last executing test programs: 56.185544009s ago: executing program 0 (id=1355): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0xa6, 0xa9, 0x7, 0x9, 0x6, 0x99, 0x7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x7}, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) 53.843709304s ago: executing program 0 (id=1359): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 53.472843726s ago: executing program 0 (id=1363): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000200)=""/80, 0xfffffff1, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001540)={0x2, 0x0, {&(0x7f0000000d40)=""/201, 0xc9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 53.359816156s ago: executing program 0 (id=1365): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x10000000000, 0x18, 0x0, 0xfffffffffffffffe}) 52.85310187s ago: executing program 0 (id=1370): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 51.548813324s ago: executing program 0 (id=1373): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bff", 0x2}], 0x1) 35.900098812s ago: executing program 32 (id=1373): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bff", 0x2}], 0x1) 7.108534088s ago: executing program 4 (id=1625): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 6.592057883s ago: executing program 4 (id=1627): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = io_uring_setup(0x138a, &(0x7f00000006c0)={0x0, 0x40cf, 0x1, 0x40000007, 0x15f}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0), 0x5f) 6.388775202s ago: executing program 5 (id=1628): unshare(0x6020400) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) 5.94537952s ago: executing program 4 (id=1630): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 5.788139284s ago: executing program 5 (id=1632): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r2, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 5.000516002s ago: executing program 1 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.840742806s ago: executing program 1 (id=1635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x4000010, 0xffffffffffffffff, 0xbe9f5000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r5}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, 0x0, 0x40080) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, 0x0, 0x4000004) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r7, 0x2000) 4.762233003s ago: executing program 5 (id=1636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x8080) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x1000, 0x1, 0x20, 0xeb56}, {0x7f, 0x3, 0x2, 0x9}, {0x400, 0x1c, 0x7, 0x7ff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000003e40)=""/4097, 0x1001}], 0x2, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {0x0}], 0x2}, 0x3}], 0x3, 0x2, 0x0) 4.221161811s ago: executing program 4 (id=1637): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.54074991s ago: executing program 3 (id=1638): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 3.397605612s ago: executing program 4 (id=1640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x7f, @loopback, 0xffffffff}, 0x1c) listen(r0, 0x2) 3.233795307s ago: executing program 5 (id=1641): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}], 0x1, 0x8000007) 3.006663907s ago: executing program 3 (id=1642): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x9, 0x40, 0x60, 0xb, 0xfff, 0x240000, 0x1, 0xffff, 0x8, 0x8c4, 0x10, 0x4, 0x12, 0x7, 0x4, 0xc000}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040098}, 0x44000) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fd, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x49f2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x1000009, 0x9, 0x4c, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x10008, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0x3, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0xfffffffb, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x40, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xa, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x7, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x10000000, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x5, 0x0, 0x109, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xea, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x1, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x5, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0x3, 0xfff, 0x8, 0x9, 0x7, 0x7, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x5, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x7, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x40200, 0x0, 0x9, 0x8001, 0x2, 0xe, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0xfffffffe, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x4, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x2, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.006512387s ago: executing program 4 (id=1643): syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x9, 0x1ffffffffee, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 2.714694342s ago: executing program 3 (id=1644): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x8001, 0x0, 0x0, 0x4}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000400), 0x1, 0xcc42) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x54a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = socket$isdn(0x22, 0x2, 0x10) r5 = socket$isdn(0x22, 0x2, 0x2) r6 = dup3(r5, r4, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0xfff, 0x9, 0x4, 0x3, 0x6, 0x1, 0xf8b}, 0xc) unshare(0x26020480) r7 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x64, &(0x7f0000000100)}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0x40082104, 0x0) r9 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r9, 0x0, 0x0) 1.512873128s ago: executing program 3 (id=1646): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000080)=@overlay={0x4b7, 0x18, 0x4, 0x1000, 0x1, {0x0, 0x2710}, {0x4, 0x2, 0x3, 0x5, 0x92, 0x12, "b934e747"}, 0x7, 0x3, {}, 0xc}) 1.4845334s ago: executing program 1 (id=1647): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_GET_DEVICE(r2, 0x0, 0x20040014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf250100010008000100030004000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, 0x0, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}}, 0x20) 1.36706909s ago: executing program 3 (id=1648): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) setresuid(0x0, 0xee00, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186e8d, 0x0) 1.359145051s ago: executing program 1 (id=1650): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.124719251s ago: executing program 2 (id=1651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x8080) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x1000, 0x1, 0x20, 0xeb56}, {0x7f, 0x3, 0x2, 0x9}, {0x400, 0x1c, 0x7, 0x7ff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000003e40)=""/4097, 0x1001}], 0x2, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {0x0}], 0x2}, 0x3}], 0x3, 0x2, 0x0) 1.087462744s ago: executing program 1 (id=1652): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 907.88763ms ago: executing program 2 (id=1653): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000940)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x1, {0x7, 0x1, 0x0, {0x6, 0x69f, 0x0, 0xe4, 0x2d89, 0xadb, 0x40, 0x81, 0xa2d, 0x1000, 0x2c6, r2, r3, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) 822.121318ms ago: executing program 3 (id=1654): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x9, 0x40, 0x60, 0xb, 0xfff, 0x240000, 0x1, 0xffff, 0x8, 0x8c4, 0x10, 0x4, 0x12, 0x7, 0x4, 0xc000}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040098}, 0x44000) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fd, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x49f2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x1000009, 0x9, 0x4c, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x10008, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0x3, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0xfffffffb, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x40, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xa, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x7, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x10000000, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x5, 0x0, 0x109, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xea, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x1, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x5, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0x3, 0xfff, 0x8, 0x9, 0x7, 0x7, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x5, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x7, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x40200, 0x0, 0x9, 0x8001, 0x2, 0xe, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0xfffffffe, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x4, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x2, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) 660.751152ms ago: executing program 1 (id=1655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}}, 0x24}}, 0x0) 619.683435ms ago: executing program 2 (id=1656): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x8001, 0x0, 0x0, 0x4}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000400), 0x1, 0xcc42) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x54a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = socket$isdn(0x22, 0x2, 0x10) r5 = socket$isdn(0x22, 0x2, 0x2) r6 = dup3(r5, r4, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0xfff, 0x9, 0x4, 0x3, 0x6, 0x1, 0xf8b}, 0xc) unshare(0x26020480) r7 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x64, &(0x7f0000000100)}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0x40082104, 0x0) r9 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r9, 0x0, 0x0) 307.542873ms ago: executing program 2 (id=1657): socket(0x22, 0x2, 0x4) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) memfd_secret(0x0) 252.805777ms ago: executing program 5 (id=1658): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10}, 0x10) 150.780316ms ago: executing program 2 (id=1659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000040900020073797a310000000005"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 70.611823ms ago: executing program 5 (id=1660): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 0s ago: executing program 2 (id=1661): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_GET_DEVICE(r2, 0x0, 0x20040014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf250100010008000100030004000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, 0x0, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}}, 0x20) kernel console output (not intermixed with test programs): 2 (sector = 1) [ 408.123005][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.761'. [ 408.157326][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.761'. [ 408.295368][ T4422] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 410.134584][ T7998] ubi: mtd0 is already attached to ubi0 [ 410.848553][ T8001] loop0: detected capacity change from 0 to 512 [ 411.167927][ T8001] EXT4-fs (loop0): 1 orphan inode deleted [ 411.174245][ T8001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 411.186839][ T8005] loop4: detected capacity change from 0 to 32768 [ 411.203145][ T4359] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 411.267843][ T8005] XFS (loop4): Mounting V5 Filesystem [ 411.274204][ T4359] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:9: Failed to release dquot type 1 [ 411.297827][ T8001] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.310198][ T8013] tipc: Enabled bearer , priority 0 [ 411.336554][ T8013] device syzkaller0 entered promiscuous mode [ 411.401881][ T8005] XFS (loop4): Ending clean mount [ 411.414521][ T8005] XFS (loop4): Quotacheck needed: Please wait. [ 411.474730][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 411.495751][ T8005] XFS (loop4): Quotacheck: Done. [ 411.680518][ T8013] tipc: Resetting bearer [ 412.033793][ T8010] tipc: Resetting bearer [ 412.133251][ T8010] tipc: Disabling bearer [ 412.161412][ T8022] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 412.192260][ T8022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.206933][ T4271] XFS (loop4): Unmounting Filesystem [ 412.253657][ T8022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.286487][ T8022] device bridge_slave_0 left promiscuous mode [ 412.294447][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.390003][ T8022] device bridge_slave_1 left promiscuous mode [ 412.414645][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.465090][ T8022] bond0: (slave bond_slave_0): Releasing backup interface [ 412.541726][ T8022] bond0: (slave bond_slave_1): Releasing backup interface [ 412.650982][ T8022] team0: Port device team_slave_0 removed [ 412.749129][ T8022] team0: Port device team_slave_1 removed [ 412.775173][ T8022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.782655][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.745203][ T8022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.752751][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.234564][ T5204] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 414.452207][ T5204] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 414.489436][ T5204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.567270][ T5204] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 414.593264][ T8053] loop2: detected capacity change from 0 to 32768 [ 414.637427][ T5204] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 414.688255][ T5204] usb 4-1: Manufacturer: syz [ 414.757075][ T5204] usb 4-1: config 0 descriptor?? [ 414.775247][ T8053] XFS (loop2): Mounting V5 Filesystem [ 414.811124][ T8061] loop4: detected capacity change from 0 to 2048 [ 414.901474][ T8061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.924489][ T5204] rc_core: IR keymap rc-hauppauge not found [ 414.930453][ T5204] Registered IR keymap rc-empty [ 414.994766][ T5204] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 415.088555][ T5204] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 415.162825][ T8053] XFS (loop2): Ending clean mount [ 415.172843][ T8053] XFS (loop2): Quotacheck needed: Please wait. [ 415.368482][ T8053] XFS (loop2): Quotacheck: Done. [ 416.243749][ T4268] XFS (loop2): Unmounting Filesystem [ 416.388134][ T8085] ubi: mtd0 is already attached to ubi0 [ 416.750380][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 417.222726][ T8042] netlink: 76 bytes leftover after parsing attributes in process `syz.3.767'. [ 418.621649][ T8088] loop4: detected capacity change from 0 to 32768 [ 418.672648][ T8088] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 418.682998][ T8088] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 418.691719][ T8088] BTRFS info (device loop4): using free space tree [ 418.743822][ T5202] usb 4-1: USB disconnect, device number 12 [ 418.813364][ T8088] BTRFS info (device loop4): enabling ssd optimizations [ 418.853461][ T8088] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 418.864485][ T4316] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 419.066251][ T4316] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 419.148450][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x95, skipping [ 419.209748][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 419.264912][ T4316] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 419.274007][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.300764][ T7751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (7751) [ 419.398827][ T4316] usb 1-1: config 0 descriptor?? [ 419.422338][ T4316] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 419.749439][ T8124] loop2: detected capacity change from 0 to 32768 [ 419.893433][ T8124] XFS (loop2): Mounting V5 Filesystem [ 420.022718][ T8124] XFS (loop2): Ending clean mount [ 420.029980][ T8124] XFS (loop2): Quotacheck needed: Please wait. [ 420.042806][ T8141] loop1: detected capacity change from 0 to 64 [ 420.091334][ T8124] XFS (loop2): Quotacheck: Done. [ 420.799426][ T8149] ubi: mtd0 is already attached to ubi0 [ 423.299211][ T4312] usb 1-1: USB disconnect, device number 13 [ 424.137162][ T4268] XFS (loop2): Unmounting Filesystem [ 425.873167][ T8167] loop0: detected capacity change from 0 to 32768 [ 425.886130][ T8167] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 425.896366][ T8167] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 425.905089][ T8167] BTRFS info (device loop0): using free space tree [ 425.929826][ T8167] BTRFS info (device loop0): enabling ssd optimizations [ 425.944610][ T4863] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 425.962150][ T8167] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 426.128407][ T4863] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 426.143670][ T4863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.191737][ T4863] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 426.202998][ T4863] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 426.215068][ T4863] usb 5-1: Manufacturer: syz [ 426.245654][ T4863] usb 5-1: config 0 descriptor?? [ 427.252130][ T7751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (7751) [ 427.366699][ T4863] rc_core: IR keymap rc-hauppauge not found [ 427.372672][ T4863] Registered IR keymap rc-empty [ 427.387605][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.811'. [ 427.424889][ T4863] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 427.470873][ T4863] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 428.000434][ T5204] usb 5-1: USB disconnect, device number 15 [ 428.162473][ T8221] loop2: detected capacity change from 0 to 32768 [ 428.198564][ T8221] XFS (loop2): Mounting V5 Filesystem [ 428.602087][ T8221] XFS (loop2): Ending clean mount [ 428.611089][ T8221] XFS (loop2): Quotacheck needed: Please wait. [ 428.638392][ T8237] ubi: mtd0 is already attached to ubi0 [ 428.842273][ T8221] XFS (loop2): Quotacheck: Done. [ 429.065059][ T26] audit: type=1326 audit(1771730496.362:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.4.819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5153b9c629 code=0x0 [ 429.235237][ T4268] XFS (loop2): Unmounting Filesystem [ 431.355414][ T2167] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 431.595182][ T2167] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 431.645471][ T2167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.818625][ T2167] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 431.950384][ T2167] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 432.014410][ T2167] usb 2-1: Manufacturer: syz [ 432.072471][ T2167] usb 2-1: config 0 descriptor?? [ 432.208413][ T8285] loop4: detected capacity change from 0 to 1024 [ 432.280281][ T8285] EXT4-fs: inline encryption not supported [ 432.317850][ T8282] loop2: detected capacity change from 0 to 32768 [ 432.380800][ T8285] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 432.403300][ T8282] XFS (loop2): Mounting V5 Filesystem [ 432.458273][ T8285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 432.506143][ T8282] XFS (loop2): Ending clean mount [ 432.519333][ T8282] XFS (loop2): Quotacheck needed: Please wait. [ 432.565285][ T2167] rc_core: IR keymap rc-hauppauge not found [ 432.571278][ T2167] Registered IR keymap rc-empty [ 432.608504][ T2167] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 432.646702][ T2167] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 432.696282][ T8282] XFS (loop2): Quotacheck: Done. [ 432.881911][ T4268] XFS (loop2): Unmounting Filesystem [ 432.963607][ T8305] Bluetooth: MGMT ver 1.22 [ 433.149323][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 433.381184][ T8266] netlink: 76 bytes leftover after parsing attributes in process `syz.1.826'. [ 434.037686][ T4863] usb 2-1: USB disconnect, device number 9 [ 434.506252][ T8320] loop2: detected capacity change from 0 to 32768 [ 434.638506][ T8320] XFS (loop2): Mounting V5 Filesystem [ 434.759762][ T8320] XFS (loop2): Ending clean mount [ 434.994129][ T8337] loop3: detected capacity change from 0 to 2048 [ 435.496319][ T2167] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 435.545740][ T4268] XFS (loop2): Unmounting Filesystem [ 435.657371][ T8337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.707988][ T2167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.734642][ T2167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.764526][ T2167] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.831111][ T2167] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.864391][ T2167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.890732][ T2167] usb 1-1: config 0 descriptor?? [ 436.132534][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 436.169910][ T8348] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 436.326173][ T2167] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 436.448709][ T2167] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 436.543716][ T8361] ubi: mtd0 is already attached to ubi0 [ 436.884893][ T8363] device syzkaller0 entered promiscuous mode [ 437.611465][ T8381] netlink: 'syz.3.857': attribute type 13 has an invalid length. [ 437.644099][ T8376] loop2: detected capacity change from 0 to 32768 [ 437.649200][ T8381] netlink: 'syz.3.857': attribute type 17 has an invalid length. [ 437.675704][ T8376] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.854 (8376) [ 437.693386][ T8376] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 437.704210][ T8376] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 437.713008][ T8376] BTRFS info (device loop2): enabling disk space caching [ 437.720162][ T8376] BTRFS info (device loop2): force clearing of disk cache [ 437.727360][ T8376] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 437.736880][ T8376] BTRFS info (device loop2): use zstd compression, level 3 [ 437.744130][ T8376] BTRFS info (device loop2): disk space caching is enabled [ 437.901831][ T8376] BTRFS info (device loop2): enabling ssd optimizations [ 437.909706][ T8376] BTRFS info (device loop2): rebuilding free space tree [ 437.920916][ T8376] BTRFS info (device loop2): disabling free space tree [ 437.927897][ T8376] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 437.937644][ T8376] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 438.144588][ T4863] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 438.336555][ T4863] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 438.375050][ T4863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.451364][ T4863] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 438.487891][ T4863] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 438.552801][ T4863] usb 5-1: Manufacturer: syz [ 438.604231][ T4863] usb 5-1: config 0 descriptor?? [ 438.796178][ T5204] usb 1-1: USB disconnect, device number 14 [ 438.865897][ T4268] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 439.157641][ T4863] rc_core: IR keymap rc-hauppauge not found [ 439.163776][ T4863] Registered IR keymap rc-empty [ 439.202488][ T4863] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 439.249765][ T4863] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 439.283161][ T8381] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.383856][ T8381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.424897][ T8405] tipc: Enabled bearer , priority 0 [ 439.453662][ T8413] tipc: Resetting bearer [ 439.503286][ T8404] tipc: Disabling bearer [ 439.515585][ T8423] loop2: detected capacity change from 0 to 512 [ 439.987745][ T8394] netlink: 76 bytes leftover after parsing attributes in process `syz.4.856'. [ 440.063465][ T8428] loop2: detected capacity change from 0 to 32768 [ 440.086918][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.093311][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.226364][ T8428] XFS (loop2): Mounting V5 Filesystem [ 440.599532][ T8428] XFS (loop2): Ending clean mount [ 440.606771][ T8428] XFS (loop2): Quotacheck needed: Please wait. [ 440.639457][ T4317] usb 5-1: USB disconnect, device number 16 [ 440.694046][ T8428] XFS (loop2): Quotacheck: Done. [ 440.813924][ T8445] ubi: mtd0 is already attached to ubi0 [ 441.092364][ T4268] XFS (loop2): Unmounting Filesystem [ 441.482466][ T8451] device syzkaller0 entered promiscuous mode [ 441.964535][ T4312] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 442.113427][ T8459] loop3: detected capacity change from 0 to 32768 [ 442.117530][ T8463] loop0: detected capacity change from 0 to 2048 [ 442.128675][ T8459] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 442.139034][ T8459] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 442.147742][ T8459] BTRFS info (device loop3): using free space tree [ 442.164680][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 442.173506][ T4312] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 442.183247][ T8459] BTRFS info (device loop3): enabling ssd optimizations [ 442.196684][ T8459] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 442.248069][ T8463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.268936][ T4312] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 442.348358][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 442.367688][ T8463] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 442.403997][ T4312] usb 2-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 442.419698][ T8482] tipc: Enabled bearer , priority 0 [ 442.435611][ T8482] device syzkaller0 entered promiscuous mode [ 442.461705][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.475460][ T4312] usb 2-1: Product: syz [ 442.479666][ T4312] usb 2-1: Manufacturer: syz [ 442.484313][ T4312] usb 2-1: SerialNumber: syz [ 442.519845][ T4312] r8152-cfgselector 2-1: config 0 descriptor?? [ 442.569275][ T8482] tipc: Resetting bearer [ 442.575468][ T8485] syz.2.874 uses obsolete (PF_INET,SOCK_PACKET) [ 442.614068][ T8481] tipc: Resetting bearer [ 442.640778][ T8481] tipc: Disabling bearer [ 442.721301][ T7751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (7751) [ 442.751202][ T4312] r8152-cfgselector 2-1: Unknown version 0x0000 [ 442.779146][ T4312] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 443.906375][ T8503] ubi: mtd0 is already attached to ubi0 [ 444.199412][ T8509] loop1: detected capacity change from 0 to 1024 [ 444.206844][ T8509] EXT4-fs: inline encryption not supported [ 444.235700][ T8509] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 444.397428][ T8520] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 444.405999][ T8520] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 444.415887][ T8520] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 444.454126][ T8521] delete_channel: no stack [ 444.716044][ T8509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 445.009014][ T4448] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 445.382754][ T4448] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 445.936476][ T4448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.977829][ T4448] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 446.140857][ T4448] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 446.154438][ T4448] usb 1-1: Manufacturer: syz [ 446.175328][ T4448] usb 1-1: config 0 descriptor?? [ 446.240194][ T8534] loop3: detected capacity change from 0 to 2048 [ 446.262704][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 446.278945][ T8534] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.364983][ T8534] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 446.384618][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.889'. [ 446.455155][ T8539] tipc: Enabled bearer , priority 0 [ 446.484712][ T4448] rc_core: IR keymap rc-hauppauge not found [ 446.490906][ T4448] Registered IR keymap rc-empty [ 446.505190][ T8539] device syzkaller0 entered promiscuous mode [ 446.514164][ T4448] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 446.554963][ T4448] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 446.682630][ T8540] tipc: Resetting bearer [ 446.739726][ T8538] tipc: Resetting bearer [ 446.760965][ T8543] loop4: detected capacity change from 0 to 512 [ 446.850156][ T8543] ext4: Unknown parameter 'fowner<00000000000000000000' [ 448.425359][ T8538] tipc: Disabling bearer [ 449.032409][ T5165] usb 1-1: USB disconnect, device number 15 [ 449.314751][ T8568] device syzkaller0 entered promiscuous mode [ 449.340714][ T8567] ubi: mtd0 is already attached to ubi0 [ 449.422481][ T8570] loop0: detected capacity change from 0 to 128 [ 449.606798][ T8575] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 449.615247][ T8575] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 449.623813][ T8575] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 449.662717][ T8576] delete_channel: no stack [ 449.798448][ T8570] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 450.194765][ T8570] team0: Port device dummy0 added [ 450.482033][ T8581] loop1: detected capacity change from 0 to 2048 [ 450.535975][ T8581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.649471][ T8581] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 450.697729][ T8584] loop3: detected capacity change from 0 to 512 [ 450.796566][ T8584] ext4: Unknown parameter 'fowner<00000000000000000000' [ 450.987412][ T8589] loop2: detected capacity change from 0 to 32768 [ 451.355656][ T8589] XFS (loop2): Mounting V5 Filesystem [ 451.675523][ T8589] XFS (loop2): Ending clean mount [ 451.682588][ T8589] XFS (loop2): Quotacheck needed: Please wait. [ 451.842333][ T8589] XFS (loop2): Quotacheck: Done. [ 452.169801][ T8607] loop4: detected capacity change from 0 to 32768 [ 452.224712][ T8607] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 452.234995][ T8607] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 452.243681][ T8607] BTRFS info (device loop4): using free space tree [ 452.307246][ T4268] XFS (loop2): Unmounting Filesystem [ 452.344728][ T4312] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 452.551395][ T8607] BTRFS info (device loop4): enabling ssd optimizations [ 452.572350][ T8607] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 452.586487][ T4312] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 452.605019][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.628159][ T8638] loop1: detected capacity change from 0 to 256 [ 452.649718][ T4312] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 452.716150][ T4312] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 452.725635][ T8638] FAT-fs (loop1): Directory bread(block 64) failed [ 452.732197][ T8638] FAT-fs (loop1): Directory bread(block 65) failed [ 452.764435][ T4312] usb 1-1: Manufacturer: syz [ 452.791553][ T8638] FAT-fs (loop1): Directory bread(block 66) failed [ 452.798776][ T4312] usb 1-1: config 0 descriptor?? [ 452.839166][ T8638] FAT-fs (loop1): Directory bread(block 67) failed [ 452.882389][ T8638] FAT-fs (loop1): Directory bread(block 68) failed [ 452.914717][ T8638] FAT-fs (loop1): Directory bread(block 69) failed [ 452.954771][ T8638] FAT-fs (loop1): Directory bread(block 70) failed [ 452.967618][ T8638] FAT-fs (loop1): Directory bread(block 71) failed [ 452.976560][ T8638] FAT-fs (loop1): Directory bread(block 72) failed [ 452.983241][ T8638] FAT-fs (loop1): Directory bread(block 73) failed [ 453.155480][ T8643] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 453.164822][ T8643] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 453.173368][ T8643] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 453.211526][ T8644] delete_channel: no stack [ 453.624657][ T4312] rc_core: IR keymap rc-hauppauge not found [ 453.630709][ T4312] Registered IR keymap rc-empty [ 453.765492][ T4312] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 453.984544][ T4312] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 454.067539][ T8648] device syzkaller0 entered promiscuous mode [ 454.240680][ T8653] loop3: detected capacity change from 0 to 256 [ 454.322826][ T8655] loop1: detected capacity change from 0 to 512 [ 454.360542][ T8655] ext4: Unknown parameter 'fowner<00000000000000000000' [ 454.399704][ T8653] FAT-fs (loop3): Directory bread(block 64) failed [ 454.443814][ T8653] FAT-fs (loop3): Directory bread(block 65) failed [ 454.468146][ T8653] FAT-fs (loop3): Directory bread(block 66) failed [ 454.475042][ T8653] FAT-fs (loop3): Directory bread(block 67) failed [ 454.481770][ T8653] FAT-fs (loop3): Directory bread(block 68) failed [ 454.611757][ T8653] FAT-fs (loop3): Directory bread(block 69) failed [ 454.664702][ T8653] FAT-fs (loop3): Directory bread(block 70) failed [ 454.671890][ T8653] FAT-fs (loop3): Directory bread(block 71) failed [ 454.699271][ T8653] FAT-fs (loop3): Directory bread(block 72) failed [ 454.744489][ T8653] FAT-fs (loop3): Directory bread(block 73) failed [ 455.040403][ T5308] usb 1-1: USB disconnect, device number 16 [ 455.219264][ T8665] loop2: detected capacity change from 0 to 32768 [ 455.429065][ T8665] XFS (loop2): Mounting V5 Filesystem [ 455.464835][ T8675] tipc: Enabled bearer , priority 0 [ 455.472401][ T8675] device syzkaller0 entered promiscuous mode [ 455.510105][ T8675] tipc: Resetting bearer [ 455.527810][ T8673] tipc: Resetting bearer [ 455.638233][ T8665] XFS (loop2): Ending clean mount [ 455.645735][ T8665] XFS (loop2): Quotacheck needed: Please wait. [ 455.674063][ T8673] tipc: Disabling bearer [ 455.746918][ T8665] XFS (loop2): Quotacheck: Done. [ 455.854120][ T8683] loop0: detected capacity change from 0 to 2048 [ 455.918595][ T8683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.976554][ T8683] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 456.096053][ T4268] XFS (loop2): Unmounting Filesystem [ 456.345570][ T8686] loop4: detected capacity change from 0 to 32768 [ 456.360193][ T8686] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.929 (8686) [ 456.397214][ T8686] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 456.408233][ T8686] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 456.417027][ T8686] BTRFS info (device loop4): enabling disk space caching [ 456.424078][ T8686] BTRFS info (device loop4): force clearing of disk cache [ 456.431264][ T8686] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 456.441255][ T8686] BTRFS info (device loop4): use zstd compression, level 3 [ 456.448542][ T8686] BTRFS info (device loop4): disk space caching is enabled [ 456.664432][ T8686] BTRFS info (device loop4): enabling ssd optimizations [ 456.682250][ T8686] BTRFS info (device loop4): rebuilding free space tree [ 456.694971][ T8686] BTRFS info (device loop4): disabling free space tree [ 456.701991][ T8686] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 456.711744][ T8686] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 457.368037][ T8715] loop1: detected capacity change from 0 to 1024 [ 457.414751][ T8715] EXT4-fs: inline encryption not supported [ 457.452541][ T8715] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 457.629027][ T4271] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 457.657419][ T8715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 457.974441][ T4312] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 458.044746][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 458.176996][ T4312] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 458.192919][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.221252][ T4312] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 458.247497][ T4312] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 458.499738][ T8735] loop2: detected capacity change from 0 to 32768 [ 458.507672][ T4312] usb 1-1: Manufacturer: syz [ 458.516873][ T4312] usb 1-1: config 0 descriptor?? [ 458.576169][ T8738] tipc: Enabled bearer , priority 0 [ 458.614505][ T4312] rc_core: IR keymap rc-hauppauge not found [ 458.620432][ T4312] Registered IR keymap rc-empty [ 458.641374][ T4312] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 458.662834][ T8738] device syzkaller0 entered promiscuous mode [ 458.681253][ T4312] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 458.770930][ T8735] XFS (loop2): Mounting V5 Filesystem [ 458.784021][ T8738] tipc: Resetting bearer [ 458.855779][ T8737] tipc: Resetting bearer [ 459.038421][ T8737] tipc: Disabling bearer [ 459.048064][ T8735] XFS (loop2): Ending clean mount [ 459.055820][ T8735] XFS (loop2): Quotacheck needed: Please wait. [ 459.146282][ T8755] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 459.164709][ T8735] XFS (loop2): Quotacheck: Done. [ 459.321123][ T4268] XFS (loop2): Unmounting Filesystem [ 459.856454][ T8721] netlink: 76 bytes leftover after parsing attributes in process `syz.0.936'. [ 460.188714][ T4868] usb 1-1: USB disconnect, device number 17 [ 460.745817][ T8796] tipc: Enabled bearer , priority 0 [ 460.778199][ T8790] tipc: Resetting bearer [ 460.808969][ T8789] tipc: Disabling bearer [ 460.878815][ T8792] loop3: detected capacity change from 0 to 32768 [ 460.892354][ T8792] XFS (loop3): Mounting V5 Filesystem [ 460.937290][ T8792] XFS (loop3): Ending clean mount [ 460.946878][ T8792] XFS (loop3): Quotacheck needed: Please wait. [ 461.003061][ T8792] XFS (loop3): Quotacheck: Done. [ 461.205947][ T4270] XFS (loop3): Unmounting Filesystem [ 462.199727][ T8828] loop2: detected capacity change from 0 to 128 [ 462.472422][ T8828] netlink: 'syz.2.968': attribute type 10 has an invalid length. [ 462.556353][ T8828] team0: Port device dummy0 added [ 462.615331][ T8835] tipc: Enabled bearer , priority 0 [ 462.713501][ T8835] tipc: Resetting bearer [ 462.756767][ T8839] device syzkaller0 entered promiscuous mode [ 462.770237][ T8836] loop4: detected capacity change from 0 to 32768 [ 462.784676][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 462.920353][ T8836] XFS (loop4): Mounting V5 Filesystem [ 462.968373][ T8833] tipc: Resetting bearer [ 463.064697][ T4316] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 463.274365][ T4316] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 463.307241][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.392866][ T8833] tipc: Disabling bearer [ 463.416135][ T8836] XFS (loop4): Ending clean mount [ 463.416148][ T4316] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 463.454092][ T8836] XFS (loop4): Quotacheck needed: Please wait. [ 463.508643][ T4316] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 463.562084][ T8836] XFS (loop4): Quotacheck: Done. [ 463.564302][ T4316] usb 4-1: Manufacturer: syz [ 463.651688][ T8857] loop1: detected capacity change from 0 to 1024 [ 463.668501][ T4316] usb 4-1: config 0 descriptor?? [ 463.762856][ T8857] EXT4-fs: inline encryption not supported [ 463.795865][ T8862] loop0: detected capacity change from 0 to 512 [ 463.803617][ T8857] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 463.865670][ T4271] XFS (loop4): Unmounting Filesystem [ 463.877519][ T8862] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 463.964755][ T8857] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 463.991111][ T4316] rc_core: IR keymap rc-hauppauge not found [ 464.024519][ T8862] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 464.034354][ T4316] Registered IR keymap rc-empty [ 464.078204][ T8862] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.979: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 464.101521][ T4316] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 464.123847][ T8862] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 12: comm syz.0.979: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 464.180849][ T4316] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 464.214784][ T8862] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.979: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 464.235684][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.297937][ T8862] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 14: comm syz.0.979: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 464.318052][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.357584][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 464.435711][ T8862] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 15: comm syz.0.979: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 464.756421][ T4273] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 464.802990][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 465.071048][ T8840] netlink: 76 bytes leftover after parsing attributes in process `syz.3.974'. [ 465.127451][ T4868] usb 4-1: USB disconnect, device number 13 [ 466.635524][ T8904] loop0: detected capacity change from 0 to 32768 [ 466.763580][ T8904] XFS (loop0): Mounting V5 Filesystem [ 466.876061][ T8916] loop2: detected capacity change from 0 to 1024 [ 466.889036][ T8916] EXT4-fs: inline encryption not supported [ 466.895119][ T8904] XFS (loop0): Ending clean mount [ 466.902390][ T8916] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 466.923665][ T8904] XFS (loop0): Quotacheck needed: Please wait. [ 466.988204][ T8904] XFS (loop0): Quotacheck: Done. [ 467.225380][ T8916] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 467.270919][ T8916] overlayfs: failed to resolve './bus': -2 [ 467.624699][ T8930] loop1: detected capacity change from 0 to 32768 [ 467.634683][ T8932] xt_TCPMSS: Only works on TCP SYN packets [ 467.640978][ T8932] capability: warning: `syz.4.997' uses deprecated v2 capabilities in a way that may be insecure [ 467.815439][ T8930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.999 (8930) [ 468.274604][ T8930] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.284962][ T8930] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 468.293622][ T8930] BTRFS info (device loop1): using free space tree [ 468.357989][ T4273] XFS (loop0): Unmounting Filesystem [ 468.479382][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 468.738040][ T8951] ubi: mtd0 is already attached to ubi0 [ 468.788705][ T8930] BTRFS info (device loop1): enabling ssd optimizations [ 468.806927][ T8930] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 470.229670][ T8983] loop1: detected capacity change from 0 to 32768 [ 470.237317][ T4315] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 470.298664][ T8983] XFS (loop1): Mounting V5 Filesystem [ 470.390089][ T8983] XFS (loop1): Ending clean mount [ 470.400750][ T8983] XFS (loop1): Quotacheck needed: Please wait. [ 470.466170][ T4315] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 470.481812][ T4315] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.495891][ T4315] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.516746][ T4315] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.530881][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.541953][ T8983] XFS (loop1): Quotacheck: Done. [ 470.587068][ T4315] usb 4-1: invalid MIDI out EP 0 [ 470.807001][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'. [ 470.856086][ T9002] loop4: detected capacity change from 0 to 1024 [ 470.863893][ T4315] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 470.880816][ T9002] EXT4-fs: inline encryption not supported [ 470.897266][ T4315] usb 4-1: USB disconnect, device number 14 [ 470.925068][ T4269] XFS (loop1): Unmounting Filesystem [ 470.945010][ T9002] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 471.020040][ T9002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 471.081818][ T9002] overlayfs: failed to resolve './bus': -2 [ 471.104491][ T4868] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 471.129361][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.346580][ T4868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.375427][ T9008] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 471.404234][ T9008] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 471.425801][ T4868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.435688][ T4868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.448715][ T4868] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.457856][ T4868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.475777][ T4868] usb 1-1: config 0 descriptor?? [ 471.508849][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 471.526554][ T9008] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 471.534920][ T9010] loop3: detected capacity change from 0 to 512 [ 471.583014][ T9007] delete_channel: no stack [ 471.724150][ T9010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 471.734612][ T9010] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.892681][ T4868] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 471.907880][ T4868] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 471.935430][ T4868] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 471.947384][ T4868] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 471.961169][ T4868] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 471.982195][ T4868] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 472.036282][ T4868] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 472.162788][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 472.172527][ T5308] usb 1-1: USB disconnect, device number 18 [ 472.333222][ T9029] fido_id[9029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 473.078566][ T9038] loop2: detected capacity change from 0 to 32768 [ 473.231285][ T9038] XFS (loop2): Mounting V5 Filesystem [ 473.382436][ T9050] loop3: detected capacity change from 0 to 32768 [ 473.394526][ T9050] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1033 (9050) [ 473.412480][ T9050] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 473.422788][ T9050] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 473.431570][ T9050] BTRFS info (device loop3): enabling disk space caching [ 473.439207][ T9050] BTRFS info (device loop3): force clearing of disk cache [ 473.446403][ T9050] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 473.455814][ T9050] BTRFS info (device loop3): use zstd compression, level 3 [ 473.463041][ T9050] BTRFS info (device loop3): disk space caching is enabled [ 473.562011][ T9038] XFS (loop2): Ending clean mount [ 473.593415][ T9038] XFS (loop2): Quotacheck needed: Please wait. [ 473.649495][ T9038] XFS (loop2): Quotacheck: Done. [ 474.305959][ T9050] BTRFS info (device loop3): enabling ssd optimizations [ 474.313970][ T9050] BTRFS info (device loop3): rebuilding free space tree [ 474.330469][ T9050] BTRFS info (device loop3): disabling free space tree [ 474.337515][ T9050] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 474.347344][ T9050] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 474.628723][ T4268] XFS (loop2): Unmounting Filesystem [ 477.105134][ T4270] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 480.741675][ T4446] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 481.304528][ T4446] usb 3-1: Using ep0 maxpacket: 8 [ 481.314204][ T4446] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 481.368512][ T4446] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.408636][ T4446] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 481.463401][ T4446] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.485662][ T4446] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.509648][ T4446] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 481.529840][ T4446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.766116][ T4446] usb 3-1: usb_control_msg returned -32 [ 481.774761][ T4446] usbtmc 3-1:16.0: can't read capabilities [ 481.834544][ T4313] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 482.021207][ T9142] loop0: detected capacity change from 0 to 512 [ 482.033967][ T9142] ext4: Unknown parameter 'fowner<00000000000000000000' [ 482.048950][ T4313] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 482.067065][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.231275][ T4313] usb 4-1: Product: syz [ 482.236374][ T4313] usb 4-1: Manufacturer: syz [ 482.242020][ T4313] usb 4-1: SerialNumber: syz [ 482.262971][ T4313] usb 4-1: config 0 descriptor?? [ 482.476201][ T4313] hso 4-1:0.0: Failed to find BULK IN ep [ 482.622619][ T4313] usb-storage 4-1:0.0: USB Mass Storage device detected [ 482.712560][ T9152] ubi: mtd0 is already attached to ubi0 [ 483.530162][ T4313] usb 4-1: USB disconnect, device number 15 [ 483.655586][ T5300] usb 3-1: USB disconnect, device number 10 [ 483.865692][ T9154] loop3: detected capacity change from 0 to 32768 [ 483.978668][ T9154] XFS (loop3): Mounting V5 Filesystem [ 484.141624][ T9154] XFS (loop3): Ending clean mount [ 484.149021][ T9154] XFS (loop3): Quotacheck needed: Please wait. [ 484.280740][ T9154] XFS (loop3): Quotacheck: Done. [ 484.300713][ T9146] loop1: detected capacity change from 0 to 32768 [ 484.564198][ T9146] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1060 (9146) [ 484.622451][ T9146] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 484.637325][ T9146] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 484.693661][ T9146] BTRFS info (device loop1): using free space tree [ 484.845092][ T5300] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 485.184957][ T5300] usb 3-1: Using ep0 maxpacket: 16 [ 485.222389][ T5300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.342287][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.496138][ T9146] BTRFS error (device loop1): open_ctree failed: -12 [ 485.503151][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.604724][ T5300] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 485.657010][ T5300] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.710403][ T5300] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.733925][ T5300] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.755837][ T5300] usb 3-1: Manufacturer: syz [ 485.777951][ T5300] usb 3-1: config 0 descriptor?? [ 485.897648][ T4270] XFS (loop3): Unmounting Filesystem [ 486.134827][ T5300] rc_core: IR keymap rc-hauppauge not found [ 486.141914][ T5300] Registered IR keymap rc-empty [ 486.147138][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.184492][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.263512][ T5300] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 486.326789][ T5300] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 486.399290][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.598132][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.664926][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.754476][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.784557][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.819896][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.864427][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.904550][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 486.948433][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 487.004554][ T5300] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 487.062834][ T5300] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 487.093099][ T5300] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 487.121281][ T5300] usb 3-1: USB disconnect, device number 11 [ 487.368919][ T9233] loop1: detected capacity change from 0 to 512 [ 487.410672][ T9233] ext4: Unknown parameter 'fowner<00000000000000000000' [ 487.556775][ T4313] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 487.893051][ T9238] loop4: detected capacity change from 0 to 32768 [ 487.995725][ T9238] XFS (loop4): Mounting V5 Filesystem [ 488.046135][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 488.063893][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.074180][ T4313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 488.088645][ T4313] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.098803][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.119937][ T4313] usb 4-1: config 0 descriptor?? [ 488.188912][ T9238] XFS (loop4): Ending clean mount [ 488.198448][ T9238] XFS (loop4): Quotacheck needed: Please wait. [ 488.412799][ T9238] XFS (loop4): Quotacheck: Done. [ 488.949702][ T4313] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 489.457781][ T4313] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 489.484798][ T4313] usb 4-1: USB disconnect, device number 16 [ 489.620977][ T4271] XFS (loop4): Unmounting Filesystem [ 489.833807][ T9254] fido_id[9254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 491.853173][ T9280] loop3: detected capacity change from 0 to 512 [ 491.985836][ T9280] syz.3.1095: attempt to access beyond end of device [ 491.985836][ T9280] loop3: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 492.031999][ T9280] syz.3.1095: attempt to access beyond end of device [ 492.031999][ T9280] loop3: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 492.052606][ T26] audit: type=1800 audit(1771730559.352:9): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1095" name="file2" dev="loop3" ino=1048615 res=0 errno=0 [ 493.445076][ T9301] loop0: detected capacity change from 0 to 32768 [ 493.508137][ T9301] XFS (loop0): Mounting V5 Filesystem [ 493.563183][ T9301] XFS (loop0): Ending clean mount [ 493.572089][ T9301] XFS (loop0): Quotacheck needed: Please wait. [ 493.644389][ T4313] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 493.679615][ T9301] XFS (loop0): Quotacheck: Done. [ 494.088362][ T4313] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 494.097806][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.113951][ T4313] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 494.129435][ T4313] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 494.137773][ T4313] usb 4-1: Manufacturer: syz [ 494.144195][ T4313] usb 4-1: config 0 descriptor?? [ 494.534395][ T4313] rc_core: IR keymap rc-hauppauge not found [ 494.540376][ T4313] Registered IR keymap rc-empty [ 494.593008][ T4313] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 494.655581][ T4313] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 494.688974][ T4273] XFS (loop0): Unmounting Filesystem [ 495.162834][ T9331] loop2: detected capacity change from 0 to 512 [ 495.332546][ T9331] syz.2.1110: attempt to access beyond end of device [ 495.332546][ T9331] loop2: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 495.405750][ T9331] syz.2.1110: attempt to access beyond end of device [ 495.405750][ T9331] loop2: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 495.421849][ T26] audit: type=1800 audit(1771730562.722:10): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1110" name="file2" dev="loop2" ino=1048616 res=0 errno=0 [ 495.542919][ T9337] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 495.551969][ T9337] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 495.560453][ T9337] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 495.595450][ T9338] delete_channel: no stack [ 495.668261][ T9304] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1102'. [ 495.725447][ T4313] usb 4-1: USB disconnect, device number 17 [ 496.918444][ T9351] loop4: detected capacity change from 0 to 1024 [ 496.961398][ T9351] EXT4-fs: inline encryption not supported [ 496.999978][ T9351] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 497.073417][ T9356] loop1: detected capacity change from 0 to 256 [ 497.088373][ T9351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 497.137367][ T9356] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 497.214153][ T26] audit: type=1800 audit(1771730564.512:11): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1117" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 497.235073][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.278897][ T9356] syz.1.1117: attempt to access beyond end of device [ 497.278897][ T9356] loop1: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 497.308587][ T26] audit: type=1800 audit(1771730564.542:12): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1117" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 497.363363][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 497.833497][ T9365] loop4: detected capacity change from 0 to 32768 [ 497.909641][ T9365] XFS (loop4): Mounting V5 Filesystem [ 497.927416][ T9343] loop2: detected capacity change from 0 to 32768 [ 498.029080][ T9343] XFS (loop2): Mounting V5 Filesystem [ 498.102026][ T9365] XFS (loop4): Ending clean mount [ 498.109198][ T9365] XFS (loop4): Quotacheck needed: Please wait. [ 498.221915][ T9365] XFS (loop4): Quotacheck: Done. [ 498.776755][ T4271] XFS (loop4): Unmounting Filesystem [ 498.995710][ T9343] XFS (loop2): Ending clean mount [ 499.057287][ T9343] XFS (loop2): Quotacheck needed: Please wait. [ 501.526578][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.532922][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.574412][ T9343] XFS (loop2): Quotacheck: Done. [ 501.675148][ T9413] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 501.683389][ T9413] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 501.691959][ T9413] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 501.709957][ T4268] XFS (loop2): Unmounting Filesystem [ 501.737349][ T9415] delete_channel: no stack [ 502.470315][ T4313] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 502.573658][ T9425] loop1: detected capacity change from 0 to 512 [ 502.585286][ T9425] ext4: Unknown parameter 'fowner<00000000000000000000' [ 502.815938][ T4313] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 502.826997][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.839889][ T4313] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 502.854860][ T5165] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 502.868253][ T4313] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 502.877193][ T4313] usb 1-1: Manufacturer: syz [ 502.887264][ T4313] usb 1-1: config 0 descriptor?? [ 503.058618][ T4313] rc_core: IR keymap rc-hauppauge not found [ 503.067123][ T5165] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.082752][ T4313] Registered IR keymap rc-empty [ 503.090306][ T5165] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.116217][ T4313] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 503.145861][ T5165] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.168885][ T4313] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 503.183224][ T5165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 503.238153][ T5165] usb 3-1: SerialNumber: syz [ 503.510969][ T5165] usb 3-1: 0:2 : does not exist [ 503.588300][ T5165] usb 3-1: USB disconnect, device number 12 [ 503.865736][ T7751] udevd[7751]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.258802][ T9439] loop1: detected capacity change from 0 to 32768 [ 504.302568][ T9437] loop4: detected capacity change from 0 to 4096 [ 504.368965][ T9420] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1129'. [ 504.408531][ T9439] XFS (loop1): Mounting V5 Filesystem [ 504.488616][ T9207] usb 1-1: USB disconnect, device number 19 [ 504.587994][ T9439] XFS (loop1): Ending clean mount [ 504.595634][ T9439] XFS (loop1): Quotacheck needed: Please wait. [ 504.648093][ T9439] XFS (loop1): Quotacheck: Done. [ 506.888063][ T9473] loop3: detected capacity change from 0 to 24 [ 506.899766][ T9473] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 506.969713][ T9473] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 506.999936][ T4269] XFS (loop1): Unmounting Filesystem [ 507.523932][ T9485] loop3: detected capacity change from 0 to 1024 [ 507.888112][ T9485] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 508.086810][ T5165] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 508.313752][ T9489] device syzkaller0 entered promiscuous mode [ 508.339311][ T9485] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 508.349909][ T9485] EXT4-fs (loop3): unmounting filesystem. [ 508.574857][ T5165] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 508.584044][ T5165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.658839][ T5165] usb 1-1: config 0 descriptor?? [ 508.697941][ T5165] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 508.887494][ T5165] gp8psk: usb in 128 operation failed. [ 508.916557][ T5165] gp8psk: usb in 137 operation failed. [ 508.932403][ T5165] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.966361][ T5165] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 509.000287][ T5165] usb 1-1: media controller created [ 509.066864][ T5165] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.120299][ T9499] loop1: detected capacity change from 0 to 512 [ 509.134385][ T5165] gp8psk_fe: Frontend attached [ 509.142307][ T5165] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 509.160356][ T5165] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 509.175961][ T9499] ext4: Unknown parameter 'fowner<00000000000000000000' [ 509.806894][ T5165] gp8psk: usb in 138 operation failed. [ 509.812937][ T5165] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 509.822987][ T5165] gp8psk: found Genpix USB device pID = 203 (hex) [ 509.840158][ T5165] usb 1-1: USB disconnect, device number 20 [ 509.992915][ T9511] netlink: 'syz.3.1152': attribute type 12 has an invalid length. [ 510.004224][ T9511] netlink: 'syz.3.1152': attribute type 29 has an invalid length. [ 510.018133][ T9511] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1152'. [ 510.054838][ T9511] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 510.108694][ T5165] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 510.196820][ T9515] loop1: detected capacity change from 0 to 24 [ 510.211466][ T9515] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 510.223981][ T9515] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 510.790616][ T9531] loop3: detected capacity change from 0 to 256 [ 510.852078][ T9531] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 510.873613][ T9535] loop2: detected capacity change from 0 to 512 [ 510.893636][ T9531] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 510.906832][ T9533] device syzkaller0 entered promiscuous mode [ 510.921819][ T9535] ext4: Unknown parameter 'fowner<00000000000000000000' [ 510.934374][ T2167] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 511.220089][ T2167] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 511.233510][ T2167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.250130][ T2167] usb 1-1: Product: syz [ 511.254947][ T2167] usb 1-1: Manufacturer: syz [ 511.278193][ T2167] usb 1-1: SerialNumber: syz [ 511.292389][ T2167] usb 1-1: config 0 descriptor?? [ 511.329470][ T9544] loop3: detected capacity change from 0 to 24 [ 511.338751][ T9544] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 511.346092][ T9544] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 511.509507][ T2167] hso 1-1:0.0: Failed to find BULK IN ep [ 511.519101][ T2167] usb-storage 1-1:0.0: USB Mass Storage device detected [ 512.155028][ T5164] usb 1-1: USB disconnect, device number 21 [ 514.048342][ T9611] loop1: detected capacity change from 0 to 16 [ 514.264678][ T9611] erofs: (device loop1): mounted with root inode @ nid 36. [ 514.675616][ T9631] loop0: detected capacity change from 0 to 256 [ 514.713393][ T4277] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 514.752152][ T9611] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 514.785509][ T9631] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 514.960009][ T9638] loop2: detected capacity change from 0 to 24 [ 515.131572][ T9638] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 515.265155][ T9638] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 515.547868][ T9646] loop2: detected capacity change from 0 to 512 [ 515.572108][ T9646] ext4: Unknown parameter 'fowner<00000000000000000000' [ 516.784204][ T9670] loop4: detected capacity change from 0 to 16 [ 516.802475][ T9670] erofs: (device loop4): mounted with root inode @ nid 36. [ 516.866787][ T4277] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 516.879502][ T9670] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 517.684549][ T5202] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 517.915936][ T5202] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 517.942420][ T5202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.960324][ T5202] usb 1-1: Product: syz [ 517.964865][ T5202] usb 1-1: Manufacturer: syz [ 517.969503][ T5202] usb 1-1: SerialNumber: syz [ 518.007013][ T5202] usb 1-1: config 0 descriptor?? [ 518.016306][ T9696] loop2: detected capacity change from 0 to 512 [ 518.045215][ T9696] ext4: Unknown parameter 'fowner<00000000000000000000' [ 518.287110][ T5202] hso 1-1:0.0: Failed to find BULK IN ep [ 518.298511][ T5202] usb-storage 1-1:0.0: USB Mass Storage device detected [ 518.465122][ T9698] loop3: detected capacity change from 0 to 32768 [ 518.988591][ T9207] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 519.117796][ T9698] XFS (loop3): Mounting V5 Filesystem [ 519.149994][ T5202] usb 1-1: USB disconnect, device number 22 [ 519.162037][ T9698] XFS (loop3): Ending clean mount [ 519.168839][ T9698] XFS (loop3): Quotacheck needed: Please wait. [ 519.250192][ T9715] syz.2.1202 sent an empty control message without MSG_MORE. [ 519.275912][ T9207] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.292650][ T9207] usb 5-1: config 0 has no interface number 0 [ 519.299379][ T9207] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 519.312051][ T9207] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 519.323205][ T9207] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 519.332595][ T9207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.343163][ T9207] usb 5-1: config 0 descriptor?? [ 519.348764][ T9698] XFS (loop3): Quotacheck: Done. [ 519.352758][ T9694] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 519.526820][ T9207] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 520.170368][ T9207] usb 5-1: USB disconnect, device number 17 [ 520.777350][ T4270] XFS (loop3): Unmounting Filesystem [ 521.399977][ T9743] loop4: detected capacity change from 0 to 512 [ 521.502624][ T9743] ext4: Unknown parameter 'fowner<00000000000000000000' [ 521.538716][ T9746] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1213'. [ 522.503424][ T9761] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 522.512365][ T9761] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 522.520863][ T9761] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 522.554657][ T9207] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 522.568078][ T9764] delete_channel: no stack [ 522.634659][ T4313] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 522.759567][ T9207] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 522.771022][ T9207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.793781][ T9207] usb 2-1: Product: syz [ 522.800647][ T9207] usb 2-1: Manufacturer: syz [ 522.805384][ T9207] usb 2-1: SerialNumber: syz [ 522.819727][ T9207] usb 2-1: config 0 descriptor?? [ 522.844450][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 522.851202][ T4313] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 522.868671][ T4313] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 522.885598][ T4313] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 522.900855][ T4313] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 522.923556][ T4313] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 522.941549][ T4313] usb 5-1: config 168 interface 0 has no altsetting 0 [ 522.958735][ T4313] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 522.970513][ T4313] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 522.981843][ T4313] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 523.022657][ T4313] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 523.044553][ T4313] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 523.084379][ T4313] usb 5-1: config 168 interface 0 has no altsetting 0 [ 523.100416][ T4313] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 523.113036][ T4313] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 523.212281][ T9207] hso 2-1:0.0: Failed to find BULK IN ep [ 523.221070][ T9207] usb-storage 2-1:0.0: USB Mass Storage device detected [ 523.247806][ T4313] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 523.259926][ T4313] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 523.271365][ T4313] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 523.285607][ T4313] usb 5-1: config 168 interface 0 has no altsetting 0 [ 524.115083][ T4313] usb 5-1: string descriptor 0 read error: -22 [ 524.131819][ T4313] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 524.141859][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.162725][ T4313] adutux 5-1:168.0: interrupt endpoints not found [ 524.213562][ T9207] usb 2-1: USB disconnect, device number 11 [ 524.277841][ T9790] loop2: detected capacity change from 0 to 512 [ 524.315555][ T9790] ext4: Unknown parameter 'fowner<00000000000000000000' [ 524.363520][ T4315] usb 5-1: USB disconnect, device number 18 [ 525.373866][ T9800] loop2: detected capacity change from 0 to 24 [ 525.388219][ T9800] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 525.455329][ T9800] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 525.574376][ T4315] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 526.078822][ T4315] usb 5-1: device descriptor read/all, error -71 [ 526.187504][ T9810] loop2: detected capacity change from 0 to 512 [ 526.266710][ T9815] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 526.275467][ T9815] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 526.283895][ T9815] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 526.309041][ T9810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 526.318345][ T9810] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.334966][ T9818] delete_channel: no stack [ 526.363364][ T26] audit: type=1800 audit(1771730593.662:13): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1234" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 526.557763][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 526.721880][ T9824] loop2: detected capacity change from 0 to 256 [ 527.963873][ T9835] loop1: detected capacity change from 0 to 512 [ 527.981147][ T9835] ext4: Unknown parameter 'fowner<00000000000000000000' [ 528.264369][ T5165] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 528.495788][ T5165] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 528.578232][ T5165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.723507][ T5165] usb 3-1: Product: syz [ 528.902199][ T5165] usb 3-1: Manufacturer: syz [ 528.916025][ T5165] usb 3-1: SerialNumber: syz [ 529.081036][ T5165] usb 3-1: config 0 descriptor?? [ 529.118651][ T9840] loop1: detected capacity change from 0 to 24 [ 529.130080][ T9840] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 529.170851][ T9840] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 529.291178][ T5165] hso 3-1:0.0: Failed to find BULK IN ep [ 529.316076][ T5165] usb-storage 3-1:0.0: USB Mass Storage device detected [ 529.513747][ T5164] usb 3-1: USB disconnect, device number 13 [ 530.649291][ T9856] loop1: detected capacity change from 0 to 1024 [ 531.345905][ T9865] device syzkaller0 entered promiscuous mode [ 531.451712][ T9867] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 531.460151][ T9867] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 531.468609][ T9867] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 531.488657][ T9871] delete_channel: no stack [ 531.725878][ T9877] loop0: detected capacity change from 0 to 24 [ 531.749598][ T9878] loop1: detected capacity change from 0 to 512 [ 531.768271][ T9877] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 531.788487][ T9878] ext4: Unknown parameter 'fowner<00000000000000000000' [ 531.807326][ T9877] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 533.099399][ T4315] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 533.430869][ T4315] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 533.557848][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.609735][ T4315] usb 4-1: Product: syz [ 533.629203][ T4315] usb 4-1: Manufacturer: syz [ 533.661850][ T4315] usb 4-1: SerialNumber: syz [ 533.693625][ T4315] usb 4-1: config 0 descriptor?? [ 533.930210][ T4315] hso 4-1:0.0: Failed to find BULK IN ep [ 533.946238][ T4315] usb-storage 4-1:0.0: USB Mass Storage device detected [ 534.079708][ T9911] device syzkaller0 entered promiscuous mode [ 534.133511][ T5164] usb 4-1: USB disconnect, device number 18 [ 534.430212][ T9918] loop2: detected capacity change from 0 to 512 [ 534.478056][ T9918] ext4: Unknown parameter 'fowner<00000000000000000000' [ 534.845884][ T9926] loop0: detected capacity change from 0 to 128 [ 535.415614][ T9923] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 535.423889][ T9923] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 535.432356][ T9923] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 535.495192][ T9927] delete_channel: no stack [ 535.502484][ T9926] syz.0.1271: attempt to access beyond end of device [ 535.502484][ T9926] loop0: rw=2049, sector=145, nr_sectors = 5 limit=128 [ 535.563686][ T9929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1272'. [ 535.614852][ T9926] syz.0.1271: attempt to access beyond end of device [ 535.614852][ T9926] loop0: rw=34817, sector=102, nr_sectors = 27 limit=128 [ 535.669523][ T9926] syz.0.1271: attempt to access beyond end of device [ 535.669523][ T9926] loop0: rw=34817, sector=145, nr_sectors = 5 limit=128 [ 535.688343][ T9934] loop3: detected capacity change from 0 to 512 [ 535.894527][ T5164] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 535.951022][ T9934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 535.996721][ T9934] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.094861][ T5164] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 536.127289][ T5164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.144435][ T9942] device syzkaller0 entered promiscuous mode [ 536.161773][ T5164] usb 3-1: Product: syz [ 536.169449][ T26] audit: type=1800 audit(1771730603.472:14): pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1273" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 536.172538][ T5164] usb 3-1: Manufacturer: syz [ 536.199958][ T5164] usb 3-1: SerialNumber: syz [ 536.220109][ T5164] usb 3-1: config 0 descriptor?? [ 536.300766][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 536.368670][ T9947] loop0: detected capacity change from 0 to 164 [ 536.435423][ T5164] hso 3-1:0.0: Failed to find BULK IN ep [ 536.465631][ T5164] usb-storage 3-1:0.0: USB Mass Storage device detected [ 536.662409][ T5308] usb 3-1: USB disconnect, device number 14 [ 536.979007][ T9964] device syzkaller0 entered promiscuous mode [ 536.986665][ T9961] loop4: detected capacity change from 0 to 512 [ 536.993470][ T9967] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 537.001807][ T9967] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 537.010257][ T9967] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 537.020235][ T9961] ext4: Unknown parameter 'fowner<00000000000000000000' [ 537.037886][ T9968] delete_channel: no stack [ 537.043821][ T9966] device syzkaller0 entered promiscuous mode [ 538.084188][ T9977] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1287'. [ 538.913595][ T9988] loop2: detected capacity change from 0 to 32768 [ 539.234647][ T9988] XFS (loop2): Mounting V5 Filesystem [ 539.479928][T10010] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 539.488892][T10010] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 539.497405][T10010] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 539.519911][T10012] loop1: detected capacity change from 0 to 512 [ 539.533752][ T9988] XFS (loop2): Ending clean mount [ 539.540855][ T9988] XFS (loop2): Quotacheck needed: Please wait. [ 539.551095][T10013] delete_channel: no stack [ 539.560791][T10012] ext4: Unknown parameter 'fowner<00000000000000000000' [ 539.584533][ T5164] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 539.617169][ T9988] XFS (loop2): Quotacheck: Done. [ 539.905912][ T5164] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 539.915312][ T5164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.923481][ T5164] usb 4-1: Product: syz [ 539.931060][ T5164] usb 4-1: Manufacturer: syz [ 539.937082][ T5164] usb 4-1: SerialNumber: syz [ 539.956022][ T5164] usb 4-1: config 0 descriptor?? [ 540.187143][ T5164] hso 4-1:0.0: Failed to find BULK IN ep [ 540.208141][ T5164] usb-storage 4-1:0.0: USB Mass Storage device detected [ 540.791009][T10023] loop0: detected capacity change from 0 to 512 [ 540.810048][T10023] ext4: Unknown parameter 'fowner<00000000000000000000' [ 540.868627][ T5164] usb 4-1: USB disconnect, device number 19 [ 540.922280][ T4402] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 541.085496][T10028] device syzkaller0 entered promiscuous mode [ 542.191691][T10040] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1304'. [ 542.238024][ T4268] XFS (loop2): Unmounting Filesystem [ 543.809150][T10056] device syzkaller0 entered promiscuous mode [ 543.906618][ T26] audit: type=1326 audit(1771730611.202:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 544.135460][ T26] audit: type=1326 audit(1771730611.212:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 544.467507][ T26] audit: type=1326 audit(1771730611.212:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 544.674494][ T26] audit: type=1326 audit(1771730611.212:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 544.840768][ T26] audit: type=1326 audit(1771730611.212:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 545.062329][T10076] loop3: detected capacity change from 0 to 32768 [ 545.081537][ T4315] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 545.143412][ T26] audit: type=1326 audit(1771730611.212:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 545.194031][T10076] XFS (loop3): Mounting V5 Filesystem [ 545.269056][T10076] XFS (loop3): Ending clean mount [ 545.276552][T10076] XFS (loop3): Quotacheck needed: Please wait. [ 545.290649][ T4315] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 545.366178][ T26] audit: type=1326 audit(1771730611.212:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 545.435263][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.443317][ T26] audit: type=1326 audit(1771730611.212:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 545.443366][ T26] audit: type=1326 audit(1771730611.212:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 545.465581][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.497422][ T26] audit: type=1326 audit(1771730611.212:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6b39c629 code=0x7ffc0000 [ 545.520418][T10076] XFS (loop3): Quotacheck: Done. [ 545.991689][ T4315] usb 2-1: Product: syz [ 546.120960][ T4315] usb 2-1: Manufacturer: syz [ 546.164482][ T4315] usb 2-1: SerialNumber: syz [ 546.183217][ T4315] usb 2-1: config 0 descriptor?? [ 546.281718][T10090] loop2: detected capacity change from 0 to 4096 [ 546.319918][T10090] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 546.411866][ T4315] hso 2-1:0.0: Failed to find BULK IN ep [ 546.439238][ T4315] usb-storage 2-1:0.0: USB Mass Storage device detected [ 546.508122][ T4270] XFS (loop3): Unmounting Filesystem [ 546.665650][ T2167] usb 2-1: USB disconnect, device number 12 [ 546.720047][ T4268] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 546.729594][ T4268] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 546.771413][ T4268] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 547.942347][T10114] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1327'. [ 548.073049][T10116] device syzkaller0 entered promiscuous mode [ 548.433722][T10123] device team_slave_0 entered promiscuous mode [ 548.440449][T10123] device team_slave_1 entered promiscuous mode [ 548.732964][T10138] device syzkaller0 entered promiscuous mode [ 549.049501][T10131] device syzkaller0 entered promiscuous mode [ 549.152714][T10145] loop4: detected capacity change from 0 to 32768 [ 549.255264][T10145] XFS (loop4): Mounting V5 Filesystem [ 549.374739][T10145] XFS (loop4): Ending clean mount [ 549.479192][T10145] XFS (loop4): Quotacheck needed: Please wait. [ 549.563928][T10145] XFS (loop4): Quotacheck: Done. [ 549.734851][ T5165] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 549.834856][ T2167] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 550.135544][T10166] loop3: detected capacity change from 0 to 32768 [ 550.178067][ T5165] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 550.208752][ T5165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.244477][ T2167] usb 1-1: Using ep0 maxpacket: 32 [ 550.260374][ T2167] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 550.274470][ T5165] usb 3-1: Product: syz [ 550.283625][ T5165] usb 3-1: Manufacturer: syz [ 550.290888][ T5165] usb 3-1: SerialNumber: syz [ 550.291309][ T2167] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 550.347582][ T5165] usb 3-1: config 0 descriptor?? [ 550.359986][ T2167] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 550.381490][ T2167] usb 1-1: Product: syz [ 550.386141][ T2167] usb 1-1: Manufacturer: syz [ 550.391178][ T2167] usb 1-1: SerialNumber: syz [ 550.444406][ T2167] usb 1-1: config 0 descriptor?? [ 550.452568][T10165] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 550.580864][ T5165] hso 3-1:0.0: Failed to find BULK IN ep [ 550.609456][ T5165] usb-storage 3-1:0.0: USB Mass Storage device detected [ 550.719330][ T4315] usb 1-1: USB disconnect, device number 23 [ 550.789990][ T2167] usb 3-1: USB disconnect, device number 15 [ 550.903150][T10160] syz.1.1338 (10160): drop_caches: 2 [ 550.911157][ T4271] XFS (loop4): Unmounting Filesystem [ 550.998153][T10166] XFS (loop3): Mounting V5 Filesystem [ 551.051693][T10166] XFS (loop3): Ending clean mount [ 551.060289][T10166] XFS (loop3): Quotacheck needed: Please wait. [ 551.110417][T10166] XFS (loop3): Quotacheck: Done. [ 551.755974][ T4270] XFS (loop3): Unmounting Filesystem [ 551.993295][T10194] loop4: detected capacity change from 0 to 256 [ 552.091635][T10194] FAT-fs (loop4): Directory bread(block 64) failed [ 552.112327][T10194] FAT-fs (loop4): Directory bread(block 65) failed [ 552.139532][T10194] FAT-fs (loop4): Directory bread(block 66) failed [ 552.177164][T10194] FAT-fs (loop4): Directory bread(block 67) failed [ 552.223052][T10194] FAT-fs (loop4): Directory bread(block 68) failed [ 552.248099][T10194] FAT-fs (loop4): Directory bread(block 69) failed [ 552.270721][T10194] FAT-fs (loop4): Directory bread(block 70) failed [ 552.285373][T10194] FAT-fs (loop4): Directory bread(block 71) failed [ 552.292246][T10194] FAT-fs (loop4): Directory bread(block 72) failed [ 552.299289][T10194] FAT-fs (loop4): Directory bread(block 73) failed [ 552.460305][T10202] device syzkaller0 entered promiscuous mode [ 552.671212][T10204] loop4: detected capacity change from 0 to 32768 [ 552.890439][T10210] device syzkaller0 entered promiscuous mode [ 552.906604][T10204] XFS (loop4): Mounting V5 Filesystem [ 553.013409][T10204] XFS (loop4): Ending clean mount [ 553.022520][T10204] XFS (loop4): Quotacheck needed: Please wait. [ 553.108347][T10204] XFS (loop4): Quotacheck: Done. [ 553.525093][ T2167] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 553.729977][ T2167] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 553.739384][ T2167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.747804][ T2167] usb 3-1: Product: syz [ 553.752934][ T2167] usb 3-1: Manufacturer: syz [ 553.757899][ T2167] usb 3-1: SerialNumber: syz [ 553.769962][ T2167] usb 3-1: config 0 descriptor?? [ 555.470366][ T2167] hso 3-1:0.0: Failed to find BULK IN ep [ 555.493612][ T2167] usb-storage 3-1:0.0: USB Mass Storage device detected [ 555.522594][ T4271] XFS (loop4): Unmounting Filesystem [ 555.727842][ T2167] usb 3-1: USB disconnect, device number 16 [ 555.936701][T10254] device syzkaller0 entered promiscuous mode [ 556.061471][T10260] loop0: detected capacity change from 0 to 512 [ 556.122682][T10260] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 556.212207][T10260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 556.237667][T10260] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 556.256108][T10263] device syzkaller0 entered promiscuous mode [ 556.360648][T10269] loop2: detected capacity change from 0 to 64 [ 556.503792][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 556.600361][T10269] overlayfs: upper fs needs to support d_type. [ 557.601891][T10280] loop4: detected capacity change from 0 to 32768 [ 557.724353][T10280] XFS (loop4): Mounting V5 Filesystem [ 557.775670][T10288] loop1: detected capacity change from 0 to 1024 [ 557.805238][T10288] EXT4-fs: Ignoring removed orlov option [ 557.904850][T10288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 558.056302][T10280] XFS (loop4): Ending clean mount [ 558.063400][T10280] XFS (loop4): Quotacheck needed: Please wait. [ 558.136705][T10280] XFS (loop4): Quotacheck: Done. [ 558.675079][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 558.849038][T10309] device syzkaller0 entered promiscuous mode [ 558.884214][T10311] random: crng reseeded on system resumption [ 558.893969][ T4271] XFS (loop4): Unmounting Filesystem [ 559.933598][T10343] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1388'. [ 560.645817][ T4277] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 560.654866][ T4277] Bluetooth: hci2: Injecting HCI hardware error event [ 560.666423][ T4272] Bluetooth: hci2: hardware error 0x00 [ 561.158276][T10351] device syzkaller0 entered promiscuous mode [ 562.220776][T10358] loop1: detected capacity change from 0 to 32768 [ 562.243636][T10358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1394 (10358) [ 562.276654][T10358] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 562.311296][T10358] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 562.325012][T10358] BTRFS info (device loop1): using free space tree [ 562.378775][T10382] device syzkaller0 entered promiscuous mode [ 563.870955][ T4272] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 563.874041][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.883866][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.022484][T10358] BTRFS info (device loop1): enabling ssd optimizations [ 564.035602][T10358] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 564.248413][T10406] loop2: detected capacity change from 0 to 1024 [ 564.283553][T10406] EXT4-fs: Ignoring removed orlov option [ 564.306263][T10408] loop4: detected capacity change from 0 to 64 [ 564.336733][T10406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 564.449043][T10408] overlayfs: upper fs needs to support d_type. [ 564.476666][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 564.478485][T10408] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 564.504674][T10408] overlayfs: failed to set xattr on upper [ 564.519724][T10408] overlayfs: ...falling back to index=off,metacopy=off. [ 564.654054][ T4271] Trying to free block not in datazone [ 565.222296][T10427] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 565.321744][T10429] loop4: detected capacity change from 0 to 512 [ 565.425772][T10429] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 565.444694][T10429] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 565.519061][T10429] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 565.644238][T10436] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 565.718241][T10440] device syzkaller0 entered promiscuous mode [ 565.764884][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 566.053774][T10443] loop1: detected capacity change from 0 to 32768 [ 566.164766][T10443] XFS (loop1): Mounting V5 Filesystem [ 566.324513][T10443] XFS (loop1): Ending clean mount [ 566.331902][T10443] XFS (loop1): Quotacheck needed: Please wait. [ 566.432469][T10443] XFS (loop1): Quotacheck: Done. [ 567.165446][ T4269] XFS (loop1): Unmounting Filesystem [ 567.498983][T10460] loop3: detected capacity change from 0 to 32768 [ 567.520379][T10460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1422 (10460) [ 567.573328][T10460] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.601494][T10460] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 567.635495][T10460] BTRFS info (device loop3): using free space tree [ 567.698440][T10475] loop1: detected capacity change from 0 to 64 [ 568.162981][T10460] BTRFS info (device loop3): enabling ssd optimizations [ 568.231372][T10475] overlayfs: upper fs needs to support d_type. [ 568.292850][T10460] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 568.394855][T10475] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 568.662004][T10475] overlayfs: failed to set xattr on upper [ 568.704117][T10475] overlayfs: ...falling back to index=off,metacopy=off. [ 568.963184][ T4269] Trying to free block not in datazone [ 569.107828][ T7751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (7751) [ 569.152067][T10504] device syzkaller0 entered promiscuous mode [ 569.203179][T10506] loop4: detected capacity change from 0 to 1024 [ 569.246172][T10506] EXT4-fs: Ignoring removed orlov option [ 569.338692][T10506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 569.471043][T10509] loop2: detected capacity change from 0 to 32768 [ 569.541653][T10509] XFS (loop2): Mounting V5 Filesystem [ 569.694750][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 569.851168][T10509] XFS (loop2): Ending clean mount [ 569.858524][T10509] XFS (loop2): Quotacheck needed: Please wait. [ 569.930203][T10509] XFS (loop2): Quotacheck: Done. [ 570.356519][T10524] sp0: Synchronizing with TNC [ 570.749184][ T4268] XFS (loop2): Unmounting Filesystem [ 570.995809][T10545] binder: transaction release 29 bad handle 1, ret = -22 [ 571.181443][T10543] loop1: detected capacity change from 0 to 32768 [ 571.201165][T10549] device syzkaller0 entered promiscuous mode [ 571.378409][T10543] XFS (loop1): Mounting V5 Filesystem [ 571.547937][T10543] XFS (loop1): Ending clean mount [ 571.560908][T10543] XFS (loop1): Quotacheck needed: Please wait. [ 571.654857][T10543] XFS (loop1): Quotacheck: Done. [ 571.671325][T10565] loop3: detected capacity change from 0 to 1024 [ 571.797035][T10565] EXT4-fs: inline encryption not supported [ 571.926141][T10565] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 572.049598][T10565] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 572.108911][T10565] overlayfs: missing 'workdir' [ 572.239642][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 572.256987][T10577] loop4: detected capacity change from 0 to 2048 [ 572.315858][T10577] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 573.393111][T10577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.782953][ T4269] XFS (loop1): Unmounting Filesystem [ 574.442136][T10602] loop3: detected capacity change from 0 to 1024 [ 574.506320][T10602] EXT4-fs: inline encryption not supported [ 574.557814][T10602] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 574.626386][T10606] device syzkaller0 entered promiscuous mode [ 574.679858][T10602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 574.706790][T10602] overlayfs: missing 'workdir' [ 574.810585][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 574.820992][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 574.830384][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 574.839526][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 574.847354][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 574.859355][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 574.892597][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 575.153420][T10625] loop1: detected capacity change from 0 to 256 [ 575.199833][T10611] chnl_net:caif_netlink_parms(): no params data found [ 575.223078][T10627] netlink: 'syz.2.1470': attribute type 1 has an invalid length. [ 575.247176][T10625] FAT-fs (loop1): Directory bread(block 64) failed [ 575.256213][T10627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.284259][T10625] FAT-fs (loop1): Directory bread(block 65) failed [ 575.291319][T10625] FAT-fs (loop1): Directory bread(block 66) failed [ 575.306780][T10627] device vlan2 entered promiscuous mode [ 575.312567][T10625] FAT-fs (loop1): Directory bread(block 67) failed [ 575.319623][T10625] FAT-fs (loop1): Directory bread(block 68) failed [ 575.327922][T10625] FAT-fs (loop1): Directory bread(block 69) failed [ 575.334763][T10627] device bond1 entered promiscuous mode [ 575.340561][T10625] FAT-fs (loop1): Directory bread(block 70) failed [ 575.360763][T10625] FAT-fs (loop1): Directory bread(block 71) failed [ 575.384409][ T5695] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 575.414556][T10625] FAT-fs (loop1): Directory bread(block 72) failed [ 575.450084][T10625] FAT-fs (loop1): Directory bread(block 73) failed [ 575.509666][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.548853][T10611] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.556167][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 575.556181][ T26] audit: type=1800 audit(1771730642.852:89): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1469" name="bus" dev="loop1" ino=1048620 res=0 errno=0 [ 575.584424][ T5695] usb 4-1: Using ep0 maxpacket: 32 [ 575.591453][ T5695] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 575.592798][T10611] device bridge_slave_0 entered promiscuous mode [ 575.625945][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.633945][T10611] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.642568][T10611] device bridge_slave_1 entered promiscuous mode [ 575.652861][ T5695] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 575.687249][ T5695] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 575.724772][ T5695] usb 4-1: Product: syz [ 575.728987][ T5695] usb 4-1: Manufacturer: syz [ 575.734148][ T5695] usb 4-1: SerialNumber: syz [ 575.747847][T10611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.790099][ T5695] usb 4-1: config 0 descriptor?? [ 575.802440][T10611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.852553][ T5695] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 575.919795][T10645] ucma_write: process 945 (syz.1.1475) changed security contexts after opening file descriptor, this is not allowed. [ 575.942387][T10611] team0: Port device team_slave_0 added [ 575.951023][T10611] team0: Port device team_slave_1 added [ 575.977475][T10611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.984781][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.011851][T10611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.024251][ T11] usb 4-1: Failed to submit usb control message: -71 [ 576.024401][ T4313] usb 4-1: USB disconnect, device number 20 [ 576.039872][T10611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.048673][ T11] usb 4-1: unable to send the bmi data to the device: -71 [ 576.056156][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.094546][ T11] usb 4-1: unable to get target info from device [ 576.100929][ T11] usb 4-1: could not get target info (-71) [ 576.107771][ T11] usb 4-1: could not probe fw (-71) [ 576.117055][T10611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.214206][T10611] device hsr_slave_0 entered promiscuous mode [ 576.228868][T10650] loop1: detected capacity change from 0 to 128 [ 576.251772][T10611] device hsr_slave_1 entered promiscuous mode [ 576.263609][T10650] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 576.273604][T10611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.288202][T10611] Cannot create hsr debugfs directory [ 576.472339][ T4510] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 576.885654][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 577.034496][T10658] device syzkaller0 entered promiscuous mode [ 577.597730][T10611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 577.641319][T10611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 577.681172][T10611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 577.739260][T10611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 577.804521][T10671] loop4: detected capacity change from 0 to 4096 [ 577.815948][T10671] ntfs3: Unknown parameter 'nocase' [ 577.982280][T10611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.033509][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.053806][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.101448][T10611] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.129521][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 578.152302][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.199102][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.206314][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.302611][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.364631][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 578.373338][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.439028][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.446231][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.479710][T10687] binder: BINDER_SET_CONTEXT_MGR already set [ 578.504684][T10687] binder: 10686:10687 ioctl 4018620d 200000000040 returned -16 [ 578.523659][T10687] binder: 10686:10687 ioctl c0306201 200000000240 returned -11 [ 578.598158][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 578.655513][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 578.724177][T10685] loop4: detected capacity change from 0 to 32768 [ 578.733299][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 578.744712][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 578.753426][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 578.762313][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 578.775117][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 578.783285][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 578.791716][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.821035][T10690] device syzkaller0 entered promiscuous mode [ 578.834595][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.902208][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 578.924067][T10685] XFS (loop4): Mounting V5 Filesystem [ 578.964574][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 579.035756][T10685] XFS (loop4): Ending clean mount [ 579.042716][T10685] XFS (loop4): Quotacheck needed: Please wait. [ 579.112154][T10685] XFS (loop4): Quotacheck: Done. [ 579.120747][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.614832][ T4271] XFS (loop4): Unmounting Filesystem [ 581.148880][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 581.990637][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 582.004896][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 582.027606][T10611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.387765][T10747] device syzkaller0 entered promiscuous mode [ 582.813738][T10758] loop3: detected capacity change from 0 to 32768 [ 582.879908][T10758] XFS (loop3): Mounting V5 Filesystem [ 582.927966][T10758] XFS (loop3): Ending clean mount [ 582.937060][T10758] XFS (loop3): Quotacheck needed: Please wait. [ 583.120367][T10758] XFS (loop3): Quotacheck: Done. [ 583.204866][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 583.609938][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 583.633224][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 583.658577][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 583.667698][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 583.680495][T10611] device veth0_vlan entered promiscuous mode [ 583.689490][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 583.697749][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 583.732033][T10611] device veth1_vlan entered promiscuous mode [ 583.832102][ T4270] XFS (loop3): Unmounting Filesystem [ 583.846454][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 583.863448][ T26] audit: type=1326 audit(1771730651.162:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 583.897060][ T26] audit: type=1326 audit(1771730651.192:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 583.960791][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 583.970415][ T26] audit: type=1326 audit(1771730651.232:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 584.016421][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 584.038436][ T26] audit: type=1326 audit(1771730651.232:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 584.063418][T10611] device veth0_macvtap entered promiscuous mode [ 584.087652][T10611] device veth1_macvtap entered promiscuous mode [ 584.140925][ T26] audit: type=1326 audit(1771730651.232:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 584.168979][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.188398][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.224101][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.236178][ T26] audit: type=1326 audit(1771730651.232:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 584.275554][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.292740][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.303608][ T26] audit: type=1326 audit(1771730651.232:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 584.326596][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.337959][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.350442][ T26] audit: type=1326 audit(1771730651.232:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 584.380714][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.410456][T10611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.435457][ T26] audit: type=1326 audit(1771730651.232:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 584.461068][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 584.490669][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 584.550386][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 584.603271][ T26] audit: type=1326 audit(1771730651.232:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b599c629 code=0x7ffc0000 [ 584.631974][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 584.665983][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.694754][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.736731][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.764339][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.789919][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.815571][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.833838][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.859293][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.891366][T10611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.906683][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 584.919205][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 584.938460][T10792] device syzkaller0 entered promiscuous mode [ 584.955462][T10611] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.970245][T10611] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.985932][T10611] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.999361][T10611] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.236071][T10791] device syzkaller0 entered promiscuous mode [ 585.251535][ T7699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.280303][ T7699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.324433][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 585.438438][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.466733][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.505130][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 585.587346][T10803] loop3: detected capacity change from 0 to 512 [ 585.751995][T10803] EXT4-fs (loop3): 1 orphan inode deleted [ 585.766560][ T4358] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 1 [ 585.788988][T10803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 585.820250][T10803] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.094738][ T4285] Bluetooth: hci0: command 0x0c20 tx timeout [ 586.177044][ T4285] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 586.187897][ T4285] CPU: 1 PID: 4285 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 586.195488][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.205565][ T4285] Workqueue: hci0 hci_rx_work [ 586.210300][ T4285] Call Trace: [ 586.213613][ T4285] [ 586.216578][ T4285] dump_stack_lvl+0x188/0x24e [ 586.221284][ T4285] ? show_regs_print_info+0x12/0x12 [ 586.226518][ T4285] ? load_image+0x400/0x400 [ 586.231063][ T4285] sysfs_create_dir_ns+0x26a/0x290 [ 586.236194][ T4285] ? sysfs_warn_dup+0xa0/0xa0 [ 586.240895][ T4285] ? do_raw_spin_unlock+0x11d/0x230 [ 586.246124][ T4285] kobject_add_internal+0x61c/0xcc0 [ 586.251369][ T4285] kobject_add+0x160/0x230 [ 586.255847][ T4285] ? kobject_init+0x1d0/0x1d0 [ 586.260550][ T4285] ? klist_children_get+0x50/0x50 [ 586.265608][ T4285] ? get_device_parent+0x121/0x3f0 [ 586.270745][ T4285] device_add+0x483/0xfb0 [ 586.275104][ T4285] ? kmem_cache_free+0xf7/0x290 [ 586.279987][ T4285] hci_conn_add_sysfs+0xd1/0x1e0 [ 586.284979][ T4285] le_conn_complete_evt+0x105f/0x1670 [ 586.290389][ T4285] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 586.296670][ T4285] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 586.302335][ T4285] ? skb_pull_data+0xf7/0x200 [ 586.307086][ T4285] hci_le_conn_complete_evt+0x183/0x440 [ 586.312725][ T4285] ? hci_remote_host_features_evt+0x270/0x270 [ 586.318848][ T4285] hci_event_packet+0x7b6/0x1280 [ 586.323826][ T4285] ? bis_list+0x280/0x280 [ 586.328186][ T4285] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 586.334123][ T4285] ? kcov_remote_start+0x4c7/0x7e0 [ 586.339270][ T4285] ? sync_thread_backup+0x1510/0x2090 [ 586.344679][ T4285] ? hci_send_to_monitor+0x9c/0x4a0 [ 586.349924][ T4285] hci_rx_work+0x3eb/0xd40 [ 586.354373][ T4285] ? _raw_spin_unlock+0x40/0x40 [ 586.359261][ T4285] ? process_one_work+0x7b0/0x1160 [ 586.364403][ T4285] process_one_work+0x8a2/0x1160 [ 586.369378][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 586.375047][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 586.380090][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 586.385652][ T4285] ? kthread_data+0x4b/0xc0 [ 586.390191][ T4285] worker_thread+0xaa2/0x1270 [ 586.394909][ T4285] ? __kthread_parkme+0x162/0x1c0 [ 586.399974][ T4285] kthread+0x29d/0x330 [ 586.404068][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 586.409117][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 586.413726][ T4285] ret_from_fork+0x1f/0x30 [ 586.418183][ T4285] [ 586.494802][ T4285] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 586.508213][ T4285] Bluetooth: hci0: failed to register connection device [ 586.522742][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 586.586397][T10827] device syzkaller0 entered promiscuous mode [ 586.841288][T10833] loop1: detected capacity change from 0 to 2048 [ 586.879064][T10836] device syzkaller0 entered promiscuous mode [ 586.989456][T10833] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 587.011680][T10833] EXT4-fs error (device loop1): ext4_iget_extra_inode:4756: inode #12: comm syz.1.1533: corrupted in-inode xattr [ 587.034444][T10833] EXT4-fs (loop1): Remounting filesystem read-only [ 587.345414][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 588.092249][T10861] loop5: detected capacity change from 0 to 512 [ 588.251122][T10861] EXT4-fs (loop5): 1 orphan inode deleted [ 588.274186][T10861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 588.325347][T10861] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.398419][ T4359] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:9: Failed to release dquot type 1 [ 588.674466][ T5166] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 588.980658][ T5166] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 589.000918][T10611] EXT4-fs (loop5): unmounting filesystem. [ 589.114240][ T5166] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 589.276974][ T5166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 589.443308][ T5166] usb 4-1: Product: syz [ 589.520271][ T5166] usb 4-1: Manufacturer: syz [ 589.614501][ T5166] usb 4-1: SerialNumber: syz [ 589.637663][ T5166] usb 4-1: config 0 descriptor?? [ 589.715179][ T5166] ims_pcu 4-1:0.0: Zero length descriptor [ 589.720996][ T5166] ims_pcu: probe of 4-1:0.0 failed with error -22 [ 589.874494][ T4368] usb 4-1: USB disconnect, device number 21 [ 590.275472][T10903] loop4: detected capacity change from 0 to 512 [ 590.347937][T10903] EXT4-fs (loop4): 1 orphan inode deleted [ 590.353759][T10903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 590.364608][ T9608] __quota_error: 6 callbacks suppressed [ 590.364621][ T9608] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 590.386203][T10903] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.613390][ T9608] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:24: Failed to release dquot type 1 [ 591.181523][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 591.318525][T10933] device syzkaller0 entered promiscuous mode [ 591.401723][T10937] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 591.574367][ T5166] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 591.926179][ T5166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.984777][ T5166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.018412][ T5166] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.060856][ T5166] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.091133][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.126000][ T5166] usb 5-1: config 0 descriptor?? [ 592.354812][T10956] loop3: detected capacity change from 0 to 512 [ 592.483248][T10956] EXT4-fs (loop3): 1 orphan inode deleted [ 592.505259][ T9618] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 592.541209][T10956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 592.552527][ T5166] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 592.589169][ T9618] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:28: Failed to release dquot type 1 [ 592.606384][ T5166] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 592.624237][T10962] overlayfs: failed to get inode (-116) [ 592.634906][T10956] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.837974][T10962] overlayfs: failed to get inode (-116) [ 593.454058][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 593.656946][T10970] device syzkaller0 entered promiscuous mode [ 593.896345][T10932] usb 5-1: string descriptor 0 read error: -2 [ 594.544615][T10985] loop5: detected capacity change from 0 to 32768 [ 594.639712][T10985] XFS (loop5): Mounting V5 Filesystem [ 594.787340][ T5166] usb 5-1: USB disconnect, device number 21 [ 594.838569][T10985] XFS (loop5): Ending clean mount [ 594.846877][T10985] XFS (loop5): Quotacheck needed: Please wait. [ 595.035327][T10985] XFS (loop5): Quotacheck: Done. [ 595.679100][T11007] loop4: detected capacity change from 0 to 2048 [ 595.778283][T11007] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 595.833930][T11005] loop1: detected capacity change from 0 to 4096 [ 595.840741][T11007] NILFS (loop4): mounting unchecked fs [ 596.292233][ T7751] udevd[7751]: incorrect nilfs2 checksum on /dev/loop4 [ 596.331191][T11007] NILFS (loop4): recovery complete [ 596.363226][T11010] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 596.442498][T10611] XFS (loop5): Unmounting Filesystem [ 598.214782][T11038] loop5: detected capacity change from 0 to 512 [ 598.255947][ T7751] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 600.373434][T11068] loop4: detected capacity change from 0 to 512 [ 600.466998][T11068] EXT4-fs (loop4): 1 orphan inode deleted [ 600.488084][ T4418] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 600.506770][T11068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 600.530127][ T4418] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:11: Failed to release dquot type 1 [ 600.559538][T11068] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.615113][T11075] loop3: detected capacity change from 0 to 512 [ 600.661417][ T4427] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 601.800187][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 602.406140][T11095] loop3: detected capacity change from 0 to 32768 [ 602.448820][T11099] Bluetooth: hci0: unsupported parameter 255 [ 602.474567][T11099] Bluetooth: hci0: unsupported parameter 255 [ 602.583252][T11095] XFS (loop3): Mounting V5 Filesystem [ 602.663834][T11095] XFS (loop3): Ending clean mount [ 602.672316][T11095] XFS (loop3): Quotacheck needed: Please wait. [ 602.717170][T11095] XFS (loop3): Quotacheck: Done. [ 603.396747][ T4270] XFS (loop3): Unmounting Filesystem [ 603.527330][T11120] delete_channel: no stack [ 603.623414][T11119] loop4: detected capacity change from 0 to 512 [ 604.108898][T11119] EXT4-fs (loop4): 1 orphan inode deleted [ 604.126443][ T9616] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 604.206320][ T9616] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:27: Failed to release dquot type 1 [ 604.238527][T11119] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 604.282033][T11119] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.127055][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 605.793234][T11145] Bluetooth: hci0: unsupported parameter 255 [ 605.824424][T11145] Bluetooth: hci0: unsupported parameter 255 [ 606.413143][T11160] device syzkaller0 entered promiscuous mode [ 606.664395][ T4448] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 606.753718][T11165] delete_channel: no stack [ 607.650712][ T4448] usb 5-1: config 0 has no interfaces? [ 607.660420][ T4448] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.751864][ T4448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.766352][ T4448] usb 5-1: Product: syz [ 607.770644][ T4448] usb 5-1: Manufacturer: syz [ 607.816411][ T4448] usb 5-1: SerialNumber: syz [ 607.838201][T11167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1645'. [ 607.869043][ T4448] usb 5-1: config 0 descriptor?? [ 608.053410][T11177] Bluetooth: hci0: unsupported parameter 255 [ 608.069929][T11177] Bluetooth: hci0: unsupported parameter 255 [ 608.114116][T11176] loop3: detected capacity change from 0 to 2048 [ 608.128041][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.152542][T11176] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 608.168929][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.182626][T11176] NILFS (loop3): mounting unchecked fs [ 608.195448][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.233670][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.260450][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.283593][ T7751] udevd[7751]: incorrect nilfs2 checksum on /dev/loop3 [ 608.291965][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.301738][T11176] NILFS (loop3): recovery complete [ 608.342397][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.348881][T11181] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 608.397674][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.428393][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.452799][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.474214][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.501791][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.520222][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.523885][T11185] fuse: Bad value for 'fd' [ 608.545955][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.574187][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.618406][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.641752][ T4448] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 608.711057][ T4448] hid-generic 0006:0004:0009.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 608.747630][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 608.880297][T11194] delete_channel: no stack [ 608.893411][T11190] fido_id[11190]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 609.237703][T11204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1659'. [ 609.320865][T11205] page:ffffea0001267e00 refcount:4 mapcount:1 mapping:ffff888072ea09b8 index:0x2 pfn:0x499f8 [ 609.332094][T11205] memcg:ffff88807a450000 [ 609.336396][T11205] aops:shmem_aops ino:14c [ 609.340754][T11205] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 609.350594][T11205] raw: 00fff60000080015 ffffea00014e22c8 ffffea0001267e48 ffff888072ea09b8 [ 609.359211][T11205] raw: 0000000000000002 0000000000000000 0000000400000000 ffff88807a450000 [ 609.367814][T11205] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 609.375120][T11205] page_owner tracks the page as allocated [ 609.381674][T11205] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 11206, tgid 11205 (syz.5.1660), ts 609303477444, free_ts 608966351121 [ 609.399568][T11205] post_alloc_hook+0x173/0x1a0 [ 609.404366][T11205] get_page_from_freelist+0x1a1e/0x1ab0 [ 609.409944][T11205] __alloc_pages+0x1ec/0x4f0 [ 609.414571][T11205] __folio_alloc+0xe/0x30 [ 609.418934][T11205] vma_alloc_folio+0x4a3/0x900 [ 609.423734][T11205] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 609.429473][T11205] shmem_get_folio_gfp+0x1361/0x3400 [ 609.434815][T11205] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 609.440557][T11205] udmabuf_create+0x99b/0xfc0 [ 609.445244][T11205] udmabuf_ioctl+0x1f3/0x300 [ 609.449841][T11205] __se_sys_ioctl+0xfa/0x170 [ 609.454441][T11205] do_syscall_64+0x4c/0xa0 [ 609.458867][T11205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.464771][T11205] page last free stack trace: [ 609.469446][T11205] free_unref_page_prepare+0x8b4/0x9a0 [ 609.474931][T11205] free_unref_page_list+0xbb/0x8e0 [ 609.480059][T11205] release_pages+0x1fa6/0x2220 [ 609.484836][T11205] tlb_flush_mmu+0x105/0x220 [ 609.489441][T11205] tlb_finish_mmu+0xbd/0x1c0 [ 609.494047][T11205] exit_mmap+0x384/0x960 [ 609.498298][T11205] __mmput+0x118/0x3c0 [ 609.502373][T11205] exit_mm+0x1fe/0x2d0 [ 609.506456][T11205] do_exit+0x905/0x2480 [ 609.510628][T11205] do_group_exit+0x217/0x2d0 [ 609.515238][T11205] __x64_sys_exit_group+0x3b/0x40 [ 609.520284][T11205] do_syscall_64+0x4c/0xa0 [ 609.524713][T11205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.530713][T11205] ------------[ cut here ]------------ [ 609.536181][T11205] kernel BUG at mm/filemap.c:153! [ 609.541228][T11205] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 609.547304][T11205] CPU: 0 PID: 11205 Comm: syz.5.1660 Not tainted syzkaller #0 [ 609.554780][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.564836][T11205] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 609.571092][T11205] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 3a e2 27 00 e9 0c fe ff ff e8 90 f6 d6 ff 48 89 df 48 c7 c6 a0 f7 94 8a e8 f1 0c 12 00 <0f> 0b e8 7a f6 d6 ff 48 89 df 48 c7 c6 00 fd 94 8a e8 db 0c 12 00 [ 609.590711][T11205] RSP: 0018:ffffc900052b7618 EFLAGS: 00010046 [ 609.596806][T11205] RAX: 3e753bcd04516600 RBX: ffffea0001267e00 RCX: 3e753bcd04516600 [ 609.604782][T11205] RDX: 0000000000000002 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0de0 [ 609.612779][T11205] RBP: ffffc900052b7778 R08: ffffffff8e1fcd2f R09: 1ffffffff1c3f9a5 [ 609.620756][T11205] R10: dffffc0000000000 R11: fffffbfff1c3f9a6 R12: dffffc0000000000 [ 609.628736][T11205] R13: dffffc0000000000 R14: ffff888072ea09b8 R15: 1ffff92000a56ed4 [ 609.636715][T11205] FS: 00005555592a1500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 609.645657][T11205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.652252][T11205] CR2: 00007f52b5be6158 CR3: 00000000330fb000 CR4: 00000000003506f0 [ 609.660252][T11205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 609.668236][T11205] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 609.676216][T11205] Call Trace: [ 609.679503][T11205] [ 609.682444][T11205] __filemap_remove_folio+0xbc/0x8a0 [ 609.687747][T11205] ? __rwlock_init+0x140/0x140 [ 609.692534][T11205] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 609.699575][T11205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 609.704610][T11205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 609.710163][T11205] ? __folio_cancel_dirty+0xc0/0x580 [ 609.715458][T11205] filemap_remove_folio+0xed/0x2c0 [ 609.720581][T11205] truncate_inode_folio+0x59/0x70 [ 609.725619][T11205] shmem_undo_range+0x533/0x20c0 [ 609.730569][T11205] ? shmem_truncate_range+0xb0/0xb0 [ 609.735786][T11205] ? do_raw_spin_lock+0x128/0x2f0 [ 609.740826][T11205] ? __rwlock_init+0x140/0x140 [ 609.745594][T11205] shmem_evict_inode+0x25b/0xa80 [ 609.750547][T11205] ? inode_wait_for_writeback+0x1df/0x220 [ 609.756281][T11205] ? shmem_free_in_core_inode+0xb0/0xb0 [ 609.761839][T11205] ? do_raw_spin_lock+0x128/0x2f0 [ 609.766867][T11205] ? bit_waitqueue+0x30/0x30 [ 609.771469][T11205] ? do_raw_spin_unlock+0x11d/0x230 [ 609.776676][T11205] ? shmem_free_in_core_inode+0xb0/0xb0 [ 609.782233][T11205] evict+0x4c9/0x8d0 [ 609.786165][T11205] ? proc_nr_inodes+0x2f0/0x2f0 [ 609.791032][T11205] ? do_raw_spin_unlock+0x11d/0x230 [ 609.796235][T11205] ? _raw_spin_unlock+0x24/0x40 [ 609.801134][T11205] ? iput+0x768/0x980 [ 609.805153][T11205] __dentry_kill+0x431/0x650 [ 609.809755][T11205] dentry_kill+0xb8/0x290 [ 609.814097][T11205] ? dput+0x37/0x1d0 [ 609.818012][T11205] dput+0xfa/0x1d0 [ 609.821743][T11205] __fput+0x5e0/0x920 [ 609.825730][T11205] task_work_run+0x1d0/0x260 [ 609.830336][T11205] ? task_work_cancel+0x220/0x220 [ 609.835372][T11205] ? exit_to_user_mode_loop+0x3b/0x110 [ 609.840845][T11205] exit_to_user_mode_loop+0xe6/0x110 [ 609.846145][T11205] exit_to_user_mode_prepare+0xee/0x180 [ 609.851718][T11205] syscall_exit_to_user_mode+0x16/0x40 [ 609.857199][T11205] do_syscall_64+0x58/0xa0 [ 609.861630][T11205] ? clear_bhb_loop+0x60/0xb0 [ 609.866313][T11205] ? clear_bhb_loop+0x60/0xb0 [ 609.870995][T11205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.876903][T11205] RIP: 0033:0x7f60e059c629 [ 609.881351][T11205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.901048][T11205] RSP: 002b:00007ffdbb3abb38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 609.909467][T11205] RAX: 0000000000000000 RBX: 00007ffdbb3abc20 RCX: 00007f60e059c629 [ 609.917447][T11205] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 609.925426][T11205] RBP: 0000000000094be5 R08: 0000000000000001 R09: 0000000000000000 [ 609.933417][T11205] R10: 0000001b31920000 R11: 0000000000000246 R12: 00007ffdbb3abc60 [ 609.941404][T11205] R13: 00007f60e0815fac R14: 0000000000094c20 R15: 00007f60e0815fa0 [ 609.949383][T11205] [ 609.952431][T11205] Modules linked in: [ 609.956349][T11205] ---[ end trace 0000000000000000 ]--- [ 609.961804][T11205] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 609.968057][T11205] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 3a e2 27 00 e9 0c fe ff ff e8 90 f6 d6 ff 48 89 df 48 c7 c6 a0 f7 94 8a e8 f1 0c 12 00 <0f> 0b e8 7a f6 d6 ff 48 89 df 48 c7 c6 00 fd 94 8a e8 db 0c 12 00 [ 609.987671][T11205] RSP: 0018:ffffc900052b7618 EFLAGS: 00010046 [ 609.993746][T11205] RAX: 3e753bcd04516600 RBX: ffffea0001267e00 RCX: 3e753bcd04516600 [ 610.001727][T11205] RDX: 0000000000000002 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0de0 [ 610.009720][T11205] RBP: ffffc900052b7778 R08: ffffffff8e1fcd2f R09: 1ffffffff1c3f9a5 [ 610.017699][T11205] R10: dffffc0000000000 R11: fffffbfff1c3f9a6 R12: dffffc0000000000 [ 610.025674][T11205] R13: dffffc0000000000 R14: ffff888072ea09b8 R15: 1ffff92000a56ed4 [ 610.033649][T11205] FS: 00005555592a1500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 610.042591][T11205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.049196][T11205] CR2: 00007f52b5be6158 CR3: 00000000330fb000 CR4: 00000000003506f0 [ 610.060756][T11205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 610.068747][T11205] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 610.076745][T11205] Kernel panic - not syncing: Fatal exception [ 610.083395][T11205] Kernel Offset: disabled [ 610.087731][T11205] Rebooting in 86400 seconds..