last executing test programs: 8.689475929s ago: executing program 1 (id=1446): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010800000000000000000100000305000400010000000900020073797a3000000000050001000700000016000300686173683a6e65742c706f72742c6e657400f9ff05000500020000001400078008000800000000df080006"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e5", 0x4}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x21) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x370, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x344, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f11d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce0205f6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c7406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0f356a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444ea07459af0ec9a278df401177ad5f2e6529ed0ad424b47ec67522477f979360b76d100"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x89, 0xb, 0x14}}, @TCA_RED_PARMS={0x0, 0x1, {0x80000000, 0xff, 0x3, 0x5, 0x1e, 0x1b}}, @TCA_RED_EARLY_DROP_BLOCK={0x0, 0x5, 0x1ff}, @TCA_RED_FLAGS={0xc, 0x4, {0x8}}, @TCA_RED_STAB={0xffffffffffffffd7, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x14, 0x7}}]}}]}, 0x370}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) close(r5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 7.609935674s ago: executing program 1 (id=1452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/60, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc011}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 4.934575476s ago: executing program 4 (id=1466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4.563283424s ago: executing program 0 (id=1468): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 4.521382725s ago: executing program 4 (id=1469): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0) 4.211343183s ago: executing program 4 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x80) 4.158207464s ago: executing program 1 (id=1473): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x62, 0x0, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, 0x0, 0x0) close(r7) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, 0x0, 0x0, 0x0) accept(r1, 0x0, 0x0) 4.055294436s ago: executing program 0 (id=1475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 4.055069956s ago: executing program 4 (id=1476): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000", @ANYRES32=r1], 0x18, 0x40001}}], 0x1, 0x0) accept(r1, 0x0, 0x0) 2.679136828s ago: executing program 1 (id=1477): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="2e00020010008108040f80ecdb4cb92e0a480e00769b4b0f001400e8bd6efb0248ff050005", 0x25}], 0x1}, 0x40881) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000000c0)='=relative', &(0x7f0000000140)='./cgroup\x00', r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x0, 0x1, 0x8, @remote, @mcast1, 0x8000, 0x0, 0x6, 0x45c}}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, 0x12, 0x20, 0x70bd2b, 0x25dfdbfa, {0x22, 0x3, 0x2, 0xef, {0x4e21, 0x4e22, [0x80000001, 0xffffffff, 0xfffffeff, 0x8], [0x8, 0x9, 0x5, 0x8], r4, [0xfffffc78, 0x6bbb5f79]}, 0x80000000, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "f84f55b8"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "10ece88ef035908cce5817dde13d72d814846ce8c737500d222e13719c7c6d61f2deec40306e7d80419f932fe2c93647a3781538f5b107d8ca2185a7f79172"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) close(0x3) 2.551963751s ago: executing program 4 (id=1478): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2.375247795s ago: executing program 0 (id=1480): creat(&(0x7f0000000400)='./file0\x00', 0xecf86c37d5304995) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) 2.366601565s ago: executing program 0 (id=1481): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 2.236675578s ago: executing program 4 (id=1483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/60, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc011}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 2.196924009s ago: executing program 3 (id=1484): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 2.128230171s ago: executing program 2 (id=1485): setreuid(0xee00, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000880a020100000800faff0700d06d6558b77daaaaaaaaaa1481000000080003d0ffbf0c709bff050690"], 0x5a) 1.984735464s ago: executing program 3 (id=1486): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x1fffffff4ba, 0x746, 0x4, 0x7}) 1.820907998s ago: executing program 0 (id=1487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe5c, 0x2, [@TCA_MATCHALL_ACT={0xe58, 0x2, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe90}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000090) 1.644776562s ago: executing program 2 (id=1488): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000001000000", @ANYRES32=r1], 0x18, 0x40001}}], 0x1, 0x0) accept(r1, 0x0, 0x0) 1.608242763s ago: executing program 3 (id=1489): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x8, 0x0, 0x0}}, 0x10) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x4c}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x101d0) 655.554065ms ago: executing program 1 (id=1490): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) 594.238476ms ago: executing program 2 (id=1491): creat(&(0x7f0000000400)='./file0\x00', 0xecf86c37d5304995) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) 497.573329ms ago: executing program 3 (id=1492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 497.027509ms ago: executing program 2 (id=1493): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 311.341203ms ago: executing program 2 (id=1494): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) sendmmsg(r0, &(0x7f0000008000)=[{{&(0x7f0000000100)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008000) 279.662894ms ago: executing program 0 (id=1495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706", 0x11}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 248.128415ms ago: executing program 3 (id=1496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 179.315706ms ago: executing program 2 (id=1497): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes']) 134.200437ms ago: executing program 3 (id=1498): syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040804}, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 0s ago: executing program 1 (id=1499): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@i_version}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) kernel console output (not intermixed with test programs): fig 1 has no interface number 1 [ 138.598658][ T4190] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 138.768080][ T1108] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 138.780736][ T1108] em28xx 2-1:0.0: dvb set to bulk mode. [ 138.790921][ T4229] em28xx 2-1:0.0: Binding DVB extension [ 138.888106][ T4190] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.917629][ T4190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.925901][ T4190] usb 1-1: Product: syz [ 138.930082][ T4190] usb 1-1: Manufacturer: syz [ 138.935554][ T4190] usb 1-1: SerialNumber: syz [ 139.145149][ T5524] overlayfs: failed to resolve './file1': -2 [ 139.309855][ T4190] usb 1-1: USB disconnect, device number 8 [ 141.013139][ T5483] em28xx 2-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 141.217216][ T5177] usb 2-1: USB disconnect, device number 5 [ 141.242544][ T5540] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 141.249464][ T5540] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 141.258537][ T5540] device hsr0 entered promiscuous mode [ 141.301396][ T5177] em28xx 2-1:0.0: Disconnecting em28xx [ 141.636204][ T4229] em28xx 2-1:0.0: Registering input extension [ 141.960283][ T5536] device hsr0 left promiscuous mode [ 141.975837][ T5177] em28xx 2-1:0.0: Closing input extension [ 142.027335][ T5550] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 142.067452][ T5177] em28xx 2-1:0.0: Freeing device [ 142.091035][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 142.100179][ T5550] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 142.213066][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 144.845176][ T5585] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 144.851731][ T5585] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 144.859685][ T5585] device hsr0 entered promiscuous mode [ 145.012738][ T4229] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.563611][ T5581] device hsr0 left promiscuous mode [ 145.851679][ T5593] fuse: Bad value for 'user_id' [ 145.967723][ T4229] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 145.979994][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.005234][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.027808][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.061127][ T4229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.088008][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.124866][ T4229] usb 1-1: config 0 descriptor?? [ 146.381942][ T5604] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 146.392602][ T5580] udc-core: couldn't find an available UDC or it's busy [ 146.402966][ T5580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.435628][ T5604] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 146.684777][ T4229] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 146.708790][ T4229] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 146.781409][ T4229] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 146.970419][ T4229] usb 1-1: USB disconnect, device number 9 [ 147.014029][ T5614] fido_id[5614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 147.280328][ T5617] overlayfs: missing 'lowerdir' [ 148.192479][ T5633] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 148.199080][ T5633] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 148.210320][ T5633] device hsr0 entered promiscuous mode [ 148.675469][ T5628] device hsr0 left promiscuous mode [ 149.938326][ T5651] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 149.980956][ T5651] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 151.871645][ T5663] binder: BINDER_SET_CONTEXT_MGR already set [ 151.877731][ T5663] binder: 5662:5663 ioctl 4018620d 200000004a80 returned -16 [ 151.908977][ T5666] overlayfs: missing 'lowerdir' [ 153.270737][ T5680] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.950846][ T5689] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.957374][ T5689] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 154.966561][ T5689] device hsr0 entered promiscuous mode [ 155.253185][ T4271] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.523205][ T4271] usb 1-1: Using ep0 maxpacket: 8 [ 155.536106][ T5683] device hsr0 left promiscuous mode [ 155.652998][ T4271] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 157.258710][ T4271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.269148][ T4271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.279440][ T4271] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.293015][ T4271] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.302380][ T4271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.342827][ T4271] usb 1-1: can't set config #16, error -71 [ 157.361415][ T4271] usb 1-1: USB disconnect, device number 10 [ 157.525984][ T5712] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 157.649124][ T5712] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 157.691266][ T5716] overlayfs: missing 'lowerdir' [ 157.792920][ T4190] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.173079][ T4190] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 159.182196][ T4190] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 159.193890][ T5729] device veth1_to_bond entered promiscuous mode [ 159.200593][ T4190] usb 2-1: Product: syz [ 159.210710][ T4190] usb 2-1: Manufacturer: syz [ 159.222734][ T4190] usb 2-1: SerialNumber: syz [ 159.234148][ T5729] device veth1_to_bond left promiscuous mode [ 159.243845][ T4190] usb 2-1: config 0 descriptor?? [ 159.367555][ T4190] ch341 2-1:0.0: ch341-uart converter detected [ 161.806708][ T5741] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 161.813289][ T5741] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 161.868956][ T5740] device hsr0 entered promiscuous mode [ 163.393060][ T4190] usb 2-1: failed to send control message: -71 [ 163.410318][ T4190] ch341-uart: probe of ttyUSB0 failed with error -71 [ 163.541494][ T4190] usb 2-1: USB disconnect, device number 6 [ 163.670296][ T4190] ch341 2-1:0.0: device disconnected [ 164.564531][ T5730] device hsr0 left promiscuous mode [ 165.026928][ T5767] loop5: detected capacity change from 0 to 7 [ 165.087379][ T4180] Dev loop5: unable to read RDB block 7 [ 165.123458][ T4180] loop5: unable to read partition table [ 165.129261][ T4180] loop5: partition table beyond EOD, truncated [ 165.190413][ T5767] Dev loop5: unable to read RDB block 7 [ 165.199843][ T5767] loop5: unable to read partition table [ 165.238758][ T5767] loop5: partition table beyond EOD, truncated [ 165.255583][ T5767] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.334357][ T5778] netlink: 'syz.1.469': attribute type 39 has an invalid length. [ 165.348214][ T4190] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 165.643034][ T4190] usb 4-1: Using ep0 maxpacket: 8 [ 165.763512][ T4190] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 165.911636][ T4190] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 166.730767][ T4190] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.765031][ T4190] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.799820][ T5789] vivid-001: ================= START STATUS ================= [ 166.810800][ T5789] vivid-001: Test Pattern: 75% Colorbar [ 166.819095][ T5789] vivid-001: Fill Percentage of Frame: 100 [ 166.831878][ T5789] vivid-001: Horizontal Movement: No Movement [ 166.834378][ T4190] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.838482][ T5789] vivid-001: Vertical Movement: No Movement [ 166.854418][ T5789] vivid-001: OSD Text Mode: All [ 166.860002][ T5789] vivid-001: Show Border: false [ 166.875610][ T4190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.901902][ T5789] vivid-001: Show Square: false [ 166.982986][ T4190] usb 4-1: can't set config #16, error -71 [ 166.991306][ T5789] vivid-001: Sensor Flipped Horizontally: false [ 166.998616][ T5789] vivid-001: Sensor Flipped Vertically: false [ 167.007648][ T5789] vivid-001: Insert SAV Code in Image: false [ 167.012135][ T4190] usb 4-1: USB disconnect, device number 6 [ 167.028887][ T5789] vivid-001: Insert EAV Code in Image: false [ 167.070130][ T5789] vivid-001: Reduced Framerate: false [ 167.142038][ T5789] vivid-001: Enable Capture Cropping: true [ 167.196901][ T5789] vivid-001: Enable Capture Composing: true [ 167.208256][ T5789] vivid-001: Enable Capture Scaler: true [ 167.217104][ T5802] device syzkaller0 entered promiscuous mode [ 167.225018][ T5789] vivid-001: Timestamp Source: End of Frame [ 167.237741][ T5789] vivid-001: Colorspace: sRGB [ 167.248836][ T5789] vivid-001: Transfer Function: Default [ 167.255863][ T5789] vivid-001: Y'CbCr Encoding: Default [ 167.262102][ T5789] vivid-001: HSV Encoding: Hue 0-179 [ 167.271516][ T5789] vivid-001: Quantization: Default [ 167.281452][ T5789] vivid-001: Apply Alpha To Red Only: false [ 167.291834][ T5789] vivid-001: Standard Aspect Ratio: 4x3 [ 167.300309][ T5789] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 167.309964][ T5789] vivid-001: DV Timings: 640x480p59 inactive [ 167.317762][ T5789] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 167.325663][ T5789] vivid-001: Maximum EDID Blocks: 2 [ 167.333523][ T5789] vivid-001: Limited RGB Range (16-235): false [ 167.340173][ T5789] vivid-001: Rx RGB Quantization Range: Automatic [ 167.352605][ T5789] vivid-001: Power Present: 0x00000001 [ 167.364154][ T5789] tpg source WxH: 640x360 (Y'CbCr) [ 167.369390][ T5789] tpg field: 1 [ 167.375800][ T5789] tpg crop: 640x360@0x0 [ 167.380033][ T5789] tpg compose: 640x360@0x0 [ 167.384815][ T5789] tpg colorspace: 8 [ 167.389160][ T5789] tpg transfer function: 0/0 [ 167.397450][ T5789] tpg Y'CbCr encoding: 0/0 [ 167.403596][ T5789] tpg quantization: 0/0 [ 167.409983][ T5789] tpg RGB range: 0/2 [ 167.414851][ T5789] vivid-001: ================== END STATUS ================== [ 168.411046][ T4190] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.803249][ T4190] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 168.827590][ T4190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.885484][ T4190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.908764][ T4190] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.865087][ T4190] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.900180][ T4190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.956715][ T4190] usb 4-1: config 0 descriptor?? [ 170.273701][ T5810] udc-core: couldn't find an available UDC or it's busy [ 170.280717][ T5810] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.575173][ T4190] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 170.802597][ T4190] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 171.689794][ T4190] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 171.722663][ T4190] usb 4-1: USB disconnect, device number 7 [ 172.805561][ T5863] device syzkaller0 entered promiscuous mode [ 172.806119][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 172.911417][ T5863] tipc: Enabled bearer , priority 0 [ 172.943253][ T5856] fido_id[5856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 172.986979][ T5862] tipc: Resetting bearer [ 173.042423][ T5862] tipc: Disabling bearer [ 173.299583][ T5882] netlink: 'syz.1.504': attribute type 13 has an invalid length. [ 173.317573][ T5882] netlink: 'syz.1.504': attribute type 17 has an invalid length. [ 174.274491][ T5882] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.323737][ T5882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.529659][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 174.543034][ T4190] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.812785][ T4190] usb 2-1: Using ep0 maxpacket: 8 [ 174.916881][ T5918] device syzkaller0 entered promiscuous mode [ 174.941917][ T5918] tipc: Enabled bearer , priority 0 [ 174.983831][ T5917] tipc: Resetting bearer [ 174.998665][ T4190] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.022360][ T5917] tipc: Disabling bearer [ 175.098087][ T4190] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 175.112871][ T4190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.140443][ T4190] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 175.202009][ T4190] usb 2-1: config 1 has no interface number 1 [ 175.240949][ T4190] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 175.296146][ T4190] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.314177][ T4190] usb 2-1: config 1 interface 2 has no altsetting 0 [ 175.493051][ T4190] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.517312][ T4190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.534917][ T4190] usb 2-1: Product: syz [ 175.550787][ T4190] usb 2-1: Manufacturer: syz [ 175.558693][ T4190] usb 2-1: SerialNumber: syz [ 177.018479][ T5955] tipc: Enabled bearer , priority 0 [ 177.047124][ T5954] tipc: Disabling bearer [ 177.274914][ T5965] loop5: detected capacity change from 0 to 7 [ 177.299784][ T5965] Dev loop5: unable to read RDB block 7 [ 177.320272][ T5965] loop5: AHDI p1 [ 177.332401][ T5965] loop5: partition table partially beyond EOD, truncated [ 177.458125][ T5965] device syzkaller0 entered promiscuous mode [ 178.354574][ T4190] usb 2-1: USB disconnect, device number 7 [ 178.377668][ T5983] tipc: Enabling of bearer rejected, failed to enable media [ 178.437643][ T5987] input: syz1 as /devices/virtual/input/input10 [ 178.613600][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.797168][ T6007] tipc: Enabled bearer , priority 0 [ 178.821011][ T6006] tipc: Disabling bearer [ 178.991300][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 179.334862][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 179.436948][ T6027] netlink: 'syz.0.553': attribute type 13 has an invalid length. [ 179.457620][ T6027] netlink: 'syz.0.553': attribute type 17 has an invalid length. [ 179.580643][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.621233][ T6027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.783350][ T6037] tipc: Enabled bearer , priority 0 [ 179.801044][ T6037] device syzkaller0 entered promiscuous mode [ 179.824318][ T6038] kvm: pic: non byte write [ 179.842884][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 179.855097][ T6036] tipc: Resetting bearer [ 179.885911][ T6036] tipc: Disabling bearer [ 180.109462][ T6044] tipc: Enabled bearer , priority 0 [ 180.116308][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 180.191932][ T6043] tipc: Disabling bearer [ 180.293059][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.393028][ T26] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 180.420162][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.432368][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 180.461769][ T26] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 180.511621][ T26] usb 1-1: config 1 has no interface number 1 [ 180.528640][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 180.546467][ T25] audit: type=1326 audit(1782858249.810:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.4.564" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf3af08e59 code=0x0 [ 180.572294][ T26] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.612168][ T26] usb 1-1: config 1 interface 2 has no altsetting 0 [ 180.747024][ T6047] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 180.803131][ T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.812378][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.843058][ T26] usb 1-1: Product: syz [ 180.847268][ T26] usb 1-1: Manufacturer: syz [ 180.872274][ T26] usb 1-1: SerialNumber: syz [ 180.912828][ T5177] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 181.212790][ T5177] usb 5-1: Using ep0 maxpacket: 16 [ 181.331454][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 181.545621][ T5177] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 181.573299][ T5177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.607258][ T5177] usb 5-1: Product: syz [ 181.621917][ T5177] usb 5-1: Manufacturer: syz [ 181.632069][ T5177] usb 5-1: SerialNumber: syz [ 181.659678][ T5177] usb 5-1: config 0 descriptor?? [ 181.714482][ T5177] usb 5-1: selecting invalid altsetting 1 [ 181.720279][ T5177] technisat-usb2: could not set alternate setting to 0 [ 181.730750][ T6070] tipc: Enabled bearer , priority 0 [ 181.753697][ T6070] device syzkaller0 entered promiscuous mode [ 181.769385][ T6069] tipc: Resetting bearer [ 181.887042][ T6069] tipc: Disabling bearer [ 181.944260][ T5177] technisat-usb2: firmware version: 0.0 [ 181.949902][ T5177] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 182.322963][ T2299] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.379108][ T5177] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.423119][ T5177] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 182.431965][ T5177] usb 5-1: media controller created [ 182.463332][ T6080] device syzkaller0 entered promiscuous mode [ 182.467375][ T5177] technisat-usb2: i2c-error: out failed 53 = -22 [ 182.501510][ T5177] dvb-usb: MAC address reading failed. [ 182.504933][ T6080] tipc: Enabled bearer , priority 0 [ 182.551588][ T5177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.562733][ T2299] usb 2-1: Using ep0 maxpacket: 8 [ 182.566864][ T26] usb 1-1: USB disconnect, device number 11 [ 182.573199][ T6079] tipc: Resetting bearer [ 182.581541][ T6058] technisat-usb2: i2c-error: out failed 00 = -22 [ 182.641584][ T6079] tipc: Disabling bearer [ 182.649533][ T5177] DVB: Unable to find symbol stv090x_attach() [ 182.694053][ T2299] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 182.707992][ T2299] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.739422][ T2299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.760747][ T2299] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.777609][ T2299] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.800368][ T2299] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.815800][ T2299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.839282][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.092805][ T2299] usb 2-1: usb_control_msg returned -32 [ 183.098582][ T2299] usbtmc 2-1:16.0: can't read capabilities [ 183.187963][ T5177] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 183.302759][ T5177] rc_core: IR keymap rc-technisat-usb2 not found [ 183.302791][ T5177] Registered IR keymap rc-empty [ 183.303436][ T5177] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 183.334000][ T6088] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 183.363750][ T5177] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 183.404847][ T5177] dvb-usb: schedule remote query interval to 100 msecs. [ 183.463011][ T5177] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 183.553085][ T5177] dvb-usb: error -32 while querying for an remote control event. [ 183.638700][ T2299] usb 5-1: USB disconnect, device number 5 [ 183.693819][ T2299] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 183.722837][ T5177] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 183.753056][ T21] usb 2-1: USB disconnect, device number 8 [ 183.926237][ T6102] binder: BINDER_SET_CONTEXT_MGR already set [ 183.932307][ T6102] binder: 6101:6102 ioctl 4018620d 200000004a80 returned -16 [ 184.636954][ T6106] tipc: Enabled bearer , priority 0 [ 184.733717][ T6110] device syzkaller0 entered promiscuous mode [ 184.784167][ T6105] tipc: Resetting bearer [ 184.826092][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 184.863848][ T6105] tipc: Disabling bearer [ 184.982854][ T5177] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 184.991946][ T5177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.012921][ T5177] usb 1-1: Product: syz [ 185.017128][ T5177] usb 1-1: Manufacturer: syz [ 185.047094][ T5177] usb 1-1: SerialNumber: syz [ 185.292081][ T6123] device syzkaller0 entered promiscuous mode [ 185.317794][ T6123] tipc: Enabled bearer , priority 0 [ 185.339946][ T6122] tipc: Resetting bearer [ 185.345900][ T2299] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 185.366895][ T6122] tipc: Disabling bearer [ 185.464762][ T25] audit: type=1326 audit(1782858254.730:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.2.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e941a2e59 code=0x0 [ 185.542941][ T5177] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 185.612814][ T5177] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 185.631151][ T5177] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 185.654053][ T5177] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 185.674600][ T5177] lan78xx: probe of 1-1:1.0 failed with error -32 [ 185.725031][ T2299] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.761582][ T2299] usb 2-1: config 0 has no interface number 0 [ 185.791015][ T6129] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 185.862751][ T5177] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.925998][ T6136] device syzkaller0 entered promiscuous mode [ 185.932953][ T2299] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 185.947200][ T6136] tipc: Enabled bearer , priority 0 [ 185.954081][ T2299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.962112][ T2299] usb 2-1: Product: syz [ 185.983745][ T6136] tipc: Resetting bearer [ 185.990622][ T2299] usb 2-1: Manufacturer: syz [ 185.995588][ T2299] usb 2-1: SerialNumber: syz [ 186.005189][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 186.022272][ T2299] usb 2-1: config 0 descriptor?? [ 186.027717][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 186.033969][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 186.040016][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 186.046575][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 186.054410][ T6135] tipc: Resetting bearer [ 186.064783][ T2299] usb 2-1: selecting invalid altsetting 1 [ 186.076764][ T2299] dvb_ttusb_budget: ttusb_init_controller: error [ 186.083527][ T2299] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 186.094750][ T6135] tipc: Disabling bearer [ 186.147810][ T5177] usb 3-1: Using ep0 maxpacket: 16 [ 186.191531][ T2299] DVB: Unable to find symbol stv0299_attach() [ 186.245196][ T2299] DVB: Unable to find symbol tda8083_attach() [ 186.252268][ T2299] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 186.308252][ T6145] tipc: Enabled bearer , priority 0 [ 186.343567][ T6145] tipc: Resetting bearer [ 186.363335][ T6144] tipc: Disabling bearer [ 186.482815][ T5177] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 186.512338][ T5177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.520759][ T5177] usb 3-1: Product: syz [ 186.532801][ T5177] usb 3-1: Manufacturer: syz [ 186.542976][ T5177] usb 3-1: SerialNumber: syz [ 186.554108][ T5177] usb 3-1: config 0 descriptor?? [ 186.646000][ T5177] usb 3-1: selecting invalid altsetting 1 [ 186.659526][ T5177] technisat-usb2: could not set alternate setting to 0 [ 186.680946][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'. [ 186.725536][ T5047] usb 2-1: USB disconnect, device number 9 [ 186.852139][ T6156] netlink: 'syz.4.595': attribute type 3 has an invalid length. [ 186.873895][ T5177] technisat-usb2: firmware version: 0.0 [ 186.883998][ T5177] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 187.046691][ T13] usb 1-1: USB disconnect, device number 12 [ 187.168925][ T6163] device syzkaller0 entered promiscuous mode [ 187.191390][ T6163] tipc: Enabled bearer , priority 0 [ 187.204561][ T6162] tipc: Resetting bearer [ 187.227840][ T6162] tipc: Disabling bearer [ 187.320822][ T5177] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.366994][ T5177] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 187.391409][ T5177] usb 3-1: media controller created [ 187.403237][ T5177] technisat-usb2: i2c-error: out failed 53 = -22 [ 187.410691][ T5177] dvb-usb: MAC address reading failed. [ 187.438798][ T5177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.493448][ T5177] DVB: Unable to find symbol stv090x_attach() [ 187.803243][ T6167] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 188.043169][ T5177] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 188.052484][ T6130] technisat-usb2: i2c-error: out failed 00 = -22 [ 188.622702][ T5177] rc_core: IR keymap rc-technisat-usb2 not found [ 188.629079][ T5177] Registered IR keymap rc-empty [ 188.666221][ T5177] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 188.674692][ T6181] device syzkaller0 entered promiscuous mode [ 188.692329][ T5177] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 188.738233][ T5177] dvb-usb: schedule remote query interval to 100 msecs. [ 188.791048][ T6180] netlink: 552 bytes leftover after parsing attributes in process `syz.0.603'. [ 188.800294][ T5177] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 188.872940][ T5047] dvb-usb: error -32 while querying for an remote control event. [ 188.982366][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 189.014780][ T6195] loop5: detected capacity change from 0 to 7 [ 189.022795][ T5047] dvb-usb: error -32 while querying for an remote control event. [ 189.087088][ T4180] Dev loop5: unable to read RDB block 7 [ 189.103875][ T4180] loop5: AHDI p1 [ 189.107580][ T4180] loop5: partition table partially beyond EOD, truncated [ 189.124341][ T5047] usb 3-1: USB disconnect, device number 6 [ 189.158509][ T6195] Dev loop5: unable to read RDB block 7 [ 189.178449][ T6195] loop5: AHDI p1 [ 189.197469][ T6199] device syzkaller0 entered promiscuous mode [ 189.220095][ T5047] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 189.245648][ T6195] loop5: partition table partially beyond EOD, truncated [ 189.533471][ T6208] device syzkaller0 entered promiscuous mode [ 189.873021][ T5177] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 190.221707][ T6223] xt_bpf: check failed: parse error [ 190.284832][ T5177] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 190.298676][ T6224] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 190.310109][ T5177] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.340296][ T5177] usb 1-1: config 0 interface 0 has no altsetting 0 [ 190.545023][ T5177] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.564754][ T5177] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 190.590448][ T5177] usb 1-1: Product: syz [ 190.618486][ T5177] usb 1-1: Manufacturer: syz [ 190.635984][ T5177] usb 1-1: SerialNumber: syz [ 190.649141][ T5177] usb 1-1: config 0 descriptor?? [ 190.723623][ T5177] hub 1-1:0.0: bad descriptor, ignoring hub [ 190.731259][ T5177] hub: probe of 1-1:0.0 failed with error -5 [ 190.731792][ T25] audit: type=1326 audit(1782858259.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.621" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf3af08e59 code=0x0 [ 190.778788][ T5177] usb 1-1: selecting invalid altsetting 0 [ 191.052812][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.120989][ T6235] device syzkaller0 entered promiscuous mode [ 191.132514][ T6235] tipc: Enabled bearer , priority 0 [ 191.160420][ T6235] tipc: Resetting bearer [ 191.205614][ T6234] tipc: Resetting bearer [ 191.258392][ T6234] tipc: Disabling bearer [ 191.323960][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 191.413024][ T6204] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 191.431320][ T6238] device syzkaller0 entered promiscuous mode [ 191.814573][ T5047] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.963278][ T13] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 191.972353][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.003634][ T13] usb 5-1: Product: syz [ 192.007836][ T13] usb 5-1: Manufacturer: syz [ 192.012433][ T13] usb 5-1: SerialNumber: syz [ 192.023623][ T13] usb 5-1: config 0 descriptor?? [ 192.064396][ T13] usb 5-1: selecting invalid altsetting 1 [ 192.070159][ T13] technisat-usb2: could not set alternate setting to 0 [ 192.083118][ T5047] usb 2-1: Using ep0 maxpacket: 16 [ 192.222823][ T5047] usb 2-1: config 3 has an invalid interface number: 20 but max is 0 [ 192.241848][ T6253] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.248359][ T6253] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.258189][ T6253] device hsr0 entered promiscuous mode [ 192.293100][ T13] technisat-usb2: firmware version: 0.0 [ 192.300086][ T13] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 192.755142][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.843848][ T13] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 192.941664][ T6229] technisat-usb2: i2c-error: out failed 00 = -22 [ 192.971589][ T13] usb 5-1: media controller created [ 193.047119][ T13] technisat-usb2: i2c-error: out failed 53 = -22 [ 193.127384][ T13] dvb-usb: MAC address reading failed. [ 193.676047][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.155766][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.167615][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.174519][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.219841][ T6251] device hsr0 left promiscuous mode [ 194.258097][ T5047] usb 2-1: config 3 has no interface number 0 [ 194.264315][ T5047] usb 2-1: config 3 interface 20 has no altsetting 0 [ 194.304209][ T5177] usb 1-1: USB disconnect, device number 13 [ 194.381261][ T13] DVB: Unable to find symbol stv090x_attach() [ 194.405111][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 194.422820][ T13] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 194.435602][ T6261] xt_bpf: check failed: parse error [ 194.535309][ T6250] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 194.584740][ T13] rc_core: IR keymap rc-technisat-usb2 not found [ 194.602166][ T13] Registered IR keymap rc-empty [ 194.608871][ T13] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 194.642823][ T5047] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 194.654086][ T13] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input13 [ 194.684506][ T5047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.722575][ T5047] usb 2-1: Product: syz [ 194.731082][ T13] dvb-usb: schedule remote query interval to 100 msecs. [ 194.738169][ T5047] usb 2-1: Manufacturer: syz [ 194.768489][ T5047] usb 2-1: can't set config #3, error -71 [ 194.806804][ T5047] usb 2-1: USB disconnect, device number 10 [ 194.812922][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 194.862987][ T13] usb 5-1: USB disconnect, device number 6 [ 195.006433][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 195.290444][ T6281] device syzkaller0 entered promiscuous mode [ 196.070946][ T6301] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.077592][ T6301] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.086371][ T6301] device hsr0 entered promiscuous mode [ 198.006632][ T6299] device hsr0 left promiscuous mode [ 198.772354][ T6314] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 199.484044][ T6342] device syzkaller0 entered promiscuous mode [ 199.636728][ T6349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 199.643230][ T6349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 199.773369][ T6349] device hsr0 entered promiscuous mode [ 200.142239][ T6344] device syzkaller0 entered promiscuous mode [ 201.090010][ T6353] device hsr0 left promiscuous mode [ 201.464303][ T6372] loop5: detected capacity change from 0 to 7 [ 201.480992][ T4180] Dev loop5: unable to read RDB block 7 [ 201.492413][ T4180] loop5: AHDI p1 [ 201.496722][ T4180] loop5: partition table partially beyond EOD, truncated [ 201.542998][ T6372] Dev loop5: unable to read RDB block 7 [ 201.552804][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 201.572400][ T6372] loop5: AHDI p1 [ 201.602996][ T6372] loop5: partition table partially beyond EOD, truncated [ 202.306831][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 203.135607][ T13] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 203.147023][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.154214][ T13] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 203.165273][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.172444][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 203.286501][ T13] usb 3-1: config 0 descriptor?? [ 203.334786][ T6385] device syzkaller0 entered promiscuous mode [ 205.004707][ T6396] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 205.011261][ T6396] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 205.332918][ T6396] device hsr0 entered promiscuous mode [ 205.392986][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 205.399089][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 205.462829][ T13] usb 3-1: USB disconnect, device number 7 [ 205.479371][ T6397] device hsr0 left promiscuous mode [ 205.577129][ T6403] device syzkaller0 entered promiscuous mode [ 205.641041][ T6404] netlink: 'syz.1.673': attribute type 13 has an invalid length. [ 205.694500][ T6404] netlink: 'syz.1.673': attribute type 17 has an invalid length. [ 205.780974][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.808008][ T6419] loop5: detected capacity change from 0 to 7 [ 205.826633][ T6419] Dev loop5: unable to read RDB block 7 [ 205.838340][ T6419] loop5: AHDI p1 [ 205.842018][ T6419] loop5: partition table partially beyond EOD, truncated [ 206.003423][ T6404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.742732][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 207.956542][ T25] audit: type=1326 audit(1782858277.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.3.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f035adfbe59 code=0x0 [ 207.992706][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 208.112974][ T21] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 208.124418][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.131190][ T21] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 208.163084][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.179029][ T21] usb 3-1: config 0 descriptor?? [ 208.236547][ T6457] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 208.292827][ T4190] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 208.435915][ T6461] device syzkaller0 entered promiscuous mode [ 208.557946][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 208.568728][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 208.582805][ T4190] usb 4-1: Using ep0 maxpacket: 16 [ 208.589452][ T6463] loop4: detected capacity change from 0 to 1024 [ 208.613792][ T21] usb 3-1: USB disconnect, device number 8 [ 208.620449][ T6465] loop0: detected capacity change from 0 to 512 [ 208.661315][ T6467] netlink: 'syz.1.692': attribute type 13 has an invalid length. [ 208.669355][ T6467] netlink: 'syz.1.692': attribute type 17 has an invalid length. [ 208.671093][ T6463] EXT4-fs (loop4): Ignoring removed nobh option [ 208.684198][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.741274][ T6463] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,i_version,data_err=ignore,max_batch_time=0x0000000000000003,user_xattr,grpid,,errors=continue. Quota mode: none. [ 208.741906][ T6465] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 208.786555][ T6467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.808433][ T6465] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.859359][ T25] audit: type=1800 audit(1782858278.120:8): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.690" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 208.923679][ T4190] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 208.945496][ T4190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.945586][ T6475] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 208.959910][ T4190] usb 4-1: Product: syz [ 208.975381][ T6475] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 208.981419][ T4190] usb 4-1: Manufacturer: syz [ 209.006597][ T6475] EXT4-fs (loop4): This should not happen!! Data will be lost [ 209.006597][ T6475] [ 209.016611][ T4190] usb 4-1: SerialNumber: syz [ 209.034889][ T4190] usb 4-1: config 0 descriptor?? [ 209.039557][ T6475] EXT4-fs (loop4): Total free blocks count 0 [ 209.048315][ T6475] EXT4-fs (loop4): Free/Dirty block details [ 209.068102][ T6475] EXT4-fs (loop4): free_blocks=20480 [ 209.078275][ T6475] EXT4-fs (loop4): dirty_blocks=80 [ 209.083463][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 209.094343][ T6475] EXT4-fs (loop4): Block reservation details [ 209.100357][ T6475] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 209.111189][ T5479] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 209.113229][ T4190] usb 4-1: selecting invalid altsetting 1 [ 209.130202][ T4190] technisat-usb2: could not set alternate setting to 0 [ 209.139250][ T5479] EXT4-fs (loop4): This should not happen!! Data will be lost [ 209.139250][ T5479] [ 209.322906][ T4190] technisat-usb2: firmware version: 0.0 [ 209.328702][ T4190] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 209.479001][ T6483] tc_dump_action: action bad kind [ 209.968052][ T6493] overlayfs: missing 'workdir' [ 210.038001][ T4190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.118610][ T6456] technisat-usb2: i2c-error: out failed 00 = -22 [ 210.362977][ T4190] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 210.377069][ T4190] usb 4-1: media controller created [ 210.389036][ T4190] technisat-usb2: i2c-error: out failed 53 = -22 [ 210.402337][ T4190] dvb-usb: MAC address reading failed. [ 210.423067][ T4190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.710034][ T4190] DVB: Unable to find symbol stv090x_attach() [ 210.757913][ T6504] device syzkaller0 entered promiscuous mode [ 210.928959][ T21] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 210.994836][ T21] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.242774][ T4190] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 211.448377][ T4190] rc_core: IR keymap rc-technisat-usb2 not found [ 211.455559][ T4190] Registered IR keymap rc-empty [ 211.461219][ T4190] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 211.536567][ T4190] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 211.622303][ T4190] dvb-usb: schedule remote query interval to 100 msecs. [ 211.703695][ T4190] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 211.726997][ T6509] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 211.741034][ T4190] usb 4-1: USB disconnect, device number 8 [ 211.768515][ T1108] dvb-usb: error -19 while querying for an remote control event. [ 211.858569][ T4190] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 212.284810][ T4190] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 212.388930][ T6531] tc_dump_action: action bad kind [ 212.644003][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 213.050336][ T6538] overlayfs: missing 'workdir' [ 213.082786][ T4190] usb 4-1: Using ep0 maxpacket: 16 [ 213.243155][ T4190] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 213.322140][ T4190] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.419142][ T4190] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 213.546715][ T4190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.756386][ T4190] usb 4-1: config 0 descriptor?? [ 214.021549][ T25] audit: type=1326 audit(1782858283.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.4.713" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf3af08e59 code=0x0 [ 214.352883][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 214.362107][ T4190] usbhid 4-1:0.0: can't add hid device: -71 [ 214.370398][ T4190] usbhid: probe of 4-1:0.0 failed with error -71 [ 214.454134][ T4190] usb 4-1: USB disconnect, device number 9 [ 214.611853][ T2299] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 214.653332][ T2299] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.664594][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 215.025896][ T13] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 215.063351][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.112708][ T13] usb 5-1: Product: syz [ 215.131589][ T13] usb 5-1: Manufacturer: syz [ 215.132658][ C1] sched: RT throttling activated [ 215.178510][ T13] usb 5-1: SerialNumber: syz [ 215.222577][ T13] usb 5-1: config 0 descriptor?? [ 215.294574][ T13] usb 5-1: selecting invalid altsetting 1 [ 215.300370][ T13] technisat-usb2: could not set alternate setting to 0 [ 215.605504][ T13] technisat-usb2: firmware version: 0.0 [ 215.619570][ T13] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 215.706023][ T6570] tc_dump_action: action bad kind [ 215.943896][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 216.139478][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.238306][ T13] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 216.257124][ T13] usb 5-1: media controller created [ 216.278441][ T13] technisat-usb2: i2c-error: out failed 53 = -22 [ 216.285435][ T13] dvb-usb: MAC address reading failed. [ 216.319218][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.339513][ T6553] technisat-usb2: i2c-error: out failed 00 = -22 [ 216.483130][ T6578] overlayfs: missing 'workdir' [ 216.621710][ T6557] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 216.639844][ T13] DVB: Unable to find symbol stv090x_attach() [ 217.310170][ T13] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 217.412800][ T13] rc_core: IR keymap rc-technisat-usb2 not found [ 217.419205][ T13] Registered IR keymap rc-empty [ 217.447358][ T13] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 217.504413][ T13] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15 [ 217.558048][ T13] dvb-usb: schedule remote query interval to 100 msecs. [ 217.612976][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 217.629268][ T6599] loop1: detected capacity change from 0 to 512 [ 217.674084][ T13] usb 5-1: USB disconnect, device number 7 [ 217.741642][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 217.797617][ T6599] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 218.031888][ T21] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 218.070898][ T6599] EXT4-fs (loop1): 1 truncate cleaned up [ 218.077387][ T6599] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noload,lazytime,noload,resgid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none. [ 218.432707][ T6615] tc_dump_action: action bad kind [ 219.242791][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 219.363074][ T21] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 219.523921][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.732755][ T21] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 219.784171][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.840338][ T21] usb 4-1: config 0 descriptor?? [ 220.135231][ T25] audit: type=1326 audit(1782858289.400:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.0.737" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39d1306e59 code=0x0 [ 220.252807][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 220.375873][ T6628] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 220.386532][ T6628] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 220.484851][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 220.493068][ T21] usb 4-1: USB disconnect, device number 10 [ 220.514453][ T4190] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 220.553515][ T4190] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.582870][ T13] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 220.856099][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 221.203237][ T13] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 221.223039][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.238171][ T13] usb 1-1: Product: syz [ 221.245676][ T13] usb 1-1: Manufacturer: syz [ 221.267250][ T6629] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 221.405862][ T6646] overlayfs: missing 'lowerdir' [ 221.545541][ T13] usb 1-1: SerialNumber: syz [ 221.568859][ T13] usb 1-1: config 0 descriptor?? [ 221.635357][ T13] usb 1-1: selecting invalid altsetting 1 [ 221.655125][ T13] technisat-usb2: could not set alternate setting to 0 [ 221.852970][ T13] technisat-usb2: firmware version: 0.0 [ 221.858753][ T13] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 222.289640][ T6657] tc_dump_action: action bad kind [ 222.481563][ T6656] sg_write: data in/out 2130396/128 bytes for SCSI command 0x0-- guessing data in; [ 222.481563][ T6656] program syz.2.745 not setting count and/or reply_len properly [ 222.560152][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.623295][ T13] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 222.672932][ T13] usb 1-1: media controller created [ 222.694112][ T13] technisat-usb2: i2c-error: out failed 53 = -22 [ 222.782804][ T6626] technisat-usb2: i2c-error: out failed 00 = -22 [ 222.789680][ T13] dvb-usb: MAC address reading failed. [ 222.905956][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.715025][ T13] DVB: Unable to find symbol stv090x_attach() [ 223.775731][ T6675] tipc: Enabled bearer , priority 0 [ 223.815543][ T6675] tipc: Resetting bearer [ 223.842259][ T6677] netlink: 'syz.1.751': attribute type 3 has an invalid length. [ 223.861996][ T13] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 223.895012][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 223.925085][ T6674] tipc: Disabling bearer [ 223.937907][ T2299] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.002759][ T13] rc_core: IR keymap rc-technisat-usb2 not found [ 224.067624][ T6682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 224.076695][ T6682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 224.723461][ T13] Registered IR keymap rc-empty [ 224.729770][ T13] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 224.741165][ T13] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input16 [ 224.779003][ T13] dvb-usb: schedule remote query interval to 100 msecs. [ 224.822910][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 224.838206][ T13] usb 1-1: USB disconnect, device number 14 [ 225.266253][ T2299] usb 3-1: Using ep0 maxpacket: 16 [ 225.294580][ T6693] overlayfs: missing 'lowerdir' [ 225.393570][ T6688] netlink: 'syz.4.753': attribute type 12 has an invalid length. [ 225.403766][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 225.453608][ T2299] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 225.490298][ T2299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.511822][ T6688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.753'. [ 225.532319][ T2299] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 225.571897][ T2299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.640971][ T2299] usb 3-1: config 0 descriptor?? [ 225.876257][ T13] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 225.904057][ T13] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.036308][ T6706] binder: 6704:6706 ioctl 4018620d 0 returned -22 [ 226.158494][ T6703] device syzkaller0 entered promiscuous mode [ 226.213181][ T2299] usbhid 3-1:0.0: can't add hid device: -71 [ 226.224150][ T2299] usbhid: probe of 3-1:0.0 failed with error -71 [ 226.255383][ T6711] tc_dump_action: action bad kind [ 226.496349][ T2299] usb 3-1: USB disconnect, device number 9 [ 227.034352][ T6719] loop2: detected capacity change from 0 to 2048 [ 227.881149][ T6731] tipc: Enabling of bearer rejected, failed to enable media [ 228.043762][ T6719] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,max_dir_size_kb=0x000000000000f2a5,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none. [ 228.124821][ T6740] loop0: detected capacity change from 0 to 128 [ 228.249524][ T6699] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 228.800592][ T6740] loop0: detected capacity change from 0 to 256 [ 229.046290][ T4231] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 229.079038][ T6760] loop5: detected capacity change from 0 to 7 [ 229.095304][ T4180] Dev loop5: unable to read RDB block 7 [ 229.112611][ T4180] loop5: AHDI p1 [ 229.117889][ T4180] loop5: partition table partially beyond EOD, truncated [ 229.142702][ T4231] EXT4-fs (loop2): Remounting filesystem read-only [ 229.311799][ T6768] device syzkaller0 entered promiscuous mode [ 229.365899][ T6760] Dev loop5: unable to read RDB block 7 [ 229.458373][ T6760] loop5: AHDI p1 [ 229.478645][ T6760] loop5: partition table partially beyond EOD, truncated [ 229.943472][ T6773] tc_dump_action: action bad kind [ 230.287500][ T6781] overlayfs: missing 'lowerdir' [ 231.023747][ T6785] binder: 6783:6785 ioctl 4018620d 0 returned -22 [ 232.067569][ T13] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 232.090669][ T13] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 232.174435][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.778'. [ 232.803384][ T6810] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 233.133186][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 233.280933][ T6845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.784'. [ 233.297053][ T6845] netlink: 'syz.3.784': attribute type 12 has an invalid length. [ 233.310406][ T6845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.784'. [ 233.676546][ T6860] overlayfs: missing 'lowerdir' [ 233.966451][ T6865] binder: 6863:6865 ioctl 4018620d 0 returned -22 [ 234.073627][ T6868] device syzkaller0 entered promiscuous mode [ 234.145498][ T6868] tipc: Enabled bearer , priority 0 [ 234.165614][ T6868] tipc: Resetting bearer [ 234.175159][ T6867] tipc: Resetting bearer [ 234.209967][ T6867] tipc: Disabling bearer [ 234.740134][ T6882] overlayfs: missing 'lowerdir' [ 235.442482][ T6884] loop2: detected capacity change from 0 to 128 [ 235.545172][ T13] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 235.598146][ T13] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.531211][ T6901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.798'. [ 236.701513][ T6905] fuse: Unknown parameter 'fd0x0000000000000004' [ 236.718447][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.797'. [ 236.829509][ T6911] device syzkaller0 entered promiscuous mode [ 236.874148][ T6911] tipc: Enabled bearer , priority 0 [ 236.894347][ T6911] tipc: Resetting bearer [ 236.907405][ T6910] tipc: Resetting bearer [ 236.915889][ T6886] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 236.938274][ T6910] tipc: Disabling bearer [ 238.403580][ T6929] loop4: detected capacity change from 0 to 1024 [ 238.469488][ T6934] loop0: detected capacity change from 0 to 128 [ 238.604361][ T6929] EXT4-fs (loop4): Ignoring removed orlov option [ 239.337668][ T6943] loop2: detected capacity change from 0 to 512 [ 239.360481][ T6929] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 239.396243][ T6943] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 239.760131][ T6943] EXT4-fs (loop2): orphan cleanup on readonly fs [ 240.245818][ T6943] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 240.340610][ T6943] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.811: attempt to clear invalid blocks 2 len 1 [ 240.404803][ T6943] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 240.446127][ T6943] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.811: invalid indirect mapped block 1819239214 (level 0) [ 240.512437][ T6943] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.811: invalid indirect mapped block 1819239214 (level 1) [ 240.648412][ T6943] EXT4-fs (loop2): 1 truncate cleaned up [ 240.680300][ T2299] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 240.690277][ T6943] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 240.854514][ T2299] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.696300][ T6968] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 241.806113][ T6977] loop4: detected capacity change from 0 to 1024 [ 241.838563][ T6977] ======================================================= [ 241.838563][ T6977] WARNING: The mand mount option has been deprecated and [ 241.838563][ T6977] and is ignored by this kernel. Remove the mand [ 241.838563][ T6977] option from the mount to silence this warning. [ 241.838563][ T6977] ======================================================= [ 242.000557][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 242.049939][ T6977] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.060754][ T6977] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.096464][ T25] audit: type=1800 audit(1782858311.360:11): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.822" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 242.149020][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'. [ 244.189753][ T7018] xt_bpf: check failed: parse error [ 245.294719][ T7030] loop1: detected capacity change from 0 to 1024 [ 245.375464][ T7030] EXT4-fs (loop1): inline encryption not supported [ 245.437979][ T7042] overlayfs: missing 'workdir' [ 245.753223][ T7030] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,dioread_lock,,errors=continue. Quota mode: none. [ 246.371077][ T7058] device syzkaller0 entered promiscuous mode [ 246.559305][ T7060] loop4: detected capacity change from 0 to 8192 [ 246.629227][ T7064] loop2: detected capacity change from 0 to 4096 [ 246.728079][ T7064] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.010411][ T7076] overlayfs: missing 'workdir' [ 247.527449][ T7085] loop1: detected capacity change from 0 to 512 [ 247.601969][ T7090] tipc: Enabled bearer , priority 0 [ 247.780898][ T7085] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.857: iget: bad i_size value: 38620345925642 [ 248.060426][ T7085] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.857: couldn't read orphan inode 15 (err -117) [ 248.281588][ T7085] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.492492][ T7092] device syzkaller0 entered promiscuous mode [ 248.590187][ T7084] tipc: Resetting bearer [ 248.648565][ T7084] tipc: Disabling bearer [ 248.690287][ T7100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.860'. [ 248.760212][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.859'. [ 248.807303][ T7107] loop4: detected capacity change from 0 to 512 [ 248.832065][ T7078] Set syz1 is full, maxelem 6117 reached [ 248.962821][ T4190] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 249.238251][ T7107] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noquota,,errors=continue. Quota mode: writeback. [ 249.256506][ T7107] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.272874][ T4190] usb 1-1: Using ep0 maxpacket: 8 [ 249.331471][ T25] audit: type=1800 audit(1782858318.590:12): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.863" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 249.403531][ T4190] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.414991][ T4190] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.428261][ T4190] usb 1-1: config 0 interface 0 has no altsetting 0 [ 249.435446][ T4190] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 249.444672][ T4190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.454553][ T4190] usb 1-1: config 0 descriptor?? [ 249.748705][ T25] audit: type=1107 audit(1782858319.010:13): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 249.850947][ T7133] fuse: Bad value for 'fd' [ 249.914870][ T7103] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.032887][ T4190] usbhid 1-1:0.0: can't add hid device: -71 [ 250.034331][ T7141] loop3: detected capacity change from 0 to 764 [ 250.038894][ T4190] usbhid: probe of 1-1:0.0 failed with error -71 [ 250.076199][ T7139] loop2: detected capacity change from 0 to 1024 [ 250.084815][ T4190] usb 1-1: USB disconnect, device number 15 [ 250.142120][ T7139] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 250.183837][ T7139] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.282316][ T7139] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000001000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 250.430334][ T7147] device syzkaller0 entered promiscuous mode [ 250.722098][ T4300] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 250.764583][ T4300] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.846507][ T7154] loop2: detected capacity change from 0 to 4096 [ 250.972146][ T7154] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 251.039680][ T7154] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 251.039680][ T7154] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 251.039680][ T7154] [ 251.077286][ T7162] loop0: detected capacity change from 0 to 1024 [ 251.131338][ T7154] EXT4-fs (loop2): Unrecognized mount option "smackfsdef=(:" or missing value [ 251.264822][ T7162] EXT4-fs (loop0): inline encryption not supported [ 251.324209][ T7162] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.883: lblock 2 mapped to illegal pblock 2 (length 1) [ 251.359545][ T7162] EXT4-fs (loop0): Remounting filesystem read-only [ 251.393416][ T7162] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 251.401561][ T7162] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.883: lblock 0 mapped to illegal pblock 48 (length 1) [ 251.418396][ T7167] loop3: detected capacity change from 0 to 128 [ 251.433244][ T7162] EXT4-fs (loop0): Remounting filesystem read-only [ 251.446324][ T7162] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 251.459919][ T7162] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.883: Failed to acquire dquot type 0 [ 251.471529][ T7162] EXT4-fs (loop0): Remounting filesystem read-only [ 251.521770][ T7173] binder: 7172:7173 ioctl c0306201 0 returned -14 [ 251.531980][ T7157] attempt to access beyond end of device [ 251.531980][ T7157] loop3: rw=2049, want=250, limit=128 [ 251.537317][ T7162] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 251.552347][ T7173] binder: BINDER_SET_CONTEXT_MGR already set [ 251.587146][ T7173] binder: 7172:7173 ioctl 4018620d 200000004a80 returned -16 [ 251.597458][ T7162] EXT4-fs (loop0): Remounting filesystem read-only [ 251.611500][ T7162] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.883: mark_inode_dirty error [ 251.638743][ T7162] EXT4-fs (loop0): Remounting filesystem read-only [ 251.651795][ T7162] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 251.686531][ T7162] EXT4-fs (loop0): 1 orphan inode deleted [ 251.696851][ T7162] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,noblock_validity,grpquota,errors=remount-ro,auto_da_alloc,inlinecrypt,. Quota mode: writeback. [ 251.714382][ T144] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 251.776234][ T144] EXT4-fs (loop0): Remounting filesystem read-only [ 251.791943][ T144] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 251.801863][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 251.825832][ T144] EXT4-fs (loop0): Remounting filesystem read-only [ 251.844426][ T7162] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.883: Invalid inode table block 1 in block_group 0 [ 251.882060][ T7162] EXT4-fs (loop0): Remounting filesystem read-only [ 251.888683][ T7162] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 251.903575][ T7162] EXT4-fs (loop0): Remounting filesystem read-only [ 251.910115][ T7162] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz.0.883: mark_inode_dirty error [ 251.928415][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 251.928829][ T7162] EXT4-fs (loop0): Remounting filesystem read-only [ 253.130670][ T7195] loop4: detected capacity change from 0 to 512 [ 253.232985][ T7195] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 253.256163][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'. [ 253.331484][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 253.776616][ T7223] binder: 7220:7223 ioctl c0306201 0 returned -14 [ 254.042458][ T7228] netlink: 'syz.2.905': attribute type 20 has an invalid length. [ 255.989031][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.997595][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.122051][ T7245] loop4: detected capacity change from 0 to 1024 [ 256.442071][ T7245] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.463473][ T7245] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.498409][ T7258] loop2: detected capacity change from 0 to 2048 [ 256.555079][ T7258] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.583666][ T25] audit: type=1800 audit(1782858325.850:14): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.909" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 256.724281][ T7258] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 256.813933][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 257.012778][ T26] usb 2-1: device descriptor read/64, error -71 [ 257.681071][ T7273] loop2: detected capacity change from 0 to 128 [ 257.862775][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 257.940356][ T7273] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,nodelalloc,,errors=continue. Quota mode: none. [ 257.973116][ T4190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 258.012329][ T4190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 258.028677][ T7273] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.052766][ T26] usb 2-1: device descriptor read/64, error -71 [ 258.060185][ T4190] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 258.178222][ T26] usb usb2-port1: attempt power cycle [ 258.642921][ T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 258.793769][ T26] usb 2-1: device descriptor read/8, error -71 [ 258.949009][ T7284] fido_id[7284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.916719][ T26] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 260.162884][ T26] usb 2-1: device descriptor read/8, error -71 [ 260.364509][ T26] usb usb2-port1: unable to enumerate USB device [ 260.559167][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.568016][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.924200][ T7273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.955848][ T7273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.222186][ T7273] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.231765][ T7273] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.240740][ T7273] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.373500][ T7273] syz.2.917 (7273) used greatest stack depth: 19792 bytes left [ 263.423934][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 263.841241][ T25] audit: type=1326 audit(1782858333.100:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.2.932" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e941a2e59 code=0x0 [ 264.215793][ T4229] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 264.312891][ T1108] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 265.977718][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 266.196147][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 266.252925][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 266.373421][ T1108] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 266.393048][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 266.434610][ T1108] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 266.458890][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.472993][ T4229] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 266.488467][ T1108] usb 1-1: config 0 descriptor?? [ 266.497480][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.532928][ T4229] usb 3-1: Product: syz [ 266.537125][ T4229] usb 3-1: Manufacturer: syz [ 266.542027][ T4229] usb 3-1: SerialNumber: syz [ 266.607201][ T4229] usb 3-1: config 0 descriptor?? [ 266.647518][ T4229] usb 3-1: selecting invalid altsetting 1 [ 266.678065][ T4229] technisat-usb2: could not set alternate setting to 0 [ 266.882791][ T4229] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 266.931578][ T4229] usb 3-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 266.954617][ T4229] usb 3-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 268.329197][ T1108] usbhid 1-1:0.0: can't add hid device: -71 [ 268.335283][ T1108] usbhid: probe of 1-1:0.0 failed with error -71 [ 268.347642][ T1108] usb 1-1: USB disconnect, device number 16 [ 268.662960][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'. [ 269.405990][ T7453] device syzkaller0 entered promiscuous mode [ 269.449247][ T7453] tipc: Enabled bearer , priority 0 [ 269.509269][ T7453] tipc: Resetting bearer [ 269.556338][ T7452] tipc: Resetting bearer [ 269.587118][ T7452] tipc: Disabling bearer [ 270.516347][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 270.639980][ T7474] device syzkaller0 entered promiscuous mode [ 270.762779][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 270.769461][ T7480] loop0: detected capacity change from 0 to 512 [ 270.882953][ T1108] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 271.171422][ T7480] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.985: inode has both inline data and extents flags [ 271.254918][ T7480] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.985: couldn't read orphan inode 15 (err -117) [ 271.341604][ T7480] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.436504][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.443234][ T1108] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 271.452274][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.462424][ T1108] usb 5-1: config 0 descriptor?? [ 271.469830][ T7480] EXT4-fs warning (device loop0): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 271.693964][ T7502] loop5: detected capacity change from 0 to 7 [ 271.811863][ T7503] tc_dump_action: action bad kind [ 272.651886][ T7502] Dev loop5: unable to read RDB block 7 [ 272.745606][ T7502] loop5: AHDI p1 [ 272.749294][ T7502] loop5: partition table partially beyond EOD, truncated [ 272.942794][ T1108] usbhid 5-1:0.0: can't add hid device: -71 [ 272.948813][ T1108] usbhid: probe of 5-1:0.0 failed with error -71 [ 272.974791][ T1108] usb 5-1: USB disconnect, device number 8 [ 273.976371][ T7536] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 273.984334][ T7536] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 274.011893][ T7538] (unnamed net_device) (uninitialized): option use_carrier: invalid value (9) [ 274.032823][ T7533] device syzkaller0 entered promiscuous mode [ 274.388750][ T7548] tc_dump_action: action bad kind [ 275.122586][ T7549] netlink: 552 bytes leftover after parsing attributes in process `syz.3.1005'. [ 275.377454][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 275.392906][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 275.617378][ T25] audit: type=1326 audit(1782858344.880:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.1010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28cc17ce59 code=0x0 [ 275.640764][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.790438][ T7560] device syzkaller0 entered promiscuous mode [ 275.942803][ T5047] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 276.161639][ T7576] overlayfs: missing 'lowerdir' [ 276.653515][ T7586] loop4: detected capacity change from 0 to 512 [ 276.678437][ T4281] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 276.682774][ T5047] usb 2-1: Using ep0 maxpacket: 16 [ 276.751546][ T7586] EXT4-fs (loop4): Ignoring removed oldalloc option [ 276.783149][ T7586] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 276.807642][ T7586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0003] [ 276.831249][ T7586] EXT4-fs (loop4): orphan cleanup on readonly fs [ 276.843599][ T7586] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #13: comm syz.4.1015: iget: bad i_size value: 12154761577498 [ 276.864584][ T7586] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1015: couldn't read orphan inode 13 (err -117) [ 276.893209][ T7586] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,noblock_validity,delalloc,,errors=continue. Quota mode: none. [ 276.940904][ T7586] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1015: dx entry: limit 65535 != root limit 120 [ 276.974017][ T7586] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1015: Corrupt directory, running e2fsck is recommended [ 277.027489][ T5047] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 277.037226][ T5047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.045405][ T5047] usb 2-1: Product: syz [ 277.049570][ T5047] usb 2-1: Manufacturer: syz [ 277.065816][ T5047] usb 2-1: SerialNumber: syz [ 277.081699][ T5047] usb 2-1: config 0 descriptor?? [ 277.158888][ T5047] usb 2-1: selecting invalid altsetting 1 [ 277.172210][ T5047] technisat-usb2: could not set alternate setting to 0 [ 277.271131][ T7596] tc_dump_action: action bad kind [ 277.576750][ T7597] device syzkaller0 entered promiscuous mode [ 277.858790][ T5047] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 278.243595][ T7608] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 279.196676][ T7614] device syzkaller0 entered promiscuous mode [ 279.552829][ T7580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.811465][ T7624] overlayfs: missing 'lowerdir' [ 282.893448][ T7648] tc_dump_action: action bad kind [ 283.598083][ T25] audit: type=1326 audit(1782858352.840:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.0.1033" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39d1306e59 code=0x0 [ 283.728531][ T7661] device syzkaller0 entered promiscuous mode [ 283.901731][ T7652] device syzkaller0 entered promiscuous mode [ 283.922828][ T21] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 284.192710][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 284.354864][ T7684] device syzkaller0 entered promiscuous mode [ 284.430992][ T7678] loop1: detected capacity change from 0 to 8192 [ 284.614662][ T7686] overlayfs: missing 'lowerdir' [ 285.122818][ T21] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 285.269657][ T7688] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1042'. [ 285.319314][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.327438][ T21] usb 1-1: Product: syz [ 285.331722][ T21] usb 1-1: Manufacturer: syz [ 285.336466][ T21] usb 1-1: SerialNumber: syz [ 285.342992][ T21] usb 1-1: config 0 descriptor?? [ 285.394802][ T21] usb 1-1: selecting invalid altsetting 1 [ 285.400573][ T21] technisat-usb2: could not set alternate setting to 0 [ 285.632904][ T21] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 287.513358][ T7701] tc_dump_action: action bad kind [ 288.328698][ T7711] device syzkaller0 entered promiscuous mode [ 288.366690][ T7710] device syzkaller0 entered promiscuous mode [ 288.736557][ T7727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1055'. [ 288.901390][ T7731] loop5: detected capacity change from 0 to 7 [ 288.978112][ T7731] Dev loop5: unable to read RDB block 7 [ 289.020669][ T7731] loop5: AHDI p1 [ 289.043232][ T7731] loop5: partition table partially beyond EOD, truncated [ 289.105957][ T7741] tc_dump_action: action bad kind [ 289.831309][ T7736] device syzkaller0 entered promiscuous mode [ 290.567886][ T7762] netlink: 'syz.1.1063': attribute type 13 has an invalid length. [ 290.615361][ T7762] netlink: 'syz.1.1063': attribute type 17 has an invalid length. [ 290.660381][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.271933][ T7762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.767019][ T7780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1069'. [ 291.911296][ T7782] device syzkaller0 entered promiscuous mode [ 292.788415][ T7798] tc_dump_action: action bad kind [ 293.110485][ T7797] device syzkaller0 entered promiscuous mode [ 293.600856][ T7802] device syzkaller0 entered promiscuous mode [ 293.779387][ T7810] netlink: 552 bytes leftover after parsing attributes in process `syz.4.1077'. [ 293.917822][ T7817] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 293.926679][ T7817] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 293.938436][ T7817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 294.405883][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1081'. [ 294.545541][ T7831] netlink: 'syz.3.1082': attribute type 13 has an invalid length. [ 294.564282][ T7831] netlink: 'syz.3.1082': attribute type 17 has an invalid length. [ 294.837477][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.914073][ T7831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.052783][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 295.409944][ T7845] tc_dump_action: action bad kind [ 296.289687][ T7850] device syzkaller0 entered promiscuous mode [ 296.390700][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 296.553167][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.633054][ T13] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 296.641778][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.692714][ T13] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 296.702018][ T13] usb 4-1: config 1 has no interface number 1 [ 296.736983][ T13] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 296.766953][ T7854] loop1: detected capacity change from 0 to 8192 [ 296.777496][ T13] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.808548][ T13] usb 4-1: config 1 interface 2 has no altsetting 0 [ 296.960698][ T7865] loop4: detected capacity change from 0 to 128 [ 296.982995][ T13] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.014983][ T7865] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.022768][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.094000][ T13] usb 4-1: Product: syz [ 297.098195][ T13] usb 4-1: Manufacturer: syz [ 297.141644][ T13] usb 4-1: SerialNumber: syz [ 297.195028][ T7865] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.298862][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1092'. [ 297.576008][ T7877] netlink: 552 bytes leftover after parsing attributes in process `syz.2.1094'. [ 297.995844][ T7889] tc_dump_action: action bad kind [ 298.789408][ T13] usb 4-1: USB disconnect, device number 11 [ 298.825831][ T7893] device syzkaller0 entered promiscuous mode [ 298.913581][ T7898] Falling back ldisc for ttyS3. [ 299.044644][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.060463][ T7904] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1105'. [ 299.128096][ T7905] device syzkaller0 entered promiscuous mode [ 299.439737][ T7919] hub 8-0:1.0: USB hub found [ 299.446870][ T7919] hub 8-0:1.0: 1 port detected [ 300.189787][ T7922] netlink: 552 bytes leftover after parsing attributes in process `syz.3.1110'. [ 300.465199][ T7929] device syzkaller0 entered promiscuous mode [ 300.533331][ T7930] tc_dump_action: action bad kind [ 300.765735][ T7926] netlink: 'syz.4.1112': attribute type 13 has an invalid length. [ 301.211558][ T7926] netlink: 'syz.4.1112': attribute type 17 has an invalid length. [ 301.432501][ T7939] loop1: detected capacity change from 0 to 512 [ 301.474180][ T7926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 301.526111][ T7926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.541350][ T7939] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 301.600583][ T7939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 301.659983][ T7941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1117'. [ 301.780836][ T7939] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.1116: corrupted xattr entries [ 301.893815][ T7939] EXT4-fs (loop1): Remounting filesystem read-only [ 301.921615][ T7939] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 301.921692][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 301.978579][ T7939] EXT4-fs (loop1): 1 truncate cleaned up [ 302.020718][ T7939] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 302.040999][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.125585][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.219296][ T7949] device syzkaller0 entered promiscuous mode [ 302.426410][ T7957] device syzkaller0 entered promiscuous mode [ 302.841424][ T7967] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1123'. [ 303.139779][ T7972] tc_dump_action: action bad kind [ 303.456327][ T7980] netlink: 'syz.4.1129': attribute type 13 has an invalid length. [ 303.502757][ T7980] netlink: 'syz.4.1129': attribute type 17 has an invalid length. [ 303.549839][ T7984] Set syz1 is full, maxelem 6117 reached [ 303.580932][ T7987] loop0: detected capacity change from 0 to 764 [ 303.591783][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.671536][ T7987] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 303.734281][ T7980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.763966][ T7987] Symlink component flag not implemented [ 303.790673][ T7987] Symlink component flag not implemented (7) [ 303.821109][ T7981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1130'. [ 303.859614][ T7991] device syzkaller0 entered promiscuous mode [ 303.912754][ T4230] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 304.047529][ T8000] device syzkaller0 entered promiscuous mode [ 304.182800][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 304.262210][ T8007] device syzkaller0 entered promiscuous mode [ 304.403115][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.553008][ T4230] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 304.582200][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.662277][ T4230] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 304.698288][ T4230] usb 5-1: config 1 has no interface number 1 [ 304.768546][ T8016] tc_dump_action: action bad kind [ 305.472788][ T4230] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 305.495874][ T4230] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.509483][ T4230] usb 5-1: config 1 interface 2 has no altsetting 0 [ 305.652762][ T8015] netlink: 552 bytes leftover after parsing attributes in process `syz.2.1141'. [ 305.708288][ T4230] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.723183][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.751612][ T4230] usb 5-1: Product: syz [ 305.771829][ T4230] usb 5-1: Manufacturer: syz [ 305.792077][ T4230] usb 5-1: SerialNumber: syz [ 308.112871][ T4230] usb 5-1: USB disconnect, device number 9 [ 308.166921][ T8039] device syzkaller0 entered promiscuous mode [ 308.380285][ T8048] device syzkaller0 entered promiscuous mode [ 308.825850][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.993874][ T8055] tc_dump_action: action bad kind [ 309.800299][ T8075] loop2: detected capacity change from 0 to 1024 [ 309.809046][ T8077] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1157'. [ 310.731945][ T8075] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.014713][ T8101] tc_dump_action: action bad kind [ 312.431124][ T8110] device syzkaller0 entered promiscuous mode [ 312.668164][ T2299] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 312.932702][ T2299] usb 5-1: Using ep0 maxpacket: 16 [ 313.172844][ T2299] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 313.192799][ T2299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 313.199636][ T2299] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 313.223790][ T2299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.389729][ T2299] usb 5-1: config 0 descriptor?? [ 313.962846][ T2299] usbhid 5-1:0.0: can't add hid device: -71 [ 313.968853][ T2299] usbhid: probe of 5-1:0.0 failed with error -71 [ 314.030969][ T2299] usb 5-1: USB disconnect, device number 10 [ 314.128515][ T8133] loop2: detected capacity change from 0 to 512 [ 314.285645][ T8133] EXT4-fs (loop2): Ignoring removed nobh option [ 314.343946][ T8136] netlink: 552 bytes leftover after parsing attributes in process `syz.3.1173'. [ 314.416239][ T8133] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 314.478835][ T8133] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 314.489437][ T8139] fuse: Bad value for 'group_id' [ 314.702741][ T8133] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.1172: inode has both inline data and extents flags [ 314.757687][ T8133] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1172: couldn't read orphan inode 13 (err -117) [ 314.954160][ T8133] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 315.585382][ T8155] device syzkaller0 entered promiscuous mode [ 315.721147][ T8152] device syzkaller0 entered promiscuous mode [ 317.035118][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.046793][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.058414][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.331873][ T8182] netlink: 552 bytes leftover after parsing attributes in process `syz.4.1185'. [ 317.417237][ T8187] fuse: Bad value for 'group_id' [ 317.675652][ T8192] tc_dump_action: action bad kind [ 317.906042][ T8191] device syzkaller0 entered promiscuous mode [ 321.205400][ T8227] device syzkaller0 entered promiscuous mode [ 321.226772][ T8230] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1197'. [ 321.885833][ T8237] loop0: detected capacity change from 0 to 128 [ 323.966061][ T8237] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 323.990009][ T8246] tc_dump_action: action bad kind [ 324.103051][ T8237] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 324.173392][ T8254] xt_bpf: check failed: parse error [ 324.601573][ T8265] device syzkaller0 entered promiscuous mode [ 324.958152][ T13] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 325.729940][ T8291] tipc: Enabling of bearer rejected, failed to enable media [ 325.788555][ T8292] device syzkaller0 entered promiscuous mode [ 326.093340][ T8294] netlink: 'syz.1.1211': attribute type 20 has an invalid length. [ 326.332707][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 328.227993][ T4229] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 328.434019][ T5047] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 328.450740][ T21] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 328.518097][ T4229] usb 3-1: USB disconnect, device number 10 [ 328.526182][ T8314] tc_dump_action: action bad kind [ 328.538648][ T21] usb 1-1: USB disconnect, device number 17 [ 328.622014][ T5047] usb 2-1: USB disconnect, device number 15 [ 328.843015][ T13] usb 4-1: unable to read config index 0 descriptor/all [ 328.850026][ T13] usb 4-1: can't read configurations, error -71 [ 329.101503][ T8316] netlink: 552 bytes leftover after parsing attributes in process `syz.2.1216'. [ 329.224791][ T8333] xt_bpf: check failed: parse error [ 331.613665][ T8347] tipc: Enabling of bearer rejected, failed to enable media [ 331.657184][ T8347] device syzkaller0 entered promiscuous mode [ 331.831789][ T8353] loop2: detected capacity change from 0 to 1024 [ 332.025091][ T25] audit: type=1326 audit(1782858401.290:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.3.1228" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f035adfbe59 code=0x0 [ 332.483348][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 332.827976][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 332.858530][ T8365] loop0: detected capacity change from 0 to 512 [ 332.884305][ T8353] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.993704][ T8367] device syzkaller0 entered promiscuous mode [ 333.034591][ T8367] tipc: Enabling of bearer rejected, failed to enable media [ 333.072377][ T8365] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1229: iget: bad i_size value: 38620345925642 [ 333.115016][ T8365] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1229: couldn't read orphan inode 15 (err -117) [ 333.138943][ T8365] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 333.213441][ T8353] IPv6: sit1: Disabled Multicast RS [ 333.262918][ T13] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 333.271991][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.318684][ T13] usb 4-1: Product: syz [ 333.324668][ T8375] EXT4-fs (loop0): shut down requested (1) [ 333.382773][ T13] usb 4-1: Manufacturer: syz [ 333.387410][ T13] usb 4-1: SerialNumber: syz [ 333.399743][ T8373] device syzkaller0 entered promiscuous mode [ 333.433846][ T13] usb 4-1: config 0 descriptor?? [ 333.474450][ T13] usb 4-1: selecting invalid altsetting 1 [ 333.480218][ T13] technisat-usb2: could not set alternate setting to 0 [ 333.732839][ T13] technisat-usb2: firmware version: 0.0 [ 333.738550][ T13] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 334.567439][ T8389] loop2: detected capacity change from 0 to 512 [ 334.592447][ T8390] technisat-usb2: i2c-error: out failed 00 = -22 [ 334.659853][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.693075][ T13] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 334.701909][ T13] usb 4-1: media controller created [ 334.728306][ T13] technisat-usb2: i2c-error: out failed 53 = -22 [ 334.738271][ T13] dvb-usb: MAC address reading failed. [ 334.810290][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.815140][ T8389] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noquota,,errors=continue. Quota mode: writeback. [ 334.859597][ T8389] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.083473][ T13] DVB: Unable to find symbol stv090x_attach() [ 335.218331][ T25] audit: type=1800 audit(1782858404.480:19): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1234" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 335.395182][ T8411] device syzkaller0 entered promiscuous mode [ 335.480106][ T8409] device syzkaller0 entered promiscuous mode [ 335.570397][ T8413] device syzkaller0 entered promiscuous mode [ 335.581181][ T8413] tipc: Enabling of bearer rejected, failed to enable media [ 335.633264][ T8415] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 335.695185][ T13] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 335.708464][ T8418] loop1: detected capacity change from 0 to 128 [ 335.886936][ T13] rc_core: IR keymap rc-technisat-usb2 not found [ 335.954595][ T13] Registered IR keymap rc-empty [ 336.456090][ T8422] device syzkaller0 entered promiscuous mode [ 336.609540][ T13] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 336.621692][ T13] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17 [ 336.753630][ T13] dvb-usb: schedule remote query interval to 100 msecs. [ 336.802918][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 336.856097][ T13] usb 4-1: USB disconnect, device number 14 [ 336.880199][ T8432] netlink: 'syz.4.1249': attribute type 13 has an invalid length. [ 336.895518][ T8432] netlink: 'syz.4.1249': attribute type 17 has an invalid length. [ 336.925174][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.955921][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 336.977596][ T8432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.148273][ T8447] device syzkaller0 entered promiscuous mode [ 337.262785][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 337.608179][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 337.793425][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.906776][ T21] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 337.984998][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.127803][ T8458] device syzkaller0 entered promiscuous mode [ 338.144712][ T21] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 338.170534][ T21] usb 5-1: config 1 has no interface number 1 [ 338.177407][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 338.196131][ T21] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.209949][ T21] usb 5-1: config 1 interface 2 has no altsetting 0 [ 338.252308][ T8462] xt_hashlimit: size too large, truncated to 1048576 [ 338.494078][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.511246][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.520335][ T21] usb 5-1: Product: syz [ 338.524765][ T21] usb 5-1: Manufacturer: syz [ 338.529369][ T21] usb 5-1: SerialNumber: syz [ 338.591091][ T8468] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 338.601002][ T8470] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 339.305198][ T8473] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 339.350057][ T4300] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 339.363009][ T8477] device syzkaller0 entered promiscuous mode [ 339.386491][ T4300] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 339.451355][ T8479] loop1: detected capacity change from 0 to 1024 [ 339.593379][ T8482] tmpfs: Bad value for 'mpol' [ 339.599875][ T8479] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.318885][ T8479] IPv6: sit1: Disabled Multicast RS [ 340.515601][ T8490] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 340.520974][ T21] usb 5-1: USB disconnect, device number 11 [ 340.580975][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.977247][ T8516] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 342.634685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.776357][ T8528] netlink: 'syz.2.1277': attribute type 13 has an invalid length. [ 342.784487][ T8528] netlink: 'syz.2.1277': attribute type 17 has an invalid length. [ 342.837014][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 342.864226][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.929375][ T8528] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.954570][ T8528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.067868][ T4271] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.084956][ T4271] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.202933][ T13] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 343.287670][ T8544] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1283'. [ 343.329040][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1284'. [ 343.404409][ T8549] loop1: detected capacity change from 0 to 1024 [ 343.463712][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 343.530237][ T8549] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.561320][ T8549] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.622946][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.659588][ T8553] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 343.697118][ T8549] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.1285: lblock 3 mapped to illegal pblock 3 (length 3) [ 343.712923][ T13] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 343.729479][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.754960][ T8554] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1285: bg 0: block 112: padding at end of block bitmap is not set [ 343.764197][ T13] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 343.788871][ T8556] netlink: 552 bytes leftover after parsing attributes in process `syz.3.1286'. [ 343.791986][ T8554] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 8 with error 28 [ 343.805809][ T13] usb 3-1: config 1 has no interface number 1 [ 343.816997][ T8549] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 343.818160][ T8554] EXT4-fs (loop1): This should not happen!! Data will be lost [ 343.818160][ T8554] [ 343.842770][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 343.859294][ T8554] EXT4-fs (loop1): Total free blocks count 0 [ 343.871170][ T8554] EXT4-fs (loop1): Free/Dirty block details [ 343.872803][ T8549] EXT4-fs (loop1): This should not happen!! Data will be lost [ 343.872803][ T8549] [ 343.877775][ T8554] EXT4-fs (loop1): free_blocks=0 [ 343.886986][ T13] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.887014][ T13] usb 3-1: config 1 interface 2 has no altsetting 0 [ 343.945126][ T8554] EXT4-fs (loop1): dirty_blocks=64 [ 343.982930][ T8554] EXT4-fs (loop1): Block reservation details [ 344.004029][ T8554] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 344.034816][ T8557] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.1285: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 344.042922][ T13] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.073885][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.101443][ T13] usb 3-1: Product: syz [ 344.112713][ T13] usb 3-1: Manufacturer: syz [ 344.129799][ T13] usb 3-1: SerialNumber: syz [ 344.181200][ T8557] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 345.266385][ T8580] device syzkaller0 entered promiscuous mode [ 345.278832][ T8580] tipc: Enabling of bearer rejected, failed to enable media [ 345.402135][ T4230] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 345.416924][ T8588] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1297'. [ 345.416946][ T4230] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.781786][ T8599] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 345.844867][ T8601] loop2: detected capacity change from 0 to 512 [ 345.890737][ T13] usb 3-1: USB disconnect, device number 11 [ 345.909665][ T8601] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.155440][ T8604] device syzkaller0 entered promiscuous mode [ 346.298391][ T8606] loop1: detected capacity change from 0 to 256 [ 346.403506][ T8608] device syzkaller0 entered promiscuous mode [ 346.830190][ T8618] device syzkaller0 entered promiscuous mode [ 347.923556][ T8637] fuse: Unknown parameter 'group_id00000000000000000000' [ 347.941714][ T8638] netlink: 552 bytes leftover after parsing attributes in process `syz.2.1315'. [ 347.999990][ T8640] device syzkaller0 entered promiscuous mode [ 348.178713][ T8643] device syzkaller0 entered promiscuous mode [ 348.807268][ T21] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 348.839752][ T21] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 349.339562][ T8656] device syzkaller0 entered promiscuous mode [ 349.438081][ T8653] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 350.519380][ T8676] fuse: Unknown parameter 'group_id00000000000000000000' [ 350.555614][ T8670] device syzkaller0 entered promiscuous mode [ 350.681903][ T8677] device syzkaller0 entered promiscuous mode [ 350.819332][ T8683] xt_bpf: check failed: parse error [ 350.970545][ T8693] device syzkaller0 entered promiscuous mode [ 351.327929][ T8700] device syzkaller0 entered promiscuous mode [ 352.144180][ T4230] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.200124][ T4230] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 352.244292][ T8712] fuse: Unknown parameter 'group_id00000000000000000000' [ 352.413632][ T8715] device syzkaller0 entered promiscuous mode [ 352.753240][ T8705] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 353.864008][ T8745] fuse: Bad value for 'user_id' [ 353.949235][ T8749] device syzkaller0 entered promiscuous mode [ 354.015382][ T8756] device syzkaller0 entered promiscuous mode [ 354.832127][ T4230] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 354.841569][ T4230] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.284872][ T8789] device syzkaller0 entered promiscuous mode [ 355.686612][ T8791] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1367'. [ 356.127939][ T8795] fuse: Bad value for 'user_id' [ 356.247611][ T8799] device syzkaller0 entered promiscuous mode [ 356.281848][ T8801] device syzkaller0 entered promiscuous mode [ 356.370983][ T25] audit: type=1326 audit(1782858425.630:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.1.1373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28cc17ce59 code=0x0 [ 356.440951][ T8769] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 356.723191][ T4230] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 357.012955][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 357.313144][ T4230] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 357.389002][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.442766][ T4230] usb 2-1: Product: syz [ 357.447007][ T4230] usb 2-1: Manufacturer: syz [ 357.451622][ T4230] usb 2-1: SerialNumber: syz [ 357.543406][ T4230] usb 2-1: config 0 descriptor?? [ 357.585689][ T4230] usb 2-1: selecting invalid altsetting 1 [ 357.603755][ T4230] technisat-usb2: could not set alternate setting to 0 [ 357.779088][ T8827] device syzkaller0 entered promiscuous mode [ 357.880882][ T4230] technisat-usb2: firmware version: 0.0 [ 357.887008][ T4230] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 358.578041][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.628576][ T4230] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 358.653170][ T4230] usb 2-1: media controller created [ 358.658611][ T4230] technisat-usb2: i2c-error: out failed 53 = -22 [ 358.721803][ T4230] dvb-usb: MAC address reading failed. [ 359.979835][ T8839] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 360.028736][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 360.679635][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.427977][ T4230] DVB: Unable to find symbol stv090x_attach() [ 361.522886][ T4230] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 361.612780][ T4230] rc_core: IR keymap rc-technisat-usb2 not found [ 361.619161][ T4230] Registered IR keymap rc-empty [ 361.632564][ T4230] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 361.654229][ T4230] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input18 [ 361.692934][ T4230] dvb-usb: schedule remote query interval to 100 msecs. [ 361.732798][ T4230] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 361.794252][ T4230] usb 2-1: USB disconnect, device number 16 [ 361.796252][ T8854] device syzkaller0 entered promiscuous mode [ 361.894699][ T4230] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 364.111226][ T8896] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 364.144504][ T8894] device syzkaller0 entered promiscuous mode [ 364.176575][ T8899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 364.375709][ T2299] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 364.510575][ T8908] binder: 8907:8908 ioctl c0306201 0 returned -14 [ 364.534820][ T8909] device syzkaller0 entered promiscuous mode [ 364.603902][ T8911] xt_hashlimit: max too large, truncated to 1048576 [ 364.662869][ T2299] usb 5-1: Using ep0 maxpacket: 16 [ 365.602912][ T2299] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 365.611989][ T2299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.652695][ T2299] usb 5-1: Product: syz [ 365.656910][ T2299] usb 5-1: Manufacturer: syz [ 365.663067][ T2299] usb 5-1: SerialNumber: syz [ 365.716634][ T2299] usb 5-1: config 0 descriptor?? [ 365.754195][ T2299] usb 5-1: selecting invalid altsetting 1 [ 365.761213][ T2299] technisat-usb2: could not set alternate setting to 0 [ 365.892082][ T8927] device syzkaller0 entered promiscuous mode [ 365.927592][ T8925] loop0: detected capacity change from 0 to 8192 [ 365.974186][ T2299] technisat-usb2: firmware version: 0.0 [ 365.979777][ T2299] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 366.414017][ T2299] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.453059][ T2299] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 366.491948][ T2299] usb 5-1: media controller created [ 366.503071][ T8931] device syzkaller0 entered promiscuous mode [ 366.517330][ T2299] technisat-usb2: i2c-error: out failed 53 = -22 [ 366.540033][ T2299] dvb-usb: MAC address reading failed. [ 366.602438][ T2299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.614065][ T8891] technisat-usb2: i2c-error: out failed 00 = -22 [ 366.732225][ T2299] DVB: Unable to find symbol stv090x_attach() [ 366.752959][ T2299] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 366.912740][ T2299] rc_core: IR keymap rc-technisat-usb2 not found [ 366.922087][ T2299] Registered IR keymap rc-empty [ 366.973276][ T2299] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 367.014483][ T2299] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input19 [ 367.069267][ T2299] dvb-usb: schedule remote query interval to 100 msecs. [ 367.122809][ T2299] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 367.188488][ T2299] usb 5-1: USB disconnect, device number 12 [ 367.294584][ T2299] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 367.415875][ T8949] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 367.513551][ T8949] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 368.451365][ T8957] device syzkaller0 entered promiscuous mode [ 368.647857][ T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 368.688292][ T8959] loop3: detected capacity change from 0 to 1024 [ 368.776589][ T8959] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 368.932760][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 369.068649][ T21] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 369.144155][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.151596][ T21] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 369.191212][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.221097][ T21] usb 5-1: config 0 descriptor?? [ 369.582927][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 369.588944][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 369.639548][ T21] usb 5-1: USB disconnect, device number 13 [ 370.609508][ T8986] process 'syz.0.1434' launched './file1' with NULL argv: empty string added [ 371.126228][ T8989] device syzkaller0 entered promiscuous mode [ 373.467149][ T9001] device syzkaller0 entered promiscuous mode [ 373.732401][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'. [ 374.229696][ T8929] Set syz1 is full, maxelem 65536 reached [ 374.303782][ T1323] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 374.573095][ T1323] usb 4-1: Using ep0 maxpacket: 16 [ 374.909639][ T9028] program syz.0.1447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.909657][ T9027] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1446'. [ 374.919559][ T1323] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 375.213157][ T1323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.398445][ T1323] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 375.632743][ T1323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.644921][ T1323] usb 4-1: config 0 descriptor?? [ 375.984036][ T1323] usbhid 4-1:0.0: can't add hid device: -71 [ 375.993404][ T1323] usbhid: probe of 4-1:0.0 failed with error -71 [ 376.014399][ T1323] usb 4-1: USB disconnect, device number 15 [ 376.197281][ T9052] loop4: detected capacity change from 0 to 512 [ 376.246536][ T9050] device syzkaller0 entered promiscuous mode [ 376.311189][ T9052] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 376.453862][ T9052] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.486596][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 376.531943][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1458'. [ 376.923361][ T9067] loop2: detected capacity change from 0 to 4096 [ 377.307404][ T9067] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 377.516423][ T9076] xt_bpf: check failed: parse error [ 378.378861][ T9081] loop2: detected capacity change from 0 to 512 [ 378.475393][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.482019][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.526102][ T9081] EXT4-fs (loop2): Ignoring removed nobh option [ 378.610988][ T9081] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 378.639434][ T9086] device syzkaller0 entered promiscuous mode [ 378.652835][ T9081] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 378.669016][ T9081] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.1464: inode has both inline data and extents flags [ 378.774443][ T9081] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1464: couldn't read orphan inode 13 (err -117) [ 378.818152][ T9092] fuse: Bad value for 'rootmode' [ 378.947568][ T9095] loop0: detected capacity change from 0 to 512 [ 378.987677][ T9095] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 379.004208][ T9081] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 379.172463][ T9081] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 379.210833][ T9103] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 380.896507][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 380.906670][ T9122] device hsr_slave_0 left promiscuous mode [ 380.945938][ T9122] device hsr_slave_1 left promiscuous mode [ 380.999431][ T9127] fuse: Bad value for 'rootmode' [ 381.059858][ T9125] device syzkaller0 entered promiscuous mode [ 381.128037][ T4228] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 381.412807][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 381.430522][ T9147] loop3: detected capacity change from 0 to 512 [ 381.511660][ T9147] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 381.532948][ T4228] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 381.557500][ T4228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.578617][ T4228] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 381.605444][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.624867][ T9147] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 381.644048][ T4228] usb 2-1: config 0 descriptor?? [ 381.649469][ T9147] Quota error (device loop3): write_blk: dquota write failed [ 381.657669][ T9147] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 381.667755][ T9147] Quota error (device loop3): write_blk: dquota write failed [ 381.677541][ T9147] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 381.690169][ T9147] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1486: Failed to acquire dquot type 1 [ 381.714579][ T9147] EXT4-fs (loop3): 1 truncate cleaned up [ 381.720275][ T9147] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 382.631492][ T4228] usbhid 2-1:0.0: can't add hid device: -71 [ 382.646625][ T4228] usbhid: probe of 2-1:0.0 failed with error -71 [ 382.719407][ T4228] usb 2-1: USB disconnect, device number 17 [ 382.847684][ T9162] fuse: Bad value for 'rootmode' [ 383.001492][ T9166] device syzkaller0 entered promiscuous mode [ 383.281473][ T9176] loop2: detected capacity change from 0 to 512 [ 383.305199][ T9178] device syzkaller0 entered promiscuous mode [ 383.426871][ T9183] loop1: detected capacity change from 0 to 1024 [ 383.491756][ T9183] EXT4-fs (loop1): Ignoring removed bh option [ 383.505966][ T9176] ------------[ cut here ]------------ [ 383.511883][ T9176] EA inode 11 i_nlink=2 [ 383.512087][ T9176] WARNING: CPU: 1 PID: 9176 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560 [ 383.544456][ T9185] device syzkaller0 entered promiscuous mode [ 383.628011][ T9183] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,i_version,bh,init_itable,. Quota mode: none. [ 383.697394][ T9176] Modules linked in: [ 383.701343][ T9176] CPU: 1 PID: 9176 Comm: syz.2.1497 Not tainted syzkaller #0 [ 383.737705][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.811747][ T9176] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 383.843307][ T9176] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 05 09 a2 ff 49 8b 34 24 48 c7 c7 00 97 3d 8a 44 89 fa e8 f2 df 92 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 383.872769][ T9176] RSP: 0018:ffffc90003767400 EFLAGS: 00010246 [ 383.878973][ T9176] RAX: b28586ee7cbacb00 RBX: ffff88806fee5458 RCX: 0000000000080000 [ 383.900442][ T9176] RDX: ffffc90004f79000 RSI: 0000000000027a6d RDI: 0000000000027a6e [ 383.922793][ T9176] RBP: ffffc900037674f0 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 383.941452][ T9176] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88806fee52a0 [ 383.958701][ T9176] R13: dffffc0000000000 R14: ffff88806fee5260 R15: 0000000000000002 [ 383.998944][ T9176] FS: 00007f8e923fc6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 384.042795][ T9176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.065306][ T9176] CR2: 00007ffdea66bf30 CR3: 00000000557fd000 CR4: 00000000003506f0 [ 384.085009][ T9176] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 384.096328][ T9176] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 384.106688][ T9176] Call Trace: [ 384.110166][ T9176] [ 384.116640][ T9176] ? ext4_xattr_block_csum+0x560/0x560 [ 384.122340][ T9176] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 384.131812][ T9176] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 384.141956][ T9176] ? errseq_check+0x3c/0x70 [ 384.148932][ T9176] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 384.158358][ T9176] ? __ext4_journal_ensure_credits+0x450/0x450 [ 384.166956][ T9176] ? ext4_get_inode_loc+0xf6/0x120 [ 384.172297][ T9176] ext4_xattr_delete_inode+0xada/0xca0 [ 384.181187][ T9176] ? rcu_is_watching+0x11/0xa0 [ 384.189808][ T9176] ? ext4_truncate+0xd02/0x1190 [ 384.198043][ T9176] ? up_write+0x1b6/0x410 [ 384.202837][ T9176] ? ext4_expand_extra_isize_ea+0x18e0/0x18e0 [ 384.209196][ T9176] ? __ext4_mark_inode_dirty+0x4b4/0x6c0 [ 384.220750][ T9176] ext4_evict_inode+0xc0c/0x1050 [ 384.225876][ T9176] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 384.231900][ T9176] ? do_raw_spin_unlock+0x11d/0x230 [ 384.244451][ T9176] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 384.250501][ T9176] evict+0x4b6/0x8b0 [ 384.260010][ T9176] ? proc_nr_inodes+0x320/0x320 [ 384.265074][ T9176] ? do_raw_spin_unlock+0x11d/0x230 [ 384.270391][ T9176] ? _raw_spin_unlock+0x24/0x40 [ 384.281200][ T9176] ? iput+0x6ea/0x880 [ 384.285389][ T9176] ext4_orphan_cleanup+0xad8/0x1320 [ 384.290743][ T9176] ? ext4_orphan_del+0xc90/0xc90 [ 384.302594][ T9176] ? errseq_check_and_advance+0x62/0x120 [ 384.308547][ T9176] ext4_fill_super+0x8c65/0x93f0 [ 384.319441][ T9176] ? format_decode+0x8b1/0x1330 [ 384.324601][ T9176] ? ext4_mount+0x40/0x40 [ 384.329043][ T9176] ? set_blocksize+0x1f1/0x360 [ 384.340481][ T9176] ? sb_set_blocksize+0xa5/0xe0 [ 384.345550][ T9176] mount_bdev+0x28a/0x3c0 [ 384.350101][ T9176] ? ext4_mount+0x40/0x40 [ 384.359918][ T9176] legacy_get_tree+0xe6/0x180 [ 384.364948][ T9176] ? ext4_errno_to_code+0x160/0x160 [ 384.370164][ T9176] vfs_get_tree+0x88/0x270 [ 384.374960][ T9176] do_new_mount+0x247/0xa40 [ 384.379595][ T9176] __se_sys_mount+0x2e3/0x3d0 [ 384.384636][ T9176] ? __x64_sys_mount+0xc0/0xc0 [ 384.389413][ T9176] ? lockdep_hardirqs_on+0x94/0x140 [ 384.395056][ T9176] ? __x64_sys_mount+0x1c/0xc0 [ 384.399855][ T9176] do_syscall_64+0x4c/0xa0 [ 384.404383][ T9176] ? clear_bhb_loop+0x30/0x80 [ 384.409108][ T9176] ? clear_bhb_loop+0x30/0x80 [ 384.413845][ T9176] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.419755][ T9176] RIP: 0033:0x7f8e941a40ca [ 384.424246][ T9176] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.444355][ T9176] RSP: 002b:00007f8e923fbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 384.454001][ T9176] RAX: ffffffffffffffda RBX: 00007f8e923fbee0 RCX: 00007f8e941a40ca [ 384.462001][ T9176] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f8e923fbea0 [ 384.470084][ T9176] RBP: 00002000000009c0 R08: 00007f8e923fbee0 R09: 0000000000800718 [ 384.478220][ T9176] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 384.486374][ T9176] R13: 00007f8e923fbea0 R14: 000000000000048d R15: 0000200000000200 [ 384.494394][ T9176] [ 384.497417][ T9176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 384.504685][ T9176] CPU: 0 PID: 9176 Comm: syz.2.1497 Not tainted syzkaller #0 [ 384.512145][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.522197][ T9176] Call Trace: [ 384.525476][ T9176] [ 384.528408][ T9176] dump_stack_lvl+0x188/0x250 [ 384.533104][ T9176] ? show_regs_print_info+0x20/0x20 [ 384.538289][ T9176] ? load_image+0x410/0x410 [ 384.542897][ T9176] panic+0x2f8/0x850 [ 384.546785][ T9176] ? bpf_jit_dump+0xd0/0xd0 [ 384.551292][ T9176] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 384.557273][ T9176] __warn+0x248/0x2b0 [ 384.561263][ T9176] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 384.567233][ T9176] report_bug+0x1b9/0x2e0 [ 384.571659][ T9176] handle_bug+0x3a/0x70 [ 384.575842][ T9176] exc_invalid_op+0x16/0x40 [ 384.580331][ T9176] asm_exc_invalid_op+0x16/0x20 [ 384.585172][ T9176] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 384.591771][ T9176] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 05 09 a2 ff 49 8b 34 24 48 c7 c7 00 97 3d 8a 44 89 fa e8 f2 df 92 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 384.611378][ T9176] RSP: 0018:ffffc90003767400 EFLAGS: 00010246 [ 384.617433][ T9176] RAX: b28586ee7cbacb00 RBX: ffff88806fee5458 RCX: 0000000000080000 [ 384.625391][ T9176] RDX: ffffc90004f79000 RSI: 0000000000027a6d RDI: 0000000000027a6e [ 384.633350][ T9176] RBP: ffffc900037674f0 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 384.641310][ T9176] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88806fee52a0 [ 384.649272][ T9176] R13: dffffc0000000000 R14: ffff88806fee5260 R15: 0000000000000002 [ 384.657281][ T9176] ? ext4_xattr_block_csum+0x560/0x560 [ 384.662754][ T9176] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 384.668815][ T9176] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 384.674702][ T9176] ? errseq_check+0x3c/0x70 [ 384.679191][ T9176] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 384.684813][ T9176] ? __ext4_journal_ensure_credits+0x450/0x450 [ 384.690954][ T9176] ? ext4_get_inode_loc+0xf6/0x120 [ 384.696055][ T9176] ext4_xattr_delete_inode+0xada/0xca0 [ 384.702393][ T9176] ? rcu_is_watching+0x11/0xa0 [ 384.707165][ T9176] ? ext4_truncate+0xd02/0x1190 [ 384.712033][ T9176] ? up_write+0x1b6/0x410 [ 384.716363][ T9176] ? ext4_expand_extra_isize_ea+0x18e0/0x18e0 [ 384.722449][ T9176] ? __ext4_mark_inode_dirty+0x4b4/0x6c0 [ 384.728079][ T9176] ext4_evict_inode+0xc0c/0x1050 [ 384.733024][ T9176] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 384.739041][ T9176] ? do_raw_spin_unlock+0x11d/0x230 [ 384.744258][ T9176] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 384.750150][ T9176] evict+0x4b6/0x8b0 [ 384.754058][ T9176] ? proc_nr_inodes+0x320/0x320 [ 384.758920][ T9176] ? do_raw_spin_unlock+0x11d/0x230 [ 384.764109][ T9176] ? _raw_spin_unlock+0x24/0x40 [ 384.768973][ T9176] ? iput+0x6ea/0x880 [ 384.773039][ T9176] ext4_orphan_cleanup+0xad8/0x1320 [ 384.778228][ T9176] ? ext4_orphan_del+0xc90/0xc90 [ 384.783153][ T9176] ? errseq_check_and_advance+0x62/0x120 [ 384.788778][ T9176] ext4_fill_super+0x8c65/0x93f0 [ 384.793736][ T9176] ? format_decode+0x8b1/0x1330 [ 384.798610][ T9176] ? ext4_mount+0x40/0x40 [ 384.802932][ T9176] ? set_blocksize+0x1f1/0x360 [ 384.807705][ T9176] ? sb_set_blocksize+0xa5/0xe0 [ 384.812563][ T9176] mount_bdev+0x28a/0x3c0 [ 384.816881][ T9176] ? ext4_mount+0x40/0x40 [ 384.821197][ T9176] legacy_get_tree+0xe6/0x180 [ 384.825861][ T9176] ? ext4_errno_to_code+0x160/0x160 [ 384.831048][ T9176] vfs_get_tree+0x88/0x270 [ 384.835455][ T9176] do_new_mount+0x247/0xa40 [ 384.839947][ T9176] __se_sys_mount+0x2e3/0x3d0 [ 384.844612][ T9176] ? __x64_sys_mount+0xc0/0xc0 [ 384.849369][ T9176] ? lockdep_hardirqs_on+0x94/0x140 [ 384.854575][ T9176] ? __x64_sys_mount+0x1c/0xc0 [ 384.859354][ T9176] do_syscall_64+0x4c/0xa0 [ 384.863782][ T9176] ? clear_bhb_loop+0x30/0x80 [ 384.868463][ T9176] ? clear_bhb_loop+0x30/0x80 [ 384.873130][ T9176] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.879020][ T9176] RIP: 0033:0x7f8e941a40ca [ 384.883432][ T9176] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.903027][ T9176] RSP: 002b:00007f8e923fbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 384.911455][ T9176] RAX: ffffffffffffffda RBX: 00007f8e923fbee0 RCX: 00007f8e941a40ca [ 384.919431][ T9176] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f8e923fbea0 [ 384.927411][ T9176] RBP: 00002000000009c0 R08: 00007f8e923fbee0 R09: 0000000000800718 [ 384.935394][ T9176] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 384.943352][ T9176] R13: 00007f8e923fbea0 R14: 000000000000048d R15: 0000200000000200 [ 384.951330][ T9176] [ 384.954455][ T9176] Kernel Offset: disabled [ 384.959041][ T9176] Rebooting in 86400 seconds..