last executing test programs: 2m41.419852608s ago: executing program 2 (id=281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) listen(r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500580601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00005e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`'], 0x0) 2m41.204251563s ago: executing program 2 (id=284): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec", 0x18}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m39.703075334s ago: executing program 2 (id=292): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) 2m39.096198198s ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 2m38.70355683s ago: executing program 2 (id=295): socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff00000000000008060001080006040001aaaae964d52800000000aaaaaaaaaabbac1e0001b49a615d7be2f3f60e3fa0f1008e88cdbb9d688e4ee81f5bff45e4d8af64c5574be7bb4ccd220d118a019934ec3431bc18f81b04a7588e3fab92f98d7cf310abe4835d1557463a2c6d89f49b03725d708c004e654668bf2534ea2852fab00946e3443876ead8113999c398e2379d962bad529d528a090bcf71e49ce2fab7ed7f5007fb3578ea49d49a349a59b791c96162d4c16453eb492d4359119019b0e3ee"], 0x0) 2m38.11582373s ago: executing program 2 (id=299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0xec000000}]}) 2m37.613440745s ago: executing program 32 (id=299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0xec000000}]}) 47.337856105s ago: executing program 0 (id=946): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 46.97679416s ago: executing program 0 (id=951): pipe2$watch_queue(0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 46.820463244s ago: executing program 0 (id=953): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x6, 0x100, 0x4, 0x86020086, r3}) 46.519156856s ago: executing program 0 (id=955): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {@noauto_da_alloc}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 45.620560737s ago: executing program 0 (id=962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x60000000}) close_range(r0, 0xffffffffffffffff, 0x0) 44.797600475s ago: executing program 0 (id=967): socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 43.735643577s ago: executing program 33 (id=967): socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6.4840134s ago: executing program 4 (id=1192): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x441, 0x8000001, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x0, 0x0, 0x9, 0x38, 0x1, 0xfffe, 0xfffb, 0x3}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0xe5, 0x1, 0x3}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 6.070542399s ago: executing program 4 (id=1194): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4.552887664s ago: executing program 4 (id=1206): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x3, 0x10000002, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) 4.306637528s ago: executing program 6 (id=1207): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000008300)={0x0, 0x0, &(0x7f00000082c0)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x10}, {0xfff3, 0x8}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x26000084) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x21e98, 0xc0}}}}}}]}, 0x48}}, 0x0) 4.014086213s ago: executing program 6 (id=1211): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 3.545985342s ago: executing program 4 (id=1215): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000380)={@remote, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28ee7b0e6c64849d1e8224e7e5913283", "004e6803c300073cd300000000000400"}}}}}}}, 0x0) 3.222899937s ago: executing program 4 (id=1218): socket$kcm(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 3.160917183s ago: executing program 5 (id=1221): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x103, 0x1) getdents(r2, 0x0, 0x0) 3.020490842s ago: executing program 5 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffc69}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.956618345s ago: executing program 4 (id=1223): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0'}, 0x14) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 2.763690349s ago: executing program 6 (id=1224): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.620081529s ago: executing program 5 (id=1225): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=""/181, 0xb5}, 0x81}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.371949214s ago: executing program 3 (id=1227): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) 2.278078715s ago: executing program 1 (id=1228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.276578392s ago: executing program 5 (id=1229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.075833566s ago: executing program 3 (id=1230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x845) 2.075642595s ago: executing program 5 (id=1231): r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2.026251254s ago: executing program 1 (id=1232): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.924755821s ago: executing program 1 (id=1233): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x121202, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001000200000008000100000000000800010001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f000000b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000000c000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) 1.827615038s ago: executing program 3 (id=1234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) close(r1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 1.758357163s ago: executing program 1 (id=1235): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x9000000}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.756481901s ago: executing program 6 (id=1236): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2001}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)='1', 0x1}], 0x1, 0x0, 0x0, 0x48044}}], 0x1, 0x20000000) 1.50684415s ago: executing program 3 (id=1237): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e1c, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.506630052s ago: executing program 1 (id=1238): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000180)={0x0, 0x6c00}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 1.252429153s ago: executing program 3 (id=1239): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1.221132102s ago: executing program 1 (id=1240): read$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.038289554s ago: executing program 5 (id=1241): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) 760.870439ms ago: executing program 6 (id=1242): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) 265.657468ms ago: executing program 3 (id=1243): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x5, 0x1, 0xffffffff, 0x9}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 0s ago: executing program 6 (id=1244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) kernel console output (not intermixed with test programs): S network, BSSID 50:50:50:50:50:50 [ 93.991259][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.991472][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.232058][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.232099][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.467895][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.478256][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.665635][ T5822] loop0: detected capacity change from 0 to 4096 [ 94.725443][ T5822] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 95.043006][ T5826] loop3: detected capacity change from 0 to 1024 [ 95.056143][ T5822] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 95.227832][ T5822] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 95.310668][ T31] audit: type=1804 audit(1786046163.644:2): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10" name="/newroot/3/file1/file1" dev="loop0" ino=30 res=1 errno=0 [ 95.392311][ T31] audit: type=1800 audit(1786046163.734:3): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 95.683686][ T5614] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.802607][ T5842] loop3: detected capacity change from 0 to 128 [ 95.853775][ T5614] usb 5-1: Using ep0 maxpacket: 8 [ 95.860714][ T5614] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 95.895013][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.895064][ T5614] usb 5-1: Product: syz [ 95.895108][ T5614] usb 5-1: Manufacturer: syz [ 95.895134][ T5614] usb 5-1: SerialNumber: syz [ 96.015350][ T5842] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.028217][ T5614] usb 5-1: config 0 descriptor?? [ 96.038427][ T5842] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.106132][ T31] audit: type=1800 audit(1786046164.454:4): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 96.187323][ T5850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17'. [ 96.224552][ T5714] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.294304][ T5614] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.344403][ T5856] loop1: detected capacity change from 0 to 1024 [ 96.388285][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 96.391727][ T5714] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 96.427567][ T5714] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 96.427622][ T5714] usb 1-1: config 0 has no interface number 0 [ 96.427684][ T5714] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 96.427715][ T5714] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 96.483809][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.483865][ T5714] usb 1-1: Product: syz [ 96.483882][ T5714] usb 1-1: Manufacturer: syz [ 96.483898][ T5714] usb 1-1: SerialNumber: syz [ 96.572542][ T5714] usb 1-1: config 0 descriptor?? [ 96.592501][ T5852] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.592995][ T5852] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.758248][ T5620] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.770800][ T5614] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 96.796282][ T5614] usb 5-1: USB disconnect, device number 2 [ 96.848879][ T5852] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.857446][ T5852] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.176827][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.530699][ T5877] loop4: detected capacity change from 0 to 512 [ 97.548557][ T5877] ======================================================= [ 97.548557][ T5877] WARNING: The mand mount option has been deprecated and [ 97.548557][ T5877] and is ignored by this kernel. Remove the mand [ 97.548557][ T5877] option from the mount to silence this warning. [ 97.548557][ T5877] ======================================================= [ 97.702155][ T5714] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.702222][ T5714] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 97.749964][ T5714] asix 1-1:0.34: probe with driver asix failed with error -71 [ 97.782841][ T5877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.783053][ T5877] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.808575][ T5881] loop2: detected capacity change from 0 to 512 [ 97.838058][ T5714] usb 1-1: USB disconnect, device number 2 [ 97.893536][ T5882] ref_ctr_offset mismatch. inode: 0x3c offset: 0x4 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 98.192081][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.565879][ T5901] netlink: 7 bytes leftover after parsing attributes in process `syz.0.38'. [ 98.973212][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.123306][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 99.129533][ T30] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 99.141580][ T30] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.153028][ T30] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.166174][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.175885][ T30] usb 4-1: Product: syz [ 99.180250][ T30] usb 4-1: Manufacturer: syz [ 99.185953][ T30] usb 4-1: SerialNumber: syz [ 99.197131][ T30] usb 4-1: config 0 descriptor?? [ 100.057903][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 100.111426][ T30] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 100.183445][ T30] imon:send_packet: packet tx failed (-71) [ 100.203198][ T30] imon 4-1:0.0: panel buttons/knobs setup failed [ 100.283703][ T30] rc_core: IR keymap rc-imon-pad not found [ 100.289727][ T30] Registered IR keymap rc-empty [ 100.296496][ T30] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 100.309393][ T30] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 100.324306][ T30] imon:send_packet: packet tx failed (-71) [ 100.345622][ T30] imon 4-1:0.0: remote input dev register failed [ 100.345821][ T30] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 100.442775][ T30] imon 4-1:0.0: unable to initialize intf0, err 0 [ 100.452126][ T30] imon:imon_probe: failed to initialize context! [ 100.460143][ T30] imon 4-1:0.0: unable to register, err -19 [ 100.484060][ T5936] loop0: detected capacity change from 0 to 128 [ 100.492561][ T30] usb 4-1: USB disconnect, device number 2 [ 100.517602][ T5936] EXT4-fs (loop0): Test dummy encryption mode enabled [ 100.588317][ T5941] capability: warning: `syz.1.53' uses 32-bit capabilities (legacy support in use) [ 100.605726][ T5941] overlayfs: upper fs does not support file handles, falling back to index=off. [ 100.621519][ T5936] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.622003][ T5936] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.671630][ T5942] evm: overlay not supported [ 100.711661][ T5936] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 100.821274][ T5936] fscrypt: AES-256-XTS using blk-crypto-fallback [ 100.879986][ T5619] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.923570][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.083880][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 101.089765][ T30] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 101.100278][ T30] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.111862][ T30] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.125288][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.125337][ T30] usb 4-1: Product: syz [ 101.125382][ T30] usb 4-1: Manufacturer: syz [ 101.125403][ T30] usb 4-1: SerialNumber: syz [ 101.160746][ T30] usb 4-1: config 0 descriptor?? [ 101.260519][ T5948] loop0: detected capacity change from 0 to 8192 [ 101.309432][ T5948] loop0: p1 p2 [ 101.314100][ T5948] loop0: partition table partially beyond EOD, truncated [ 101.329873][ T5948] loop0: p1 start 16777216 is beyond EOD, truncated [ 101.339340][ T5948] loop0: p2 size 515840 extends beyond EOD, truncated [ 101.484158][ T30] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 101.891700][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 101.904862][ T30] rc_core: IR keymap rc-imon-pad not found [ 101.904897][ T30] Registered IR keymap rc-empty [ 101.905018][ T30] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 101.905041][ T30] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 101.960187][ T30] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 101.976746][ T30] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 101.997070][ T30] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:3> initialized [ 102.143059][ C1] imon 4-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 0, intf0) [ 102.365107][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 102.365816][ T5614] usb 4-1: USB disconnect, device number 3 [ 103.111046][ T5965] loop4: detected capacity change from 0 to 32768 [ 103.162422][ T5984] loop3: detected capacity change from 0 to 2048 [ 103.170920][ T5984] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.203573][ T5714] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.227764][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.264144][ T5615] Bluetooth: hci4: command tx timeout [ 103.356055][ T5714] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 103.370594][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.399158][ T5714] usb 2-1: config 0 descriptor?? [ 103.498596][ T5714] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 103.511776][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.661990][ T5990] netlink: 128 bytes leftover after parsing attributes in process `syz.2.70'. [ 104.133770][ T5999] loop2: detected capacity change from 0 to 128 [ 104.170979][ T5999] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.180170][ T5999] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.252799][ T5999] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 104.332079][ T5626] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.474192][ T30] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 104.520666][ T30] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz0] on syz1 [ 104.671922][ T6006] loop3: detected capacity change from 0 to 2048 [ 104.719593][ T5714] usb 2-1: USB disconnect, device number 2 [ 104.765739][ T6006] UDF-fs: error (device loop3): udf_read_tagged: block 256: CRC length 65535 exceeds block size [ 104.850822][ T6006] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 1344: 0x15 != 0x00 [ 104.850887][ T6006] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 106.319400][ T6037] loop2: detected capacity change from 0 to 1024 [ 106.421072][ T6037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.421398][ T6037] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.529179][ T6037] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.90: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.638198][ T6037] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 106.638286][ T6037] EXT4-fs (loop2): This should not happen!! Data will be lost [ 106.638286][ T6037] [ 106.661829][ T5787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.700916][ T6039] loop4: detected capacity change from 0 to 4096 [ 106.716425][ T6039] EXT4-fs: Ignoring removed orlov option [ 106.733124][ T6046] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm iou-wrk-6037: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.789858][ T6039] EXT4-fs (loop4): Test dummy encryption mode enabled [ 106.817012][ T6039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.831208][ T5787] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 106.861492][ T5787] usb 1-1: config 0 has no interfaces? [ 106.876229][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.884455][ T5787] usb 1-1: Product: syz [ 106.889094][ T5787] usb 1-1: Manufacturer: syz [ 106.893566][ T6044] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 106.908836][ T5787] usb 1-1: SerialNumber: syz [ 106.934234][ T5787] usb 1-1: config 0 descriptor?? [ 107.034884][ T5626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.040248][ T6027] loop1: detected capacity change from 0 to 32768 [ 107.164195][ T6043] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.92'. [ 107.177778][ T6027] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.86 (6027) [ 107.190696][ T5614] usb 1-1: USB disconnect, device number 3 [ 107.366576][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.554572][ T6027] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 107.554652][ T6027] BTRFS info (device loop1): using blake2b checksum algorithm [ 107.985909][ T6027] BTRFS info (device loop1): enabling ssd optimizations [ 108.011328][ T6027] BTRFS info (device loop1): turning on async discard [ 108.018481][ T6027] BTRFS info (device loop1): enabling free space tree [ 108.797862][ T6089] loop3: detected capacity change from 0 to 128 [ 108.932900][ T5612] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 109.532840][ T6096] sctp: [Deprecated]: syz.3.106 (pid 6096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.532840][ T6096] Use struct sctp_sack_info instead [ 109.725663][ T5714] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.918229][ T5714] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.934067][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.934299][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.979530][ T5714] usb 2-1: config 0 descriptor?? [ 110.721835][ T5714] usb 2-1: language id specifier not provided by device, defaulting to English [ 110.947866][ T5714] pwc: Askey VC010 type 2 USB webcam detected. [ 110.969902][ T5714] pwc: send_video_command error -71 [ 110.978526][ T5714] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 110.988109][ T5714] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 111.012698][ T5714] usb 2-1: USB disconnect, device number 3 [ 111.240220][ T6130] loop3: detected capacity change from 0 to 512 [ 111.268227][ T6130] EXT4-fs (loop3): 1 truncate cleaned up [ 111.296519][ T6130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.401979][ T6130] EXT4-fs (loop3): shut down requested (1) [ 111.543411][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.004730][ T6155] input: syz1 as /devices/virtual/input/input9 [ 112.146070][ T6144] loop1: detected capacity change from 0 to 32768 [ 113.423306][ T988] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 113.585458][ T988] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 113.599401][ T988] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 113.599448][ T988] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 113.599495][ T988] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 113.599522][ T988] usb 2-1: config 150 has no interface number 0 [ 113.599557][ T988] usb 2-1: config 150 interface 204 has no altsetting 0 [ 113.651659][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.651708][ T988] usb 2-1: Product: syz [ 113.651756][ T988] usb 2-1: Manufacturer: syz [ 113.651777][ T988] usb 2-1: SerialNumber: syz [ 113.738673][ T988] xr_serial 2-1:150.204: skipping garbage [ 113.944966][ T988] usb 2-1: USB disconnect, device number 4 [ 114.224078][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.231485][ T5722] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 114.255190][ T5722] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 114.350657][ T6226] loop0: detected capacity change from 0 to 64 [ 114.537335][ T6226] syz.0.151: attempt to access beyond end of device [ 114.537335][ T6226] loop0: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 114.537571][ T6226] Buffer I/O error on dev loop0, logical block 512, async page read [ 114.565802][ T6226] syz.0.151: attempt to access beyond end of device [ 114.565802][ T6226] loop0: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 114.596222][ T6226] Buffer I/O error on dev loop0, logical block 56576, async page read [ 114.633000][ T6226] syz.0.151: attempt to access beyond end of device [ 114.633000][ T6226] loop0: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 114.633061][ T6226] Buffer I/O error on dev loop0, logical block 512, async page read [ 114.633262][ T6226] syz.0.151: attempt to access beyond end of device [ 114.633262][ T6226] loop0: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 114.633293][ T6226] Buffer I/O error on dev loop0, logical block 56576, async page read [ 115.163173][ T988] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.180831][ T6251] binder: 6250:6251 ioctl c0306201 0 returned -14 [ 115.316920][ T988] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.328090][ T988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.328157][ T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.354117][ T988] usb 4-1: config 0 descriptor?? [ 115.596050][ T988] usbhid 4-1:0.0: can't add hid device: -71 [ 115.603394][ T988] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 115.624607][ T6267] process 'syz.0.164' launched '/dev/fd/6' with NULL argv: empty string added [ 115.640575][ T988] usb 4-1: USB disconnect, device number 4 [ 115.789643][ T6273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.247472][ T6279] loop2: detected capacity change from 0 to 32768 [ 116.337094][ T6279] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.386300][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.395502][ T5722] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 116.401729][ T5722] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 116.434390][ T988] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.480907][ T6279] XFS (loop2): Ending clean mount [ 116.496682][ T6279] XFS (loop2): Quotacheck needed: Please wait. [ 116.613995][ T988] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 116.624655][ T988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.637271][ T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.649880][ T988] usb 4-1: config 0 descriptor?? [ 116.934349][ T6279] XFS (loop2): Quotacheck: Done. [ 116.995145][ T31] audit: type=1800 audit(1786046185.334:5): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.168" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 117.076973][ C1] Unknown status report in ack skb [ 117.232780][ T5626] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.510078][ T988] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 117.525250][ T988] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 117.934603][ T5787] usb 4-1: USB disconnect, device number 5 [ 117.940600][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 118.183366][ T6333] loop2: detected capacity change from 0 to 128 [ 118.216161][ T6333] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 118.239928][ T6333] hpfs: filesystem error: improperly stopped [ 118.260910][ T6333] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 118.261003][ T6333] hpfs: You really don't want any checks? You are crazy... [ 118.261063][ T6333] hpfs: Code page index out of array [ 118.261100][ T6333] hpfs: code page support is disabled [ 118.289638][ T6333] hpfs: hpfs_map_4sectors(): unaligned read [ 118.290099][ T6333] hpfs: hpfs_map_4sectors(): unaligned read [ 118.290131][ T6333] hpfs: filesystem error: unable to find root dir [ 118.547816][ T5722] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 118.547861][ T5722] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 118.623984][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.908220][ T6345] loop1: detected capacity change from 0 to 128 [ 118.963609][ T6338] loop0: detected capacity change from 0 to 32768 [ 118.999154][ T6338] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 119.130295][ T6338] XFS (loop0): Ending clean mount [ 119.489431][ T5619] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 119.645488][ T6361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.703509][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.710362][ T5722] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 120.710404][ T5722] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 120.835826][ T6408] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.054784][ T6415] loop2: detected capacity change from 0 to 7 [ 121.070849][ T6415] Dev loop2: unable to read RDB block 7 [ 121.078652][ T6412] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 121.087863][ T6415] loop2: unable to read partition table [ 121.094576][ T6415] loop2: partition table beyond EOD, truncated [ 121.101013][ T6415] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 121.242287][ T6416] loop1: detected capacity change from 0 to 1024 [ 121.277081][ T6416] EXT4-fs (loop1): invalid inodes per group: 1 [ 121.962955][ T6441] loop4: detected capacity change from 0 to 512 [ 122.023015][ T6442] netlink: 'syz.3.206': attribute type 10 has an invalid length. [ 122.397284][ T6442] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.422986][ T6442] bond0: (slave team0): Enslaving as an active interface with an up link [ 122.943498][ T5722] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 122.943548][ T5722] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 122.958099][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.142194][ T6460] loop1: detected capacity change from 0 to 32768 [ 123.150604][ T6460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.211 (6460) [ 123.166023][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.187901][ T6460] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.187955][ T6460] BTRFS info (device loop1): using sha256 checksum algorithm [ 123.327365][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 123.331478][ T6460] BTRFS info (device loop1): enabling ssd optimizations [ 123.331568][ T6460] BTRFS info (device loop1): turning on sync discard [ 123.331618][ T6460] BTRFS info (device loop1): enabling free space tree [ 123.331682][ T6460] BTRFS info (device loop1): use zlib compression, level 3 [ 123.439829][ T31] audit: type=1800 audit(1786046191.774:6): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.211" name="file0" dev="loop1" ino=258 res=0 errno=0 [ 123.559712][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 124.359797][ T5612] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.076131][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'. [ 125.114094][ T6507] loop0: detected capacity change from 0 to 64 [ 125.198946][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'. [ 125.527807][ T6507] Process accounting resumed [ 125.786763][ T6502] loop1: detected capacity change from 0 to 32768 [ 125.844073][ T6502] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.894860][ T6525] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 125.924554][ T6502] XFS (loop1): Ending clean mount [ 126.045618][ T5612] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.288457][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.288535][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 126.310207][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 126.310267][ T10] usb 5-1: can't read configurations, error -71 [ 127.035168][ T31] audit: type=1326 audit(1786046195.374:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.3.231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b41d9e0d9 code=0x0 [ 127.393572][ T6574] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 127.520291][ T6579] loop1: detected capacity change from 0 to 1024 [ 127.529258][ T6579] EXT4-fs: Ignoring removed nobh option [ 127.535226][ T6579] EXT4-fs: Ignoring removed i_version option [ 127.631155][ T6579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.965633][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.307734][ T6628] syz_tun: entered allmulticast mode [ 129.326700][ T6629] loop4: detected capacity change from 0 to 256 [ 129.338767][ T6629] vfat: Bad value for 'shortname' [ 129.479374][ T6625] syz_tun: left allmulticast mode [ 129.957590][ T59] IPVS: starting estimator thread 0... [ 130.043273][ T6649] IPVS: using max 25 ests per chain, 60000 per kthread [ 130.316949][ T6638] loop3: detected capacity change from 0 to 32768 [ 130.326281][ T6638] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 130.338941][ T6638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.252 (6638) [ 130.367353][ T6638] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.367470][ T6638] BTRFS info (device loop3): using sha256 checksum algorithm [ 130.502186][ T6638] BTRFS info (device loop3): rebuilding free space tree [ 130.559667][ T6638] BTRFS info (device loop3): disabling free space tree [ 130.567199][ T6638] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.567269][ T6638] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.598528][ T6638] BTRFS info (device loop3): enabling ssd optimizations [ 130.598658][ T6638] BTRFS info (device loop3): turning on async discard [ 130.601528][ T6638] BTRFS info (device loop3): force clearing of disk cache [ 131.314876][ T5787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.439547][ T6677] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 131.475441][ T5787] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 131.486854][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.521425][ T5620] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.576236][ T5787] usb 3-1: config 0 descriptor?? [ 131.648856][ T5787] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 131.919760][ T6677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.034215][ T5715] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.059051][ T6679] bond1: entered promiscuous mode [ 132.083520][ T6679] bond1: entered allmulticast mode [ 132.208411][ T5715] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.236094][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.302294][ T5715] usb 2-1: config 0 descriptor?? [ 132.388571][ T5715] cp210x 2-1:0.0: cp210x converter detected [ 132.433318][ T5787] usb 3-1: USB disconnect, device number 2 [ 132.552286][ T6693] loop4: detected capacity change from 0 to 128 [ 132.593320][ T6693] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 132.599164][ T6693] hpfs: filesystem error: improperly stopped [ 132.599251][ T6693] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 132.599301][ T6693] hpfs: You really don't want any checks? You are crazy... [ 132.651939][ T6693] hpfs: Code page index out of array [ 132.654496][ T6693] hpfs: code page support is disabled [ 132.654859][ T6693] hpfs: hpfs_map_4sectors(): unaligned read [ 132.655904][ T6693] hpfs: hpfs_map_4sectors(): unaligned read [ 132.655935][ T6693] hpfs: filesystem error: unable to find root dir [ 132.807291][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812736][ T5715] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 132.813401][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849888][ T6683] loop1: detected capacity change from 0 to 512 [ 132.883419][ T6683] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 132.883541][ T6683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.022188][ T6683] EXT4-fs (loop1): 1 truncate cleaned up [ 133.096328][ T6683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.276547][ T5715] usb 2-1: cp210x converter now attached to ttyUSB0 [ 133.490994][ T5745] usb 2-1: USB disconnect, device number 5 [ 133.547065][ T5745] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.570845][ T5745] cp210x 2-1:0.0: device disconnected [ 133.709026][ T6709] 9pnet: p9_errstr2errno: server reported unknown error  [ 134.036558][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.514954][ T6732] syz.1.279 uses obsolete (PF_INET,SOCK_PACKET) [ 134.643886][ T6734] Bluetooth: MGMT ver 1.23 [ 135.653295][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.826829][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 135.895904][ T30] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 136.000414][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.003452][ T30] usb 1-1: Product: syz [ 136.007623][ T30] usb 1-1: Manufacturer: syz [ 136.010263][ T30] usb 1-1: SerialNumber: syz [ 136.065710][ T30] usb 1-1: config 0 descriptor?? [ 136.456455][ T30] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 004 [ 137.048654][ T6751] i2c i2c-1: failure reading status [ 137.061126][ T5714] usb 1-1: USB disconnect, device number 4 [ 137.629975][ T6773] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 137.630053][ T6773] overlayfs: overlapping lowerdir path [ 137.664508][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.950088][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.067403][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.301105][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.659406][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.681189][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.690861][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.700033][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.718167][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.858777][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.878828][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.889212][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.904748][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.917032][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.385534][ T80] bridge_slave_1: left allmulticast mode [ 139.385626][ T80] bridge_slave_1: left promiscuous mode [ 139.388382][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.455315][ T80] bridge_slave_0: left allmulticast mode [ 139.466881][ T80] bridge_slave_0: left promiscuous mode [ 139.474399][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.887854][ T6808] loop3: detected capacity change from 0 to 128 [ 139.928848][ T6808] EXT4-fs (loop3): Test dummy encryption mode enabled [ 139.981829][ T6808] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.001083][ T6808] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.108051][ T6810] loop4: detected capacity change from 0 to 2048 [ 140.157692][ T6810] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 140.203940][ T6810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.603206][ T5620] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.819577][ T6543] IPVS: starting estimator thread 0... [ 140.929124][ T6827] IPVS: using max 24 ests per chain, 57600 per kthread [ 141.025095][ T5615] Bluetooth: hci3: command tx timeout [ 141.561099][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.687946][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.758440][ T80] bond0 (unregistering): Released all slaves [ 142.768931][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 143.036184][ T6867] loop4: detected capacity change from 0 to 128 [ 143.113368][ T5615] Bluetooth: hci3: command tx timeout [ 143.144070][ T6867] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 143.144331][ T6867] hpfs: filesystem error: improperly stopped [ 143.153222][ T6867] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 143.153284][ T6867] hpfs: You really don't want any checks? You are crazy... [ 143.153332][ T6867] hpfs: Code page index out of array [ 143.153353][ T6867] hpfs: code page support is disabled [ 143.244848][ T6867] hpfs: hpfs_map_4sectors(): unaligned read [ 143.251253][ T6867] hpfs: hpfs_map_4sectors(): unaligned read [ 143.251271][ T6867] hpfs: filesystem error: unable to find root dir [ 143.922245][ T6885] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.938061][ T6885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.938103][ T6885] IPv6: NLM_F_CREATE should be set when creating new route [ 144.165672][ T80] hsr_slave_0: left promiscuous mode [ 144.218139][ T80] hsr_slave_1: left promiscuous mode [ 144.224597][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.248034][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.344034][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.351826][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.424196][ T80] veth1_macvtap: left promiscuous mode [ 144.424355][ T80] veth0_macvtap: left promiscuous mode [ 144.424519][ T80] veth1_vlan: left promiscuous mode [ 144.424682][ T80] veth0_vlan: left promiscuous mode [ 144.891772][ T6905] loop4: detected capacity change from 0 to 128 [ 144.917764][ T6905] EXT4-fs (loop4): Test dummy encryption mode enabled [ 144.982044][ T6905] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.018034][ T6905] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.087867][ T31] audit: type=1800 audit(1786046213.434:8): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.340" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 145.183417][ T5615] Bluetooth: hci3: command tx timeout [ 145.394839][ T5627] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.158791][ T80] team0 (unregistering): Port device team_slave_1 removed [ 146.202182][ T80] team0 (unregistering): Port device team_slave_0 removed [ 146.436227][ T6927] loop4: detected capacity change from 0 to 1024 [ 146.790159][ T6932] atomic_op ffff88807a1f29e0 conn xmit_atomic 0000000000000000 [ 146.991577][ T6901] warning: `syz.3.338' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.016722][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 147.274183][ T5615] Bluetooth: hci3: command tx timeout [ 149.934659][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.942167][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.951057][ T6789] bridge_slave_0: entered allmulticast mode [ 149.960580][ T6789] bridge_slave_0: entered promiscuous mode [ 149.972358][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.979866][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.988262][ T6789] bridge_slave_1: entered allmulticast mode [ 149.996941][ T6789] bridge_slave_1: entered promiscuous mode [ 150.040284][ T6789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.055442][ T6789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.104178][ T6789] team0: Port device team_slave_0 added [ 150.113545][ T6789] team0: Port device team_slave_1 added [ 150.154408][ T6789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.161507][ T6789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.188005][ T6789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.201149][ T6789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.208471][ T6789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.234959][ T6789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.458963][ T6993] loop5: detected capacity change from 0 to 7 [ 150.500474][ T6789] hsr_slave_0: entered promiscuous mode [ 150.508387][ T6993] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 150.508431][ T6993] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 150.508526][ T6993] Dev loop5: unable to read RDB block 7 [ 150.508555][ T6993] loop5: AHDI p2 p3 [ 150.508581][ T6993] loop5: partition table partially beyond EOD, truncated [ 150.508896][ T6993] loop5: p3 start 335544320 is beyond EOD, truncated [ 150.587060][ T6789] hsr_slave_1: entered promiscuous mode [ 150.593683][ T6789] debugfs: 'hsr0' already exists in 'hsr' [ 150.599664][ T6789] Cannot create hsr debugfs directory [ 150.823613][ T5787] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.983246][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 150.989351][ T5787] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.000077][ T5787] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.000122][ T5787] usb 4-1: config 179 has no interface number 0 [ 151.000170][ T5787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.000203][ T5787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 151.000236][ T5787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.000267][ T5787] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 151.000299][ T5787] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.000347][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.096552][ T6996] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.143971][ T6997] mmap: syz.0.365 (6997) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.769421][ T5787] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input11 [ 151.937660][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.372'. [ 152.024244][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.372'. [ 152.127787][ T6996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.142879][ T6996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.307536][ T7015] Zero length message leads to an empty skb [ 152.330128][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 152.464559][ T5745] usb 4-1: USB disconnect, device number 6 [ 152.464633][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.464678][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 153.380972][ T6789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.431347][ T6789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.459451][ T6789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.539579][ T6789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.576694][ T6789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.263938][ T7025] loop4: detected capacity change from 0 to 32768 [ 154.354607][ T7025] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.470217][ T6789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.517142][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 154.544150][ T6789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.676258][ T7025] XFS (loop4): Ending clean mount [ 154.737326][ T7025] XFS (loop4): User initiated shutdown received. [ 154.762306][ T7025] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:464). Shutting down filesystem. [ 154.762428][ T7025] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 154.914801][ T5627] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.931566][ T6789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.506991][ T6789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.621851][ T6789] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.662348][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.662488][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.717267][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.717452][ T6537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.253507][ T7096] loop4: detected capacity change from 0 to 2048 [ 156.325802][ T7096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.454276][ T7104] netlink: 277 bytes leftover after parsing attributes in process `syz.1.395'. [ 157.040617][ T7108] cgroup: fork rejected by pids controller in /syz3 [ 157.951308][ T7167] loop4: detected capacity change from 0 to 512 [ 157.965764][ T7167] EXT4-fs: Ignoring removed oldalloc option [ 158.072603][ T7167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.072900][ T7167] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.288839][ T7167] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #2: comm syz.4.405: corrupted inode contents [ 158.456444][ T7167] EXT4-fs error (device loop4): ext4_dirty_inode:6731: inode #2: comm syz.4.405: mark_inode_dirty error [ 158.475364][ T7167] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #2: comm syz.4.405: corrupted inode contents [ 158.490173][ T7167] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.405: mark_inode_dirty error [ 158.707443][ T7179] loop3: detected capacity change from 0 to 64 [ 158.729896][ T7179] hfs: unable to locate alternate MDB [ 158.739724][ T7179] hfs: continuing without an alternate MDB [ 158.750559][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.832937][ T31] audit: type=1800 audit(1786046227.174:9): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.407" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 158.855734][ T6789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.877211][ T7196] cgroup: fork rejected by pids controller in /syz4 [ 160.388948][ T6789] veth0_vlan: entered promiscuous mode [ 160.472715][ T6789] veth1_vlan: entered promiscuous mode [ 160.618437][ T6789] veth0_macvtap: entered promiscuous mode [ 160.674305][ T6789] veth1_macvtap: entered promiscuous mode [ 160.798960][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.831269][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.988097][ T7235] loop0: detected capacity change from 0 to 32768 [ 161.032243][ T7235] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.415 (7235) [ 161.033034][ T80] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.035192][ T80] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.035306][ T80] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.085714][ T3347] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.343880][ T7235] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 161.343944][ T7235] BTRFS info (device loop0): using blake2b checksum algorithm [ 161.510869][ T6537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.510919][ T6537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.763650][ T7235] BTRFS info (device loop0): enabling ssd optimizations [ 161.763707][ T7235] BTRFS info (device loop0): turning on async discard [ 161.763746][ T7235] BTRFS info (device loop0): enabling free space tree [ 161.882586][ T3347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.882647][ T3347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.378903][ T5745] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.526698][ T5745] usb 5-1: Using ep0 maxpacket: 16 [ 162.528671][ T5745] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 162.549830][ T5745] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 162.549887][ T5745] usb 5-1: config 251 has no interface number 0 [ 162.549977][ T5745] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 162.550066][ T5745] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 162.550145][ T5745] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 162.550211][ T5745] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 162.550283][ T5745] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.550366][ T5745] usb 5-1: config 251 interface 202 has no altsetting 0 [ 162.579833][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.579915][ T5745] usb 5-1: Product: syz [ 162.579956][ T5745] usb 5-1: Manufacturer: syz [ 162.580000][ T5745] usb 5-1: SerialNumber: syz [ 162.650646][ T7281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.762986][ T5619] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 163.037395][ T5745] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 163.041156][ T5745] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 163.059049][ T5745] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 163.087741][ T5745] usb 5-1: USB disconnect, device number 5 [ 164.266869][ T7305] cgroup: fork rejected by pids controller in /syz5 [ 164.909454][ T7349] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.268513][ T7357] loop4: detected capacity change from 0 to 64 [ 165.286479][ T7357] hfs: unable to locate alternate MDB [ 165.286521][ T7357] hfs: continuing without an alternate MDB [ 165.455650][ T31] audit: type=1800 audit(1786046233.794:10): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.440" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 165.495828][ T7361] loop5: detected capacity change from 0 to 128 [ 166.023475][ T988] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.185586][ T988] usb 4-1: Using ep0 maxpacket: 16 [ 166.201908][ T988] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 166.215203][ T988] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 166.225263][ T988] usb 4-1: config 251 has no interface number 0 [ 166.232710][ T988] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 166.244578][ T988] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 166.257705][ T988] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 166.270749][ T988] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 166.284282][ T988] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.299490][ T988] usb 4-1: config 251 interface 202 has no altsetting 0 [ 166.323289][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.332506][ T988] usb 4-1: Product: syz [ 166.337467][ T988] usb 4-1: Manufacturer: syz [ 166.343050][ T988] usb 4-1: SerialNumber: syz [ 166.365331][ T7365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.625282][ T988] cxacru 4-1:251.202: send of cm 0x90 failed (-71) [ 166.625415][ T988] cxacru 4-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 166.625906][ T988] cxacru 4-1:251.202: probe with driver cxacru failed with error -22 [ 166.663586][ T988] usb 4-1: USB disconnect, device number 7 [ 167.309644][ T7401] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.839400][ T7413] loop0: detected capacity change from 0 to 1024 [ 167.874265][ T7413] EXT4-fs (loop0): invalid inodes per group: 1 [ 168.101947][ T7425] loop4: detected capacity change from 0 to 128 [ 170.057317][ T7453] loop3: detected capacity change from 0 to 512 [ 170.447685][ T7453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.462200][ T7453] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.786253][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.359620][ T7468] loop3: detected capacity change from 0 to 32768 [ 171.370891][ T7468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.472 (7468) [ 171.431551][ T7468] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.431609][ T7468] BTRFS info (device loop3): using sha256 checksum algorithm [ 171.579846][ T7468] BTRFS info (device loop3): enabling ssd optimizations [ 171.579944][ T7468] BTRFS info (device loop3): turning on sync discard [ 171.579979][ T7468] BTRFS info (device loop3): enabling free space tree [ 171.580001][ T7468] BTRFS info (device loop3): use zlib compression, level 3 [ 171.766027][ T31] audit: type=1800 audit(1786046240.114:11): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.472" name="file0" dev="loop3" ino=258 res=0 errno=0 [ 172.589997][ T5620] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.597785][ T5614] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.763895][ T5614] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 172.768641][ T5614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.768823][ T5614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.898210][ T5614] usb 6-1: config 0 descriptor?? [ 173.170996][ T7466] loop4: detected capacity change from 0 to 32768 [ 173.203519][ T5614] usbhid 6-1:0.0: can't add hid device: -71 [ 173.203728][ T5614] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 173.317539][ T7466] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.471 (7466) [ 173.362723][ T5614] usb 6-1: USB disconnect, device number 2 [ 173.382692][ T7466] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 173.382761][ T7466] BTRFS info (device loop4): using blake2b checksum algorithm [ 173.614670][ T7521] loop0: detected capacity change from 0 to 512 [ 173.933868][ T5614] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 174.128676][ T5614] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 174.132698][ T5614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.132830][ T5614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.267594][ T5614] usb 6-1: config 0 descriptor?? [ 174.510314][ T7466] BTRFS error (device loop4): open_ctree failed: -EINTR [ 175.141902][ T7539] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 175.148600][ T5614] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 175.227776][ T5614] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 175.675749][ T5745] usb 6-1: USB disconnect, device number 3 [ 175.675840][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 175.831881][ T7548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 175.907224][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 176.594618][ T7559] overlayfs: upper fs does not support file handles, falling back to index=off. [ 177.549513][ T7550] loop4: detected capacity change from 0 to 32768 [ 177.601271][ T7550] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 177.636264][ T7584] netlink: 104 bytes leftover after parsing attributes in process `syz.5.495'. [ 177.649767][ T7585] loop0: detected capacity change from 0 to 512 [ 177.722287][ T7550] XFS (loop4): Ending clean mount [ 177.749099][ T7585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.749398][ T7585] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.044230][ T7597] netlink: 128 bytes leftover after parsing attributes in process `syz.5.497'. [ 178.118004][ T5627] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 178.154337][ T5614] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.349609][ T5614] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 178.360309][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.483982][ T5614] usb 4-1: config 0 descriptor?? [ 178.535218][ T5614] cp210x 4-1:0.0: cp210x converter detected [ 178.597575][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.914172][ T7607] loop0: detected capacity change from 0 to 128 [ 178.968612][ T5614] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 179.017089][ T7607] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.023028][ T7607] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.058216][ T7593] loop3: detected capacity change from 0 to 512 [ 179.082888][ T7593] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.115685][ T7593] EXT4-fs (loop3): 1 truncate cleaned up [ 179.166975][ T7593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.236060][ T7607] fscrypt (loop0, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 179.412572][ T5614] usb 4-1: cp210x converter now attached to ttyUSB0 [ 179.481182][ T5614] usb 4-1: USB disconnect, device number 8 [ 179.575924][ T5619] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.614850][ T5614] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.636309][ T5614] cp210x 4-1:0.0: device disconnected [ 180.185724][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.721655][ T7638] loop5: detected capacity change from 0 to 512 [ 180.965619][ T7638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.978685][ T7638] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.111499][ T7633] loop3: detected capacity change from 0 to 32768 [ 181.136905][ T7633] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 181.247889][ T7633] XFS (loop3): Ending clean mount [ 181.431986][ T6789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.618250][ T5620] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 181.800950][ T7660] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 182.026753][ C1] Unknown status report in ack skb [ 182.289470][ T7667] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 182.512571][ T7667] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.546000][ T7667] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.957127][ T7683] overlayfs: upper fs does not support file handles, falling back to index=off. [ 183.164566][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 183.222756][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 183.271994][ T7694] overlayfs: failed to clone upperpath [ 183.588471][ T7698] netlink: 128 bytes leftover after parsing attributes in process `syz.1.530'. [ 183.600722][ T7686] loop4: detected capacity change from 0 to 32768 [ 184.212951][ T7713] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 184.220990][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.546'. [ 184.231791][ T7711] loop3: detected capacity change from 0 to 1024 [ 184.256528][ T7711] EXT4-fs: Ignoring removed nobh option [ 184.262663][ T7711] EXT4-fs: Ignoring removed i_version option [ 184.281700][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.546'. [ 184.316916][ T7713] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.356626][ T7711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.429643][ T7713] bond0: (slave team0): Enslaving as an active interface with an up link [ 184.534561][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.559770][ T7760] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 186.560263][ T7760] overlayfs: overlapping lowerdir path [ 187.042156][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.555'. [ 187.093607][ T7748] loop3: detected capacity change from 0 to 32768 [ 187.115371][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.5.555'. [ 187.512687][ T7774] netlink: 128 bytes leftover after parsing attributes in process `syz.0.569'. [ 187.863686][ T5614] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 188.014687][ T5614] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 188.026308][ T5614] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.026381][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.058659][ T5614] usb 4-1: config 0 descriptor?? [ 188.084625][ T7786] loop4: detected capacity change from 0 to 512 [ 188.096066][ T7786] EXT4-fs: Ignoring removed oldalloc option [ 188.109057][ T7786] EXT4-fs (loop4): Test dummy encryption mode enabled [ 188.191077][ T7786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.389845][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.507517][ T5614] usb 4-1: language id specifier not provided by device, defaulting to English [ 188.752605][ T5614] pwc: Askey VC010 type 2 USB webcam detected. [ 188.762318][ T5614] pwc: send_video_command error -71 [ 188.768383][ T5614] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 188.776320][ T5614] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 188.789071][ T5614] usb 4-1: USB disconnect, device number 9 [ 189.165879][ T7806] overlayfs: failed to clone upperpath [ 189.220051][ T7808] overlayfs: failed to clone lowerpath [ 191.592490][ T7813] loop0: detected capacity change from 0 to 32768 [ 192.458244][ T7850] netlink: 'syz.5.580': attribute type 10 has an invalid length. [ 192.653722][ T7850] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.754652][ T7850] bond0: (slave team0): Enslaving as an active interface with an up link [ 193.355332][ T7864] loop5: detected capacity change from 0 to 128 [ 193.484846][ T7866] overlayfs: upper fs does not support file handles, falling back to index=off. [ 193.503812][ T7864] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.534316][ T7864] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.698716][ T7864] fscrypt (loop5, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 194.010613][ T6789] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.231449][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.235438][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.052260][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 196.670440][ T7888] loop3: detected capacity change from 0 to 8192 [ 196.862296][ T7888] loop3: p1 p2 [ 196.864791][ T7888] loop3: partition table partially beyond EOD, truncated [ 196.865223][ T7888] loop3: p1 start 16777216 is beyond EOD, truncated [ 196.865284][ T7888] loop3: p2 size 515840 extends beyond EOD, truncated [ 197.481495][ T5858] udevd[5858]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 198.766702][ T7916] netlink: 'syz.4.597': attribute type 10 has an invalid length. [ 198.897850][ T7916] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.009235][ T7916] bond0: (slave team0): Enslaving as an active interface with an up link [ 199.685599][ T7923] loop3: detected capacity change from 0 to 128 [ 199.786831][ T7923] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.812039][ T7923] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.942428][ T7923] fscrypt (loop3, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 200.208832][ T5620] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.900924][ T7951] loop4: detected capacity change from 0 to 1024 [ 201.941292][ T7952] netlink: 'syz.5.618': attribute type 10 has an invalid length. [ 202.041208][ T31] audit: type=1800 audit(1786046270.384:12): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.620" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 203.131489][ T7954] loop0: detected capacity change from 0 to 32768 [ 203.196873][ T7954] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.332444][ T7954] XFS (loop0): Ending clean mount [ 203.580765][ T5619] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.297301][ T7993] loop0: detected capacity change from 0 to 1024 [ 204.507358][ T31] audit: type=1800 audit(1786046272.854:13): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.634" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 204.916587][ T8003] netlink: 'syz.5.635': attribute type 10 has an invalid length. [ 205.179623][ T8007] syz_tun: entered allmulticast mode [ 205.303265][ T8006] syz_tun: left allmulticast mode [ 206.271436][ T8026] loop4: detected capacity change from 0 to 1024 [ 206.746914][ T8036] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 206.829288][ T8038] loop4: detected capacity change from 0 to 256 [ 206.960457][ T8036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.111945][ T8040] bond1: entered promiscuous mode [ 207.112078][ T8040] bond1: entered allmulticast mode [ 207.319027][ T8046] netlink: 'syz.1.651': attribute type 19 has an invalid length. [ 207.353258][ T8046] netlink: 'syz.1.651': attribute type 18 has an invalid length. [ 207.353356][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 207.887700][ T8061] loop4: detected capacity change from 0 to 256 [ 208.207746][ T8064] loop0: detected capacity change from 0 to 1024 [ 208.218412][ T8064] hfsplus: Unknown parameter '0xffffffffffffffff' [ 208.684952][ T8079] loop0: detected capacity change from 0 to 512 [ 208.709097][ T8079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 208.738805][ T8079] EXT4-fs (loop0): 1 truncate cleaned up [ 208.798505][ T8079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.427532][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.538704][ T8117] netlink: 'syz.4.680': attribute type 8 has an invalid length. [ 210.538802][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 210.793424][ T6543] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.793706][ T8117] netlink: 'syz.4.680': attribute type 8 has an invalid length. [ 210.815591][ T6537] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.815663][ T6537] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.815708][ T6537] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.860601][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 211.076900][ T8124] loop3: detected capacity change from 0 to 256 [ 211.102962][ T8124] exfat: Deprecated parameter 'utf8' [ 211.253349][ T8124] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 212.348841][ T8148] loop0: detected capacity change from 0 to 4096 [ 212.359210][ T8148] EXT4-fs: Ignoring removed orlov option [ 212.427977][ T8148] EXT4-fs (loop0): Test dummy encryption mode enabled [ 212.461937][ T8154] loop4: detected capacity change from 0 to 64 [ 212.487287][ T8148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.767842][ T8154] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 212.798416][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.010166][ T5615] Bluetooth: hci3: link tx timeout [ 213.010395][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.031110][ T5615] Bluetooth: hci3: link tx timeout [ 213.041174][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.050968][ T5615] Bluetooth: hci3: link tx timeout [ 213.057395][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.069448][ T5615] Bluetooth: hci3: link tx timeout [ 213.075812][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.098949][ T5615] Bluetooth: hci3: link tx timeout [ 213.099045][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.117159][ T5615] Bluetooth: hci3: link tx timeout [ 213.117221][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.123649][ T5615] Bluetooth: hci3: link tx timeout [ 213.123689][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.143344][ T5615] Bluetooth: hci3: link tx timeout [ 213.143396][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.162175][ T5615] Bluetooth: hci3: link tx timeout [ 213.162216][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.164459][ T5615] Bluetooth: hci3: link tx timeout [ 213.164503][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.217231][ T5615] Bluetooth: hci3: link tx timeout [ 213.217276][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.233150][ T5615] Bluetooth: hci3: link tx timeout [ 213.233193][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.233239][ T5615] Bluetooth: hci3: link tx timeout [ 213.233250][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.264082][ T5615] Bluetooth: hci3: link tx timeout [ 213.264126][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.280198][ T5615] Bluetooth: hci3: link tx timeout [ 213.280241][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.280286][ T5615] Bluetooth: hci3: link tx timeout [ 213.280298][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.310974][ T5615] Bluetooth: hci3: link tx timeout [ 213.311019][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.311047][ T5615] Bluetooth: hci3: link tx timeout [ 213.311085][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.341599][ T8168] loop0: detected capacity change from 0 to 128 [ 213.350528][ T5615] Bluetooth: hci3: link tx timeout [ 213.350569][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.350596][ T5615] Bluetooth: hci3: link tx timeout [ 213.350640][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.380922][ T5615] Bluetooth: hci3: link tx timeout [ 213.380991][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.389482][ T8168] EXT4-fs (loop0): Test dummy encryption mode enabled [ 213.408164][ T5615] Bluetooth: hci3: link tx timeout [ 213.408227][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.415295][ T5615] Bluetooth: hci3: link tx timeout [ 213.415347][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.417915][ T5615] Bluetooth: hci3: link tx timeout [ 213.417964][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.418340][ T5615] Bluetooth: hci3: link tx timeout [ 213.418371][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.420957][ T5615] Bluetooth: hci3: link tx timeout [ 213.421005][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.421418][ T5615] Bluetooth: hci3: link tx timeout [ 213.421450][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.422560][ T5615] Bluetooth: hci3: link tx timeout [ 213.422574][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.422678][ T5615] Bluetooth: hci3: link tx timeout [ 213.422690][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.422790][ T5615] Bluetooth: hci3: link tx timeout [ 213.422802][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.429308][ T5615] Bluetooth: hci3: link tx timeout [ 213.429358][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.431596][ T5615] Bluetooth: hci3: link tx timeout [ 213.431645][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.433868][ T5615] Bluetooth: hci3: link tx timeout [ 213.440235][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.449952][ T5615] Bluetooth: hci3: link tx timeout [ 213.450011][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.488283][ T5615] Bluetooth: hci3: link tx timeout [ 213.488305][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.512473][ T8168] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.525383][ T8168] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.600105][ T5615] Bluetooth: hci3: link tx timeout [ 213.600126][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.600251][ T5615] Bluetooth: hci3: link tx timeout [ 213.600264][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.600386][ T5615] Bluetooth: hci3: link tx timeout [ 213.600399][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.600500][ T5615] Bluetooth: hci3: link tx timeout [ 213.600512][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.600612][ T5615] Bluetooth: hci3: link tx timeout [ 213.600625][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.600724][ T5615] Bluetooth: hci3: link tx timeout [ 213.600736][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.600878][ T5615] Bluetooth: hci3: link tx timeout [ 213.600891][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.601024][ T5615] Bluetooth: hci3: link tx timeout [ 213.601036][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.601139][ T5615] Bluetooth: hci3: link tx timeout [ 213.601151][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.634684][ T5615] Bluetooth: hci3: link tx timeout [ 213.634759][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.661311][ T5615] Bluetooth: hci3: link tx timeout [ 213.661372][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.661763][ T5615] Bluetooth: hci3: link tx timeout [ 213.661794][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.662145][ T5615] Bluetooth: hci3: link tx timeout [ 213.662183][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.662460][ T5615] Bluetooth: hci3: link tx timeout [ 213.662491][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.670847][ T5615] Bluetooth: hci3: link tx timeout [ 213.670907][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.673928][ T5615] Bluetooth: hci3: link tx timeout [ 213.673970][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.701454][ T5615] Bluetooth: hci3: link tx timeout [ 213.701478][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.740142][ T5615] Bluetooth: hci3: link tx timeout [ 213.740193][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.788628][ T5615] Bluetooth: hci3: link tx timeout [ 213.788687][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.979596][ T31] audit: type=1800 audit(1786046282.324:14): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.701" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 214.152113][ T5619] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.187919][ T8179] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.709'. [ 214.420866][ T8184] loop3: detected capacity change from 0 to 128 [ 214.485170][ T8184] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.518793][ T8184] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.697484][ T5620] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.024772][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 216.982101][ T8239] loop4: detected capacity change from 0 to 4096 [ 217.004706][ T8239] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 217.154065][ T8239] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 217.259796][ T31] audit: type=1800 audit(1786046285.604:15): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.734" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 218.095991][ T8265] loop3: detected capacity change from 0 to 128 [ 218.126868][ T8265] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 218.126966][ T8265] hpfs: filesystem error: improperly stopped [ 218.126983][ T8265] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 218.127062][ T8265] hpfs: You really don't want any checks? You are crazy... [ 218.127102][ T8265] hpfs: Code page index out of array [ 218.127130][ T8265] hpfs: code page support is disabled [ 218.127409][ T8265] hpfs: hpfs_map_4sectors(): unaligned read [ 218.127578][ T8265] hpfs: hpfs_map_4sectors(): unaligned read [ 218.127600][ T8265] hpfs: filesystem error: unable to find root dir [ 220.873124][ T5787] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.023185][ T5787] usb 6-1: Using ep0 maxpacket: 8 [ 221.029238][ T5787] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 221.029313][ T5787] usb 6-1: too many configurations: 15, using maximum allowed: 8 [ 221.053251][ T5787] usb 6-1: config 0 has no interfaces? [ 221.060073][ T5787] usb 6-1: config 0 has no interfaces? [ 221.067079][ T5787] usb 6-1: config 0 has no interfaces? [ 221.075340][ T5787] usb 6-1: config 0 has no interfaces? [ 221.082498][ T5787] usb 6-1: config 0 has no interfaces? [ 221.089214][ T5787] usb 6-1: config 0 has no interfaces? [ 221.095925][ T5787] usb 6-1: config 0 has no interfaces? [ 221.102141][ T5787] usb 6-1: config 0 has no interfaces? [ 221.102216][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.140886][ T5787] usb 6-1: config 0 descriptor?? [ 221.380525][ T5614] usb 6-1: USB disconnect, device number 4 [ 221.603122][ T5787] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 221.755722][ T5787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.755826][ T5787] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 221.783811][ T5787] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 221.798485][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.798531][ T5787] usb 5-1: Product: syz [ 221.798564][ T5787] usb 5-1: Manufacturer: syz [ 221.798585][ T5787] usb 5-1: SerialNumber: syz [ 222.153482][ T5787] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 222.273551][ T5787] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 222.282400][ T5787] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 222.684913][ T5787] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 222.702786][ T5787] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 222.887878][ T5787] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 222.928980][ T8357] loop3: detected capacity change from 0 to 512 [ 222.948417][ T8357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.948461][ T8357] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.005690][ T30] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.065069][ T8357] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 223.070285][ T8357] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 223.070458][ T8357] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.784: Failed to acquire dquot type 1 [ 223.071022][ T8357] loop3: lost filesystem error report for type 5 error -5 [ 223.088314][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 223.088375][ C0] EXT4-fs (loop3): initial error at time 1786046291: ext4_acquire_dquot:7069 [ 223.088438][ C0] EXT4-fs (loop3): last error at time 1786046291: ext4_acquire_dquot:7069 [ 223.115412][ T8357] EXT4-fs (loop3): Remounting filesystem read-only [ 223.115544][ T8357] EXT4-fs (loop3): 1 truncate cleaned up [ 223.123159][ T8357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.238054][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 223.246454][ T30] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 223.263705][ T30] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 223.263753][ T30] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 223.263798][ T30] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 223.263823][ T30] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 223.263848][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 223.263875][ T30] usb 1-1: config 0 has no interface number 0 [ 223.263922][ T30] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 223.263956][ T30] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 223.263984][ T30] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.264023][ T30] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.264056][ T30] usb 1-1: config 0 interface 125 has no altsetting 0 [ 223.264079][ T30] usb 1-1: config 0 interface 125 has no altsetting 2 [ 223.360464][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.360505][ T30] usb 1-1: Product: syz [ 223.360520][ T30] usb 1-1: Manufacturer: syz [ 223.360536][ T30] usb 1-1: SerialNumber: syz [ 223.416085][ T30] usb 1-1: config 0 descriptor?? [ 223.434493][ T30] usb 1-1: selecting invalid altsetting 2 [ 223.496847][ T5787] usb 5-1: USB disconnect, device number 6 [ 223.670116][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.772529][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.062795][ C1] usb 1-1: async_complete: urb error -71 [ 224.062922][ C1] usb 1-1: async_complete: urb error -71 [ 224.078247][ T30] get_1284_register: usb error -71 [ 224.107755][ T30] usb 1-1: USB disconnect, device number 5 [ 224.381361][ T8376] netlink: 7 bytes leftover after parsing attributes in process `syz.1.792'. [ 224.676482][ T8382] loop4: detected capacity change from 0 to 128 [ 225.361047][ T8384] loop3: detected capacity change from 0 to 32768 [ 225.382252][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880797d0c00: rx timeout, send abort [ 225.389566][ T8384] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.796 (8384) [ 225.558914][ T8384] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.569411][ T8384] BTRFS info (device loop3): using sha256 checksum algorithm [ 225.775334][ T8410] loop4: detected capacity change from 0 to 1024 [ 225.783082][ T8410] hfsplus: Bad value for 'session' [ 225.793153][ T30] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 225.882592][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880797d0800: rx timeout, send abort [ 225.891169][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880797d0c00: abort rx timeout. Force session deactivation [ 225.919309][ T8384] BTRFS info (device loop3): enabling ssd optimizations [ 225.926632][ T8384] BTRFS info (device loop3): turning on sync discard [ 225.935031][ T8384] BTRFS info (device loop3): enabling free space tree [ 225.953495][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 225.959487][ T30] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 225.988147][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.988197][ T30] usb 1-1: Product: syz [ 225.988248][ T30] usb 1-1: Manufacturer: syz [ 225.988269][ T30] usb 1-1: SerialNumber: syz [ 226.013547][ T30] usb 1-1: config 0 descriptor?? [ 226.023713][ T30] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 226.079083][ T31] audit: type=1800 audit(1786046294.424:16): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.796" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 226.382663][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880797d0800: abort rx timeout. Force session deactivation [ 226.492516][ T5620] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.273643][ T30] gspca_sonixj: reg_w1 err -71 [ 227.273750][ T30] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 227.289976][ T30] usb 1-1: USB disconnect, device number 6 [ 228.452171][ T8464] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 228.508226][ T31] audit: type=1326 audit(1786046296.854:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8460 comm="syz.3.821" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b41d9e0d9 code=0x0 [ 228.729098][ T8464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.796487][ T8467] bond1: (slave gretap1): making interface the new active one [ 228.807844][ T8467] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 229.412522][ T8482] loop3: detected capacity change from 0 to 1024 [ 229.431856][ T8486] netlink: 'syz.1.831': attribute type 11 has an invalid length. [ 233.421542][ T8558] loop5: detected capacity change from 0 to 32768 [ 233.430440][ T8558] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.856 (8558) [ 233.459225][ T8558] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.459277][ T8558] BTRFS info (device loop5): using sha256 checksum algorithm [ 233.657314][ T8577] loop3: detected capacity change from 0 to 128 [ 233.732627][ T8558] BTRFS info (device loop5): enabling ssd optimizations [ 233.732707][ T8558] BTRFS info (device loop5): turning on sync discard [ 233.732746][ T8558] BTRFS info (device loop5): enabling free space tree [ 233.732770][ T8558] BTRFS info (device loop5): use zlib compression, level 3 [ 233.825317][ T31] audit: type=1800 audit(1786046302.174:18): pid=8558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.856" name="file0" dev="loop5" ino=258 res=0 errno=0 [ 234.461247][ T6789] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.522313][ T8595] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 234.895190][ T8595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.972350][ T8597] bond2: entered promiscuous mode [ 234.972409][ T8597] bond2: entered allmulticast mode [ 235.640025][ T8615] loop5: detected capacity change from 0 to 256 [ 235.826558][ T8622] fuse: fd is not a fuse device [ 236.561101][ T5707] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 236.563513][ T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 236.713275][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 236.713791][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 236.719127][ T30] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 236.725862][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.725952][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.726077][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.726229][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.817021][ T30] usb 4-1: config 0 descriptor?? [ 237.401313][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.401384][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.401892][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.403267][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.403344][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.403380][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.405519][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.405569][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.405632][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.405667][ T30] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 237.843484][ T30] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 237.901934][ T30] usb 4-1: USB disconnect, device number 10 [ 238.563461][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 238.726793][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 238.749177][ T30] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 238.771750][ T30] usb 6-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 238.771851][ T30] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 238.771901][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 238.771971][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.871444][ T30] usb 6-1: config 0 descriptor?? [ 239.041761][ T8644] fido_id[8644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 239.323467][ T8655] loop4: detected capacity change from 0 to 1024 [ 239.396129][ T5707] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.396203][ T5707] usb 1-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 239.416011][ T5707] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 239.416068][ T5707] usb 1-1: can't read configurations, error -71 [ 239.457302][ T30] wacom 0003:056A:00C5.0003: ignoring exceeding usage max [ 239.566693][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.614905][ T8655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.660557][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.729129][ T30] wacom 0003:056A:00C5.0003: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.5-1/input0 [ 239.773517][ T30] usb 6-1: USB disconnect, device number 5 [ 240.045111][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.300554][ T8664] fido_id[8664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 241.149129][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.898'. [ 241.149177][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.898'. [ 241.149223][ T8681] netlink: 7 bytes leftover after parsing attributes in process `syz.4.898'. [ 241.179042][ T8681] comedi comedi3: 8255: I/O base address not correctly aligned [ 242.013758][ T5787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 242.175694][ T5787] usb 4-1: Using ep0 maxpacket: 32 [ 242.186361][ T5787] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 242.198355][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.215599][ T5787] usb 4-1: config 0 descriptor?? [ 242.233244][ T5787] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 243.745541][ T988] usb 4-1: USB disconnect, device number 11 [ 244.547281][ T8720] loop4: detected capacity change from 0 to 40427 [ 244.560312][ T8720] f2fs: Unknown parameter 'whint_mode' [ 245.103633][ T5707] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 245.253984][ T5707] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 245.265419][ T5707] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.265472][ T5707] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.265523][ T5707] usb 6-1: config 0 interface 0 has no altsetting 0 [ 245.265564][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.331161][ T5707] usb 6-1: config 0 descriptor?? [ 245.395074][ T5715] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 245.555178][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 245.564524][ T5715] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 245.607159][ T5715] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.607281][ T5715] usb 1-1: config 0 has no interface number 0 [ 245.614152][ T5715] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.614236][ T5715] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.614349][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.714702][ T5715] usb 1-1: config 0 descriptor?? [ 245.758217][ T5707] hid_parser_main: 39 callbacks suppressed [ 245.764297][ T5707] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x2 [ 245.772262][ T5707] hid-steam 0003:28DE:1102.0004: item fetching failed at offset 4/5 [ 245.781371][ T5707] hid-steam 0003:28DE:1102.0004: steam_probe:parse of hid interface failed [ 245.791886][ T5707] hid-steam 0003:28DE:1102.0004: probe with driver hid-steam failed with error -22 [ 245.954892][ T5707] usb 6-1: USB disconnect, device number 6 [ 246.511317][ T5715] uclogic 0003:28BD:0071.0005: pen parameters not found [ 246.511795][ T5715] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 246.539866][ T5707] usb 1-1: USB disconnect, device number 9 [ 247.258147][ T8764] syz_tun: entered allmulticast mode [ 247.318054][ T8764] syz_tun (unregistering): left allmulticast mode [ 248.117854][ T8785] overlayfs: failed to clone upperpath [ 248.277198][ T8788] ip6erspan0: entered allmulticast mode [ 249.216824][ T8805] loop5: detected capacity change from 0 to 32768 [ 249.285933][ T8805] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 249.355962][ T8824] loop0: detected capacity change from 0 to 512 [ 249.534842][ T8824] EXT4-fs (loop0): 1 truncate cleaned up [ 249.576627][ T8824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.996846][ T6789] ocfs2: Unmounting device (7,5) on (node local) [ 250.058307][ T5619] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /193/bus: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 250.102859][ T5619] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2846: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 250.254026][ T5619] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor: bg 0: block 7: invalid block bitmap [ 250.297216][ T5619] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 250.351751][ T5619] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 250.367444][ T5619] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 250.696423][ T30] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 250.738879][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.853873][ T30] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 250.867433][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.867518][ T30] usb 4-1: Product: syz [ 250.867539][ T30] usb 4-1: Manufacturer: syz [ 250.867560][ T30] usb 4-1: SerialNumber: syz [ 251.496418][ T30] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 251.524757][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.740776][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.115584][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.335310][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.538752][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.560429][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.571307][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.586826][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.602476][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.443203][ T80] bridge_slave_1: left allmulticast mode [ 253.443330][ T80] bridge_slave_1: left promiscuous mode [ 253.464310][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.528890][ T80] bridge_slave_0: left allmulticast mode [ 253.529018][ T80] bridge_slave_0: left promiscuous mode [ 253.536974][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.601461][ T30] usb 4-1: USB disconnect, device number 12 [ 253.658852][ T30] usblp0: removed [ 253.676839][ T8894] loop5: detected capacity change from 0 to 7 [ 253.725664][ T8894] Dev loop5: unable to read RDB block 7 [ 253.731398][ T8894] loop5: unable to read partition table [ 253.733616][ T8894] loop5: partition table beyond EOD, truncated [ 253.733679][ T8894] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 254.155877][ T8914] netlink: 'syz.3.981': attribute type 16 has an invalid length. [ 254.155923][ T8914] netlink: 'syz.3.981': attribute type 17 has an invalid length. [ 254.512683][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.567700][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.669649][ T80] bond0 (unregistering): (slave team0): Releasing backup interface [ 254.704380][ T4932] Bluetooth: hci2: command tx timeout [ 254.724131][ T80] bond0 (unregistering): Released all slaves [ 254.757327][ T80] bond1 (unregistering): Released all slaves [ 255.082239][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.129646][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.461302][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.461444][ T8914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.496450][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.496611][ T8914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.665063][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.665144][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.801798][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 255.814110][ T8953] netlink: 75 bytes leftover after parsing attributes in process `syz.1.994'. [ 256.392280][ T8967] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 256.588417][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 256.799667][ T4932] Bluetooth: hci2: command tx timeout [ 257.457077][ T80] hsr_slave_0: left promiscuous mode [ 257.481326][ T80] hsr_slave_1: left promiscuous mode [ 257.498915][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.499019][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.529926][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.530050][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.592953][ T8996] fuse: fd is not a fuse device [ 257.838010][ T80] veth1_macvtap: left promiscuous mode [ 257.851217][ T80] veth0_macvtap: left promiscuous mode [ 257.862089][ T80] veth1_vlan: left promiscuous mode [ 257.862276][ T80] veth0_vlan: left promiscuous mode [ 258.871217][ T4932] Bluetooth: hci2: command tx timeout [ 259.735422][ T9024] loop3: detected capacity change from 0 to 2048 [ 259.742660][ T80] team0 (unregistering): Port device team_slave_1 removed [ 259.940922][ T80] team0 (unregistering): Port device team_slave_0 removed [ 260.030323][ T9031] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.398480][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 260.943559][ T5615] Bluetooth: hci2: command tx timeout [ 261.299765][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 261.308445][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.311940][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.312389][ T8880] bridge_slave_0: entered allmulticast mode [ 261.317527][ T8880] bridge_slave_0: entered promiscuous mode [ 261.325348][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.325623][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.326452][ T8880] bridge_slave_1: entered allmulticast mode [ 261.328089][ T8880] bridge_slave_1: entered promiscuous mode [ 261.403851][ T8880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.411619][ T8880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.460581][ T8880] team0: Port device team_slave_0 added [ 261.470645][ T8880] team0: Port device team_slave_1 added [ 261.516458][ T8880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.523676][ T8880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.549987][ T8880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.562849][ T8880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.565841][ T8880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.565926][ T8880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.657756][ T8880] hsr_slave_0: entered promiscuous mode [ 261.666669][ T8880] hsr_slave_1: entered promiscuous mode [ 262.012972][ T8880] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 262.040925][ T8880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.046500][ T8880] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 262.062365][ T8880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.074948][ T8880] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 262.103875][ T8880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.113301][ T8880] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 262.127631][ T8880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 262.430975][ T8880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.489670][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 262.500068][ T8880] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.522014][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.522189][ T7162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.543050][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.543178][ T8906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.292832][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.663305][ T8880] veth0_vlan: entered promiscuous mode [ 263.676917][ T8880] veth1_vlan: entered promiscuous mode [ 263.730621][ T8880] veth0_macvtap: entered promiscuous mode [ 263.750943][ T8880] veth1_macvtap: entered promiscuous mode [ 263.785434][ T8880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.795402][ T8880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.909751][ T80] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.917804][ T8904] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.921811][ T8904] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.931895][ T80] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.055866][ T8898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.066321][ T8898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.118220][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.127489][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.652868][ T31] audit: type=1326 audit(1786046332.994:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.1.1018" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f90f9e0d9 code=0x0 [ 265.482333][ T9133] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 265.502547][ T9133] overlayfs: failed to clone lowerpath [ 267.276459][ T9178] loop4: detected capacity change from 0 to 512 [ 267.295267][ T9178] ext4: Unknown parameter 'dont_appraise' [ 267.718601][ T9189] loop4: detected capacity change from 0 to 256 [ 267.882030][ T9189] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 267.966706][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1054'. [ 267.978144][ T9191] bridge_slave_1: left allmulticast mode [ 267.984888][ T9191] bridge_slave_1: left promiscuous mode [ 268.001354][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.054920][ T9191] bridge_slave_0: left allmulticast mode [ 268.061942][ T9191] bridge_slave_0: left promiscuous mode [ 268.071606][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.185493][ T31] audit: type=1804 audit(1786046336.524:20): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1053" name="/newroot/232/file0/bus" dev="loop4" ino=1048623 res=1 errno=0 [ 269.186144][ T5714] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 269.349767][ T5714] usb 6-1: Using ep0 maxpacket: 16 [ 269.359101][ T5714] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 269.361099][ T5714] usb 6-1: config 0 has no interfaces? [ 269.361196][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.389081][ T5714] usb 6-1: config 0 descriptor?? [ 269.643631][ T5714] usb 6-1: USB disconnect, device number 7 [ 271.881228][ T9268] loop6: detected capacity change from 0 to 16 [ 271.971695][ T9268] erofs (device loop6): mounted with root inode @ nid 36. [ 272.279599][ T9268] erofs (device loop6): not enough plain data on disk @ la 4096 of nid 89 [ 272.279726][ T9268] erofs (device loop6): readahead error at folio 1 @ nid 89 [ 272.291403][ T9268] syz.6.1081: attempt to access beyond end of device [ 272.291403][ T9268] loop6: rw=524288, sector=128, nr_sectors = 256 limit=16 [ 272.439315][ T9268] syz.6.1081: attempt to access beyond end of device [ 272.439315][ T9268] loop6: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 272.471639][ T9268] erofs (device loop6): not enough plain data on disk @ la 20480 of nid 89 [ 272.480633][ T9268] erofs (device loop6): readahead error at folio 4 @ nid 89 [ 272.489473][ T9268] erofs (device loop6): not enough plain data on disk @ la 4096 of nid 89 [ 272.498449][ T9268] erofs (device loop6): not enough plain data on disk @ la 4096 of nid 89 [ 272.507115][ T9268] erofs (device loop6): read error -117 @ 1 of nid 89 [ 272.514442][ T31] audit: type=1800 audit(1786046340.864:21): pid=9268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1081" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 274.124301][ T9311] netlink: 'syz.1.1094': attribute type 4 has an invalid length. [ 274.157874][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1095'. [ 274.424565][ T9306] loop4: detected capacity change from 0 to 32768 [ 274.460025][ T9306] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1093 (9306) [ 274.693425][ T9306] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.693531][ T9306] BTRFS info (device loop4): using sha256 checksum algorithm [ 275.023677][ T9306] BTRFS info (device loop4): enabling ssd optimizations [ 275.023780][ T9306] BTRFS info (device loop4): turning on sync discard [ 275.023899][ T9306] BTRFS info (device loop4): enabling free space tree [ 275.023961][ T9306] BTRFS info (device loop4): use zlib compression, level 3 [ 275.271701][ T31] audit: type=1800 audit(1786046343.614:22): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1093" name="file0" dev="loop4" ino=258 res=0 errno=0 [ 276.107210][ T5627] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.559511][ T31] audit: type=1326 audit(1786046344.904:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff9f9e0d9 code=0x7ffc0000 [ 276.604021][ T31] audit: type=1326 audit(1786046344.954:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff9f9e0d9 code=0x7ffc0000 [ 276.670773][ T31] audit: type=1326 audit(1786046345.014:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff9f9e0d9 code=0x7ffc0000 [ 276.695559][ T31] audit: type=1326 audit(1786046345.014:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbff9f9e0d9 code=0x7ffc0000 [ 276.695702][ T31] audit: type=1326 audit(1786046345.014:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff9f9e0d9 code=0x7ffc0000 [ 276.695818][ T31] audit: type=1326 audit(1786046345.014:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff9f9e0d9 code=0x7ffc0000 [ 276.696359][ T31] audit: type=1326 audit(1786046345.014:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff9f9e0d9 code=0x7ffc0000 [ 276.712870][ T31] audit: type=1326 audit(1786046345.044:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.5.1105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff9f9e0d9 code=0x7ffc0000 [ 278.111237][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 278.111336][ T31] audit: type=1326 audit(1786046346.454:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239a19e0d9 code=0x7ffc0000 [ 278.152668][ T31] audit: type=1326 audit(1786046346.494:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239a19e0d9 code=0x7ffc0000 [ 278.152935][ T31] audit: type=1326 audit(1786046346.494:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239a19e0d9 code=0x7ffc0000 [ 278.213268][ T31] audit: type=1326 audit(1786046346.564:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239a19e0d9 code=0x7ffc0000 [ 278.213406][ T31] audit: type=1326 audit(1786046346.564:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f239a19de42 code=0x7ffc0000 [ 278.213504][ T31] audit: type=1326 audit(1786046346.564:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f239a19ded7 code=0x7ffc0000 [ 278.295134][ T31] audit: type=1326 audit(1786046346.614:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f239a19e0d9 code=0x7ffc0000 [ 278.295191][ T31] audit: type=1326 audit(1786046346.644:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239a19e0d9 code=0x7ffc0000 [ 278.295236][ T31] audit: type=1326 audit(1786046346.644:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239a19e0d9 code=0x7ffc0000 [ 278.313977][ T31] audit: type=1326 audit(1786046346.644:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.6.1116" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f239a15add1 code=0x7ffc0000 [ 278.792462][ T9426] loop4: detected capacity change from 0 to 128 [ 278.834444][ T9426] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.848737][ T9426] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.112917][ T5627] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.262163][ T9438] bond0: (slave bond_slave_1): Releasing backup interface [ 280.430765][ T9471] fuse: fd is not a fuse device [ 280.869335][ T9477] loop4: detected capacity change from 0 to 2048 [ 281.002085][ T9477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.009271][ T9477] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.112759][ T9462] loop6: detected capacity change from 0 to 32768 [ 281.175238][ T9486] loop5: detected capacity change from 0 to 512 [ 281.211129][ T9462] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 281.214609][ T9486] ext4: Bad value for 'resgid' [ 281.214662][ T9486] ext4: Bad value for 'resgid' [ 281.356105][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.484125][ T9462] XFS (loop6): Ending clean mount [ 282.121541][ T8880] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 284.967694][ T9555] sctp: [Deprecated]: syz.6.1153 (pid 9555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.967694][ T9555] Use struct sctp_sack_info instead [ 286.400772][ T5707] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 286.556476][ T5707] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 286.569724][ T5707] usb 7-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.569788][ T5707] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.569843][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.602402][ T5707] usb 7-1: config 0 descriptor?? [ 287.157587][ T5707] samsung 0003:0419:0600.0006: unknown main item tag 0x1 [ 287.157656][ T5707] samsung 0003:0419:0600.0006: collection stack underflow [ 287.157731][ T5707] samsung 0003:0419:0600.0006: item 0 2 0 12 parsing failed [ 287.164491][ T5707] samsung 0003:0419:0600.0006: parse failed [ 287.164728][ T5707] samsung 0003:0419:0600.0006: probe with driver samsung failed with error -22 [ 287.324328][ T9607] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 287.578287][ T7162] IPVS: starting estimator thread 0... [ 287.675188][ T9614] IPVS: using max 28 ests per chain, 67200 per kthread [ 288.047998][ T5714] usb 7-1: USB disconnect, device number 2 [ 289.679018][ T9661] overlayfs: failed to clone upperpath [ 290.055399][ T5707] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 290.226615][ T5707] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.228226][ T5707] usb 6-1: config 0 has no interfaces? [ 290.232847][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.232918][ T5707] usb 6-1: SerialNumber: syz [ 290.262642][ T5707] usb 6-1: config 0 descriptor?? [ 290.325815][ T9678] fuse: fd is not a fuse device [ 290.519620][ T5707] usb 6-1: USB disconnect, device number 8 [ 290.616579][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 290.623615][ T31] audit: type=1326 audit(1786046358.964:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 290.652576][ T31] audit: type=1326 audit(1786046358.994:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 290.685104][ T31] audit: type=1326 audit(1786046359.034:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 290.694253][ T31] audit: type=1326 audit(1786046359.034:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 290.707998][ T31] audit: type=1326 audit(1786046359.054:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 290.708136][ T31] audit: type=1326 audit(1786046359.054:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 290.708282][ T31] audit: type=1326 audit(1786046359.054:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 290.722811][ T31] audit: type=1326 audit(1786046359.064:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 290.722982][ T31] audit: type=1326 audit(1786046359.064:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 290.734135][ T31] audit: type=1326 audit(1786046359.074:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9679 comm="syz.1.1201" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f90f9e0d9 code=0x7ffc0000 [ 291.152660][ T9687] overlayfs: failed to clone upperpath [ 291.242314][ T5707] kernel read not supported for file /81/net/if_inet6 (pid: 5707 comm: kworker/1:4) [ 291.789035][ T9710] loop6: detected capacity change from 0 to 512 [ 291.826906][ T9710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.865835][ T9710] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 292.026943][ T9710] EXT4-fs (loop6): 1 truncate cleaned up [ 292.093668][ T9710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.364112][ T9723] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 293.077441][ T8880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.359743][ T9738] loop4: detected capacity change from 0 to 40427 [ 294.479895][ T9738] F2FS-fs (loop4): invalid crc value [ 295.439636][ T9738] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 295.500656][ T9738] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 295.510513][ T9738] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 295.523793][ T9738] F2FS-fs (loop4): Start checkpoint disabled! [ 295.573333][ T9738] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 295.587069][ T9738] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 295.696281][ T9738] syz.4.1223: attempt to access beyond end of device [ 295.696281][ T9738] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 295.720205][ T9738] ------------[ cut here ]------------ [ 295.720304][ T9738] lim->dma_alignment > PAGE_SIZE [ 295.720404][ T9738] WARNING: block/blk-settings.c:497 at blk_validate_limits+0x1676/0x2270, CPU#0: syz.4.1223/9738 [ 295.745050][ T9738] Modules linked in: [ 295.750291][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.4.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.762701][ T9738] Tainted: [L]=SOFTLOCKUP [ 295.767717][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.780565][ T9738] RIP: 0010:blk_validate_limits+0x1676/0x2270 [ 295.787473][ T9738] Code: e8 3f 86 11 fd 90 0f 0b 90 eb 8f e8 34 86 11 fd 90 0f 0b 90 eb 84 e8 29 86 11 fd 90 0f 0b 90 e9 76 ff ff ff e8 1b 86 11 fd 90 <0f> 0b 90 e9 68 ff ff ff e8 0d 86 11 fd 90 0f 0b 90 e9 81 00 00 00 [ 295.809825][ T9738] RSP: 0018:ffffc90007326e60 EFLAGS: 00010283 [ 295.816711][ T9738] RAX: ffffffff84b5fdd5 RBX: ffffc900073270f0 RCX: 0000000000080000 [ 295.825815][ T9738] RDX: ffffc900061f9000 RSI: 0000000000000c2b RDI: 0000000000000c2c [ 295.834890][ T9738] RBP: 00000000ffffffff R08: ffff88805636dd1f R09: 1ffff1100ac6dba3 [ 295.843870][ T9738] R10: dffffc0000000000 R11: ffffed100ac6dba4 R12: ffffc90007327040 [ 295.852760][ T9738] R13: dffffc0000000000 R14: 1ffff92000e64e1e R15: dffffc0000000000 [ 295.861900][ T9738] FS: 00007f098c2066c0(0000) GS:ffff888124f18000(0000) knlGS:0000000000000000 [ 295.872017][ T9738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.879954][ T9738] CR2: 0000001b33d09ff8 CR3: 000000003367e000 CR4: 00000000003526f0 [ 295.889625][ T9738] Call Trace: [ 295.893629][ T9738] [ 295.897051][ T9738] queue_limits_commit_update+0x87/0x390 [ 295.903549][ T9738] loop_configure+0x7f1/0xdc0 [ 295.908904][ T9738] ? __pfx_loop_configure+0x10/0x10 [ 295.914990][ T9738] lo_ioctl+0xad5/0x2150 [ 295.919867][ T9738] ? __pfx_lo_ioctl+0x10/0x10 [ 295.925341][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 295.931037][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 295.936772][ T9738] ? add_lock_to_list+0xc7/0x100 [ 295.942386][ T9738] ? lockdep_unlock+0x5d/0xd0 [ 295.947787][ T9738] ? __lock_acquire+0x14b9/0x2e50 [ 295.953548][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 295.959258][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 295.964931][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 295.970571][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 295.976195][ T9738] ? lock_acquire+0x115/0x350 [ 295.982911][ T9738] ? lock_acquire+0x115/0x350 [ 295.992707][ T9738] ? lock_acquire+0x115/0x350 [ 295.998119][ T9738] ? is_bpf_text_address+0x26/0x2b0 [ 296.004122][ T9738] ? is_bpf_text_address+0x292/0x2b0 [ 296.010148][ T9738] ? is_bpf_text_address+0x26/0x2b0 [ 296.016143][ T9738] ? kernel_text_address+0xa5/0xe0 [ 296.021941][ T9738] ? __kernel_text_address+0xd/0x30 [ 296.028035][ T9738] ? unwind_get_return_address+0x4d/0x90 [ 296.034399][ T9738] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.041404][ T9738] ? arch_stack_walk+0xfb/0x150 [ 296.047048][ T9738] ? stack_trace_save+0xa9/0x100 [ 296.052752][ T9738] ? __pfx_stack_trace_save+0x10/0x10 [ 296.058808][ T9738] ? kasan_save_track+0x4f/0x80 [ 296.064415][ T9738] ? stack_depot_save_flags+0x33/0x800 [ 296.070445][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 296.076175][ T9738] ? kasan_save_track+0x4f/0x80 [ 296.082863][ T9738] ? kasan_save_track+0x3e/0x80 [ 296.088531][ T9738] ? kasan_save_free_info+0x40/0x50 [ 296.094464][ T9738] ? __kasan_slab_free+0x5c/0x80 [ 296.100060][ T9738] ? kfree+0x1c5/0x650 [ 296.104883][ T9738] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 296.111335][ T9738] ? security_file_ioctl+0xc3/0x2a0 [ 296.117364][ T9738] ? __se_sys_ioctl+0x47/0x170 [ 296.122822][ T9738] ? do_syscall_64+0x166/0x510 [ 296.130784][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.137909][ T9738] ? __asan_memset+0x22/0x50 [ 296.143350][ T9738] ? blk_get_meta_cap+0x19d/0x780 [ 296.149096][ T9738] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 296.155319][ T9738] ? blkdev_common_ioctl+0x14b7/0x3250 [ 296.161538][ T9738] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 296.168034][ T9738] ? kasan_quarantine_put+0xbb/0x1f0 [ 296.174150][ T9738] ? tomoyo_path_number_perm+0x219/0x5f0 [ 296.180516][ T9738] ? tomoyo_path_number_perm+0x219/0x5f0 [ 296.188240][ T9738] ? do_vfs_ioctl+0x116f/0x1530 [ 296.193980][ T9738] ? __pfx_lo_ioctl+0x10/0x10 [ 296.199290][ T9738] blkdev_ioctl+0x5e3/0x740 [ 296.204504][ T9738] ? __pfx_blkdev_ioctl+0x10/0x10 [ 296.210168][ T9738] ? __fget_files+0x2a/0x420 [ 296.215382][ T9738] ? bpf_lsm_file_ioctl+0x9/0x20 [ 296.221041][ T9738] ? __pfx_blkdev_ioctl+0x10/0x10 [ 296.226942][ T9738] __se_sys_ioctl+0xfc/0x170 [ 296.232220][ T9738] do_syscall_64+0x166/0x510 [ 296.237667][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.244618][ T9738] ? clear_bhb_loop+0x40/0x90 [ 296.249916][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.256634][ T9738] RIP: 0033:0x7f098b39e0d9 [ 296.261744][ T9738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.283819][ T9738] RSP: 002b:00007f098c206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.294717][ T9738] RAX: ffffffffffffffda RBX: 00007f098b625fa0 RCX: 00007f098b39e0d9 [ 296.303948][ T9738] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 296.312901][ T9738] RBP: 00007f098b435024 R08: 0000000000000000 R09: 0000000000000000 [ 296.321849][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.330956][ T9738] R13: 00007f098b626038 R14: 00007f098b625fa0 R15: 00007ffe7c626228 [ 296.340188][ T9738] [ 296.343739][ T9738] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 296.351102][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.4.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.361998][ T9738] Tainted: [L]=SOFTLOCKUP [ 296.366358][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.376527][ T9738] Call Trace: [ 296.379832][ T9738] [ 296.382775][ T9738] vpanic+0x56c/0xa60 [ 296.386790][ T9738] ? __pfx__printk+0x10/0x10 [ 296.391410][ T9738] ? __pfx_vpanic+0x10/0x10 [ 296.395945][ T9738] ? is_bpf_text_address+0x292/0x2b0 [ 296.401253][ T9738] ? is_bpf_text_address+0x26/0x2b0 [ 296.406563][ T9738] panic+0xc5/0xd0 [ 296.410320][ T9738] ? __pfx_panic+0x10/0x10 [ 296.414775][ T9738] __warn+0x315/0x4c0 [ 296.418784][ T9738] ? blk_validate_limits+0x1676/0x2270 [ 296.424274][ T9738] ? blk_validate_limits+0x1676/0x2270 [ 296.429764][ T9738] __report_bug+0x276/0x570 [ 296.434322][ T9738] ? lockdep_hardirqs_on+0x7a/0x110 [ 296.439547][ T9738] ? blk_validate_limits+0x1676/0x2270 [ 296.445038][ T9738] ? __pfx___report_bug+0x10/0x10 [ 296.450081][ T9738] ? lockdep_hardirqs_on+0x7a/0x110 [ 296.455302][ T9738] ? irqentry_exit+0x218/0x8f0 [ 296.460082][ T9738] ? trace_irq_disable+0x3b/0x140 [ 296.465133][ T9738] ? blk_validate_limits+0x1678/0x2270 [ 296.470627][ T9738] ? blk_validate_limits+0x1676/0x2270 [ 296.476118][ T9738] report_bug+0x16a/0x220 [ 296.480470][ T9738] ? blk_validate_limits+0x1676/0x2270 [ 296.485958][ T9738] ? blk_validate_limits+0x1678/0x2270 [ 296.491447][ T9738] handle_bug+0x9c/0x200 [ 296.495738][ T9738] exc_invalid_op+0x1a/0x50 [ 296.500359][ T9738] asm_exc_invalid_op+0x1a/0x20 [ 296.505226][ T9738] RIP: 0010:blk_validate_limits+0x1676/0x2270 [ 296.511325][ T9738] Code: e8 3f 86 11 fd 90 0f 0b 90 eb 8f e8 34 86 11 fd 90 0f 0b 90 eb 84 e8 29 86 11 fd 90 0f 0b 90 e9 76 ff ff ff e8 1b 86 11 fd 90 <0f> 0b 90 e9 68 ff ff ff e8 0d 86 11 fd 90 0f 0b 90 e9 81 00 00 00 [ 296.530957][ T9738] RSP: 0018:ffffc90007326e60 EFLAGS: 00010283 [ 296.537044][ T9738] RAX: ffffffff84b5fdd5 RBX: ffffc900073270f0 RCX: 0000000000080000 [ 296.545039][ T9738] RDX: ffffc900061f9000 RSI: 0000000000000c2b RDI: 0000000000000c2c [ 296.553033][ T9738] RBP: 00000000ffffffff R08: ffff88805636dd1f R09: 1ffff1100ac6dba3 [ 296.561028][ T9738] R10: dffffc0000000000 R11: ffffed100ac6dba4 R12: ffffc90007327040 [ 296.569101][ T9738] R13: dffffc0000000000 R14: 1ffff92000e64e1e R15: dffffc0000000000 [ 296.577096][ T9738] ? blk_validate_limits+0x1675/0x2270 [ 296.582616][ T9738] queue_limits_commit_update+0x87/0x390 [ 296.588298][ T9738] loop_configure+0x7f1/0xdc0 [ 296.593032][ T9738] ? __pfx_loop_configure+0x10/0x10 [ 296.598304][ T9738] lo_ioctl+0xad5/0x2150 [ 296.602600][ T9738] ? __pfx_lo_ioctl+0x10/0x10 [ 296.607317][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 296.612331][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 296.617313][ T9738] ? add_lock_to_list+0xc7/0x100 [ 296.622283][ T9738] ? lockdep_unlock+0x5d/0xd0 [ 296.626996][ T9738] ? __lock_acquire+0x14b9/0x2e50 [ 296.632104][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 296.637096][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 296.642087][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 296.647070][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 296.652062][ T9738] ? lock_acquire+0x115/0x350 [ 296.656791][ T9738] ? lock_acquire+0x115/0x350 [ 296.661514][ T9738] ? lock_acquire+0x115/0x350 [ 296.666235][ T9738] ? is_bpf_text_address+0x26/0x2b0 [ 296.671464][ T9738] ? is_bpf_text_address+0x292/0x2b0 [ 296.676781][ T9738] ? is_bpf_text_address+0x26/0x2b0 [ 296.682009][ T9738] ? kernel_text_address+0xa5/0xe0 [ 296.687145][ T9738] ? __kernel_text_address+0xd/0x30 [ 296.692373][ T9738] ? unwind_get_return_address+0x4d/0x90 [ 296.698122][ T9738] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.704315][ T9738] ? arch_stack_walk+0xfb/0x150 [ 296.709215][ T9738] ? stack_trace_save+0xa9/0x100 [ 296.714188][ T9738] ? __pfx_stack_trace_save+0x10/0x10 [ 296.719587][ T9738] ? kasan_save_track+0x4f/0x80 [ 296.724471][ T9738] ? stack_depot_save_flags+0x33/0x800 [ 296.729966][ T9738] ? __lock_acquire+0x6df/0x2e50 [ 296.734938][ T9738] ? kasan_save_track+0x4f/0x80 [ 296.739806][ T9738] ? kasan_save_track+0x3e/0x80 [ 296.744685][ T9738] ? kasan_save_free_info+0x40/0x50 [ 296.749900][ T9738] ? __kasan_slab_free+0x5c/0x80 [ 296.754861][ T9738] ? kfree+0x1c5/0x650 [ 296.758945][ T9738] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 296.764608][ T9738] ? security_file_ioctl+0xc3/0x2a0 [ 296.769832][ T9738] ? __se_sys_ioctl+0x47/0x170 [ 296.774701][ T9738] ? do_syscall_64+0x166/0x510 [ 296.779500][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.785587][ T9738] ? __asan_memset+0x22/0x50 [ 296.790195][ T9738] ? blk_get_meta_cap+0x19d/0x780 [ 296.795245][ T9738] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 296.800649][ T9738] ? blkdev_common_ioctl+0x14b7/0x3250 [ 296.806247][ T9738] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 296.811912][ T9738] ? kasan_quarantine_put+0xbb/0x1f0 [ 296.817329][ T9738] ? tomoyo_path_number_perm+0x219/0x5f0 [ 296.823070][ T9738] ? tomoyo_path_number_perm+0x219/0x5f0 [ 296.828843][ T9738] ? do_vfs_ioctl+0x116f/0x1530 [ 296.833757][ T9738] ? __pfx_lo_ioctl+0x10/0x10 [ 296.838482][ T9738] blkdev_ioctl+0x5e3/0x740 [ 296.843012][ T9738] ? __pfx_blkdev_ioctl+0x10/0x10 [ 296.848064][ T9738] ? __fget_files+0x2a/0x420 [ 296.852684][ T9738] ? bpf_lsm_file_ioctl+0x9/0x20 [ 296.857639][ T9738] ? __pfx_blkdev_ioctl+0x10/0x10 [ 296.862686][ T9738] __se_sys_ioctl+0xfc/0x170 [ 296.867299][ T9738] do_syscall_64+0x166/0x510 [ 296.871909][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.878084][ T9738] ? clear_bhb_loop+0x40/0x90 [ 296.882785][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.888694][ T9738] RIP: 0033:0x7f098b39e0d9 [ 296.893214][ T9738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.913103][ T9738] RSP: 002b:00007f098c206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.921548][ T9738] RAX: ffffffffffffffda RBX: 00007f098b625fa0 RCX: 00007f098b39e0d9 [ 296.929535][ T9738] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 296.937526][ T9738] RBP: 00007f098b435024 R08: 0000000000000000 R09: 0000000000000000 [ 296.945514][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.953531][ T9738] R13: 00007f098b626038 R14: 00007f098b625fa0 R15: 00007ffe7c626228 [ 296.961540][ T9738] [ 296.965188][ T9738] Kernel Offset: disabled [ 296.969556][ T9738] Rebooting in 86400 seconds..