850][ T5748] FAT-fs (loop2): Directory bread(block 72) failed [ 172.492531][ T5748] FAT-fs (loop2): Directory bread(block 73) failed [ 173.137162][ T1108] usbhid 2-1:0.0: can't add hid device: -71 [ 173.143980][ T1108] usbhid: probe of 2-1:0.0 failed with error -71 [ 173.211365][ T1108] usb 2-1: USB disconnect, device number 2 [ 173.744496][ T5761] device syzkaller0 entered promiscuous mode [ 173.895627][ T154] handle_bad_sector: 3 callbacks suppressed [ 173.895646][ T154] attempt to access beyond end of device [ 173.895646][ T154] loop2: rw=1, want=1288, limit=256 [ 173.954354][ T154] attempt to access beyond end of device [ 173.954354][ T154] loop2: rw=1, want=1768, limit=256 [ 174.008691][ T154] attempt to access beyond end of device [ 174.008691][ T154] loop2: rw=1, want=1928, limit=256 [ 174.101257][ T154] attempt to access beyond end of device [ 174.101257][ T154] loop2: rw=1, want=4024, limit=256 [ 174.133281][ T154] attempt to access beyond end of device [ 174.133281][ T154] loop2: rw=1, want=6712, limit=256 [ 174.158514][ T154] attempt to access beyond end of device [ 174.158514][ T154] loop2: rw=1, want=9224, limit=256 [ 174.194754][ T154] attempt to access beyond end of device [ 174.194754][ T154] loop2: rw=1, want=11320, limit=256 [ 174.247114][ T4290] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.273293][ T154] attempt to access beyond end of device [ 174.273293][ T154] loop2: rw=1, want=13368, limit=256 [ 174.343892][ T154] attempt to access beyond end of device [ 174.343892][ T154] loop2: rw=1, want=15552, limit=256 [ 174.395143][ T154] attempt to access beyond end of device [ 174.395143][ T154] loop2: rw=1, want=18712, limit=256 [ 174.588718][ T5772] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.159051][ T4290] usb 1-1: Using ep0 maxpacket: 16 [ 175.277347][ T4290] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 175.309538][ T4290] usb 1-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 175.359199][ T4290] usb 1-1: config 0 has no interface number 0 [ 175.523436][ T4290] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 175.540666][ T4290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 175.552775][ T4290] usb 1-1: Product: syz [ 175.587981][ T4290] usb 1-1: Manufacturer: syz [ 175.592629][ T4290] usb 1-1: SerialNumber: syz [ 175.625184][ T4290] usb 1-1: config 0 descriptor?? [ 175.669067][ T4290] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 175.785486][ T4290] usb 1-1: No valid video chain found. [ 176.177956][ T4290] usb 1-1: USB disconnect, device number 4 [ 176.380330][ T5793] loop3: detected capacity change from 0 to 4096 [ 176.485469][ T5793] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.529286][ T5793] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 176.547233][ T5793] System zones: 0-5 [ 176.573542][ T5793] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 176.925855][ T5810] loop1: detected capacity change from 0 to 512 [ 177.057964][ T5802] device syzkaller0 entered promiscuous mode [ 177.158483][ T5809] netlink: 17 bytes leftover after parsing attributes in process `syz.0.531'. [ 177.162973][ T5793] overlayfs: failed index dir cleanup (-512) [ 177.174620][ T5793] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 177.394600][ T5823] process 'syz.2.538' launched './file0' with NULL argv: empty string added [ 177.415632][ T5825] tipc: Started in network mode [ 177.435916][ T5825] tipc: Node identity 4, cluster identity 4711 [ 177.443901][ T5825] tipc: Node number set to 4 [ 178.258126][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 179.984140][ T5845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'. [ 180.155131][ T5851] device syzkaller0 entered promiscuous mode [ 180.327511][ T5856] tipc: Failed to remove unknown binding: 66,1,1/0:349307446/349307448 [ 180.406310][ T5856] tipc: Failed to remove unknown binding: 66,1,1/0:349307446/349307448 [ 180.454769][ T5856] tipc: Failed to remove unknown binding: 66,1,1/0:349307446/349307448 [ 180.466550][ T5864] loop3: detected capacity change from 0 to 256 [ 180.625697][ T5864] FAT-fs (loop3): Directory bread(block 64) failed [ 180.667036][ T5864] FAT-fs (loop3): Directory bread(block 65) failed [ 180.721377][ T5864] FAT-fs (loop3): Directory bread(block 66) failed [ 180.737063][ T5864] FAT-fs (loop3): Directory bread(block 67) failed [ 180.774880][ T5864] FAT-fs (loop3): Directory bread(block 68) failed [ 180.893758][ T5864] FAT-fs (loop3): Directory bread(block 69) failed [ 180.921653][ T5864] FAT-fs (loop3): Directory bread(block 70) failed [ 180.969205][ T5864] FAT-fs (loop3): Directory bread(block 71) failed [ 181.027189][ T5864] FAT-fs (loop3): Directory bread(block 72) failed [ 181.083458][ T5864] FAT-fs (loop3): Directory bread(block 73) failed [ 181.094372][ T5874] loop2: detected capacity change from 0 to 256 [ 181.175704][ T5874] FAT-fs (loop2): Directory bread(block 64) failed [ 181.182451][ T5874] FAT-fs (loop2): Directory bread(block 65) failed [ 181.189184][ T5874] FAT-fs (loop2): Directory bread(block 66) failed [ 181.195726][ T5874] FAT-fs (loop2): Directory bread(block 67) failed [ 181.202362][ T5874] FAT-fs (loop2): Directory bread(block 68) failed [ 181.209205][ T5874] FAT-fs (loop2): Directory bread(block 69) failed [ 181.215893][ T5874] FAT-fs (loop2): Directory bread(block 70) failed [ 181.222716][ T5874] FAT-fs (loop2): Directory bread(block 71) failed [ 181.229913][ T5874] FAT-fs (loop2): Directory bread(block 72) failed [ 181.236464][ T5874] FAT-fs (loop2): Directory bread(block 73) failed [ 183.271493][ T5889] device syzkaller0 entered promiscuous mode [ 184.328256][ T5906] xt_policy: neither incoming nor outgoing policy selected [ 185.344077][ T5936] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.601837][ T5930] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 185.648719][ T5930] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 186.508475][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 186.514820][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 186.522201][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 186.528746][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 186.534947][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 186.563173][ T5946] device syzkaller0 entered promiscuous mode [ 187.548124][ T5955] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 187.637228][ T5955] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 187.813078][ T5966] capability: warning: `syz.0.590' uses deprecated v2 capabilities in a way that may be insecure [ 188.123503][ T5978] device syzkaller0 entered promiscuous mode [ 189.940390][ T5983] cgroup: Setting release_agent not allowed [ 190.081502][ T5993] input: syz1 as /devices/virtual/input/input5 [ 190.473358][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 190.473374][ T26] audit: type=1326 audit(2000000018.990:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 190.573814][ T26] audit: type=1326 audit(2000000019.030:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 191.734660][ T26] audit: type=1326 audit(2000000019.030:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7536f7f90 code=0x7ffc0000 [ 191.870657][ T26] audit: type=1326 audit(2000000019.030:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7536f7f90 code=0x7ffc0000 [ 191.884277][ T6031] xt_hashlimit: size too large, truncated to 1048576 [ 191.900347][ T6029] device syzkaller0 entered promiscuous mode [ 191.990490][ T26] audit: type=1326 audit(2000000019.040:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 192.135733][ T26] audit: type=1326 audit(2000000019.040:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 192.165127][ T26] audit: type=1326 audit(2000000019.040:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 192.223948][ T26] audit: type=1326 audit(2000000019.040:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 192.383431][ T26] audit: type=1326 audit(2000000019.040:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 192.459394][ T26] audit: type=1326 audit(2000000019.040:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe7536f9749 code=0x7ffc0000 [ 192.499102][ T6050] loop2: detected capacity change from 0 to 512 [ 192.735774][ T6050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.629234][ T6050] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.620: inode has both inline data and extents flags [ 193.669773][ T6050] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.620: couldn't read orphan inode 15 (err -117) [ 193.685122][ T6050] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 193.935892][ T6064] loop3: detected capacity change from 0 to 512 [ 194.073018][ T6066] device syzkaller0 entered promiscuous mode [ 194.111199][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.117692][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.284428][ T6064] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 194.334298][ T6064] ext4 filesystem being mounted at /129/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.387166][ T6064] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #2: comm syz.3.627: corrupted inode contents [ 194.429670][ T6064] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #2: comm syz.3.627: mark_inode_dirty error [ 194.459134][ T6064] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #2: comm syz.3.627: corrupted inode contents [ 194.500431][ T6064] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.627: mark_inode_dirty error [ 195.935043][ T6097] netlink: 708 bytes leftover after parsing attributes in process `syz.3.639'. [ 196.026163][ T6097] device veth5 entered promiscuous mode [ 196.089835][ T6102] device syzkaller0 entered promiscuous mode [ 196.568582][ T6112] loop3: detected capacity change from 0 to 256 [ 196.701167][ T6112] FAT-fs (loop3): Directory bread(block 64) failed [ 196.708013][ T6112] FAT-fs (loop3): Directory bread(block 65) failed [ 196.714756][ T6112] FAT-fs (loop3): Directory bread(block 66) failed [ 196.721557][ T6112] FAT-fs (loop3): Directory bread(block 67) failed [ 196.728380][ T6112] FAT-fs (loop3): Directory bread(block 68) failed [ 196.735229][ T6112] FAT-fs (loop3): Directory bread(block 69) failed [ 196.742283][ T6112] FAT-fs (loop3): Directory bread(block 70) failed [ 196.748966][ T6112] FAT-fs (loop3): Directory bread(block 71) failed [ 196.755765][ T6112] FAT-fs (loop3): Directory bread(block 72) failed [ 196.762513][ T6112] FAT-fs (loop3): Directory bread(block 73) failed [ 199.541177][ T6135] device syzkaller0 entered promiscuous mode [ 199.919204][ T6142] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 200.931564][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 201.221790][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 201.407413][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.499183][ T21] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 201.499213][ T21] usb 2-1: config 13 has an invalid descriptor of length 255, skipping remainder of the config [ 201.499235][ T21] usb 2-1: config 13 has no interface number 0 [ 201.499271][ T21] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 201.499298][ T21] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.499325][ T21] usb 2-1: config 13 interface 50 has no altsetting 0 [ 201.828008][ T21] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 201.828224][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.828380][ T21] usb 2-1: Product: syz [ 201.828529][ T21] usb 2-1: Manufacturer: syz [ 201.828676][ T21] usb 2-1: SerialNumber: syz [ 201.913575][ T6173] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.925501][ T6145] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 202.577233][ T21] usb 2-1: MIDIStreaming interface descriptor not found [ 202.632652][ T21] usb 2-1: USB disconnect, device number 3 [ 202.688823][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 202.707161][ T6177] device syzkaller0 entered promiscuous mode [ 203.049750][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.038991][ T6197] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 204.133709][ T6202] loop1: detected capacity change from 0 to 256 [ 204.236818][ T6202] FAT-fs (loop1): Directory bread(block 64) failed [ 204.237124][ T6202] FAT-fs (loop1): Directory bread(block 65) failed [ 204.237211][ T6202] FAT-fs (loop1): Directory bread(block 66) failed [ 204.237247][ T6202] FAT-fs (loop1): Directory bread(block 67) failed [ 204.237320][ T6202] FAT-fs (loop1): Directory bread(block 68) failed [ 204.237353][ T6202] FAT-fs (loop1): Directory bread(block 69) failed [ 204.237424][ T6202] FAT-fs (loop1): Directory bread(block 70) failed [ 204.237457][ T6202] FAT-fs (loop1): Directory bread(block 71) failed [ 204.237534][ T6202] FAT-fs (loop1): Directory bread(block 72) failed [ 204.237572][ T6202] FAT-fs (loop1): Directory bread(block 73) failed [ 204.638590][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 205.048702][ T6214] device syzkaller0 entered promiscuous mode [ 205.484773][ T6217] loop4: detected capacity change from 0 to 1024 [ 205.537198][ T6217] EXT4-fs (loop4): Ignoring removed bh option [ 205.543364][ T6217] EXT4-fs (loop4): Ignoring removed nobh option [ 205.607149][ T6217] EXT4-fs (loop4): Ignoring removed bh option [ 205.607206][ T6217] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.640312][ T6217] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,bh,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 205.676727][ T6217] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.687: Allocating blocks 497-513 which overlap fs metadata [ 205.679262][ T6217] EXT4-fs (loop4): pa ffff8880749e6e00: logic 128, phys. 385, len 8 [ 205.679346][ T6217] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 206.474386][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 206.474403][ T26] audit: type=1326 audit(2000000015.640:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 206.619004][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 206.645390][ T6241] loop3: detected capacity change from 0 to 256 [ 206.655604][ T26] audit: type=1326 audit(2000000015.710:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 206.769513][ T26] audit: type=1326 audit(2000000015.710:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88a4368f90 code=0x7ffc0000 [ 206.878619][ T6241] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 206.909893][ T26] audit: type=1326 audit(2000000015.710:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88a4368f90 code=0x7ffc0000 [ 207.256349][ T26] audit: type=1326 audit(2000000015.710:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 207.457407][ T26] audit: type=1326 audit(2000000015.710:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 207.611216][ T26] audit: type=1326 audit(2000000015.720:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 207.738732][ T6256] device syzkaller0 entered promiscuous mode [ 207.744864][ T26] audit: type=1326 audit(2000000015.720:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 207.827330][ T26] audit: type=1326 audit(2000000015.720:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 207.913227][ T26] audit: type=1326 audit(2000000015.730:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 208.400991][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 208.425477][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.707'. [ 208.887071][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 208.888813][ T6296] loop1: detected capacity change from 0 to 512 [ 209.163179][ T6296] EXT4-fs (loop1): Ignoring removed oldalloc option [ 209.356598][ T6296] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.387285][ T21] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 209.508896][ T21] usb 1-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.701942][ T21] usb 1-1: config 1 interface 0 has no altsetting 0 [ 209.718331][ T6296] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.710: Parent and EA inode have the same ino 15 [ 209.753166][ T6296] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 209.769222][ T6296] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.710: Parent and EA inode have the same ino 15 [ 209.825293][ T6296] EXT4-fs (loop1): 1 orphan inode deleted [ 209.832840][ T6296] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,sysvgroups,,errors=continue. Quota mode: none. [ 209.946405][ T6296] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.710: deleted inode referenced: 15 [ 210.097723][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.126812][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.383123][ T21] usb 1-1: Product: Щ [ 210.445313][ T21] usb 1-1: Manufacturer: Ќ [ 210.513528][ T21] usb 1-1: SerialNumber: 텛ἥ䅷Ԣ켣䇜綝沉ⲿʋ듫謢显맆菽謂뉿イꢖ꟦睎㺕영︪۸倖퐢㇒Ш藺ᖾ굝墆튜蹘䎰嫀竈㎤귩♜֥휂䅨Ტᵲᅲ䂵좋셼䬞턣ﶪ꣝칟凢銻辌却녠ች抿㕒黤胍젷ⳳ鮤귆嫫떺創뽒顔핧냱궚ྉ粲ꔜ횝炶啐謆煭銒ꫡ࣠立ힳ丵뮂≎釳礡띮柎ퟋ惧⣰皱휰骏㌷錆࠼禤 [ 210.998970][ T6306] device syzkaller0 entered promiscuous mode [ 211.283873][ T21] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 211.308049][ T21] usb 1-1: USB disconnect, device number 5 [ 212.501060][ T6322] netlink: 27 bytes leftover after parsing attributes in process `syz.2.719'. [ 214.649184][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 214.699911][ T6338] device erspan0 entered promiscuous mode [ 214.872693][ T6342] device syzkaller0 entered promiscuous mode [ 214.942184][ T6344] tmpfs: Unknown parameter 'nolazytime5' [ 216.402911][ T6367] loop0: detected capacity change from 0 to 128 [ 216.525159][ T6367] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.558529][ T6367] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.638164][ T6376] device syzkaller0 entered promiscuous mode [ 216.850244][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 217.069505][ T6348] loop4: detected capacity change from 0 to 40427 [ 217.111205][ T6348] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 217.207721][ T6348] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 217.245721][ T6348] F2FS-fs (loop4): invalid crc value [ 217.453742][ T6348] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 219.286050][ T6430] loop2: detected capacity change from 0 to 512 [ 219.441133][ T6430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.624632][ T6430] EXT4-fs (loop2): 1 truncate cleaned up [ 219.630954][ T6430] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 220.895881][ T6439] loop4: detected capacity change from 0 to 512 [ 221.106478][ T6444] IPv6: sit1: Disabled Multicast RS [ 221.213430][ T6446] loop0: detected capacity change from 0 to 256 [ 221.391183][ T6439] EXT4-fs (loop4): Unrecognized mount option "obj_type=(%\\{\r[@" or missing value [ 221.497086][ T6446] FAT-fs (loop0): Directory bread(block 64) failed [ 221.528388][ T6446] FAT-fs (loop0): Directory bread(block 65) failed [ 221.541916][ T6446] FAT-fs (loop0): Directory bread(block 66) failed [ 221.556994][ T6446] FAT-fs (loop0): Directory bread(block 67) failed [ 221.564385][ T6446] FAT-fs (loop0): Directory bread(block 68) failed [ 221.590290][ T6446] FAT-fs (loop0): Directory bread(block 69) failed [ 221.636830][ T6446] FAT-fs (loop0): Directory bread(block 70) failed [ 221.643784][ T6446] FAT-fs (loop0): Directory bread(block 71) failed [ 221.684190][ T6446] FAT-fs (loop0): Directory bread(block 72) failed [ 221.720005][ T6446] FAT-fs (loop0): Directory bread(block 73) failed [ 221.834010][ T6452] loop2: detected capacity change from 0 to 8192 [ 222.101327][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 222.101342][ T26] audit: type=1326 audit(2000000015.460:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 222.231480][ T26] audit: type=1326 audit(2000000015.460:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 222.492772][ T6478] loop4: detected capacity change from 0 to 128 [ 223.137180][ T6492] syz.0.782[6492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.137749][ T6492] syz.0.782[6492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.344643][ T6491] loop4: detected capacity change from 0 to 512 [ 223.788211][ T6491] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.020017][ T6498] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 224.578579][ T6511] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 224.694807][ T6517] loop2: detected capacity change from 0 to 1024 [ 224.752467][ T6517] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 224.784639][ T6517] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 224.836613][ T6517] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #5: comm syz.2.796: unexpected bad inode w/o EXT4_IGET_BAD [ 224.882106][ T6517] EXT4-fs (loop2): no journal found [ 224.892251][ T6517] EXT4-fs (loop2): can't get journal size [ 224.922851][ T6517] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,quota,,errors=continue. Quota mode: writeback. [ 225.913723][ T6537] devtmpfs: Unknown parameter 'dirsync' [ 227.407164][ T6557] device veth1_macvtap left promiscuous mode [ 227.413746][ T6557] device macsec0 entered promiscuous mode [ 228.311485][ T6576] 9pnet: Insufficient options for proto=fd [ 228.575118][ T6585] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 228.793906][ T4174] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.697020][ T4174] usb 5-1: Using ep0 maxpacket: 32 [ 229.817153][ T4174] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 229.833696][ T4174] usb 5-1: config 0 has no interface number 0 [ 229.850863][ T4174] usb 5-1: config 0 interface 184 has no altsetting 0 [ 230.017104][ T4174] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 230.026205][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.076964][ T4174] usb 5-1: Product: syz [ 230.081199][ T4174] usb 5-1: Manufacturer: syz [ 230.092178][ T4174] usb 5-1: SerialNumber: syz [ 230.122007][ T4174] usb 5-1: config 0 descriptor?? [ 230.133054][ T6610] futex_wake_op: syz.0.829 tries to shift op by 32; fix this program [ 230.168391][ T26] audit: type=1326 audit(2000000023.530:631): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 230.208192][ T4174] smsc75xx v1.0.0 [ 230.213364][ T4174] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 230.243503][ T4174] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 230.255935][ T26] audit: type=1326 audit(2000000023.560:632): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 230.361474][ T26] audit: type=1326 audit(2000000023.560:633): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 230.402734][ T4272] tipc: Subscription rejected, illegal request [ 230.439368][ T21] usb 5-1: USB disconnect, device number 5 [ 230.469388][ T26] audit: type=1326 audit(2000000023.560:634): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 230.523084][ T26] audit: type=1326 audit(2000000023.560:635): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 230.612546][ T26] audit: type=1326 audit(2000000023.970:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 230.667441][ T26] audit: type=1326 audit(2000000024.010:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 230.729204][ T26] audit: type=1326 audit(2000000024.010:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 230.753594][ T26] audit: type=1326 audit(2000000024.010:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00d2247005 code=0x7ffc0000 [ 230.813251][ T26] audit: type=1326 audit(2000000024.050:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f00d2214749 code=0x7ffc0000 [ 231.598575][ T6660] netlink: 'syz.3.850': attribute type 4 has an invalid length. [ 233.441212][ T6704] loop4: detected capacity change from 0 to 256 [ 233.510460][ T6699] loop2: detected capacity change from 0 to 512 [ 233.530297][ T6704] exfat: Deprecated parameter 'namecase' [ 233.536191][ T6704] exfat: Unknown parameter 'sys_tz' [ 233.842524][ T6699] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 233.907634][ T6699] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.077544][ T6759] 9pnet: Insufficient options for proto=fd [ 237.136989][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 238.327178][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.421495][ T1108] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 238.445997][ T1108] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.637295][ T1108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.646721][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.675559][ T1108] usb 2-1: Product: ぇ䜗豄힙㧶縴ᄥ瓟燂뺩ꑪꛣ箂ᇵ桴뾇첧꒞ሪ᧑뚤牟Ჲ撿챻nﶜ㕬镩牫䯴 [ 238.726992][ T1108] usb 2-1: Manufacturer: 㑦Äᱸגּ䵮ꖹꏠ㖸踤풱ǟ⢥舦꿀ᯪ㸊㒸聰金⠞⋌ⷆ꒳掖㳮鮙馝츕⬢祅槇㒧叻꒥멷翍鎫校鲅ꥵ⋓Ø鑒Ḧ젲峥佹ℜ [ 238.861126][ T1108] usb 2-1: SerialNumber: ч [ 238.912440][ T6785] loop4: detected capacity change from 0 to 256 [ 238.947258][ T6750] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 239.138099][ T6785] FAT-fs (loop4): Directory bread(block 64) failed [ 239.144728][ T6785] FAT-fs (loop4): Directory bread(block 65) failed [ 239.262134][ T6785] FAT-fs (loop4): Directory bread(block 66) failed [ 239.348558][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 239.472751][ T6785] FAT-fs (loop4): Directory bread(block 67) failed [ 239.813430][ T6785] FAT-fs (loop4): Directory bread(block 68) failed [ 240.010089][ T6785] FAT-fs (loop4): Directory bread(block 69) failed [ 240.016774][ T6785] FAT-fs (loop4): Directory bread(block 70) failed [ 240.048147][ T1108] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 240.069088][ T6785] FAT-fs (loop4): Directory bread(block 71) failed [ 240.100698][ T6785] FAT-fs (loop4): Directory bread(block 72) failed [ 240.115137][ T1108] usb 2-1: USB disconnect, device number 4 [ 240.152843][ T1108] usblp0: removed [ 240.157550][ T6785] FAT-fs (loop4): Directory bread(block 73) failed [ 241.571257][ T2236] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 241.635479][ T6818] netlink: 'syz.1.911': attribute type 12 has an invalid length. [ 241.770578][ T6821] loop0: detected capacity change from 0 to 512 [ 241.870317][ T6821] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.887243][ T6821] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.104364][ T4290] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 242.177335][ T2236] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.267261][ T2236] usb 4-1: config 2 has an invalid interface number: 34 but max is 0 [ 242.275506][ T2236] usb 4-1: config 2 has an invalid descriptor of length 10, skipping remainder of the config [ 243.259049][ T2236] usb 4-1: config 2 has no interface number 0 [ 243.265529][ T2236] usb 4-1: config 2 interface 34 has no altsetting 0 [ 243.268469][ T4290] usb 2-1: Using ep0 maxpacket: 16 [ 243.407160][ T4290] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.437310][ T4290] usb 2-1: config 0 has no interfaces? [ 243.461757][ T2236] usb 4-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 243.475670][ T2236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.497055][ T2236] usb 4-1: Product: syz [ 243.501292][ T2236] usb 4-1: Manufacturer: syz [ 243.536965][ T2236] usb 4-1: SerialNumber: syz [ 243.573415][ T6832] loop0: detected capacity change from 0 to 512 [ 243.607349][ T4290] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.626672][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.635392][ T6832] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 243.642870][ T6832] EXT4-fs (loop0): inline encryption not supported [ 243.659908][ T4290] usb 2-1: Product: syz [ 243.664316][ T6832] EXT4-fs (loop0): Test dummy encryption mode enabled [ 243.671637][ T4290] usb 2-1: Manufacturer: syz [ 243.686544][ T4290] usb 2-1: SerialNumber: syz [ 243.693379][ T6832] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 243.721884][ T4290] usb 2-1: config 0 descriptor?? [ 243.737016][ T6832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 243.773634][ T6832] EXT4-fs (loop0): 1 truncate cleaned up [ 243.788446][ T6832] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 244.010163][ T2236] usb 4-1: USB disconnect, device number 2 [ 244.011856][ T4290] usb 2-1: USB disconnect, device number 5 [ 244.279911][ T4493] udevd[4493]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.34/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.744259][ T6851] fuse: Bad value for 'fd' [ 244.870465][ T6857] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 245.163957][ T6859] device syzkaller0 entered promiscuous mode [ 247.199542][ T386] handle_bad_sector: 3 callbacks suppressed [ 247.199562][ T386] attempt to access beyond end of device [ 247.199562][ T386] loop4: rw=1, want=1288, limit=256 [ 247.233523][ T6887] netlink: 'syz.1.939': attribute type 13 has an invalid length. [ 247.240637][ T386] attempt to access beyond end of device [ 247.240637][ T386] loop4: rw=1, want=1768, limit=256 [ 247.253378][ T386] attempt to access beyond end of device [ 247.253378][ T386] loop4: rw=1, want=1928, limit=256 [ 247.267915][ T386] attempt to access beyond end of device [ 247.267915][ T386] loop4: rw=1, want=3792, limit=256 [ 247.318118][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.189892][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.215790][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.207734][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 249.430711][ T6922] device syzkaller0 entered promiscuous mode [ 249.542688][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 249.581887][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 249.627696][ T6942] loop4: detected capacity change from 0 to 256 [ 249.786441][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 249.827615][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 250.569556][ T6942] FAT-fs (loop4): Directory bread(block 64) failed [ 250.576156][ T6942] FAT-fs (loop4): Directory bread(block 65) failed [ 250.636617][ T6942] FAT-fs (loop4): Directory bread(block 66) failed [ 250.729803][ T6942] FAT-fs (loop4): Directory bread(block 67) failed [ 250.804168][ T6942] FAT-fs (loop4): Directory bread(block 68) failed [ 250.861960][ T6942] FAT-fs (loop4): Directory bread(block 69) failed [ 250.868805][ T6942] FAT-fs (loop4): Directory bread(block 70) failed [ 250.875873][ T6942] FAT-fs (loop4): Directory bread(block 71) failed [ 250.883062][ T6942] FAT-fs (loop4): Directory bread(block 72) failed [ 250.889896][ T6942] FAT-fs (loop4): Directory bread(block 73) failed [ 253.338567][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.384706][ T6979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.677795][ T6987] device syzkaller0 entered promiscuous mode [ 254.102437][ T6991] netlink: 'syz.3.974': attribute type 7 has an invalid length. [ 254.817880][ T7008] loop1: detected capacity change from 0 to 256 [ 255.802640][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.809012][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.886147][ T7008] FAT-fs (loop1): Directory bread(block 64) failed [ 256.893011][ T7008] FAT-fs (loop1): Directory bread(block 65) failed [ 256.900112][ T7008] FAT-fs (loop1): Directory bread(block 66) failed [ 256.906903][ T7008] FAT-fs (loop1): Directory bread(block 67) failed [ 256.914115][ T7008] FAT-fs (loop1): Directory bread(block 68) failed [ 256.920875][ T7008] FAT-fs (loop1): Directory bread(block 69) failed [ 256.928062][ T7008] FAT-fs (loop1): Directory bread(block 70) failed [ 256.934760][ T7008] FAT-fs (loop1): Directory bread(block 71) failed [ 256.941784][ T7008] FAT-fs (loop1): Directory bread(block 72) failed [ 256.948658][ T7008] FAT-fs (loop1): Directory bread(block 73) failed [ 258.239496][ T7020] device syzkaller0 entered promiscuous mode [ 258.872174][ T7036] syz.1.993[7036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.872330][ T7036] syz.1.993[7036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.928219][ T7036] syz.1.993[7036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.998308][ T7036] syz.1.993[7036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.477958][ T7046] loop0: detected capacity change from 0 to 256 [ 260.749194][ T7046] FAT-fs (loop0): Directory bread(block 64) failed [ 260.755821][ T7046] FAT-fs (loop0): Directory bread(block 65) failed [ 260.777158][ T7046] FAT-fs (loop0): Directory bread(block 66) failed [ 260.837020][ T7046] FAT-fs (loop0): Directory bread(block 67) failed [ 260.843687][ T7046] FAT-fs (loop0): Directory bread(block 68) failed [ 260.962599][ T7046] FAT-fs (loop0): Directory bread(block 69) failed [ 261.011765][ T7046] FAT-fs (loop0): Directory bread(block 70) failed [ 261.040553][ T7067] device syzkaller0 entered promiscuous mode [ 261.088183][ T7046] FAT-fs (loop0): Directory bread(block 71) failed [ 261.144836][ T7046] FAT-fs (loop0): Directory bread(block 72) failed [ 261.204218][ T7046] FAT-fs (loop0): Directory bread(block 73) failed [ 263.083162][ T7093] device wireguard0 entered promiscuous mode [ 263.259527][ T7102] loop2: detected capacity change from 0 to 128 [ 263.354993][ T7102] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 263.411071][ T7102] FAT-fs (loop2): Filesystem has been set read-only [ 263.471286][ T7102] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 263.507298][ T7102] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 263.534899][ T7110] overlayfs: workdir and upperdir must be separate subtrees [ 267.751246][ T7122] loop4: detected capacity change from 0 to 256 [ 268.170959][ T7135] loop2: detected capacity change from 0 to 512 [ 268.309855][ T7135] EXT4-fs (loop2): Ignoring removed nobh option [ 268.380592][ T7135] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 268.439913][ T7135] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1033: attempt to clear invalid blocks 1 len 1 [ 268.557057][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 268.557078][ T26] audit: type=1326 audit(2000000061.880:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 268.635083][ T7135] EXT4-fs (loop2): Remounting filesystem read-only [ 269.726929][ T26] audit: type=1326 audit(2000000061.880:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 269.727038][ T26] audit: type=1326 audit(2000000061.960:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 269.727078][ T26] audit: type=1326 audit(2000000061.960:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 269.727117][ T26] audit: type=1326 audit(2000000061.960:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 269.727155][ T26] audit: type=1326 audit(2000000062.010:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 269.727195][ T26] audit: type=1326 audit(2000000062.010:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 269.727233][ T26] audit: type=1326 audit(2000000062.010:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 269.727272][ T26] audit: type=1326 audit(2000000062.010:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 269.727310][ T26] audit: type=1326 audit(2000000062.010:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 269.747348][ T7135] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 269.761683][ T7135] EXT4-fs (loop2): Remounting filesystem read-only [ 269.762110][ T7135] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1033: invalid indirect mapped block 1819239214 (level 0) [ 269.762521][ T7135] EXT4-fs (loop2): Remounting filesystem read-only [ 269.762554][ T7135] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1033: invalid indirect mapped block 1819239214 (level 1) [ 269.762888][ T7135] EXT4-fs (loop2): Remounting filesystem read-only [ 269.763625][ T7135] EXT4-fs (loop2): 1 truncate cleaned up [ 269.763648][ T7135] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 269.844993][ T7135] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.1033: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 269.850620][ T7135] EXT4-fs (loop2): Remounting filesystem read-only [ 270.479455][ T7157] loop4: detected capacity change from 0 to 256 [ 270.672907][ T7157] FAT-fs (loop4): Directory bread(block 64) failed [ 270.673072][ T7157] FAT-fs (loop4): Directory bread(block 65) failed [ 270.673462][ T7157] FAT-fs (loop4): Directory bread(block 66) failed [ 270.673587][ T7157] FAT-fs (loop4): Directory bread(block 67) failed [ 270.673929][ T7157] FAT-fs (loop4): Directory bread(block 68) failed [ 270.674053][ T7157] FAT-fs (loop4): Directory bread(block 69) failed [ 270.674391][ T7157] FAT-fs (loop4): Directory bread(block 70) failed [ 270.674538][ T7157] FAT-fs (loop4): Directory bread(block 71) failed [ 270.674887][ T7157] FAT-fs (loop4): Directory bread(block 72) failed [ 270.675033][ T7157] FAT-fs (loop4): Directory bread(block 73) failed [ 272.857985][ T144] attempt to access beyond end of device [ 272.857985][ T144] loop4: rw=1, want=1288, limit=256 [ 272.897882][ T144] attempt to access beyond end of device [ 272.897882][ T144] loop4: rw=1, want=1768, limit=256 [ 272.928890][ T144] attempt to access beyond end of device [ 272.928890][ T144] loop4: rw=1, want=1928, limit=256 [ 273.385751][ T144] attempt to access beyond end of device [ 273.385751][ T144] loop4: rw=1, want=8976, limit=256 [ 274.203836][ T7173] loop2: detected capacity change from 0 to 256 [ 274.682637][ T7173] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 275.024585][ T7180] loop4: detected capacity change from 0 to 512 [ 275.088729][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 275.218671][ T7180] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1042: Invalid inode bitmap blk 4 in block_group 0 [ 275.289122][ T7180] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,nolazytime,inode_readahead_blks=0x0000000000800000,noload,minixdf,lazytime,,errors=continue. Quota mode: none. [ 277.137016][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 278.585500][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 278.585516][ T26] audit: type=1326 audit(2000000008.730:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 278.661051][ T26] audit: type=1326 audit(2000000008.810:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 278.696150][ T26] audit: type=1326 audit(2000000008.840:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88a4368f90 code=0x7ffc0000 [ 278.855381][ T26] audit: type=1326 audit(2000000008.840:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88a4368f90 code=0x7ffc0000 [ 278.889884][ T26] audit: type=1326 audit(2000000008.840:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 278.953104][ T26] audit: type=1326 audit(2000000008.840:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 279.106070][ T26] audit: type=1326 audit(2000000008.840:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 279.222317][ T26] audit: type=1326 audit(2000000008.840:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 279.242930][ T7178] chnl_net:caif_netlink_parms(): no params data found [ 279.250167][ T4805] Bluetooth: hci5: command 0x041b tx timeout [ 279.319739][ T26] audit: type=1326 audit(2000000008.840:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 279.376420][ T26] audit: type=1326 audit(2000000008.840:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f88a436a749 code=0x7ffc0000 [ 281.421526][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 281.430798][ T7241] device bridge_slave_1 left promiscuous mode [ 281.438491][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.454523][ T7241] device bridge_slave_0 left promiscuous mode [ 281.460905][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.488957][ T4805] Bluetooth: hci5: command 0x040f tx timeout [ 282.578253][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.595841][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.619349][ T7178] device bridge_slave_0 entered promiscuous mode [ 282.782397][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.820589][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.834132][ T7178] device bridge_slave_1 entered promiscuous mode [ 282.899668][ T7254] [ 282.902048][ T7254] ====================================================== [ 282.909106][ T7254] WARNING: possible circular locking dependency detected [ 282.916168][ T7254] syzkaller #0 Not tainted [ 282.920586][ T7254] ------------------------------------------------------ [ 282.927604][ T7254] syz.3.1070/7254 is trying to acquire lock: [ 282.933581][ T7254] ffff8880b9127eb8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 282.942217][ T7254] [ 282.942217][ T7254] but task is already holding lock: [ 282.949576][ T7254] ffff88801dc83238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 282.958460][ T7254] [ 282.958460][ T7254] which lock already depends on the new lock. [ 282.958460][ T7254] [ 282.968876][ T7254] [ 282.968876][ T7254] the existing dependency chain (in reverse order) is: [ 282.977978][ T7254] [ 282.977978][ T7254] -> #2 (&trie->lock){-.-.}-{2:2}: [ 282.985282][ T7254] _raw_spin_lock_irqsave+0xa4/0xf0 [ 282.991017][ T7254] trie_delete_elem+0x90/0x710 [ 282.996313][ T7254] 0xffffffffa002c2fd [ 283.000821][ T7254] bpf_trace_run3+0x17e/0x320 [ 283.006028][ T7254] enqueue_timer+0x394/0x520 [ 283.011143][ T7254] __mod_timer+0x8e1/0xd20 [ 283.016082][ T7254] sk_reset_timer+0x1f/0xb0 [ 283.021109][ T7254] tipc_sk_finish_conn+0x154/0x7e0 [ 283.026746][ T7254] tipc_socketpair+0x250/0x470 [ 283.032030][ T7254] __sys_socketpair+0x2ac/0x540 [ 283.037400][ T7254] __x64_sys_socketpair+0x97/0xb0 [ 283.042946][ T7254] do_syscall_64+0x4c/0xa0 [ 283.047883][ T7254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.054305][ T7254] [ 283.054305][ T7254] -> #1 (&base->lock){-.-.}-{2:2}: [ 283.061601][ T7254] _raw_spin_lock_irqsave+0xa4/0xf0 [ 283.067334][ T7254] lock_timer_base+0x123/0x270 [ 283.072618][ T7254] __mod_timer+0x117/0xd20 [ 283.077557][ T7254] queue_delayed_work_on+0x126/0x1e0 [ 283.083365][ T7254] kvfree_call_rcu+0x4a9/0x7c0 [ 283.088648][ T7254] rtnl_register_internal+0x489/0x590 [ 283.094545][ T7254] rtnl_register+0x2e/0x70 [ 283.099482][ T7254] ip_rt_init+0x2e0/0x3a0 [ 283.104335][ T7254] ip_init+0xa/0x20 [ 283.108664][ T7254] inet_init+0x28b/0x3a0 [ 283.113433][ T7254] do_one_initcall+0x1ee/0x680 [ 283.118721][ T7254] do_initcall_level+0x137/0x1f0 [ 283.124187][ T7254] do_initcalls+0x4b/0x90 [ 283.129042][ T7254] kernel_init_freeable+0x3ce/0x560 [ 283.134767][ T7254] kernel_init+0x19/0x1b0 [ 283.139623][ T7254] ret_from_fork+0x1f/0x30 [ 283.144573][ T7254] [ 283.144573][ T7254] -> #0 (krc.lock){..-.}-{2:2}: [ 283.151731][ T7254] __lock_acquire+0x2c33/0x7c60 [ 283.157167][ T7254] lock_acquire+0x197/0x3f0 [ 283.162213][ T7254] _raw_spin_lock+0x2a/0x40 [ 283.167243][ T7254] kvfree_call_rcu+0x186/0x7c0 [ 283.172541][ T7254] trie_update_elem+0x86e/0xc50 [ 283.177921][ T7254] bpf_map_update_value+0x57d/0x650 [ 283.183652][ T7254] generic_map_update_batch+0x525/0x7c0 [ 283.189726][ T7254] bpf_map_do_batch+0x466/0x600 [ 283.195104][ T7254] __sys_bpf+0x601/0x670 [ 283.199875][ T7254] __x64_sys_bpf+0x78/0x90 [ 283.204819][ T7254] do_syscall_64+0x4c/0xa0 [ 283.209766][ T7254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.216190][ T7254] [ 283.216190][ T7254] other info that might help us debug this: [ 283.216190][ T7254] [ 283.226420][ T7254] Chain exists of: [ 283.226420][ T7254] krc.lock --> &base->lock --> &trie->lock [ 283.226420][ T7254] [ 283.238164][ T7254] Possible unsafe locking scenario: [ 283.238164][ T7254] [ 283.245611][ T7254] CPU0 CPU1 [ 283.250978][ T7254] ---- ---- [ 283.256338][ T7254] lock(&trie->lock); [ 283.260406][ T7254] lock(&base->lock); [ 283.266991][ T7254] lock(&trie->lock); [ 283.273587][ T7254] lock(krc.lock); [ 283.277396][ T7254] [ 283.277396][ T7254] *** DEADLOCK *** [ 283.277396][ T7254] [ 283.285539][ T7254] 2 locks held by syz.3.1070/7254: [ 283.290650][ T7254] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 283.299969][ T7254] #1: ffff88801dc83238 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc7/0xc50 [ 283.309305][ T7254] [ 283.309305][ T7254] stack backtrace: [ 283.315275][ T7254] CPU: 1 PID: 7254 Comm: syz.3.1070 Not tainted syzkaller #0 [ 283.322642][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.332714][ T7254] Call Trace: [ 283.335993][ T7254] [ 283.338928][ T7254] dump_stack_lvl+0x168/0x230 [ 283.343617][ T7254] ? load_image+0x3b0/0x3b0 [ 283.348127][ T7254] ? show_regs_print_info+0x20/0x20 [ 283.353339][ T7254] ? print_circular_bug+0x12b/0x1a0 [ 283.358537][ T7254] check_noncircular+0x274/0x310 [ 283.363473][ T7254] ? add_chain_block+0x940/0x940 [ 283.368430][ T7254] ? lockdep_lock+0xdc/0x1e0 [ 283.373031][ T7254] ? stack_depot_save+0x404/0x440 [ 283.378058][ T7254] ? mark_lock+0x94/0x320 [ 283.382397][ T7254] ? _find_first_zero_bit+0xce/0xf0 [ 283.387637][ T7254] __lock_acquire+0x2c33/0x7c60 [ 283.392601][ T7254] ? stack_depot_save+0x404/0x440 [ 283.397626][ T7254] ? verify_lock_unused+0x140/0x140 [ 283.402849][ T7254] ? kasan_save_stack+0x4b/0x60 [ 283.407718][ T7254] ? kasan_save_stack+0x35/0x60 [ 283.412581][ T7254] ? kasan_record_aux_stack+0xb8/0x100 [ 283.418050][ T7254] ? kvfree_call_rcu+0x10a/0x7c0 [ 283.422996][ T7254] ? trie_update_elem+0x86e/0xc50 [ 283.428026][ T7254] ? bpf_map_update_value+0x57d/0x650 [ 283.433403][ T7254] ? generic_map_update_batch+0x525/0x7c0 [ 283.439133][ T7254] ? bpf_map_do_batch+0x466/0x600 [ 283.444247][ T7254] ? __sys_bpf+0x601/0x670 [ 283.448682][ T7254] ? __x64_sys_bpf+0x78/0x90 [ 283.453274][ T7254] ? do_syscall_64+0x4c/0xa0 [ 283.457866][ T7254] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.463946][ T7254] lock_acquire+0x197/0x3f0 [ 283.468466][ T7254] ? kvfree_call_rcu+0x186/0x7c0 [ 283.473426][ T7254] ? read_lock_is_recursive+0x10/0x10 [ 283.478808][ T7254] _raw_spin_lock+0x2a/0x40 [ 283.483312][ T7254] ? kvfree_call_rcu+0x186/0x7c0 [ 283.488254][ T7254] kvfree_call_rcu+0x186/0x7c0 [ 283.493023][ T7254] ? call_rcu+0x930/0x930 [ 283.497362][ T7254] trie_update_elem+0x86e/0xc50 [ 283.502228][ T7254] bpf_map_update_value+0x57d/0x650 [ 283.507440][ T7254] generic_map_update_batch+0x525/0x7c0 [ 283.512991][ T7254] ? lock_chain_count+0x20/0x20 [ 283.517854][ T7254] ? rcu_read_unlock+0x90/0x90 [ 283.522627][ T7254] ? rcu_read_unlock+0x90/0x90 [ 283.527523][ T7254] bpf_map_do_batch+0x466/0x600 [ 283.532387][ T7254] __sys_bpf+0x601/0x670 [ 283.536641][ T7254] ? bpf_link_show_fdinfo+0x340/0x340 [ 283.542030][ T7254] __x64_sys_bpf+0x78/0x90 [ 283.546456][ T7254] do_syscall_64+0x4c/0xa0 [ 283.550885][ T7254] ? clear_bhb_loop+0x30/0x80 [ 283.555572][ T7254] ? clear_bhb_loop+0x30/0x80 [ 283.560350][ T7254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.566259][ T7254] RIP: 0033:0x7fe7536f9749 [ 283.570687][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.590308][ T7254] RSP: 002b:00007fe75191e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.598742][ T7254] RAX: ffffffffffffffda RBX: 00007fe753950180 RCX: 00007fe7536f9749 [ 283.606819][ T7254] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 283.614796][ T7254] RBP: 00007fe75377df91 R08: 0000000000000000 R09: 0000000000000000 [ 283.622770][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.630742][ T7254] R13: 00007fe753950218 R14: 00007fe753950180 R15: 00007ffd2352b728 [ 283.638726][ T7254] [ 284.011880][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.044535][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.074456][ T7178] team0: Port device team_slave_0 added [ 284.081893][ T7178] team0: Port device team_slave_1 added [ 284.117349][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.124404][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.152094][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.168123][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.175233][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.209311][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.250687][ T7178] device hsr_slave_0 entered promiscuous mode [ 284.258850][ T7178] device hsr_slave_1 entered promiscuous mode [ 284.265495][ T7178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.273191][ T7178] Cannot create hsr debugfs directory [ 284.382667][ T7178] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.392186][ T7178] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.408503][ T7178] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 284.434051][ T7178] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.497151][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 284.510319][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.523695][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 284.535894][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.544278][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.559572][ T7178] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.570980][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.583089][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.604728][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.611868][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.648721][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.667395][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.687622][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.696071][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.703199][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.738502][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.766244][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.786837][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.804065][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.822173][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.842140][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.026741][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.038160][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.050367][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.088013][ T4315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.153412][ T4315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.176441][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.185289][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.207353][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.220153][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.230179][ T7178] device veth0_vlan entered promiscuous mode [ 285.238677][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.246543][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.260929][ T4315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.275007][ T7178] device veth1_vlan entered promiscuous mode [ 285.294417][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.302867][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 285.311118][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.319936][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.331171][ T7178] device veth0_macvtap entered promiscuous mode [ 285.342525][ T4315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.355992][ T7178] device veth1_macvtap entered promiscuous mode [ 285.370420][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.381605][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.391690][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.402342][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.412310][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.422889][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.433805][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.442129][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.450573][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.458982][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.467667][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.479370][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.491990][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.501886][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.513046][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.522930][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.533793][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.544915][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.554991][ T7178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.563794][ T7178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.573272][ T7178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.582053][ T7178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.594605][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.603703][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.660003][ T7178] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 285.703710][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.713689][ T7178] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 285.725565][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.744460][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.771091][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.779929][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.788076][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.351007][ T4315] device hsr_slave_0 left promiscuous mode [ 286.357349][ T4315] device hsr_slave_1 left promiscuous mode [ 286.363635][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.372672][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.380654][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.388504][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.396636][ T4315] device bridge_slave_1 left promiscuous mode [ 286.402921][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.410959][ T4315] device bridge_slave_0 left promiscuous mode [ 286.417830][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.428392][ T4315] device veth1_macvtap left promiscuous mode [ 286.434417][ T4315] device veth0_macvtap left promiscuous mode [ 286.440535][ T4315] device veth1_vlan left promiscuous mode [ 286.446312][ T4315] device veth0_vlan left promiscuous mode [ 286.543337][ T4315] team0 (unregistering): Port device team_slave_1 removed [ 286.558557][ T4315] team0 (unregistering): Port device team_slave_0 removed [ 286.571949][ T4315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.584890][ T4315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.631413][ T4315] bond0 (unregistering): Released all slaves