last executing test programs: 3m53.463711818s ago: executing program 3 (id=1607): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000b00)={'syzkaller0\x00', 0x1002}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b80)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000fc0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000001000)=ANY=[@ANYBLOB="4300000002"], 0x8) 3m52.158377201s ago: executing program 3 (id=1610): mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r0, &(0x7f0000000280)='3', 0x4e) futex(0x0, 0x1, 0x400000, 0x0, 0x0, 0xffffffec) 3m52.043585753s ago: executing program 3 (id=1611): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000001480)='nfs\x00', 0x0, &(0x7f00000014c0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) mount(&(0x7f0000002880)=@loop={'/dev/loop', 0x0}, &(0x7f00000028c0)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000002900)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r2, 0x1, &(0x7f0000002a40)=[0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x91, &(0x7f0000001f40)=0x0) syncfs(r0) io_submit(r4, 0x3f0a, &(0x7f0000001f80)=[&(0x7f0000001fc0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000002000), 0x200a00}]) 3m48.380247687s ago: executing program 3 (id=1628): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "1bbb3bb2"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "0f05f86e"}, @local=@item_012={0x0, 0x2, 0x4}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x10, 0x6d, 0x1, {0x22, 0x643}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3m47.619260357s ago: executing program 3 (id=1634): landlock_create_ruleset(&(0x7f0000000000)={0x7f6e}, 0x18, 0x0) r0 = fsopen(&(0x7f0000000380)='nfs\x00', 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5460, 0x2d311110000633fd) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c085}, 0x4044) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='addr\x00', &(0x7f0000000800)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000840)='vers\x00', &(0x7f0000000880)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usbip_server_init(0x6) 3m46.110936035s ago: executing program 32 (id=1634): landlock_create_ruleset(&(0x7f0000000000)={0x7f6e}, 0x18, 0x0) r0 = fsopen(&(0x7f0000000380)='nfs\x00', 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5460, 0x2d311110000633fd) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c085}, 0x4044) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='addr\x00', &(0x7f0000000800)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000840)='vers\x00', &(0x7f0000000880)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usbip_server_init(0x6) 12.299440047s ago: executing program 4 (id=2296): openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) fanotify_init(0x4, 0x101000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000580)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8) unshare(0x22020600) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f000001a240)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f000001a280)=0xce, 0x4) sendmsg$inet(r1, &(0x7f000001a340)={0x0, 0x14, &(0x7f000001a380)=[{&(0x7f000001a3c0)=' ', 0x100120}], 0x1}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0xbac9, 0x1}}, @out_dx={0x6a, 0x28, {0x3a15, 0x5, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xa940, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @code={0xa, 0x50, {"0fc769240f01cb440f01ca66baa100b000ee440f56442f06b9d5080000b80a000000ba000000000f30f2416690420f015d56b8010000000f01d9c42230f31b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2400, 0x3, 0x7, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0xdf1d}}, @enable_nested={0x12c, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x0, @arbitrary=0xfffffffffffffff9}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xa7, 0x0, 0x1, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x201f, 0x8001, 0x400, 0x1}}, @uexit={0x0, 0x18, 0x9}, @nested_amd_vmsave={0x183, 0x18, 0x3}], 0x270}) 12.015958905s ago: executing program 5 (id=2298): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x98) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000240)='6', 0x1) fsopen(&(0x7f0000000600)='cgroup2\x00', 0x0) 11.770021071s ago: executing program 4 (id=2300): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000b00)=""/1024, 0x400) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) 11.191580985s ago: executing program 4 (id=2302): r0 = socket(0x1, 0x5, 0x0) getsockname$packet(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000b00)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x11, 0x0, 0x1, 0x0, 0x3, 0x100}}) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x3}, &(0x7f00000008c0)=0x8) socketpair(0x1, 0x1, 0x0, &(0x7f00000019c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000640)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a310000000005000100"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004040) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c000000090603417c17da00000000000a000000340007800c000180080001407f0000010c00148008000140ac1e01010600044050000000060005406b640000050007000600000005000100060000000900020073797a310000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 10.830000164s ago: executing program 0 (id=2303): openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) fanotify_init(0x4, 0x101000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000580)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f000001a240)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f000001a280)=0xce, 0x4) connect$inet(r1, &(0x7f000001a2c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f000001a300)=0x7e6, 0x4) sendmsg$inet(r1, &(0x7f000001a340)={0x0, 0x14, &(0x7f000001a380)=[{&(0x7f000001a3c0)=' ', 0x100120}], 0x1}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x11, r4, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0xbac9, 0x1}}, @out_dx={0x6a, 0x28, {0x3a15, 0x5, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xa940, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @code={0xa, 0x50, {"0fc769240f01cb440f01ca66baa100b000ee440f56442f06b9d5080000b80a000000ba000000000f30f2416690420f015d56b8010000000f01d9c42230f31b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2400, 0x3, 0x7, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0xdf1d}}, @enable_nested={0x12c, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x0, @arbitrary=0xfffffffffffffff9}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xa7, 0x0, 0x1, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x201f, 0x8001, 0x400, 0x1}}, @uexit={0x0, 0x18, 0x9}, @nested_amd_vmsave={0x183, 0x18, 0x3}], 0x270}) 9.85674406s ago: executing program 0 (id=2305): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 9.83945576s ago: executing program 4 (id=2306): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000400), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000004c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) 8.809769966s ago: executing program 5 (id=2310): r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x6f) 8.459257605s ago: executing program 5 (id=2311): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5c8000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000002800)=""/102392, 0x18ff8) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f000001b800)={0x1, 0xfff, "b5f56b", 0x8, 0x6}) sched_setaffinity(r3, 0x8, &(0x7f000001b840)=0x80000000000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000001b880)={0x1, &(0x7f000001b8c0)=[{0x6, 0x1, 0xfe, 0x7fff7ffc}]}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000001ba00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) 7.298446815s ago: executing program 5 (id=2312): mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000b00)=""/1024, 0x400) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) 6.602525352s ago: executing program 0 (id=2317): r0 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mknodat$null(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1d4e, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x1000000, &(0x7f0000000780)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r4, &(0x7f0000003a80)="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", 0x2000, &(0x7f0000005a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005b40)={0x78, 0x0, 0x9, {0x3, 0x2, 0x0, {0x100000000000006, 0xffff, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2, 0x7, 0x9e5, 0x42, 0x47e, 0x8000, 0xd5000000, 0x0, 0xee01, 0x627e, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 5.486789241s ago: executing program 1 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5c8000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000002800)=""/102392, 0x18ff8) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f000001b800)={0x1, 0xfff, "b5f56b", 0x8, 0x6}) sched_setaffinity(r3, 0x8, &(0x7f000001b840)=0x80000000000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000001b880)={0x1, &(0x7f000001b8c0)=[{0x6, 0x1, 0xfe, 0x7fff7ffc}]}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000001ba00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='atkbd', 0x5) 5.484479171s ago: executing program 4 (id=2324): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000040)=0x1) 4.034272468s ago: executing program 1 (id=2326): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/tracing/options/context-info\x00', 0x1, 0x0) 3.115058341s ago: executing program 2 (id=2327): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1c0) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='M', 0x1) 3.051683913s ago: executing program 5 (id=2328): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc0) write(r0, &(0x7f0000000600)='27', 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000280)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="a4", 0x1}], 0x1}}], 0x1, 0x0) 2.513230026s ago: executing program 2 (id=2329): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x4e20, 0xa, @empty, 0x8}, 0x1c) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.299666922s ago: executing program 2 (id=2330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f00000009c0)="9942d6af00007f8f", 0x689}], 0x2}, 0x0) 1.889770162s ago: executing program 2 (id=2331): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x81, 0xffffffff, 0xfffffffc}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.761322146s ago: executing program 2 (id=2332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, '\x00\x00Q\x00\b\x009\x00', '\x00', '^\x00\x00F', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="cba3", 0x2}], 0x1) 1.458927173s ago: executing program 0 (id=2333): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) 1.323386407s ago: executing program 1 (id=2334): rt_sigprocmask(0x0, &(0x7f0000006bc0)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000006c00)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000006c40)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000006c80)={{}, {0x0, 0xe4c}}, 0x0) tkill(r0, 0x12) 1.292555707s ago: executing program 4 (id=2335): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0x7, 0x4}) 1.236310609s ago: executing program 0 (id=2336): r0 = socket(0x1, 0x5, 0x0) getsockname$packet(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000b00)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x11, 0x0, 0x1, 0x0, 0x3, 0x100}}) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x3}, &(0x7f00000008c0)=0x8) socketpair(0x1, 0x1, 0x0, &(0x7f00000019c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000640)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a310000000005000100"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004040) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c000000090603417c17da00000000000a000000340007800c000180080001407f0000010c00148008000140ac1e01010600044050000000060005406b640000050007000600000005000100060000000900020073797a310000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.107303482s ago: executing program 1 (id=2337): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000004000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x7, 0x0, 0x100000000}, 0x9, 0x40000000, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 989.050895ms ago: executing program 1 (id=2338): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000080)={[{@usrquota}, {@jqfmt_vfsold}, {@sysvgroups}, {@debug}, {@dioread_nolock}, {@bsdgroups}, {@acl}, {@noauto_da_alloc}], [{@pcr={'pcr', 0x3d, 0x5}}]}, 0x1, 0x5eb, &(0x7f0000003e80)="$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") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000bc0)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0xe) read$FUSE(r3, &(0x7f0000000c80)={0x2020}, 0x2020) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x10, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000003bc0)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) 409.97995ms ago: executing program 2 (id=2339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000001240)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001280)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000012c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000001300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 291.337483ms ago: executing program 5 (id=2340): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(0xffffffffffffffff, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, 0x8, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000980)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {0x1, 0x4}, [{0x2, 0x0, r0}], {0x4, 0x2}, [{0x8, 0x0, r1}], {}, {0x20, 0x6}}, 0x34, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@resgid={'resgid', 0x3d, r1}}, {@noload}, {@nodioread_nolock}, {@data_writeback}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffff8}}, {@nobh}, {@min_batch_time}], [{@obj_user={'obj_user', 0x3d, 'auto_da_alloc'}}, {@dont_hash}, {@smackfsdef}]}, 0x4, 0xbd1, &(0x7f0000001340)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x37d4c024, 0x9efa, 0x1, 0x5}) open(0x0, 0x2c843, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = epoll_create(0x7) r6 = epoll_create(0x7) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0x20002000}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000700)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000740)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000780)={0x20000001}) 221.573885ms ago: executing program 0 (id=2341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f00000009c0)="9942d6af00007f8f", 0x689}], 0x2}, 0x0) 0s ago: executing program 1 (id=2342): socket$nl_generic(0x10, 0x3, 0x10) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x100000000e2) r4 = syz_io_uring_setup(0x141c, &(0x7f0000000240)={0x0, 0xddf7, 0x400, 0x3, 0xbd}, &(0x7f00000008c0), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r4, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000a00)=0x8, 0x1) syz_mount_image$exfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file1\x00', 0x40, &(0x7f0000000ac0)=ANY=[], 0x1, 0x14fe, &(0x7f0000000b00)="$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") r5 = open(&(0x7f0000002000)='./file1\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 81935][ T4277] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 334.592521][ T4277] Bluetooth: hci4: link tx timeout [ 334.597815][ T4277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.675180][ T4351] usb 4-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 334.704896][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.666135][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 335.718264][ T4351] usb-storage 4-1:1.0: USB Mass Storage device detected [ 336.133508][ T4351] scsi host1: usb-storage 4-1:1.0 [ 336.217767][ T4351] usb 4-1: USB disconnect, device number 13 [ 336.449408][ T8787] netlink: 'syz.1.1367': attribute type 1 has an invalid length. [ 336.564583][ T8798] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 336.788013][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 337.693311][ T4279] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 337.806935][ T8804] device syzkaller1 entered promiscuous mode [ 337.895836][ T4279] usb 2-1: unable to get BOS descriptor or descriptor too short [ 337.928741][ T4279] usb 2-1: not running at top speed; connect to a high speed hub [ 337.946349][ T4279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 337.970294][ T4279] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 338.000133][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.030469][ T4279] usb 2-1: Product: syz [ 338.040581][ T4279] usb 2-1: Manufacturer: syz [ 338.050715][ T4279] usb 2-1: SerialNumber: syz [ 339.553718][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 339.630609][ T4279] usb 2-1: MIDIStreaming interface descriptor not found [ 339.683485][ T4279] usb 2-1: too many endpoints [ 339.760504][ T4279] usb 2-1: USB disconnect, device number 5 [ 340.240073][ T4279] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 340.830235][ T8833] loop2: detected capacity change from 0 to 256 [ 340.836323][ T8831] loop4: detected capacity change from 0 to 256 [ 340.916124][ T8833] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 340.945397][ T4279] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 340.983336][ T4279] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 341.035749][ T4279] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.056359][ T4279] usb 2-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 341.070346][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.092680][ T4279] usb 2-1: config 0 descriptor?? [ 341.602947][ T4279] wacom 0003:056A:00FB.0005: hidraw0: USB HID v10.01 Device [HID 056a:00fb] on usb-dummy_hcd.1-1/input0 [ 341.835233][ T4279] usb 2-1: USB disconnect, device number 6 [ 342.004983][ T8840] rxe_eth0 speed is unknown, defaulting to 1000 [ 342.262159][ T8851] fido_id[8851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 342.277048][ T8847] device syzkaller1 entered promiscuous mode [ 342.348768][ T8840] wg1 speed is unknown, defaulting to 1000 [ 342.422023][ T8857] loop4: detected capacity change from 0 to 8 [ 342.844594][ T4279] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 343.098317][ T4279] usb 5-1: Using ep0 maxpacket: 32 [ 343.148892][ T4279] usb 5-1: config 183 has an invalid interface number: 124 but max is 0 [ 343.229146][ T4279] usb 5-1: config 183 has no interface number 0 [ 343.259278][ T4279] usb 5-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 343.321547][ T4279] usb 5-1: config 183 interface 124 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 343.373964][ T4279] usb 5-1: config 183 interface 124 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 344.825223][ T4279] usb 5-1: config 183 interface 124 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 344.836198][ T4279] usb 5-1: config 183 interface 124 has no altsetting 0 [ 344.855377][ T4279] usb 5-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 344.865090][ T4279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.873126][ T4279] usb 5-1: Product: syz [ 344.878027][ T4279] usb 5-1: Manufacturer: syz [ 344.882678][ T4279] usb 5-1: SerialNumber: syz [ 345.203661][ T4279] sierra 5-1:183.124: Sierra USB modem converter detected [ 345.215488][ T4279] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 345.240402][ T4279] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 345.293740][ T4279] usb 5-1: USB disconnect, device number 9 [ 345.341417][ T4279] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 345.356999][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 345.394327][ T4279] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 345.411902][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 345.438669][ T4279] sierra 5-1:183.124: device disconnected [ 345.572129][ T8876] loop3: detected capacity change from 0 to 512 [ 345.638074][ T8876] FAT-fs (loop3): bogus logical sector size 0 [ 345.653320][ T8876] FAT-fs (loop3): Can't find a valid FAT filesystem [ 345.752124][ T8883] loop0: detected capacity change from 0 to 512 [ 345.814012][ T8885] FAULT_INJECTION: forcing a failure. [ 345.814012][ T8885] name fail_futex, interval 1, probability 0, space 0, times 1 [ 345.821551][ T8883] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 345.858854][ T8883] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.984576][ T8890] loop4: detected capacity change from 0 to 256 [ 346.001274][ T8885] CPU: 1 PID: 8885 Comm: syz.2.1399 Not tainted syzkaller #0 [ 346.008792][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 346.018910][ T8885] Call Trace: [ 346.022240][ T8885] [ 346.025208][ T8885] dump_stack_lvl+0x188/0x24e [ 346.029957][ T8885] ? show_regs_print_info+0x12/0x12 [ 346.035214][ T8885] ? load_image+0x410/0x410 [ 346.039763][ T8885] ? release_firmware_map_entry+0x187/0x187 [ 346.045721][ T8885] ? plist_add+0x3d7/0x490 [ 346.050205][ T8885] should_fail_ex+0x390/0x4c0 [ 346.054951][ T8885] get_futex_key+0x1b1/0x1000 [ 346.059663][ T8885] ? futex_unqueue+0xc7/0xf0 [ 346.064320][ T8885] ? futex_setup_timer+0xc0/0xc0 [ 346.069293][ T8885] futex_wake+0x123/0x4f0 [ 346.073657][ T8885] ? futex_wake_mark+0x150/0x150 [ 346.078635][ T8885] ? file_end_write+0x156/0x250 [ 346.083518][ T8885] ? vfs_write+0x777/0x9a0 [ 346.087990][ T8885] do_futex+0x2e2/0x320 [ 346.092198][ T8885] ? __ia32_sys_get_robust_list+0x100/0x100 [ 346.098154][ T8885] __se_sys_futex+0x381/0x410 [ 346.102873][ T8885] ? __x64_sys_futex+0xf0/0xf0 [ 346.107677][ T8885] ? __x64_sys_futex+0x1d/0xf0 [ 346.112507][ T8885] do_syscall_64+0x4c/0xa0 [ 346.116957][ T8885] ? clear_bhb_loop+0x60/0xb0 [ 346.121657][ T8885] ? clear_bhb_loop+0x60/0xb0 [ 346.126365][ T8885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.132282][ T8885] RIP: 0033:0x7f987c19f559 [ 346.136722][ T8885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.156368][ T8885] RSP: 002b:00007f987a3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 346.164808][ T8885] RAX: ffffffffffffffda RBX: 00007f987c425fa0 RCX: 00007f987c19f559 [ 346.172796][ T8885] RDX: 0000000000400000 RSI: 0000000000000001 RDI: 0000000000000000 [ 346.180798][ T8885] RBP: 00007f987c236b20 R08: 0000000000000000 R09: 00000000ffffffec [ 346.188869][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.196854][ T8885] R13: 00007f987c426038 R14: 00007f987c425fa0 R15: 00007ffd65fe7928 [ 346.204860][ T8885] [ 346.711118][ T8883] EXT4-fs (loop0): unmounting filesystem. [ 353.501376][ T8910] loop3: detected capacity change from 0 to 512 [ 353.785978][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 353.796251][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 353.913019][ T8916] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 354.012814][ T8924] loop2: detected capacity change from 0 to 512 [ 354.040081][ T8924] FAT-fs (loop2): bogus logical sector size 0 [ 354.071327][ T8924] FAT-fs (loop2): Can't find a valid FAT filesystem [ 355.565697][ T8949] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 356.662894][ T8955] loop4: detected capacity change from 0 to 512 [ 357.099244][ T8955] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 357.108286][ T8955] FAT-fs (loop4): Filesystem has been set read-only [ 357.116567][ T8955] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 357.125057][ T8955] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 357.490733][ T8955] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 357.949501][ T8957] loop2: detected capacity change from 0 to 1024 [ 358.027758][ T8960] loop3: detected capacity change from 0 to 256 [ 358.248852][ T8957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 358.824542][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 360.839286][ T9019] netlink: 'syz.4.1430': attribute type 1 has an invalid length. [ 361.040693][ T9021] loop2: detected capacity change from 0 to 512 [ 361.820574][ T9021] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.1431: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 9, max 4(4), depth 0(0) [ 362.039339][ T9021] EXT4-fs (loop2): get root inode failed [ 362.096065][ T9021] EXT4-fs (loop2): mount failed [ 362.212811][ T9035] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 362.728948][ T9021] loop2: detected capacity change from 0 to 512 [ 362.782366][ T9021] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 362.838726][ T9021] EXT4-fs (loop2): 1 truncate cleaned up [ 362.857335][ T9021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 362.987477][ T9042] device syzkaller0 entered promiscuous mode [ 363.039366][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 364.140460][ T9050] loop2: detected capacity change from 0 to 512 [ 364.276773][ T9050] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 364.285631][ T9050] FAT-fs (loop2): Filesystem has been set read-only [ 364.293876][ T9050] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 364.302289][ T9050] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 364.589029][ T9050] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 365.318854][ T9052] device syzkaller0 entered promiscuous mode [ 365.573843][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 365.605800][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 369.047708][ T4337] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 369.441009][ T4337] usb 4-1: unable to get BOS descriptor or descriptor too short [ 369.450045][ T4337] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 8 [ 369.461718][ T4337] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 369.476407][ T4337] usb 4-1: string descriptor 0 read error: -22 [ 369.482731][ T4337] usb 4-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 369.513284][ T4337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.111740][ T9112] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 370.125472][ T4337] usb 4-1: invalid MIDI in EP 0 [ 370.167122][ T4337] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 370.209235][ T26] audit: type=1326 audit(1792709646.778:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 370.303517][ T26] audit: type=1326 audit(1792709646.778:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 370.358614][ T9126] udevd[9126]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.416955][ T26] audit: type=1326 audit(1792709646.818:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 370.503504][ T26] audit: type=1326 audit(1792709646.818:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 370.620116][ T26] audit: type=1326 audit(1792709646.818:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 370.752259][ T26] audit: type=1326 audit(1792709646.818:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 370.776808][ T26] audit: type=1326 audit(1792709646.818:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 370.801769][ T26] audit: type=1326 audit(1792709646.818:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 370.833384][ T26] audit: type=1326 audit(1792709646.818:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 371.397307][ T26] audit: type=1326 audit(1792709646.818:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 371.596525][ T9139] fuse: Bad value for 'fd' [ 372.509884][ T4344] usb 4-1: USB disconnect, device number 14 [ 372.845779][ T9153] loop2: detected capacity change from 0 to 256 [ 373.032395][ T9155] loop3: detected capacity change from 0 to 512 [ 373.240117][ T9155] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 373.249626][ T9155] FAT-fs (loop3): Filesystem has been set read-only [ 373.257931][ T9155] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 373.266444][ T9155] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 375.306551][ T9167] loop3: detected capacity change from 0 to 256 [ 376.183444][ T4337] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 376.387000][ T4337] usb 3-1: Using ep0 maxpacket: 16 [ 376.394452][ T4337] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.408678][ T4337] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.419044][ T4337] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 376.443104][ T4337] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.450262][ T4337] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 376.465049][ T4337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.482349][ T4337] usb 3-1: config 0 descriptor?? [ 376.632664][ T9177] loop3: detected capacity change from 0 to 1024 [ 376.641341][ T9177] EXT4-fs: Ignoring removed mblk_io_submit option [ 376.648524][ T9177] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 376.706689][ T9177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 376.732189][ T9177] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.901501][ T9177] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 2: comm syz.3.1465: lblock 2 mapped to illegal pblock 2 (length 4) [ 376.924411][ T4337] hid (null): report_id 24797 is invalid [ 376.931699][ T9177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 4 with error 117 [ 376.946915][ T9177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 376.946915][ T9177] [ 377.006402][ T5301] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 377.052066][ T5301] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 377.065017][ T5301] EXT4-fs (loop3): This should not happen!! Data will be lost [ 377.065017][ T5301] [ 377.080531][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 377.137260][ T9147] rxe_eth0 speed is unknown, defaulting to 1000 [ 377.159868][ T4337] usb 3-1: USB disconnect, device number 18 [ 377.436447][ T9147] wg1 speed is unknown, defaulting to 1000 [ 377.806682][ T4379] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 378.559555][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.566979][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.654404][ T9201] loop3: detected capacity change from 0 to 8 [ 378.661423][ T9201] squashfs: Unknown parameter '' [ 378.673329][ T4379] usb 2-1: Using ep0 maxpacket: 32 [ 378.686424][ T4379] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 378.713946][ T4379] usb 2-1: config 0 has no interface number 0 [ 378.734922][ T4379] usb 2-1: config 0 interface 184 has no altsetting 0 [ 378.755181][ T4379] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 378.774842][ T4379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.782910][ T4379] usb 2-1: Product: syz [ 378.819189][ T4379] usb 2-1: Manufacturer: syz [ 378.831042][ T4379] usb 2-1: SerialNumber: syz [ 378.838426][ T4379] usb 2-1: config 0 descriptor?? [ 378.868841][ T4379] smsc75xx v1.0.0 [ 379.969044][ T4379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 379.980324][ T4379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 380.403546][ T9229] rxe_eth0 speed is unknown, defaulting to 1000 [ 380.883719][ T4337] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 381.115383][ T4337] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.173308][ T4337] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.249263][ T9223] device syzkaller0 entered promiscuous mode [ 381.262732][ T4379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 381.273795][ T4337] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.274454][ T4379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 381.290558][ T4379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 381.300527][ T4379] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 381.320984][ T4379] usb 2-1: USB disconnect, device number 7 [ 381.328611][ T4337] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 381.393368][ T4337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.452070][ T4337] usb 4-1: config 0 descriptor?? [ 382.200722][ T4337] hid-generic 0003:1B1C:0A55.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:0a55] on usb-dummy_hcd.3-1/input0 [ 382.419758][ T4379] usb 4-1: USB disconnect, device number 15 [ 382.455159][ T9248] fuse: Bad value for 'fd' [ 382.528486][ T9246] fido_id[9246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 382.622732][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 388.845450][ T9229] wg1 speed is unknown, defaulting to 1000 [ 389.224252][ T9305] fuse: Bad value for 'fd' [ 389.383704][ T9314] loop3: detected capacity change from 0 to 764 [ 389.535464][ T9314] Symlink component flag not implemented [ 389.642037][ T9314] Symlink component flag not implemented (15) [ 390.655012][ T9328] loop4: detected capacity change from 0 to 128 [ 390.721212][ T9328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 390.761287][ T9328] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.045186][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 393.643116][ T9371] fuse: Bad value for 'fd' [ 394.870086][ T9384] loop3: detected capacity change from 0 to 8 [ 395.009798][ T9384] unable to read inode lookup table [ 395.107592][ T9388] tap0: tun_chr_ioctl cmd 2214630434 [ 395.483795][ T9403] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 396.239276][ T9413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'. [ 402.064771][ T9473] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 403.143327][ T9481] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 403.537362][ T9486] loop4: detected capacity change from 0 to 512 [ 403.604510][ T9486] EXT4-fs: Ignoring removed orlov option [ 403.610300][ T9486] EXT4-fs: Ignoring removed oldalloc option [ 403.658185][ T9488] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 403.721557][ T9486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 404.250313][ T9486] EXT4-fs (loop4): failed to initialize system zone (-117) [ 404.691296][ T9486] EXT4-fs (loop4): mount failed [ 404.964512][ T9499] loop1: detected capacity change from 0 to 128 [ 405.057959][ T9499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 405.081358][ T9504] loop3: detected capacity change from 0 to 512 [ 405.109062][ T9499] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 405.238950][ T9504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.287638][ T9504] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 405.379005][ T9504] EXT4-fs (loop3): 1 truncate cleaned up [ 405.403561][ T9504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 405.440854][ T9507] loop2: detected capacity change from 0 to 512 [ 405.730462][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 405.742392][ T9507] FAT-fs (loop2): bogus logical sector size 0 [ 405.798294][ T9507] FAT-fs (loop2): Can't find a valid FAT filesystem [ 406.102376][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 406.187112][ T9520] 9pnet_fd: Insufficient options for proto=fd [ 406.664847][ T9519] loop1: detected capacity change from 0 to 256 [ 407.672857][ T9567] loop4: detected capacity change from 0 to 4096 [ 407.731079][ T9567] ext4: Bad value for 'barrier' [ 409.293798][ T9592] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 410.841727][ T9603] loop2: detected capacity change from 0 to 512 [ 410.918622][ T9608] loop1: detected capacity change from 0 to 512 [ 410.934654][ T9600] loop4: detected capacity change from 0 to 1024 [ 410.938879][ T9608] EXT4-fs: Ignoring removed orlov option [ 410.953390][ T9603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.967381][ T9603] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 410.995193][ T9608] EXT4-fs: Ignoring removed oldalloc option [ 411.016578][ T9608] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 411.111410][ T9603] EXT4-fs (loop2): 1 truncate cleaned up [ 411.119114][ T9608] EXT4-fs (loop1): failed to initialize system zone (-117) [ 411.125351][ T9603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 411.127113][ T9608] EXT4-fs (loop1): mount failed [ 411.565437][ T9620] 9pnet_fd: Insufficient options for proto=fd [ 411.814951][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 412.272130][ T9633] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 412.280827][ T9627] loop3: detected capacity change from 0 to 2048 [ 412.346489][ T9627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.458032][ T9627] UDF-fs: bad mount option "xœìÝËk[Ù" or missing value [ 412.796142][ T9637] loop3: detected capacity change from 0 to 256 [ 414.043218][ T9651] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 414.697852][ T9665] loop2: detected capacity change from 0 to 512 [ 414.785369][ T9665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.840222][ T9665] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 415.031006][ T9665] EXT4-fs (loop2): 1 truncate cleaned up [ 415.098414][ T9665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 415.760821][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 415.921352][ T7352] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 416.786814][ T7352] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.800601][ T7352] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.818037][ T7352] usb 2-1: config 0 interface 0 has no altsetting 0 [ 416.825755][ T7352] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 416.835867][ T7352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.868543][ T9690] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1590'. [ 417.005199][ T7352] usb 2-1: config 0 descriptor?? [ 417.548377][ T7352] hid-picolcd 0003:04D8:F002.0008: unbalanced collection at end of report description [ 417.627897][ T7352] hid-picolcd 0003:04D8:F002.0008: device report parse failed [ 417.636705][ T7352] hid-picolcd: probe of 0003:04D8:F002.0008 failed with error -22 [ 417.728267][ T7352] usb 2-1: USB disconnect, device number 8 [ 417.804167][ T9693] loop2: detected capacity change from 0 to 512 [ 417.832746][ T9693] EXT4-fs: Ignoring removed oldalloc option [ 417.861415][ T9693] ext4: Unknown parameter 'fsuuid' [ 417.994529][ T9502] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.176365][ T9707] loop3: detected capacity change from 0 to 512 [ 418.545345][ T9720] loop3: detected capacity change from 0 to 512 [ 418.559833][ T9720] EXT4-fs: Ignoring removed orlov option [ 418.569490][ T9720] EXT4-fs: Ignoring removed oldalloc option [ 418.887721][ T9720] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 419.092298][ T9720] EXT4-fs (loop3): failed to initialize system zone (-117) [ 419.413601][ T9720] EXT4-fs (loop3): mount failed [ 420.036889][ T9732] 9pnet_fd: Insufficient options for proto=fd [ 420.858776][ T9738] ip_tables: iptables: counters copy to user failed while replacing table [ 420.884683][ T9737] loop4: detected capacity change from 0 to 256 [ 421.959391][ T9748] loop2: detected capacity change from 0 to 512 [ 421.995169][ T9748] EXT4-fs: Ignoring removed nobh option [ 422.186948][ T9748] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 422.224543][ T9748] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.290320][ T9748] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.1609: corrupted inode contents [ 422.351446][ T9748] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #2: comm syz.2.1609: mark_inode_dirty error [ 422.398233][ T9748] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.1609: corrupted inode contents [ 422.432302][ T9748] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1609: mark_inode_dirty error [ 422.455269][ T9771] loop3: detected capacity change from 0 to 256 [ 422.500521][ T9771] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 422.644429][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 422.644444][ T26] audit: type=1800 audit(1792709699.218:89): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1614" name="file1" dev="loop3" ino=1048678 res=0 errno=0 [ 422.725898][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 422.754047][ T9771] loop3: detected capacity change from 256 to 0 [ 423.116829][ T9785] syz.3.1614: attempt to access beyond end of device [ 423.116829][ T9785] loop3: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 423.130587][ T9785] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 424.248997][ T9771] syz.3.1614: attempt to access beyond end of device [ 424.248997][ T9771] loop3: rw=0, sector=184, nr_sectors = 4101 limit=0 [ 424.282207][ T9791] loop4: detected capacity change from 0 to 256 [ 424.401324][ T9794] ip_tables: iptables: counters copy to user failed while replacing table [ 425.589753][ T9813] loop2: detected capacity change from 0 to 512 [ 425.668454][ T9813] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 425.759992][ T4272] syz-executor: attempt to access beyond end of device [ 425.759992][ T4272] loop3: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 425.790397][ T9813] EXT4-fs (loop2): 1 truncate cleaned up [ 425.813458][ T9813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 425.831986][ T4272] syz-executor: attempt to access beyond end of device [ 425.831986][ T4272] loop3: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 425.851429][ T4272] syz-executor: attempt to access beyond end of device [ 425.851429][ T4272] loop3: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 425.865550][ T4272] syz-executor: attempt to access beyond end of device [ 425.865550][ T4272] loop3: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 425.880067][ T4272] syz-executor: attempt to access beyond end of device [ 425.880067][ T4272] loop3: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 425.898168][ T4272] syz-executor: attempt to access beyond end of device [ 425.898168][ T4272] loop3: rw=524288, sector=165, nr_sectors = 1 limit=0 [ 425.912345][ T4272] syz-executor: attempt to access beyond end of device [ 425.912345][ T4272] loop3: rw=524288, sector=166, nr_sectors = 1 limit=0 [ 425.926813][ T4272] syz-executor: attempt to access beyond end of device [ 425.926813][ T4272] loop3: rw=524288, sector=167, nr_sectors = 1 limit=0 [ 426.032717][ T29] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 426.059740][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 426.084544][ T4272] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 426.282794][ T9832] loop2: detected capacity change from 0 to 256 [ 426.544280][ T9836] netlink: 'syz.0.1631': attribute type 1 has an invalid length. [ 426.574850][ T9834] loop1: detected capacity change from 0 to 512 [ 426.582169][ T9834] EXT4-fs: Ignoring removed oldalloc option [ 427.280068][ T9834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 427.499965][ T9842] loop4: detected capacity change from 0 to 512 [ 427.577395][ T9842] EXT4-fs: Ignoring removed orlov option [ 427.583157][ T9842] EXT4-fs: Ignoring removed oldalloc option [ 427.632400][ T6313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.686060][ T9842] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 427.703511][ T9834] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 427.787179][ T9842] EXT4-fs (loop4): failed to initialize system zone (-117) [ 427.821650][ T9842] EXT4-fs (loop4): mount failed [ 427.903680][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 428.203583][ T6313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.346272][ T9853] 9pnet_fd: Insufficient options for proto=fd [ 428.542310][ T6313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.745423][ T6313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.023005][ T9860] device syzkaller0 entered promiscuous mode [ 429.445725][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 429.455948][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 429.465714][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 429.489962][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 429.501685][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 429.512828][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.640387][ T9881] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 431.682011][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 432.522272][ T9899] loop1: detected capacity change from 0 to 512 [ 432.529716][ T9899] EXT4-fs: Ignoring removed orlov option [ 432.535623][ T9899] EXT4-fs: Ignoring removed oldalloc option [ 432.553055][ T9899] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 432.569704][ T9899] EXT4-fs (loop1): failed to initialize system zone (-117) [ 432.577903][ T9899] EXT4-fs (loop1): mount failed [ 432.974496][ T9902] 9pnet_fd: Insufficient options for proto=fd [ 433.677740][ T9906] loop1: detected capacity change from 0 to 512 [ 433.753302][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 433.789754][ T9906] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 433.799438][ T9906] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.018671][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 434.670744][ T9873] rxe_eth0 speed is unknown, defaulting to 1000 [ 434.804687][ T9919] loop1: detected capacity change from 0 to 1024 [ 435.614230][ T9924] loop4: detected capacity change from 0 to 512 [ 435.626686][ T9924] ext4: Unknown parameter 'obj_type' [ 436.243816][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 436.273761][ T9919] hfsplus: invalid length 1033 has been corrected to 255 [ 436.284075][ T9919] hfsplus: invalid length 1033 has been corrected to 255 [ 436.295603][ T9515] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 436.396117][ T9919] hfsplus: invalid length 1033 has been corrected to 255 [ 436.454000][ T9919] hfsplus: invalid length 1033 has been corrected to 255 [ 436.824819][ T11] hfsplus: invalid length 1033 has been corrected to 255 [ 436.832535][ T11] hfsplus: b-tree write err: -5, ino 25 [ 436.873836][ T11] hfsplus: b-tree write err: -5, ino 4 [ 436.879521][ T11] hfsplus: invalid length 1033 has been corrected to 255 [ 436.898268][ T11] hfsplus: b-tree write err: -5, ino 2 [ 437.012773][ T9933] loop2: detected capacity change from 0 to 4096 [ 437.023579][ T9873] wg1 speed is unknown, defaulting to 1000 [ 437.122815][ T9933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 437.202236][ T9933] EXT4-fs (loop2): shut down requested (2) [ 437.536751][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 438.013666][ T9953] device syzkaller0 entered promiscuous mode [ 438.314794][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 439.515256][ T9976] loop1: detected capacity change from 0 to 512 [ 439.524183][ T9976] ext4: Unknown parameter 'obj_type' [ 439.801739][ T9502] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 439.880525][ T9978] loop4: detected capacity change from 0 to 1024 [ 439.893487][ T9978] ext4: Unknown parameter 'pcr' [ 440.061374][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.067804][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.505666][T10025] device syzkaller0 entered promiscuous mode [ 446.623852][ T6313] IPVS: stopping master sync thread 4720 ... [ 446.999957][T10039] loop2: detected capacity change from 0 to 512 [ 447.024367][T10039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.065637][T10039] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 447.127631][T10039] EXT4-fs (loop2): 1 truncate cleaned up [ 447.143463][T10039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 447.388408][ T9873] chnl_net:caif_netlink_parms(): no params data found [ 447.432783][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 448.332796][T10093] loop1: detected capacity change from 0 to 512 [ 448.459997][T10093] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 448.498269][T10093] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.575621][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.626472][ T9873] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.706190][ T9873] device bridge_slave_0 entered promiscuous mode [ 448.774458][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.852058][ T9873] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.893757][T10093] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.1693: Invalid inode table block 403808086 in block_group 0 [ 448.910314][T10093] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 448.974485][ T9873] device bridge_slave_1 entered promiscuous mode [ 449.151358][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 449.269636][ T9873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.395473][ T9873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.536191][T10110] loop1: detected capacity change from 0 to 8 [ 449.671260][ T9873] team0: Port device team_slave_0 added [ 449.789322][ T9873] team0: Port device team_slave_1 added [ 451.105114][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.112140][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.138380][T10116] loop4: detected capacity change from 0 to 512 [ 451.145327][T10116] ext4: Unknown parameter 'obj_type' [ 451.163382][ T9873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.186781][T10017] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 451.272388][ T6313] device hsr_slave_0 left promiscuous mode [ 451.313831][ T6313] device hsr_slave_1 left promiscuous mode [ 451.366230][T10122] loop1: detected capacity change from 0 to 512 [ 451.373811][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.403368][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.425527][T10122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 451.452612][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.483687][T10122] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 451.509898][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.543345][ T6313] device bridge_slave_1 left promiscuous mode [ 451.563452][T10122] EXT4-fs (loop1): 1 truncate cleaned up [ 451.569180][T10122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 451.632834][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.691029][ T6313] device bridge_slave_0 left promiscuous mode [ 451.700243][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.049457][ T6313] device veth0_macvtap left promiscuous mode [ 452.068963][ T6313] device veth1_vlan left promiscuous mode [ 452.099411][ T6313] device veth0_vlan left promiscuous mode [ 455.708678][ T6313] team0 (unregistering): Port device team_slave_1 removed [ 455.985103][ T6313] team0 (unregistering): Port device team_slave_0 removed [ 456.133538][ T6313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.263809][ T6313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.571564][ T6313] bond0 (unregistering): Released all slaves [ 456.614013][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.621041][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.647286][ T9873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.698843][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 456.710111][ T9873] device hsr_slave_0 entered promiscuous mode [ 456.758377][ T9873] device hsr_slave_1 entered promiscuous mode [ 456.772186][ T9873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.796814][ T9873] Cannot create hsr debugfs directory [ 458.199942][ T9873] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 458.276419][ T9873] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.415819][ T9873] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.443070][T10217] loop4: detected capacity change from 0 to 4096 [ 458.510584][ T9873] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.567720][T10229] loop1: detected capacity change from 0 to 512 [ 458.655140][T10217] ext4: Bad value for 'barrier' [ 458.678140][T10229] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 458.687047][T10229] FAT-fs (loop1): Filesystem has been set read-only [ 458.694140][T10229] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 458.702304][T10229] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 459.513379][ T4337] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 459.735992][ T4337] usb 3-1: unable to get BOS descriptor or descriptor too short [ 459.752385][ T9873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.782702][ T4337] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 459.901701][ T4337] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 459.939828][ T9873] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.977100][ T4337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.037475][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.049568][ T4337] usb 3-1: Product: syz [ 460.054751][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.071454][ T4337] usb 3-1: Manufacturer: syz [ 460.089482][ T4337] usb 3-1: SerialNumber: syz [ 460.168558][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.224788][T10237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.240595][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.298937][ T6313] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.306154][ T6313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.373980][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.394527][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.405430][ T6313] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.412585][ T6313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.448949][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.531711][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.580244][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.598498][ T4337] usb 3-1: USB disconnect, device number 19 [ 460.639263][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.706062][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.724992][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.749913][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.762295][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.805430][T10243] device syzkaller0 entered promiscuous mode [ 460.824972][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.843972][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.867860][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.916221][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.943964][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 461.276858][T10270] loop2: detected capacity change from 0 to 2048 [ 461.380860][T10270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 461.550485][T10270] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 461.617080][T10270] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 461.637158][T10270] EXT4-fs (loop2): This should not happen!! Data will be lost [ 461.637158][T10270] [ 461.717748][T10270] EXT4-fs (loop2): Total free blocks count 0 [ 461.732588][T10270] EXT4-fs (loop2): Free/Dirty block details [ 461.858986][T10287] rxe_eth0 speed is unknown, defaulting to 1000 [ 462.303970][T10287] wg1 speed is unknown, defaulting to 1000 [ 462.495846][T10285] netlink: 'syz.1.1722': attribute type 4 has an invalid length. [ 462.543299][T10270] EXT4-fs (loop2): free_blocks=4096 [ 462.573578][T10270] EXT4-fs (loop2): dirty_blocks=48 [ 462.593287][T10270] EXT4-fs (loop2): Block reservation details [ 462.619636][T10270] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 463.014914][ T29] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 463.445580][T10301] infiniband syz0: set active [ 463.756989][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.779122][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.797096][ T4336] wg1 speed is unknown, defaulting to 1000 [ 463.821634][ T9873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.997025][T10308] device syzkaller0 entered promiscuous mode [ 464.013558][ T7] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 464.205555][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 464.223947][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 464.244532][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 464.265934][ T7] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 464.289768][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.309187][ T7] usb 2-1: Product: syz [ 464.318490][ T7] usb 2-1: Manufacturer: syz [ 464.323136][ T7] usb 2-1: SerialNumber: syz [ 465.287246][T10335] loop4: detected capacity change from 0 to 512 [ 465.336627][T10335] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 465.345533][T10335] FAT-fs (loop4): Filesystem has been set read-only [ 465.352536][T10335] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 465.361040][T10335] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 466.640421][ T7] usb 2-1: MIDIStreaming interface descriptor not found [ 466.676743][ T7] usb 2-1: too many endpoints [ 466.976402][ T7] usb 2-1: USB disconnect, device number 9 [ 467.470495][T10344] loop4: detected capacity change from 0 to 512 [ 467.584874][T10344] FAT-fs (loop4): bogus logical sector size 0 [ 467.613692][T10344] FAT-fs (loop4): Can't find a valid FAT filesystem [ 467.727502][T10195] udevd[10195]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.959958][T10357] netlink: 'syz.4.1736': attribute type 1 has an invalid length. [ 468.622673][T10364] loop4: detected capacity change from 0 to 128 [ 468.665399][T10364] EXT4-fs: Ignoring removed i_version option [ 468.753005][T10364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 468.811356][T10364] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 468.978210][T10364] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 469.129157][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 470.898346][T10374] device syzkaller0 entered promiscuous mode [ 473.608674][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 473.692129][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 473.732859][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 473.810803][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 473.835573][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 473.875108][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.896524][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.090373][T10400] loop2: detected capacity change from 0 to 1024 [ 474.256350][T10400] ext4: Unknown parameter 'pcr' [ 475.095022][T10402] loop4: detected capacity change from 0 to 512 [ 475.228277][T10402] FAT-fs (loop4): bogus logical sector size 0 [ 475.241479][T10412] loop1: detected capacity change from 0 to 1024 [ 475.274099][T10402] FAT-fs (loop4): Can't find a valid FAT filesystem [ 475.304550][T10412] EXT4-fs: Ignoring removed bh option [ 475.339136][ T9873] device veth0_vlan entered promiscuous mode [ 475.405932][T10412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 475.458493][ T9873] device veth1_vlan entered promiscuous mode [ 475.504155][T10412] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #12: block 7: comm syz.1.1746: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 475.546498][T10412] EXT4-fs (loop1): Remounting filesystem read-only [ 475.565884][T10412] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 7: comm syz.1.1746: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 475.641765][T10412] EXT4-fs (loop1): Remounting filesystem read-only [ 475.674115][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.692905][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.718536][ T9873] device veth0_macvtap entered promiscuous mode [ 475.736502][ T9873] device veth1_macvtap entered promiscuous mode [ 475.882156][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 475.921853][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.010789][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.070035][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.454138][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.853382][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.963361][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.974777][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.985410][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.015439][ T9873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.045883][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 477.064623][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 477.079162][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.095433][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.126045][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.171233][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.220965][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.270800][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.342397][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.413677][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.460193][ T9873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.503465][ T7] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 477.517259][ T9873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.583770][ T9873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.678624][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.716408][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.718115][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 477.771976][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 477.779131][ T9873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.818887][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 477.833643][ T9873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.873298][ T9873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.882064][ T9873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.885125][ T7] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 477.950584][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.968982][ T7] usb 2-1: Product: syz [ 477.982724][ T7] usb 2-1: Manufacturer: syz [ 477.998047][ T7] usb 2-1: SerialNumber: syz [ 478.253721][ T7] usb 2-1: MIDIStreaming interface descriptor not found [ 478.281182][ T7] usb 2-1: too many endpoints [ 478.463503][ T7] usb 2-1: USB disconnect, device number 10 [ 478.514714][T10484] loop4: detected capacity change from 0 to 512 [ 478.551621][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.555652][T10482] device syzkaller0 entered promiscuous mode [ 478.565961][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.584768][T10481] udevd[10481]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.669410][T10484] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1754: invalid indirect mapped block 4294967295 (level 1) [ 478.685967][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.719390][T10484] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1754: invalid indirect mapped block 4294967295 (level 1) [ 478.736033][T10484] EXT4-fs (loop4): 2 truncates cleaned up [ 478.741822][T10484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 478.804095][ T6303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.812035][ T6303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.865059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.047497][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 479.099957][T10497] loop5: detected capacity change from 0 to 256 [ 479.984690][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 480.992194][T10507] loop4: detected capacity change from 0 to 512 [ 481.004179][T10507] ext4: Unknown parameter 'obj_type' [ 481.673744][T10488] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 482.056155][T10510] loop1: detected capacity change from 0 to 4096 [ 482.234468][T10510] ext4: Bad value for 'barrier' [ 486.255727][T10564] loop2: detected capacity change from 0 to 512 [ 486.340895][T10564] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 486.349880][T10564] FAT-fs (loop2): Filesystem has been set read-only [ 486.358050][T10564] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 486.366573][T10564] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 486.597486][T10564] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 487.473234][ T4351] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 487.736061][ T4351] usb 6-1: unable to get BOS descriptor or descriptor too short [ 487.768238][T10580] netlink: 'syz.4.1759': attribute type 1 has an invalid length. [ 487.790575][ T4351] usb 6-1: not running at top speed; connect to a high speed hub [ 487.867504][ T4351] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 488.858792][ T4351] usb 6-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 488.971835][ T4351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.073230][ T4351] usb 6-1: Product: syz [ 489.077480][ T4351] usb 6-1: Manufacturer: syz [ 489.082114][ T4351] usb 6-1: SerialNumber: syz [ 489.543822][ T4351] usb 6-1: can't set config #1, error -71 [ 489.551357][ T4351] usb 6-1: USB disconnect, device number 2 [ 489.733048][T10592] loop2: detected capacity change from 0 to 512 [ 489.796227][T10592] EXT4-fs: Ignoring removed orlov option [ 489.833453][T10592] EXT4-fs: Ignoring removed oldalloc option [ 489.850827][T10594] loop5: detected capacity change from 0 to 256 [ 489.883949][T10592] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 489.985401][T10592] EXT4-fs (loop2): failed to initialize system zone (-117) [ 489.992773][T10592] EXT4-fs (loop2): mount failed [ 490.606238][T10605] 9pnet_fd: Insufficient options for proto=fd [ 491.366555][T10618] loop4: detected capacity change from 0 to 2048 [ 491.462929][T10618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.621493][T10629] netlink: 'syz.0.1780': attribute type 1 has an invalid length. [ 492.892002][T10644] loop2: detected capacity change from 0 to 512 [ 492.971547][T10644] EXT4-fs: Ignoring removed orlov option [ 492.977768][T10644] EXT4-fs: Ignoring removed oldalloc option [ 493.133383][T10644] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 493.206701][T10644] EXT4-fs (loop2): failed to initialize system zone (-117) [ 493.250571][T10644] EXT4-fs (loop2): mount failed [ 494.038782][T10644] 9pnet_fd: Insufficient options for proto=fd [ 494.323864][T10659] netlink: 'syz.5.1787': attribute type 1 has an invalid length. [ 495.018997][T10670] netlink: 'syz.1.1792': attribute type 1 has an invalid length. [ 496.384460][ T37] kernel write not supported for file /33/attr/prev (pid: 37 comm: kworker/1:1) [ 496.407746][T10679] netlink: 'syz.4.1794': attribute type 29 has an invalid length. [ 496.665446][T10679] netlink: 'syz.4.1794': attribute type 29 has an invalid length. [ 496.690452][T10679] netlink: 'syz.4.1794': attribute type 29 has an invalid length. [ 497.320205][T10688] loop5: detected capacity change from 0 to 256 [ 497.377502][T10693] loop1: detected capacity change from 0 to 512 [ 497.399492][T10693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.506601][T10693] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 497.570696][T10693] EXT4-fs (loop1): 1 truncate cleaned up [ 497.617695][T10693] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 498.756751][T10711] loop2: detected capacity change from 0 to 1024 [ 499.442752][T10716] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 499.470350][T10711] ext4: Unknown parameter 'pcr' [ 499.926197][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1805'. [ 499.994190][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1805'. [ 500.648205][T10743] netlink: 'syz.4.1809': attribute type 29 has an invalid length. [ 500.668347][T10743] netlink: 'syz.4.1809': attribute type 29 has an invalid length. [ 500.674116][T10743] netlink: 'syz.4.1809': attribute type 29 has an invalid length. [ 500.689446][T10722] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 501.123352][T10745] loop2: detected capacity change from 0 to 2048 [ 501.436798][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.436908][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.538683][ T3598] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 501.654185][T10745] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 501.749236][ T3598] usb 6-1: config 0 has an invalid interface number: 60 but max is 0 [ 501.768383][ T3598] usb 6-1: config 0 has no interface number 0 [ 501.788654][ T3598] usb 6-1: config 0 interface 60 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 0 [ 501.843241][ T3598] usb 6-1: config 0 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 8 [ 501.893560][ T3598] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 501.923337][ T3598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.955955][ T3598] usb 6-1: config 0 descriptor?? [ 501.963855][T10742] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 502.060209][T10754] loop4: detected capacity change from 0 to 4096 [ 502.100670][T10754] ext4: Bad value for 'barrier' [ 502.110838][ T26] audit: type=1326 audit(1792709778.678:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 502.148405][ T26] audit: type=1326 audit(1792709778.678:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 502.877653][ T26] audit: type=1326 audit(1792709778.718:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 503.168871][ T26] audit: type=1326 audit(1792709778.718:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 503.279222][ T26] audit: type=1326 audit(1792709778.718:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 503.359238][T10770] loop2: detected capacity change from 0 to 256 [ 504.343552][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 504.715347][ T3598] usb 6-1: string descriptor 0 read error: -71 [ 504.783555][ T3598] ftdi_sio 6-1:0.60: FTDI USB Serial Device converter detected [ 504.785816][ T26] audit: type=1326 audit(1792709778.808:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 504.844579][ T3598] usb 6-1: Detected SIO [ 504.848822][ T3598] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 9 [ 504.915510][ T3598] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 504.946981][ T26] audit: type=1326 audit(1792709778.808:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 505.014590][ T3598] usb 6-1: USB disconnect, device number 3 [ 505.113312][ T26] audit: type=1326 audit(1792709778.808:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 505.162928][ T3598] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 505.256671][ T26] audit: type=1326 audit(1792709778.808:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 505.280480][ T3598] ftdi_sio 6-1:0.60: device disconnected [ 505.285113][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 505.671741][ T26] audit: type=1326 audit(1792709778.808:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987c19f559 code=0x7ffc0000 [ 505.729315][T10784] cfg80211: Invalid regulatory domain detected: BB [ 505.955445][T10786] netlink: 'syz.0.1821': attribute type 29 has an invalid length. [ 506.050186][T10786] netlink: 'syz.0.1821': attribute type 29 has an invalid length. [ 506.180249][T10789] loop1: detected capacity change from 0 to 512 [ 506.197192][T10795] netlink: 'syz.0.1821': attribute type 29 has an invalid length. [ 506.301513][T10789] FAT-fs (loop1): bogus logical sector size 0 [ 506.320096][T10789] FAT-fs (loop1): Can't find a valid FAT filesystem [ 506.708675][T10803] loop1: detected capacity change from 0 to 512 [ 506.758619][T10803] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 506.774354][T10803] System zones: 1-12 [ 506.813946][T10803] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1825: missing EA_INODE flag [ 506.860002][T10803] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1825: error while reading EA inode 12 err=-117 [ 506.891017][T10803] EXT4-fs (loop1): 1 orphan inode deleted [ 506.898294][T10803] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 509.417114][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 510.495870][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 510.771167][T10845] loop4: detected capacity change from 0 to 256 [ 512.370974][T10869] netlink: 'syz.4.1837': attribute type 29 has an invalid length. [ 512.475494][T10870] loop1: detected capacity change from 0 to 1024 [ 513.229897][T10869] netlink: 'syz.4.1837': attribute type 29 has an invalid length. [ 513.241385][T10870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 513.543756][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 513.543773][ T26] audit: type=1800 audit(1792709790.088:104): pid=10867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1835" name="file1" dev="loop1" ino=839 res=0 errno=0 [ 513.593125][T10871] loop2: detected capacity change from 0 to 512 [ 513.683522][T10871] FAT-fs (loop2): bogus logical sector size 0 [ 513.738091][T10871] FAT-fs (loop2): Can't find a valid FAT filesystem [ 513.820271][T10886] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 515.921507][T10902] device syzkaller0 entered promiscuous mode [ 517.277085][T10936] netlink: 'syz.5.1849': attribute type 29 has an invalid length. [ 517.390496][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 518.360597][T10950] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 518.412296][T10952] netlink: 'syz.4.1853': attribute type 1 has an invalid length. [ 521.788668][T10936] netlink: 'syz.5.1849': attribute type 29 has an invalid length. [ 522.045897][T10974] device syzkaller0 entered promiscuous mode [ 522.234289][T10986] loop1: detected capacity change from 0 to 256 [ 522.791078][T10986] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 523.747371][T11018] loop2: detected capacity change from 0 to 256 [ 523.804882][T11018] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 523.948928][T11022] fuse: Bad value for 'fd' [ 523.956031][ T4351] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 524.007321][T11018] exFAT-fs (loop2): hint_cluster is invalid (17) [ 524.054817][ T4351] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 524.151073][T11020] loop5: detected capacity change from 0 to 4096 [ 524.181122][T11020] EXT4-fs: Ignoring removed orlov option [ 524.298223][T11020] EXT4-fs (loop5): Test dummy encryption mode enabled [ 524.408912][T11034] device syzkaller0 entered promiscuous mode [ 524.582018][T11020] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 525.169954][T11027] fido_id[11027]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 525.436498][T11050] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 525.483732][T11050] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 525.494605][ T9873] EXT4-fs (loop5): unmounting filesystem. [ 525.523720][T11052] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 525.605469][T11044] netlink: 'syz.2.1870': attribute type 1 has an invalid length. [ 526.723267][ T4344] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 526.773599][T11061] loop1: detected capacity change from 0 to 512 [ 526.863123][T11061] FAT-fs (loop1): bogus logical sector size 0 [ 526.869441][T11061] FAT-fs (loop1): Can't find a valid FAT filesystem [ 526.925016][ T4344] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.974926][ T4344] usb 3-1: not running at top speed; connect to a high speed hub [ 527.013771][ T4344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 527.027834][T11075] device syzkaller0 entered promiscuous mode [ 527.069582][ T4344] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 527.099176][ T4344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.131636][ T4344] usb 3-1: Product: syz [ 527.138688][ T4344] usb 3-1: Manufacturer: syz [ 527.156486][ T4344] usb 3-1: SerialNumber: syz [ 527.282004][T11081] loop1: detected capacity change from 0 to 1024 [ 527.368792][T11081] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 527.432943][ T4344] usb 3-1: MIDIStreaming interface descriptor not found [ 527.450309][ T4344] usb 3-1: too many endpoints [ 527.491680][ T4344] usb 3-1: USB disconnect, device number 20 [ 527.564814][T11081] EXT4-fs error (device loop1): ext4_read_inline_dir:1628: inode #12: block 7: comm syz.1.1879: path /376/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=13, rec_len=0, size=60 fake=0 [ 527.755071][T11088] udevd[11088]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.123013][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 528.299357][T11102] device syzkaller0 entered promiscuous mode [ 528.436656][T11110] netlink: 'syz.2.1885': attribute type 29 has an invalid length. [ 528.456574][T11110] netlink: 'syz.2.1885': attribute type 29 has an invalid length. [ 528.495094][T11111] netlink: 'syz.2.1885': attribute type 29 has an invalid length. [ 528.534789][T11110] netlink: 'syz.2.1885': attribute type 29 has an invalid length. [ 528.657832][T11113] loop1: detected capacity change from 0 to 256 [ 528.830494][T11119] loop5: detected capacity change from 0 to 256 [ 528.948349][T11119] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 530.813933][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1892'. [ 532.338383][T11147] loop5: detected capacity change from 0 to 512 [ 532.345316][T11147] ext4: Unknown parameter 'obj_type' [ 532.481175][T11090] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 535.039101][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 536.986909][T11195] loop2: detected capacity change from 0 to 512 [ 536.993911][T11195] ext4: Unknown parameter 'obj_type' [ 537.108039][T11085] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 537.405077][T11231] device syzkaller0 entered promiscuous mode [ 537.497552][T11232] loop4: detected capacity change from 0 to 512 [ 537.573265][T11232] FAT-fs (loop4): bogus logical sector size 0 [ 537.611334][T11232] FAT-fs (loop4): Can't find a valid FAT filesystem [ 538.147111][T11251] loop5: detected capacity change from 0 to 512 [ 539.223350][T11260] device syzkaller0 entered promiscuous mode [ 539.239676][T11251] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 539.284847][T11251] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.077433][ T9873] EXT4-fs (loop5): unmounting filesystem. [ 540.474734][T11276] loop2: detected capacity change from 0 to 512 [ 540.511895][T11276] EXT4-fs: Ignoring removed orlov option [ 540.603741][T11276] EXT4-fs: Ignoring removed oldalloc option [ 541.563476][T11282] loop5: detected capacity change from 0 to 512 [ 541.570399][T11282] ext4: Unknown parameter 'obj_type' [ 541.610262][T11276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 541.653845][T11284] VFS: Lookup of 'syz0' in fuse fuse would have caused loop [ 541.727195][T11090] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 541.831235][T11276] EXT4-fs (loop2): failed to initialize system zone (-117) [ 542.013402][T11276] EXT4-fs (loop2): mount failed [ 542.043345][ T9597] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 542.237513][T11292] device syzkaller0 entered promiscuous mode [ 542.244036][ T9597] usb 2-1: Using ep0 maxpacket: 32 [ 542.252474][ T9597] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 542.494327][ T9597] usb 2-1: config 0 has no interface number 0 [ 542.503347][ T9597] usb 2-1: config 0 interface 184 has no altsetting 0 [ 542.526809][ T9597] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 542.612064][T11295] 9pnet_fd: Insufficient options for proto=fd [ 542.977032][ T9597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.993204][ T9597] usb 2-1: Product: syz [ 542.997441][ T9597] usb 2-1: Manufacturer: syz [ 543.002098][ T9597] usb 2-1: SerialNumber: syz [ 543.043931][ T9597] usb 2-1: config 0 descriptor?? [ 543.081172][ T9597] smsc75xx v1.0.0 [ 543.659875][ T9597] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 543.693746][ T9597] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 545.087398][T11318] loop4: detected capacity change from 0 to 256 [ 545.136760][ T9597] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 545.178807][ T9597] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 545.209272][ T9597] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 545.274022][ T9597] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 545.317178][ T9597] usb 2-1: USB disconnect, device number 11 [ 547.283389][T11332] loop5: detected capacity change from 0 to 512 [ 547.284061][T11332] ext4: Unknown parameter 'obj_type' [ 547.501893][T11085] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 547.960417][T11341] loop1: detected capacity change from 0 to 256 [ 547.967400][T11340] loop4: detected capacity change from 0 to 1024 [ 547.995751][T11340] ext4: Unknown parameter 'pcr' [ 548.434944][T11349] loop4: detected capacity change from 0 to 2048 [ 549.379854][T11342] device syzkaller0 entered promiscuous mode [ 550.061620][T11365] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1940'. [ 550.198944][T11370] loop2: detected capacity change from 0 to 128 [ 552.205380][T11384] loop5: detected capacity change from 0 to 512 [ 552.212350][T11384] ext4: Unknown parameter 'obj_type' [ 552.317515][T11387] loop1: detected capacity change from 0 to 256 [ 552.994312][T11383] loop4: detected capacity change from 0 to 256 [ 553.070785][T11085] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 553.103586][T11387] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 553.126435][ T26] audit: type=1800 audit(1792709829.698:105): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1948" name="file1" dev="loop1" ino=1048705 res=0 errno=0 [ 554.793313][T11427] binder_alloc: 11426: binder_alloc_buf, no vma [ 556.086133][T11437] loop1: detected capacity change from 0 to 512 [ 556.093054][T11437] ext4: Unknown parameter 'obj_type' [ 556.211155][T11090] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 556.557404][T11445] loop2: detected capacity change from 0 to 256 [ 558.321867][T11463] loop5: detected capacity change from 0 to 512 [ 558.363087][T11463] EXT4-fs: Ignoring removed orlov option [ 558.385435][T11463] EXT4-fs: Ignoring removed oldalloc option [ 558.442565][T11463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 558.469305][T11470] 9pnet_fd: Insufficient options for proto=fd [ 558.489128][T11463] EXT4-fs (loop5): failed to initialize system zone (-117) [ 558.518751][T11463] EXT4-fs (loop5): mount failed [ 558.525858][T11469] loop4: detected capacity change from 0 to 512 [ 558.700501][T11469] EXT4-fs (loop4): Test dummy encryption mode enabled [ 558.762020][T11469] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.1971: inode has both inline data and extents flags [ 558.922585][T11478] 9pnet_fd: Insufficient options for proto=fd [ 559.373297][T11469] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1971: couldn't read orphan inode 15 (err -117) [ 559.434524][T11469] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 559.576352][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1974'. [ 559.619317][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 561.656096][T11495] loop4: detected capacity change from 0 to 512 [ 561.663369][T11495] ext4: Unknown parameter 'obj_type' [ 561.784568][T11090] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 561.920986][T11498] netlink: 'syz.2.1978': attribute type 29 has an invalid length. [ 561.974082][T11498] netlink: 'syz.2.1978': attribute type 29 has an invalid length. [ 562.009768][T11502] netlink: 'syz.2.1978': attribute type 29 has an invalid length. [ 562.048891][T11504] netlink: 'syz.2.1978': attribute type 29 has an invalid length. [ 562.924085][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.930802][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.369150][T11514] loop5: detected capacity change from 0 to 512 [ 563.446135][T11514] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 563.528739][T11514] EXT4-fs (loop5): 1 truncate cleaned up [ 563.538720][T11514] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 563.547500][T11517] loop1: detected capacity change from 0 to 512 [ 563.563983][T11517] EXT4-fs: Ignoring removed orlov option [ 563.570482][T11517] EXT4-fs: Ignoring removed oldalloc option [ 563.577420][T11517] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 563.698327][T11520] loop2: detected capacity change from 0 to 512 [ 563.709907][T11517] EXT4-fs (loop1): failed to initialize system zone (-117) [ 563.720901][T11517] EXT4-fs (loop1): mount failed [ 563.754505][T11520] FAT-fs (loop2): bogus logical sector size 0 [ 563.883463][T11520] FAT-fs (loop2): Can't find a valid FAT filesystem [ 563.995968][ T9873] EXT4-fs (loop5): unmounting filesystem. [ 564.624773][T11533] loop2: detected capacity change from 0 to 256 [ 564.822477][T11536] device syzkaller0 entered promiscuous mode [ 565.065681][T11540] loop4: detected capacity change from 0 to 1024 [ 565.152709][T11540] ext4: Unknown parameter 'pcr' [ 567.169010][T11585] loop2: detected capacity change from 0 to 512 [ 567.418392][T11585] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 567.595797][T11585] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1991: invalid indirect mapped block 256 (level 1) [ 567.826022][T11585] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1991: invalid indirect mapped block 2683928664 (level 1) [ 568.370601][T11585] EXT4-fs (loop2): 1 truncate cleaned up [ 568.410239][T11585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 569.222887][T11519] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 569.294949][T11603] loop5: detected capacity change from 0 to 512 [ 569.422892][T11603] FAT-fs (loop5): bogus logical sector size 0 [ 569.451363][T11603] FAT-fs (loop5): Can't find a valid FAT filesystem [ 569.648836][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 569.857859][T11621] loop2: detected capacity change from 0 to 1024 [ 569.886676][T11621] ext4: Unknown parameter 'pcr' [ 570.906736][T11090] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 571.173010][T11630] netlink: 'syz.5.2002': attribute type 1 has an invalid length. [ 571.533510][ T9597] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 571.756650][ T9597] usb 6-1: unable to get BOS descriptor or descriptor too short [ 571.787616][ T9597] usb 6-1: not running at top speed; connect to a high speed hub [ 571.841340][ T9597] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 571.900801][ T9597] usb 6-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 571.943964][ T9597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.982840][ T9597] usb 6-1: Product: syz [ 572.020405][ T9597] usb 6-1: Manufacturer: syz [ 572.050420][T11645] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4286] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11645] [ 572.106594][ T9597] usb 6-1: SerialNumber: syz [ 572.521395][ T9597] usb 6-1: MIDIStreaming interface descriptor not found [ 572.624618][ T9597] usb 6-1: too many endpoints [ 572.831631][ T9597] usb 6-1: USB disconnect, device number 4 [ 573.317603][T11088] udevd[11088]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.330181][T11663] loop5: detected capacity change from 0 to 256 [ 574.453003][T11666] fuse: Bad value for 'fd' [ 574.501171][T11663] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 574.575492][ T26] audit: type=1800 audit(1792709851.108:106): pid=11663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2007" name="file1" dev="loop5" ino=1048723 res=0 errno=0 [ 574.996831][T11660] loop2: detected capacity change from 0 to 512 [ 575.131857][T11664] loop4: detected capacity change from 0 to 4096 [ 575.139647][T11660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 575.148998][T11660] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.219743][T11664] ext4: Bad value for 'barrier' [ 575.232078][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 575.259829][ T7] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 575.325459][ T7] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 575.555529][T11680] loop5: detected capacity change from 0 to 512 [ 575.626712][T11677] loop1: detected capacity change from 0 to 4096 [ 575.686442][T11680] FAT-fs (loop5): bogus logical sector size 0 [ 575.692607][T11680] FAT-fs (loop5): Can't find a valid FAT filesystem [ 575.751417][T11677] EXT4-fs: Ignoring removed orlov option [ 575.841754][T11677] EXT4-fs (loop1): Test dummy encryption mode enabled [ 576.012069][T11677] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 576.138192][T11681] fido_id[11681]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 576.165074][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 576.663296][ T4351] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 576.699370][T11691] netlink: 'syz.4.2018': attribute type 1 has an invalid length. [ 576.865557][ T4351] usb 3-1: Using ep0 maxpacket: 16 [ 576.873397][ T4351] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 576.897917][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.940401][ T4351] usb 3-1: config 0 descriptor?? [ 576.966801][ T4351] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 577.023543][ T4342] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 577.167463][ T4351] usb 3-1: Detected FT232B [ 577.288165][T11716] loop5: detected capacity change from 0 to 256 [ 577.327243][ T4342] usb 5-1: unable to get BOS descriptor or descriptor too short [ 577.376800][T11716] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 577.419898][ T26] audit: type=1800 audit(1792709853.988:107): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2024" name="file1" dev="loop5" ino=1048724 res=0 errno=0 [ 577.540753][ T4351] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 577.586404][ T4351] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 577.618219][ T4342] usb 5-1: not running at top speed; connect to a high speed hub [ 577.804652][ T4351] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 577.815276][ T4342] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 578.111108][ T4351] usb 3-1: USB disconnect, device number 21 [ 578.119742][ T4342] usb 5-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 578.133934][ T4351] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 578.153200][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.161256][ T4342] usb 5-1: Product: syz [ 578.174384][ T4351] ftdi_sio 3-1:0.0: device disconnected [ 578.193191][ T4342] usb 5-1: Manufacturer: syz [ 578.197869][ T4342] usb 5-1: SerialNumber: syz [ 578.349352][T11724] ip_tables: iptables: counters copy to user failed while replacing table [ 578.447635][ T4342] usb 5-1: MIDIStreaming interface descriptor not found [ 578.475770][ T4342] usb 5-1: too many endpoints [ 578.592133][ T4342] usb 5-1: USB disconnect, device number 10 [ 578.640563][T11730] loop2: detected capacity change from 0 to 512 [ 578.756708][T11730] FAT-fs (loop2): error, invalid access to FAT (entry 0x00020000) [ 578.799093][T11730] FAT-fs (loop2): Filesystem has been set read-only [ 578.838177][T11730] FAT-fs (loop2): error, invalid access to FAT (entry 0x00020000) [ 578.902618][T11088] udevd[11088]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.514399][T11741] loop5: detected capacity change from 0 to 8 [ 579.529482][T11742] loop4: detected capacity change from 0 to 512 [ 579.564088][T11742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.611928][T11742] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 579.672735][T11742] EXT4-fs (loop4): 1 truncate cleaned up [ 579.703608][T11741] SQUASHFS error: Failed to read block 0x8f: -5 [ 579.712898][T11742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 579.783387][ T26] audit: type=1800 audit(1792709856.358:108): pid=11741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2030" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 580.189871][T11752] loop5: detected capacity change from 0 to 256 [ 580.476865][T11757] loop2: detected capacity change from 0 to 256 [ 580.515856][T11757] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 580.563283][ T26] audit: type=1800 audit(1792709857.118:109): pid=11757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2036" name="file1" dev="loop2" ino=1048726 res=0 errno=0 [ 581.639103][T11766] device syzkaller0 entered promiscuous mode [ 581.950470][T11777] loop5: detected capacity change from 0 to 512 [ 581.981663][T11777] EXT4-fs: Ignoring removed orlov option [ 582.000645][T11774] loop2: detected capacity change from 0 to 512 [ 582.001566][T11777] EXT4-fs: Ignoring removed oldalloc option [ 582.048478][T11774] FAT-fs (loop2): bogus logical sector size 0 [ 582.059917][T11772] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 582.065055][T11774] FAT-fs (loop2): Can't find a valid FAT filesystem [ 582.078303][T11777] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 582.145692][T11777] EXT4-fs (loop5): failed to initialize system zone (-117) [ 582.173372][T11777] EXT4-fs (loop5): mount failed [ 582.394124][ T7352] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 582.508473][T11786] device-mapper: table: 248:4: verity: Not enough arguments (-EINVAL) [ 582.540808][T11787] 9pnet_fd: Insufficient options for proto=fd [ 582.551646][T11786] device-mapper: ioctl: error adding target to table [ 582.741659][ T7352] usb 2-1: unable to get BOS descriptor or descriptor too short [ 583.592665][ T7352] usb 2-1: not running at top speed; connect to a high speed hub [ 583.604779][ T7352] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 583.634250][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 583.695252][ T7352] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 583.755982][ T7352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.787723][ T7352] usb 2-1: Product: syz [ 583.791966][ T7352] usb 2-1: Manufacturer: syz [ 583.813194][ T7352] usb 2-1: SerialNumber: syz [ 583.886890][T11795] loop2: detected capacity change from 0 to 256 [ 584.005930][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 584.060358][ T7352] usb 2-1: MIDIStreaming interface descriptor not found [ 584.087972][ T7352] usb 2-1: too many endpoints [ 584.308456][ T7352] usb 2-1: USB disconnect, device number 12 [ 584.715599][T11037] udevd[11037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.034111][T11820] loop1: detected capacity change from 0 to 512 [ 585.072331][T11820] FAT-fs (loop1): bogus logical sector size 0 [ 585.098576][T11820] FAT-fs (loop1): Can't find a valid FAT filesystem [ 585.368671][T11824] loop1: detected capacity change from 0 to 256 [ 585.397799][T11826] loop2: detected capacity change from 0 to 512 [ 585.439008][T11826] EXT4-fs: Ignoring removed orlov option [ 585.466474][T11826] EXT4-fs: Ignoring removed oldalloc option [ 585.488954][T11826] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 585.768999][T11826] EXT4-fs (loop2): failed to initialize system zone (-117) [ 585.832920][T11826] EXT4-fs (loop2): mount failed [ 585.900260][T11832] rxe_eth0 speed is unknown, defaulting to 1000 [ 586.202589][T11832] wg1 speed is unknown, defaulting to 1000 [ 586.368807][T11832] netlink: 'syz.5.2060': attribute type 4 has an invalid length. [ 587.175874][T11836] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4275] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11836] [ 587.235802][T11837] 9pnet_fd: Insufficient options for proto=fd [ 587.712819][T11839] device syzkaller0 entered promiscuous mode [ 587.777092][T11841] loop2: detected capacity change from 0 to 2048 [ 587.904392][T11841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 587.924094][T11841] ext4 filesystem being mounted at /385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 587.977860][T11848] loop1: detected capacity change from 0 to 2048 [ 588.022945][T11848] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 588.109708][T11848] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 588.140786][T11848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 588.355544][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 588.867181][T11857] netlink: 'syz.0.2066': attribute type 1 has an invalid length. [ 589.358792][T11862] loop4: detected capacity change from 0 to 512 [ 589.384113][T11862] FAT-fs (loop4): bogus logical sector size 0 [ 589.392353][T11862] FAT-fs (loop4): Can't find a valid FAT filesystem [ 589.643503][T11868] loop4: detected capacity change from 0 to 2048 [ 589.685513][T11868] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 589.830094][T11878] loop1: detected capacity change from 0 to 512 [ 589.930708][T11878] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 589.935580][T11880] device syzkaller0 entered promiscuous mode [ 589.948445][T11878] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2075: invalid indirect mapped block 256 (level 1) [ 591.454000][T11878] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2075: invalid indirect mapped block 2683928664 (level 1) [ 591.530816][T11878] EXT4-fs (loop1): 1 truncate cleaned up [ 591.569082][T11878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 591.734052][T11882] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 592.468352][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 592.953389][T11909] netlink: 'syz.1.2085': attribute type 1 has an invalid length. [ 595.193921][T11935] loop2: detected capacity change from 0 to 512 [ 595.230820][T11935] FAT-fs (loop2): bogus logical sector size 0 [ 595.241131][T11926] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 595.276103][T11935] FAT-fs (loop2): Can't find a valid FAT filesystem [ 595.717476][T11945] loop5: detected capacity change from 0 to 256 [ 595.795280][T11945] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 595.916572][T11945] Bluetooth: MGMT ver 1.22 [ 596.203069][T11953] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 596.326223][T11956] loop5: detected capacity change from 0 to 512 [ 596.410431][T11956] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 596.883154][T11968] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 597.138138][T11974] loop1: detected capacity change from 0 to 512 [ 597.157970][T11974] EXT4-fs: Ignoring removed orlov option [ 597.170196][T11974] EXT4-fs: Ignoring removed oldalloc option [ 597.180957][T11974] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 597.221397][T11974] EXT4-fs (loop1): failed to initialize system zone (-117) [ 597.230568][T11974] EXT4-fs (loop1): mount failed [ 597.566510][T11981] 9pnet_fd: Insufficient options for proto=fd [ 597.684868][T11982] loop2: detected capacity change from 0 to 512 [ 597.905434][T11982] EXT4-fs (loop2): 1 truncate cleaned up [ 597.917261][T11982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 597.928570][T11982] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.101949][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 598.202125][T11991] loop1: detected capacity change from 0 to 512 [ 598.299238][T11991] FAT-fs (loop1): bogus logical sector size 0 [ 598.322085][T11991] FAT-fs (loop1): Can't find a valid FAT filesystem [ 598.428900][T12001] loop4: detected capacity change from 0 to 1024 [ 598.507744][T11998] netlink: 'syz.0.2113': attribute type 1 has an invalid length. [ 599.349225][T12023] loop1: detected capacity change from 0 to 512 [ 599.374080][T12023] EXT4-fs: Ignoring removed orlov option [ 599.390162][T12023] EXT4-fs: Ignoring removed oldalloc option [ 599.400263][T12023] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 599.425841][T12024] device syzkaller0 entered promiscuous mode [ 599.435004][T12023] EXT4-fs (loop1): failed to initialize system zone (-117) [ 599.442330][T12023] EXT4-fs (loop1): mount failed [ 599.780623][T12034] loop2: detected capacity change from 0 to 1024 [ 599.802967][T12034] ext4: Unknown parameter 'pcr' [ 599.828266][T12038] 9pnet_fd: Insufficient options for proto=fd [ 600.063398][ T26] audit: type=1400 audit(1792709876.628:110): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12035 comm="syz.5.2126" [ 600.935190][T12045] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 602.288236][T12067] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 602.383302][ T26] audit: type=1326 audit(1792709878.948:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.0.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 602.423661][ T26] audit: type=1326 audit(1792709878.978:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.0.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 602.447998][ T26] audit: type=1326 audit(1792709878.978:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.0.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 602.473286][ T26] audit: type=1326 audit(1792709878.948:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.0.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 602.539091][ T26] audit: type=1326 audit(1792709878.978:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.0.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 602.613427][ T7352] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 602.658287][ T26] audit: type=1326 audit(1792709878.998:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.0.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 602.738873][ T26] audit: type=1326 audit(1792709878.998:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.0.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 602.815911][ T7352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 602.833944][ T7352] usb 3-1: not running at top speed; connect to a high speed hub [ 602.849441][ T26] audit: type=1326 audit(1792709878.998:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.0.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 602.887103][ T7352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 602.915476][ T7352] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 602.928174][ T26] audit: type=1326 audit(1792709878.998:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.0.2136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f3f7499f559 code=0x7ffc0000 [ 602.958811][ T7352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.967351][ T7352] usb 3-1: Product: syz [ 602.971619][ T7352] usb 3-1: Manufacturer: syz [ 602.981713][ T7352] usb 3-1: SerialNumber: syz [ 603.220146][ T7352] usb 3-1: MIDIStreaming interface descriptor not found [ 603.243542][ T7352] usb 3-1: too many endpoints [ 603.261874][ T7352] usb 3-1: USB disconnect, device number 22 [ 603.475741][T11056] udevd[11056]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.809984][T12086] loop5: detected capacity change from 0 to 1024 [ 603.828633][T12086] ext4: Unknown parameter 'pcr' [ 605.624845][T12101] netlink: 'syz.4.2143': attribute type 1 has an invalid length. [ 605.901073][T12106] loop2: detected capacity change from 0 to 128 [ 607.581026][T12123] loop2: detected capacity change from 0 to 512 [ 607.638798][T12123] EXT4-fs: Ignoring removed orlov option [ 607.658255][T12123] EXT4-fs: Ignoring removed oldalloc option [ 607.680415][T12123] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 607.704898][T12123] EXT4-fs (loop2): failed to initialize system zone (-117) [ 607.712255][T12123] EXT4-fs (loop2): mount failed [ 607.722143][T12125] loop4: detected capacity change from 0 to 512 [ 607.737396][T12125] FAT-fs (loop4): bogus logical sector size 0 [ 607.747711][T12125] FAT-fs (loop4): Can't find a valid FAT filesystem [ 607.803264][ T4344] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 607.992196][T12123] 9pnet_fd: Insufficient options for proto=fd [ 608.013384][ T4344] usb 6-1: Using ep0 maxpacket: 16 [ 608.026614][ T4344] usb 6-1: unable to get BOS descriptor or descriptor too short [ 608.086578][ T4344] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 188, changing to 7 [ 608.169692][ T4344] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 608.209683][ T4344] usb 6-1: string descriptor 0 read error: -22 [ 608.223435][ T4344] usb 6-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 608.251074][ T4344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.320660][T12140] loop4: detected capacity change from 0 to 256 [ 608.366778][T12140] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 608.488280][ T4344] usb 6-1: BAAD HEADPHONE p_chmask mismatch [ 608.566591][ T4344] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 608.617536][T11085] udevd[11085]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.699777][ T9597] usb 6-1: USB disconnect, device number 5 [ 609.151197][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 609.151214][ T26] audit: type=1800 audit(1792709885.718:125): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2157" name="file1" dev="loop4" ino=1048733 res=0 errno=0 [ 609.291768][T12153] loop5: detected capacity change from 0 to 128 [ 610.534729][T12173] FAULT_INJECTION: forcing a failure. [ 610.534729][T12173] name failslab, interval 1, probability 0, space 0, times 1 [ 610.550376][T12174] loop5: detected capacity change from 0 to 512 [ 610.578524][T12173] CPU: 1 PID: 12173 Comm: syz.4.2165 Not tainted syzkaller #0 [ 610.586098][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 610.591759][T12174] EXT4-fs: Ignoring removed orlov option [ 610.596183][T12173] Call Trace: [ 610.605323][T12173] [ 610.608302][T12173] dump_stack_lvl+0x188/0x24e [ 610.613038][T12173] ? show_regs_print_info+0x12/0x12 [ 610.618308][T12173] ? load_image+0x410/0x410 [ 610.622872][T12173] ? __might_sleep+0xd0/0xd0 [ 610.627516][T12173] ? __lock_acquire+0x7ea0/0x7ea0 [ 610.627868][T12174] EXT4-fs: Ignoring removed oldalloc option [ 610.632587][T12173] should_fail_ex+0x390/0x4c0 [ 610.632632][T12173] should_failslab+0x5/0x20 [ 610.647757][T12173] slab_pre_alloc_hook+0x59/0x300 [ 610.652841][T12173] kmem_cache_alloc+0x56/0x2f0 [ 610.657653][T12173] ? sk_prot_alloc+0x57/0x210 [ 610.662405][T12173] sk_prot_alloc+0x57/0x210 [ 610.667379][T12173] ? sk_alloc+0x20/0x330 [ 610.671670][T12173] sk_alloc+0x36/0x330 [ 610.676315][T12173] inet6_create+0x7ad/0x11b0 [ 610.680937][T12173] ? inet6_create+0x7c/0x11b0 [ 610.685654][T12173] __sock_create+0x49a/0x940 [ 610.690308][T12173] sctp_do_peeloff+0x3bb/0x690 [ 610.695111][T12173] ? sctp_transport_traverse_process+0x480/0x480 [ 610.701469][T12173] ? mark_lock+0x94/0x320 [ 610.705842][T12173] ? __might_fault+0xa6/0x120 [ 610.710553][T12173] sctp_getsockopt_peeloff_common+0x63/0x290 [ 610.716592][T12173] sctp_getsockopt_peeloff_flags+0x144/0x230 [ 610.722622][T12173] ? sctp_getsockopt_peeloff+0x220/0x220 [ 610.728302][T12173] sctp_getsockopt+0x59c/0x8a0 [ 610.733097][T12173] ? sock_recv_errqueue+0x590/0x590 [ 610.738330][T12173] __sys_getsockopt+0x1b0/0x230 [ 610.743220][T12173] __x64_sys_getsockopt+0xb1/0xc0 [ 610.748368][T12173] do_syscall_64+0x4c/0xa0 [ 610.752824][T12173] ? clear_bhb_loop+0x60/0xb0 [ 610.757553][T12173] ? clear_bhb_loop+0x60/0xb0 [ 610.762271][T12173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.768205][T12173] RIP: 0033:0x7f401dd9f559 [ 610.772669][T12173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.792335][T12173] RSP: 002b:00007f401eba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 610.800789][T12173] RAX: ffffffffffffffda RBX: 00007f401e025fa0 RCX: 00007f401dd9f559 [ 610.808799][T12173] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 610.816798][T12173] RBP: 00007f401de36b20 R08: 0000200000000640 R09: 0000000000000000 [ 610.824795][T12173] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 610.832805][T12173] R13: 00007f401e026038 R14: 00007f401e025fa0 R15: 00007ffc739790d8 [ 610.840849][T12173] [ 610.883587][T12170] loop1: detected capacity change from 0 to 512 [ 610.917370][T12170] FAT-fs (loop1): bogus logical sector size 0 [ 610.934732][T12170] FAT-fs (loop1): Can't find a valid FAT filesystem [ 611.172007][T12174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 611.224172][T12174] EXT4-fs (loop5): failed to initialize system zone (-117) [ 611.231941][T12185] loop1: detected capacity change from 0 to 4096 [ 611.241874][T12174] EXT4-fs (loop5): mount failed [ 611.254182][T12185] ext4: Bad value for 'barrier' [ 612.180791][T12174] 9pnet_fd: Insufficient options for proto=fd [ 612.421802][T12199] loop5: detected capacity change from 0 to 128 [ 613.596765][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 613.728108][ T4336] smpboot: CPU 1 is now offline [ 614.970798][T12227] loop5: detected capacity change from 0 to 512 [ 615.049409][T12227] EXT4-fs: Ignoring removed orlov option [ 615.056793][T12224] loop1: detected capacity change from 0 to 4096 [ 615.097048][T12227] EXT4-fs: Ignoring removed oldalloc option [ 615.129400][T12224] ext4: Bad value for 'barrier' [ 615.177385][T12227] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 615.652479][T12227] EXT4-fs (loop5): failed to initialize system zone (-117) [ 615.673364][ T127] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 615.807568][T12227] EXT4-fs (loop5): mount failed [ 616.407760][T12227] 9pnet_fd: Insufficient options for proto=fd [ 616.482262][ T127] usb 3-1: Using ep0 maxpacket: 16 [ 616.509459][ T127] usb 3-1: config 0 has no interfaces? [ 616.568085][ T127] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 616.640324][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.706430][ T127] usb 3-1: Product: syz [ 616.820740][ T127] usb 3-1: Manufacturer: syz [ 616.857914][ T127] usb 3-1: SerialNumber: syz [ 616.917056][ T127] usb 3-1: config 0 descriptor?? [ 617.187197][ T127] usb 3-1: USB disconnect, device number 23 [ 619.486863][T12271] loop2: detected capacity change from 0 to 512 [ 619.493808][T12271] ext4: Unknown parameter 'obj_type' [ 619.624614][T11090] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 620.856611][T12291] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 5 (only 8 groups) [ 621.275117][T12301] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 621.531542][ T26] audit: type=1326 audit(1792709898.098:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 621.705029][ T26] audit: type=1326 audit(1792709898.128:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 621.950724][ T26] audit: type=1326 audit(1792709898.128:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 622.176247][ T26] audit: type=1326 audit(1792709898.128:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 622.397072][T12319] loop5: detected capacity change from 0 to 512 [ 622.410344][ T26] audit: type=1326 audit(1792709898.128:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 622.493929][T12319] EXT4-fs: Ignoring removed orlov option [ 622.504940][T12322] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 622.550118][T12319] EXT4-fs: Ignoring removed oldalloc option [ 623.314004][T12319] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 623.377683][ T26] audit: type=1326 audit(1792709898.128:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 623.477799][T12319] EXT4-fs (loop5): failed to initialize system zone (-117) [ 623.523263][T12319] EXT4-fs (loop5): mount failed [ 623.724616][T12319] 9pnet_fd: Insufficient options for proto=fd [ 623.810912][ T26] audit: type=1326 audit(1792709898.128:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 624.035756][T12332] loop5: detected capacity change from 0 to 1024 [ 624.073973][ T26] audit: type=1326 audit(1792709898.138:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 624.125025][T12332] ext4: Unknown parameter 'pcr' [ 624.330105][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.336969][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.359218][T12334] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2205'. [ 624.669246][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2205'. [ 624.686770][ T26] audit: type=1326 audit(1792709898.138:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 625.183272][ T26] audit: type=1326 audit(1792709898.138:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.2212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc0ca59f559 code=0x7ffc0000 [ 625.597488][T12341] device macvlan1 entered promiscuous mode [ 625.676112][ T4280] Bluetooth: hci4: Malformed LE Event: 0x0d [ 625.730589][T12352] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 625.769009][T12352] syzkaller1: ignored: set checksum enabled [ 627.449574][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 627.485218][T12380] loop5: detected capacity change from 0 to 1024 [ 627.498316][T12373] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 627.562682][T12380] ext4: Unknown parameter 'pcr' [ 629.418129][T12403] loop2: detected capacity change from 0 to 512 [ 629.570940][T12403] EXT4-fs (loop2): 1 orphan inode deleted [ 629.583510][T12407] netlink: 'syz.5.2238': attribute type 1 has an invalid length. [ 629.593078][ T6301] __quota_error: 41 callbacks suppressed [ 629.634514][ T6301] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 629.728148][T12403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 629.808696][ T6301] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 1 [ 629.853325][T12403] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.965218][T12418] fuse: Bad value for 'fd' [ 631.897740][T12426] loop4: detected capacity change from 0 to 512 [ 631.931248][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 631.954799][T12426] EXT4-fs: Ignoring removed orlov option [ 632.067276][T12426] EXT4-fs: Ignoring removed oldalloc option [ 632.093199][ T4336] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 632.350063][T12426] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 632.437626][T12426] EXT4-fs (loop4): failed to initialize system zone (-117) [ 632.477022][T12426] EXT4-fs (loop4): mount failed [ 633.559214][ T4336] usb 6-1: device descriptor read/all, error -71 [ 633.760180][T12453] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2251'. [ 633.852913][T12461] netlink: 'syz.4.2252': attribute type 1 has an invalid length. [ 633.869249][T12447] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 634.233825][ T127] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 634.645407][T12477] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12477] [ 634.695014][ T127] usb 3-1: unable to get BOS descriptor or descriptor too short [ 634.740170][ T127] usb 3-1: not running at top speed; connect to a high speed hub [ 634.797624][ T127] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 634.868447][ T127] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 634.924950][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.964848][ T127] usb 3-1: Product: syz [ 634.981654][ T127] usb 3-1: Manufacturer: syz [ 636.039552][ T127] usb 3-1: SerialNumber: syz [ 636.295908][ T127] usb 3-1: MIDIStreaming interface descriptor not found [ 636.354703][ T127] usb 3-1: too many endpoints [ 636.368583][T12496] device syzkaller0 entered promiscuous mode [ 636.530438][ T127] usb 3-1: USB disconnect, device number 24 [ 636.758808][T12509] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 637.124214][T12521] loop4: detected capacity change from 0 to 512 [ 637.142709][T12521] EXT4-fs: Ignoring removed orlov option [ 637.142779][T12521] EXT4-fs: Ignoring removed oldalloc option [ 637.143446][T12521] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 637.173672][T12521] EXT4-fs (loop4): failed to initialize system zone (-117) [ 637.173738][T12521] EXT4-fs (loop4): mount failed [ 637.255142][T12521] 9pnet_fd: Insufficient options for proto=fd [ 637.678239][T12537] fuse: Bad value for 'fd' [ 637.851108][T12535] loop4: detected capacity change from 0 to 4096 [ 637.866663][T12535] ext4: Bad value for 'barrier' [ 638.180171][T12524] tty tty2: ldisc open failed (-12), clearing slot 1 [ 638.976193][T12564] netlink: 'syz.2.2281': attribute type 1 has an invalid length. [ 639.265265][T12559] netlink: 'syz.1.2280': attribute type 1 has an invalid length. [ 640.316277][T12576] device syzkaller0 entered promiscuous mode [ 641.543408][T12594] syz.4.2293 (12594) used obsolete PPPIOCDETACH ioctl [ 641.958019][T12605] netlink: 'syz.4.2296': attribute type 1 has an invalid length. [ 642.395208][T12611] FAULT_INJECTION: forcing a failure. [ 642.395208][T12611] name failslab, interval 1, probability 0, space 0, times 0 [ 642.530205][T12611] CPU: 0 PID: 12611 Comm: syz.5.2298 Not tainted syzkaller #0 [ 642.537819][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 642.547892][T12611] Call Trace: [ 642.551173][T12611] [ 642.554111][T12611] dump_stack_lvl+0x188/0x24e [ 642.558806][T12611] ? show_regs_print_info+0x12/0x12 [ 642.564015][T12611] ? load_image+0x410/0x410 [ 642.568785][T12611] ? __might_sleep+0xd0/0xd0 [ 642.573382][T12611] ? __lock_acquire+0x7ea0/0x7ea0 [ 642.578439][T12611] should_fail_ex+0x390/0x4c0 [ 642.583147][T12611] should_failslab+0x5/0x20 [ 642.587657][T12611] slab_pre_alloc_hook+0x59/0x300 [ 642.592692][T12611] ? cgroup_init_fs_context+0x50/0x3c0 [ 642.598157][T12611] __kmem_cache_alloc_node+0x4f/0x270 [ 642.603541][T12611] ? cgroup_init_fs_context+0x50/0x3c0 [ 642.609008][T12611] kmalloc_trace+0x26/0xe0 [ 642.613431][T12611] cgroup_init_fs_context+0x50/0x3c0 [ 642.618738][T12611] ? cgroup_do_get_tree+0x510/0x510 [ 642.623947][T12611] alloc_fs_context+0x628/0x7d0 [ 642.628813][T12611] __se_sys_fsopen+0xa0/0x2c0 [ 642.633522][T12611] do_syscall_64+0x4c/0xa0 [ 642.637952][T12611] ? clear_bhb_loop+0x60/0xb0 [ 642.642641][T12611] ? clear_bhb_loop+0x60/0xb0 [ 642.647329][T12611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.653254][T12611] RIP: 0033:0x7febdf19f559 [ 642.657698][T12611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.677308][T12611] RSP: 002b:00007febdff99028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 642.685726][T12611] RAX: ffffffffffffffda RBX: 00007febdf425fa0 RCX: 00007febdf19f559 [ 642.693713][T12611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 642.701689][T12611] RBP: 00007febdf236b20 R08: 0000000000000000 R09: 0000000000000000 [ 642.710805][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.718819][T12611] R13: 00007febdf426038 R14: 00007febdf425fa0 R15: 00007ffe0d17bdf8 [ 642.726825][T12611] [ 643.419956][T12632] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 645.516599][T12653] netlink: 'syz.1.2309': attribute type 1 has an invalid length. [ 647.247964][T12670] 9pnet_fd: p9_fd_create_tcp (12670): problem connecting socket to 127.0.0.1 [ 647.591781][T12678] netlink: 'syz.2.2316': attribute type 1 has an invalid length. [ 648.220115][T12690] loop2: detected capacity change from 0 to 128 [ 649.914770][T12697] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 649.941459][T12703] fuse: Bad value for 'fd' [ 650.187870][T12708] loop2: detected capacity change from 0 to 1024 [ 650.254133][T12708] ext4: Unknown parameter 'pcr' [ 651.135644][T12713] FAULT_INJECTION: forcing a failure. [ 651.135644][T12713] name failslab, interval 1, probability 0, space 0, times 0 [ 651.225262][T12713] CPU: 0 PID: 12713 Comm: syz.5.2328 Not tainted syzkaller #0 [ 651.232790][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.242853][T12713] Call Trace: [ 651.246136][T12713] [ 651.249073][T12713] dump_stack_lvl+0x188/0x24e [ 651.253766][T12713] ? show_regs_print_info+0x12/0x12 [ 651.258979][T12713] ? load_image+0x410/0x410 [ 651.263486][T12713] ? __lock_acquire+0x7ea0/0x7ea0 [ 651.268547][T12713] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 651.274275][T12713] should_fail_ex+0x390/0x4c0 [ 651.278986][T12713] should_failslab+0x5/0x20 [ 651.283510][T12713] slab_pre_alloc_hook+0x59/0x300 [ 651.288559][T12713] ? sctp_transport_new+0x7b/0x620 [ 651.293686][T12713] __kmem_cache_alloc_node+0x4f/0x270 [ 651.299086][T12713] ? sctp_transport_new+0x7b/0x620 [ 651.304228][T12713] kmalloc_trace+0x26/0xe0 [ 651.308656][T12713] sctp_transport_new+0x7b/0x620 [ 651.313615][T12713] sctp_assoc_add_peer+0x2a8/0x1710 [ 651.318835][T12713] sctp_connect_new_asoc+0x31f/0x6a0 [ 651.324148][T12713] ? __sctp_connect+0xd80/0xd80 [ 651.329025][T12713] ? __local_bh_enable_ip+0x136/0x1c0 [ 651.334430][T12713] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 651.339998][T12713] ? security_sctp_bind_connect+0x85/0xb0 [ 651.345734][T12713] sctp_sendmsg+0x1686/0x2940 [ 651.350431][T12713] ? sctp_getsockopt+0x8a0/0x8a0 [ 651.355375][T12713] ? __might_fault+0xa6/0x120 [ 651.360057][T12713] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 651.366483][T12713] ? aa_sock_msg_perm+0x94/0x150 [ 651.371432][T12713] ? inet_sendmsg+0xca/0x2a0 [ 651.376025][T12713] ? inet_send_prepare+0x250/0x250 [ 651.381242][T12713] ____sys_sendmsg+0x5ed/0x9a0 [ 651.386016][T12713] ? __sys_sendmsg_sock+0x30/0x30 [ 651.391047][T12713] ? __import_iovec+0x306/0x510 [ 651.395930][T12713] ? import_iovec+0x6f/0xa0 [ 651.400444][T12713] ___sys_sendmsg+0x2a2/0x360 [ 651.405126][T12713] ? release_firmware_map_entry+0x187/0x187 [ 651.411032][T12713] ? __sys_sendmsg+0x2a0/0x2a0 [ 651.415878][T12713] __sys_sendmmsg+0x2c3/0x510 [ 651.420581][T12713] ? __ia32_sys_sendmsg+0x80/0x80 [ 651.425615][T12713] ? __ia32_sys_get_robust_list+0x100/0x100 [ 651.431523][T12713] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 651.437532][T12713] ? lock_chain_count+0x20/0x20 [ 651.442395][T12713] __x64_sys_sendmmsg+0x9c/0xb0 [ 651.447253][T12713] do_syscall_64+0x4c/0xa0 [ 651.451677][T12713] ? clear_bhb_loop+0x60/0xb0 [ 651.456361][T12713] ? clear_bhb_loop+0x60/0xb0 [ 651.461055][T12713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.466949][T12713] RIP: 0033:0x7febdf19f559 [ 651.471371][T12713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.490980][T12713] RSP: 002b:00007febdff99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 651.499400][T12713] RAX: ffffffffffffffda RBX: 00007febdf425fa0 RCX: 00007febdf19f559 [ 651.507375][T12713] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 651.515357][T12713] RBP: 00007febdf236b20 R08: 0000000000000000 R09: 0000000000000000 [ 651.523339][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.531317][T12713] R13: 00007febdf426038 R14: 00007febdf425fa0 R15: 00007ffe0d17bdf8 [ 651.539308][T12713] [ 651.959619][T12719] device syzkaller0 entered promiscuous mode [ 653.203326][ T127] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 653.704124][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 653.731334][ T127] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 653.788821][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.857711][ T127] usb 5-1: config 0 descriptor?? [ 653.872625][T12755] device syzkaller0 entered promiscuous mode [ 653.955144][ T127] as10x_usb: device has been detected [ 653.977981][ T127] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 654.150621][T12737] ------------[ cut here ]------------ [ 654.156296][T12737] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 654.159852][T12757] loop5: detected capacity change from 0 to 4096 [ 654.177083][ T127] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 654.194534][T12737] WARNING: CPU: 0 PID: 12737 at kernel/locking/mutex.c:582 __mutex_lock+0xa1c/0xae0 [ 654.204037][T12737] Modules linked in: [ 654.207935][T12737] CPU: 0 PID: 12737 Comm: syz.4.2335 Not tainted syzkaller #0 [ 654.215512][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 654.225603][T12737] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 654.231295][T12737] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d5 16 c4 04 00 0f 85 f5 f6 ff ff 48 c7 c7 20 04 8c 8a 48 c7 c6 c0 04 8c 8a e8 94 c9 10 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 b1 a3 97 80 [ 654.251122][T12737] RSP: 0018:ffffc90004dc7ac0 EFLAGS: 00010246 [ 654.257220][T12737] RAX: e7918773e4514e00 RBX: ffff8880794d4ce0 RCX: 0000000000080000 [ 654.265227][T12737] RDX: ffffc9000e60a000 RSI: 0000000000007c90 RDI: 0000000000007c91 [ 654.273225][T12737] RBP: ffffc90004dc7c20 R08: ffff8880b8c279db R09: 1ffff11017184f3b [ 654.281209][T12737] R10: dffffc0000000000 R11: ffffed1017184f3c R12: dffffc0000000000 [ 654.289201][T12737] R13: 0000000000000000 R14: ffff8880794d4000 R15: 0000000000000000 [ 654.297195][T12737] FS: 00007f401eba76c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 654.306145][T12737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.312746][T12737] CR2: 00007f5fd2baafe8 CR3: 00000000252df000 CR4: 00000000003506f0 [ 654.320809][T12737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 654.328801][T12737] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 654.336791][T12737] Call Trace: [ 654.340081][T12737] [ 654.343018][T12737] ? trace_contention_end+0x5f/0x170 [ 654.348354][T12737] ? __mutex_lock+0x1ab/0xae0 [ 654.353055][T12737] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 654.358744][T12737] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 654.364439][T12737] ? mutex_lock_nested+0x10/0x10 [ 654.369391][T12737] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 654.375411][T12737] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 654.381327][T12737] ? mutex_unlock+0x10/0x10 [ 654.385869][T12737] ? mutex_lock_nested+0x10/0x10 [ 654.390837][T12737] ? _raw_spin_lock_irq+0xb7/0xf0 [ 654.395911][T12737] ? _raw_spin_unlock_irq+0x1f/0x40 [ 654.401127][T12737] as102_dvb_dmx_start_feed+0x6c/0x280 [ 654.406633][T12737] dmx_ts_feed_start_filtering+0x11c/0x210 [ 654.412450][T12737] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 654.418373][T12737] dvb_dmxdev_filter_start+0x422/0x1060 [ 654.423968][T12737] dvb_demux_do_ioctl+0x47e/0x530 [ 654.429000][T12737] dvb_usercopy+0x191/0x2b0 [ 654.433530][T12737] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 654.439082][T12737] ? dvb_generic_ioctl+0xb0/0xb0 [ 654.444048][T12737] ? dvb_demux_poll+0x210/0x210 [ 654.448902][T12737] dvb_demux_ioctl+0x25/0x30 [ 654.453534][T12737] __se_sys_ioctl+0xfa/0x170 [ 654.458155][T12737] do_syscall_64+0x4c/0xa0 [ 654.462580][T12737] ? clear_bhb_loop+0x60/0xb0 [ 654.467302][T12737] ? clear_bhb_loop+0x60/0xb0 [ 654.471987][T12737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.477906][T12737] RIP: 0033:0x7f401dd9f559 [ 654.482326][T12737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.501996][T12737] RSP: 002b:00007f401eba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.510453][T12737] RAX: ffffffffffffffda RBX: 00007f401e025fa0 RCX: 00007f401dd9f559 [ 654.518459][T12737] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 654.526450][T12737] RBP: 00007f401de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 654.534459][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.542431][T12737] R13: 00007f401e026038 R14: 00007f401e025fa0 R15: 00007ffc739790d8 [ 654.550431][T12737] [ 654.553515][T12737] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 654.560794][T12737] CPU: 0 PID: 12737 Comm: syz.4.2335 Not tainted syzkaller #0 [ 654.568253][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 654.578395][T12737] Call Trace: [ 654.581685][T12737] [ 654.584629][T12737] dump_stack_lvl+0x188/0x24e [ 654.589336][T12737] ? memcpy+0x3c/0x60 [ 654.593343][T12737] ? show_regs_print_info+0x12/0x12 [ 654.598567][T12737] ? load_image+0x410/0x410 [ 654.603085][T12737] panic+0x2d3/0x710 [ 654.607010][T12737] ? bpf_jit_dump+0xd0/0xd0 [ 654.611534][T12737] __warn+0x2f8/0x4f0 [ 654.615521][T12737] ? __mutex_lock+0xa1c/0xae0 [ 654.620205][T12737] ? __mutex_lock+0xa1c/0xae0 [ 654.624887][T12737] report_bug+0x2ba/0x4f0 [ 654.629232][T12737] ? __mutex_lock+0xa1c/0xae0 [ 654.633924][T12737] handle_bug+0x3a/0x70 [ 654.638123][T12737] exc_invalid_op+0x16/0x40 [ 654.642633][T12737] asm_exc_invalid_op+0x16/0x20 [ 654.647505][T12737] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 654.652802][T12737] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d5 16 c4 04 00 0f 85 f5 f6 ff ff 48 c7 c7 20 04 8c 8a 48 c7 c6 c0 04 8c 8a e8 94 c9 10 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 b1 a3 97 80 [ 654.672713][T12737] RSP: 0018:ffffc90004dc7ac0 EFLAGS: 00010246 [ 654.678830][T12737] RAX: e7918773e4514e00 RBX: ffff8880794d4ce0 RCX: 0000000000080000 [ 654.686806][T12737] RDX: ffffc9000e60a000 RSI: 0000000000007c90 RDI: 0000000000007c91 [ 654.694785][T12737] RBP: ffffc90004dc7c20 R08: ffff8880b8c279db R09: 1ffff11017184f3b [ 654.702771][T12737] R10: dffffc0000000000 R11: ffffed1017184f3c R12: dffffc0000000000 [ 654.710754][T12737] R13: 0000000000000000 R14: ffff8880794d4000 R15: 0000000000000000 [ 654.718745][T12737] ? trace_contention_end+0x5f/0x170 [ 654.724046][T12737] ? __mutex_lock+0x1ab/0xae0 [ 654.728737][T12737] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 654.734375][T12737] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 654.740016][T12737] ? mutex_lock_nested+0x10/0x10 [ 654.744971][T12737] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 654.750988][T12737] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 654.756908][T12737] ? mutex_unlock+0x10/0x10 [ 654.761438][T12737] ? mutex_lock_nested+0x10/0x10 [ 654.766404][T12737] ? _raw_spin_lock_irq+0xb7/0xf0 [ 654.771446][T12737] ? _raw_spin_unlock_irq+0x1f/0x40 [ 654.776658][T12737] as102_dvb_dmx_start_feed+0x6c/0x280 [ 654.782146][T12737] dmx_ts_feed_start_filtering+0x11c/0x210 [ 654.787968][T12737] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 654.793881][T12737] dvb_dmxdev_filter_start+0x422/0x1060 [ 654.799484][T12737] dvb_demux_do_ioctl+0x47e/0x530 [ 654.804547][T12737] dvb_usercopy+0x191/0x2b0 [ 654.809112][T12737] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 654.814677][T12737] ? dvb_generic_ioctl+0xb0/0xb0 [ 654.819639][T12737] ? dvb_demux_poll+0x210/0x210 [ 654.824529][T12737] dvb_demux_ioctl+0x25/0x30 [ 654.829139][T12737] __se_sys_ioctl+0xfa/0x170 [ 654.833786][T12737] do_syscall_64+0x4c/0xa0 [ 654.838217][T12737] ? clear_bhb_loop+0x60/0xb0 [ 654.842910][T12737] ? clear_bhb_loop+0x60/0xb0 [ 654.847595][T12737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.853516][T12737] RIP: 0033:0x7f401dd9f559 [ 654.857940][T12737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.877556][T12737] RSP: 002b:00007f401eba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.885999][T12737] RAX: ffffffffffffffda RBX: 00007f401e025fa0 RCX: 00007f401dd9f559 [ 654.893993][T12737] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 654.901967][T12737] RBP: 00007f401de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 654.909951][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.917930][T12737] R13: 00007f401e026038 R14: 00007f401e025fa0 R15: 00007ffc739790d8 [ 654.925944][T12737] [ 654.929035][T12737] Kernel Offset: disabled [ 654.933365][T12737] Rebooting in 86400 seconds..