last executing test programs: 8m44.406946978s ago: executing program 1 (id=5033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0xa5dfdbfc, {{@in=@private=0xa010102, @in=@remote, 0xffff, 0x0, 0x4e21, 0x22, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002, 0x0, 0x1}, {0x2}, 0x70bd2b, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 8m43.927078335s ago: executing program 1 (id=5039): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)={0x24, 0x1e, 0x723, 0x0, 0x0, "", [@nested={0x14, 0xa9, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0xf, 0x0, 0x0, @str='GPL\x00'}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) 8m43.674355583s ago: executing program 1 (id=5042): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x434, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m42.939433963s ago: executing program 1 (id=5050): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000005c0)={0x2, [[0x9ef8, 0xf1, 0x0, 0x1, 0xfffffffc, 0x0, 0x3, 0x10], [0x0, 0x8, 0x0, 0x10000003, 0x20000000, 0x4, 0xffffffff], [0x0, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0xfffffffd}, {0xffffffff}, {0x5, 0x5, 0x0, 0x1}, {0x3, 0xfffffffe}, {}, {0xffffffff, 0xa}, {}, {0x0, 0xffff}, {0x2, 0x10000000}, {0x9, 0xd78}, {0xfffffff8, 0x2}], '\x00', 0x0, 0x0, 0x0, 0xf8}) 8m41.768762513s ago: executing program 1 (id=5065): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 8m41.112142421s ago: executing program 32 (id=5065): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 8m39.092833415s ago: executing program 4 (id=5092): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3200012, &(0x7f0000000280)=ANY=[], 0xff, 0x61e6, &(0x7f00000026c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x63) 8m36.772575226s ago: executing program 4 (id=5112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) 8m35.930561604s ago: executing program 5 (id=5123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000800000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) 8m35.877525001s ago: executing program 4 (id=5124): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000ffffffff18140000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000ffffffd7850000005a000000bca9000000000000350901000700000095000000000000003e980000000000002608000002000000850000008c000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec}, 0x94) 8m35.679492464s ago: executing program 5 (id=5127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 8m35.585534509s ago: executing program 4 (id=5129): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m35.523270734s ago: executing program 5 (id=5130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1b7b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x58}}, 0x40080) 8m35.290775736s ago: executing program 4 (id=5132): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 8m34.138665051s ago: executing program 5 (id=5144): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m33.935203553s ago: executing program 4 (id=5145): socket$inet(0x2, 0x1, 0x100) close(0x3) 8m33.295487616s ago: executing program 33 (id=5145): socket$inet(0x2, 0x1, 0x100) close(0x3) 8m33.227188504s ago: executing program 5 (id=5151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m32.945979663s ago: executing program 5 (id=5152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000580)={0x26, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e24, @remote}}}, 0x108) 8m32.251346754s ago: executing program 34 (id=5152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000580)={0x26, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e24, @remote}}}, 0x108) 7m53.160256692s ago: executing program 2 (id=5443): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004100)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x6, 0x20, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x4, 0x2, 0x0, 0x1, [@generic="f93c863893513d2b8988d18c9b2b51d71c945106b7fd35360e296f7daf4c4420f27ae254d24a624597270990a0fc6bd115bc5e18229db9e5e408f811f0ba6b0c977c837f94e4efa0376c33de5fd318d420a93a43c133452e3631be03e0e589337db4a49b0a9fb015aa8139711bf54c733114e0d2b51e01e68174d301b18251579a28c5bf70da797f8be47534b26d947454169855a7c9bac448b07f9e55c15987cb603e5facf0c673c477f5adc967118a4f87774af9d03dcb9b11df5fa3c2c7a08c7d69670c2f1094e9f9e6774091134d2315f32cd50c8bd348ef557c02c4996e68ff4de61079f54bf66a764bba11b5b549125d02279d01895030b6903e951855f628f8f21668ffbad7b4182c184657818f417e7d196bff59d8b069865fc98c682d394a08d31282589a8fa01d5c296622deccb8e94223b285c255fff3af31b57f4a67540df68f56ba923bcada2e1e5f5e8cb74fddbe8edb1110c525ceaf7e52fceb8df7d2e74da728feb246780f999346bc0f38946ddfc67dcf51c27192c8c1ebcbbae43a5db32d2c2aeb8c6edd4555a40d3b4e5deb6282214e4b14adf2d59f9107be6148256558bd9c1d03fa0d8a128310aaf8cf674874da7ae4d542aacb3a80055a55627c08886a71ed154c01cb856d4f2ed4e3b177eb038a05d8c4fe82fb2536a93b1b586e72c9d5414838a968d6795350b0215ae8fc9ed87e0cd870ee2da3d54edbd04ef063cd2c47f9d180220e8e5b095c224934d6dbba6db6f7ae80ac527e301c3cc4f24a5418b0480c19f8cb383b4cf2bbecf67fa3c6929a1dc2907f09a22b7fc42be4f81d5b31914e5ea4be89589feaf603a9761381eb9e8bf62388599b12f0e32ffcba659ae251c0f901556e913c94aed01c84b5516d30f5c453ba85c19e640bdecf255da5d8e1636efe99d6a82ad307d81799123523fc7d284851ed2190bae341db03b98d812a74810ba9c03a4201237b6b948eef5b21e3df96bd8f37b446026f185e1f5cb356f137f73f6b94e52d0b817eee09df44eec7cf5322209614ee44be2bf777e8003a8a3292f64f3bcefee2e41233bb7a55e09ef903efa2d991af5c11205bc015ce2cd53f81787d2b4d99d4a08bbbffdf0ca79d9348c39b0cc570685259c8bfd4a0e5f688c1ced068715cf2484fc692436d2d4bd0b367333788330235e242760e3cde552f7746c81cff2ea6612d6e484d12c2cfe376fab5b25091005e03644dc89a18b7d24ea5189a19900a4e2f5593160368b089856982a8dc4567c152751e45f28a8d1f2b7699517988a62e9155e8b2a4cc9094237ee43efc37c9962ed12c4dfffd2a9b87a7dea5706e79721cec147eb250daf2d308944d3115e9702293934135d3307d72dc799f7049b3e235962e701f25e8b9f9e20b2579208abfaeab19f46bb2cb0c24f7305be571d9a7404c45c2fdae2d60d124fe0e9d1624483dd0d0d87d4fed280c86ff4cd16117a586fbd5a4eb10d6a179027ed781af15dd28f52dedf559a96819b512cae1a822e03d5c52c5ac64e37983e60479a48db561bb199bd48ba6d7b3a72cba84e7a98dea31801af41a154e435c1b1c17f8d07c97c5fb9a8f47e343f1f20556be0e73da3435de1eba7f91c6387fa12448b75554fd99836d435e1082a855bea5cf9a98315e41f63cb1df0f4c1d9e3518c5d03db48b26aeb01943f22a3553add68328f33b730d425318ec8bf34e24e042f096549e752c8287f6d07349db484299d0e2e0e506f4d8e500722b988438f79d18037b288307923b06528293e753cf8a35f881f8a258c1e03cf0e8da145e1218c116c8b3b4abfadac7ed71303809925f4010c0928fddccbf2bf9612f84e69bbdb493d4d03003a55889fadc48cde0e59664048c3193cb32d472dcbc28fc8b394c26b826674ed8b44553ff3797766fd322d3788772c8947693f1b42aa0daa349064c3444bbae46f295e920ef54d0bcd94769b0cd710853c5daa737e4778bb48d121b2f77c534fcf5b2bfa0751a87064f0995a5a99da3c32cc6db71aae0351088f52e029ccd13a0b7047990343ec464675217f3769ee1fa6ffcc3db13d6a030085f271529513ed75a0aed30a35e41f43d7b5c80a0a2cdcbbf988b5f80fccf45caea751549a2377b121dd88bff4ac4fad14916a0a9a9b9d9ef44e0d2e217b665380d876dc2172673850edf3a1b8462bc3cb889308f3bcfa1bf798c17c76404409ee09156f931b523700ef4ff2adea2605f3a2efd46b605c6311677aee39641b0eb0a10848f4be03ee5264025a8c84df3bc95319891cea89b1d7742022c97689a6ee1c0e99dcfb098654f1041a252ac60a296d8ad4ce942aa1c9680f9f791ced23ab1c819c6aa9afe80b3cf00e04d9040c657f3c4515802914fba5e2383ee9d6e0bc9ae235b0b58bc5f015281485e8862ca0dddd78f87ff93bbac1e8ede789be0807f4ae8700e64dc95ff44a61e04c9a686c76d9af05e861cf615897ff6dbdde3188632b1d59d3c503903f79be129518dea99850d47a7e42db8c4fde7d81de9f9129619545435d0688a0988d3fd186a633bbc367aa9352569c69dfa6b2e69a843ff2d4eddce05675228b549ff60a2ac47d96fc2713bff258d0971801f98ae169afe773ea925cabd98013868f942caea103b2103917c31a4a11f221728ffbd275f0c7dabfa4b4679a275e564b43265a1fbf9aff1817c2cac7c57904971702638481e5629ad7e7cede802a5915d41c571b3699fb6544b5a76ccd3f28f8c28dcd8ca8ced0f192c9f30b7d6a3ba96bbf95e7191de42359623a0cf4f50b67d212201d168164122933dcef129a4cd0ee2af347427ea301859796129b73c36291eaab956b8a2f6e55f245b7cceb5b6ff997ee22dedae2cdc4f786168171475a17c1639da83189b22db5a489c32315432269d82514b2a8990f336303f654de59caa9e4873c263d15fcce70d8074b4cd9dc96f5ee6be5baeef809cd127eab315c9fc30e876324f850b14737b38abe1fd7f6a5ca9e8e31518e752dea3addde10b4b10f92f221ec28ec6a9a3a529affe5c33ac6279631795ad3b351be7381c02fc2c1837a540db8a05eab231501d8a4b907350138798834c53706384421ffe795474f382755dbe792445a02b995bf21318385475cf945fbe86a0e7d43a4d2f19a6e62e2394cd5252c8df0546bb051e609158cfcd83a36741c48d0bd6e7ea88aa9dc49fb0816f26f004f7c2f377e2dc873c1676aeea80adab67483d62b6aa362dd939ee37ededf69bd187e7a735c06a6a95beff047804e761f02ba9dbee034850bf33aac17e03d09612fa9e5713c53ea9f404a07344cf3b30fdc2bd53040396fe34c479a653766cf10c838dbced0a2be14ff6f34ebdd210b75dccb3f8a133fca9c9d69d5355bb7efd696c1d22472db666b408637b5c6bde543d37fbce0d6cc7aa698a9d55a6799166737c409c6d10ed65025dcfc47e7faf9dfc40ead8bf5a8e0b6b282267ad860fc1f5793a211c44576673973fdd93b17ec10aa07744ccb87e0a3c17f57cd5dc120ab8d2e76077b03294cdd84cd01e8e7c44d4440cb2c2139668d2027f0815a1fa90ef420af8bee9901a07df891164eb0fdc444f5139bf4bd56c1364f24e78776dbcc593e76d1a8c4ef0c494334da97ecb38d068aa8777851020e7b6e100d5e11a2983846878cd18a7155ea2e2df36a6ed01af6b730081ca0174d212ae5ac9fd7231155de618cfd3b94cfece425cd3402498cd5cfcee25041ea182cb0d2d2940eaacd93827fb94d36551dbf0741fa4a1e6088d5ca34d62ac7b9c025ea6acef1fceb0b30a1f094e8121944832fafb3c64d43f55f31811c458c4032fff8db73bb0cf34a911b365106a3c8b8bd584cb4f919b28a94858decff92662b283906f00b1730d87b3441d6d7cb7da3de97a6fdfed71c045edeece9893b22fc0e510f110f919822f86755ccf4d5e26db221607a098ee4e0052c64d18bc63e58ffb62ff6e22643322e57aea95b25feda468dac2e3d735f45dad6722bb49a5f4d7f2b8c71afbd19318d6ae668d96e6a278b78464a43d23dfb78f5a4f6255c245dafe53644f5c97f1f8725eebe25e513e8a48c099da77a8d97a53bf9cc306019285ec063049cadbf620b50332ae8f6fb35f82cf863111a1dbd7831315fedd23248586b2f2227538f8022cb4b613a0556fa0a3d1ea7b2a50cb72715d230de4805559c2d94d71a956e1c2e3b0051cf03913f9224d4a894c672c005c0955990c1405612829da87cd8e0494c66b9f0c855fda6a15ffeddadf05b1458381518935272164da3f20e87053e53c868a5cdf86f9b48c90aa8e71bf9715c3195e34b75d58ca4ffd89c38db059e4c73b74e2916f23d67cced8f5b0ede46fd4992947a313bc9b059ae4af9ef5e2eec6440ddfd2eedd73cd23c2d7559740a5d82488717923feb8a5f8bf9a069fce1221c1881839f370ca24640fb7505e38db4049ab1e36b8ca64a27d97391048336e6c62c1da2912f7c526b93aafaf1503ac5eca3d7bb7bfaf566a4083a5684c3a245f3ffbe02ea6f382c76766e8990f76e864762d3580141428814ffd9be7ed5c6629598a2df7c6307e239c1ead8d9642233dbfd1d60a3a91bcde0750778a74f8416427589e28fe5ef0f6d547cd7c6dd61c613814cd4b8722613911c2ef0da98fb9bb648dd0d3aaca6f545fd67b85bdb0a9d855974fb4a38928b31947e53e40f44026767f6f9ff3e9e3a0d3c9d85528d9032c201a43dcb7d2d55a0d3dd9a724fa6b2218b697c45aedfa857f0ac39c10b527dbb513a673851e9e59dd15d3d16e196f2c4e8157bed849d9dbbbff6033f5edce65e70fa0d59cd8ffc586647dd9b4925ac1bb3441d095a56fcc7c3f7a11463d911bd4847d24cf06ceb8de8055ab80a91b820d31ca119d61280defa427e28b2bf1b4b98f5e36f0ebce801accb54530016f5ac3611093d2539f7042e8d81290c7d6b9e9f64d33f858b66b2acc6778698c62d941f1806579eef03eae8d82882c4fcfc4783d567c4b23e376a8c86a43b566d94915ee276da1f6c2040bfc3d1a5d75022b19889ab4530023322dac4724db9e728c895bb43fedb7834b0164d131a66cf49c30cb187bb4f94a0bc9ae50a6e32d6ec998bf26c93b923deb5afa18b8add540efa46a40cceb7b52d5c4a0f234eff5f2ad6511f32d6c3aaa2e036c86926884dc888b8238b516a398d7647f8d118dd9b50ad9caa00ff87255cd9e7c146abd2366f4ea02d7548d31aa0ab12cde70f33404d629b4576b0242d4f27bb6d6edeb2581400b7eaaed0f560721cd89abc6b09e4cb33cd2c852a6bb0f328fd11c147e0c42b906e198c85e37f51c087bf92046ff34397bc31f602abe7f6fa5d97b7d7b15eb2d16bca83f15d05930c153f5cec251af0fc0586bfd6fceea4bdd90617aba9dcb4f764b6f3c82c9781102a6e42b76c49e5cb5468061e5d124bf50db3ade66ffdc315e5f65eed0a9958a9b78ef462ae7d11cf4cff417daa4ef2053972bbe7cff8fa6de650baeeb9dcc4ead4907c1486791a57c743eeb965bcfb2ab4025b0e499ce4745b4c597b794eec476e9aac786a8ab5307fa222b9efa436ca03dd4b5ea9006d5241da658e2cecd620b7723396529467fab81c6314288b72a1475c8ee261a10b9eacf27dd89a09bb1084e8745065a52cfc1623c8337e931c2202ebca0b47f0334c2dca7642aa58196960cabd1a6d9cdfded47b22e6dce03725c838d3f5dd81a09bdf8e7ef66f9765ef0fa84fc269798f85ee1ce46a13ede48d5e93681fab405699e1e8e5ce83d4e041892d6927b29f7", @typed={0x0, 0x137, 0x0, 0x0, @u64=0x6}, @nested={0x0, 0x6d, 0x0, 0x1, [@typed={0x0, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @nested={0x0, 0xbf, 0x0, 0x1, [@nested={0x0, 0x45}, @generic="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", @nested={0x0, 0x6b}, @nested={0x0, 0x135}, @typed={0x0, 0x144, 0x0, 0x0, @ipv6=@remote}, @typed={0x0, 0x55, 0x0, 0x0, @u64=0x9}, @nested={0x0, 0xba}]}, @nested={0x0, 0x99, 0x0, 0x1, [@nested={0x0, 0xd0}]}, @nested={0x0, 0x52, 0x0, 0x1, [@typed={0x0, 0x169, 0x0, 0x0, @ipv4=@local}, @generic="6f44d006dc4e11b61fa9bc094d60d0d8cdaaafa585451000920b5cc44111fc85c3331da6fa1e74f19db6d9ad121dbe583be6a0d3fc9488a9a3ffcf4f63d532c72d2235d3f8f2e16641a3a93c661293fcbcd337a3fb0d116ac7b60ac1a877e8bf91bfe885424c3474fc259934fe693f755a6428a6f340160ddeb41130199ef01eaee9d21671098d8e89839cd3a7061df637d4303c8a04c3ad937ecdd22675f989fe4b913469b9e46c97a7dad04667bacf033da9c7700f66977e2d", @generic="84f06ac5fb9efb46ff8136b5a067646bc248819f3a392698c52f8eb35c1b3de9b27d4b34abd63499db3429fda2bd85232451522f796d9a243b323593956e895e6031a0c3ac74ed6559d50ff57f2ba4a1c51af7b52eecec1a42db378800628723f00c5b1ebf9620e46d4660f151ddfc36cae1d105fd664551b24b32c86e03937acacace9684eabd181a28dc5177a7f398b8b4042cb9301f2b32f4c9156c8d", @generic="e7b5dcb1cc19095f7e202bcc46d579a7f3435892098d98231649b8d38c5597e4ddb5b9fc40d051a336367499f87033b1da7c16a6656c483c384194f28460218b4e64028dd7291b5272749751b349c6dbebd6a9bdfefd3d849156339bd97ca73be35cee12aa02546d81f4a38dde51ee278ad4192d96cbc5fc233f8d0b3ba0b16f70b791e07f8ea3a7ae08d3292f17ebef3c39ef7081b7a2f88ce2a2c0ddcd8700d423bff95c178e9a7b7dc77e28c36486a995225b52e74cba2a0e8ef8edb3cf8bd5f286c61dc351393780bf880f663754359ae8b13d3131e651cf1c"]}]}, @typed={0x0, 0x33, 0x0, 0x0, @uid}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7m52.639468956s ago: executing program 2 (id=5447): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 7m52.03650853s ago: executing program 2 (id=5449): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 7m51.454840167s ago: executing program 2 (id=5453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0xfffffffd, 0x4) 7m50.205901406s ago: executing program 2 (id=5461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 7m46.928122526s ago: executing program 35 (id=5461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 6m39.08765569s ago: executing program 8 (id=5879): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f000bac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 6m37.265042348s ago: executing program 9 (id=5888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f00000002c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x1, 0x4, 0x9, 0x68ba, 0x80, 0x9, 0x7, 0x4, 0x2, 0x81, 0x7, 0x1, 0x0, 0x6874, 0x8, 0x3, 0x4, 0x6, 0xf, 0x8, 0x9, 0x2ec1, 0x3, 0xfffffffe, 0x8, 0x0, 0x3496c76b, 0x0, 0x2, 0x3, 0xb465, 0xfffff801, 0x0, 0x7fff, 0x3, 0x2, 0x5, 0x200, 0x5, 0x1, 0x7ff, 0x3, 0x0, 0x4, 0x1000, 0x1, 0xaaf, 0x5, 0xb, 0x0, 0xffff, 0xda5, 0x9, 0x7, 0xb, 0x800, 0xf2, 0x3, 0xfff, 0x6, 0xe0000, 0xd, 0xe, 0x6, 0xffff, 0x5, 0x883, 0x2, 0x7fff, 0x6, 0xa11, 0x7, 0x400, 0x810, 0x89d, 0x2, 0x3, 0x2, 0x0, 0x9, 0x6, 0x80000001, 0xb6b, 0x6, 0x7f, 0x0, 0x0, 0x3, 0x8, 0x9, 0x9, 0x6, 0x895, 0x10000, 0x1ed, 0xffffff1b, 0x2, 0x9, 0x2, 0x1, 0xd, 0x5, 0x8, 0xffff, 0x8, 0x1000, 0x9, 0x80, 0x169, 0x6c, 0x0, 0xffff6721, 0x5, 0x100, 0x5, 0x4, 0x8e, 0x7ff, 0x2, 0x7, 0x8, 0xfffffff7, 0x400000, 0x20000000, 0x5, 0x8b78, 0xffff]}}) 6m37.229437053s ago: executing program 3 (id=5889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 6m36.974140651s ago: executing program 8 (id=5891): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x12c, 0x0) 6m36.533309419s ago: executing program 9 (id=5893): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x20}) 6m36.332258961s ago: executing program 8 (id=5894): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') 6m36.205574493s ago: executing program 7 (id=5895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2300000008000000020000000300000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) 6m36.106664111s ago: executing program 6 (id=5896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0xa, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20) 6m35.82735932s ago: executing program 3 (id=5897): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) 6m35.640655571s ago: executing program 7 (id=5899): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x140f, 0x1, 0x800008, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) 6m35.455270926s ago: executing program 6 (id=5900): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x3e) 6m35.272306815s ago: executing program 0 (id=5901): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0) ioctl$TCSETSF(r0, 0x5433, 0x0) 6m35.171287763s ago: executing program 3 (id=5902): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x1, 0x1, 0x100, 0x8000, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @empty}}}}) 6m35.152723664s ago: executing program 8 (id=5903): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0xecdf, 0xfffc, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x54, 0xffffffff}, 0x70bd2a, 0x800003, 0x2, 0x2, 0x0, 0x57}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x4004004) 6m35.129825092s ago: executing program 7 (id=5904): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1000, @mcast2, 0x401, 0x4}, 0x20) 6m34.999789573s ago: executing program 6 (id=5905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff00000000000000000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) 6m34.890028696s ago: executing program 9 (id=5906): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f00000000c0)=0x34) 6m34.746490021s ago: executing program 0 (id=5907): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'mountproto=tcp'}]}) 6m34.590530809s ago: executing program 6 (id=5908): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x1cb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}}, [0x8, 0x2, 0x3, 0x800, 0x80000001, 0x2, 0x3, 0x800, 0x0, 0x0, 0x9, 0x1ff, 0xffffffffffffffa9, 0x6, 0x9]}, &(0x7f0000000380)=0x100) 6m34.582521739s ago: executing program 3 (id=5909): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6176000000000000000000000000000000000000000000000000000000000002"], 0x48) 6m34.314166213s ago: executing program 7 (id=5910): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 6m34.248205402s ago: executing program 0 (id=5911): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m34.156511155s ago: executing program 6 (id=5912): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ffffffff0000000003000000850000002c000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m34.022254408s ago: executing program 0 (id=5913): r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40010001, 0x0) 6m33.919388862s ago: executing program 0 (id=5914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, 0x0, 0x0, 0x28}, 0x20) 6m33.752956493s ago: executing program 9 (id=5915): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x8, 0x0) 6m33.678052891s ago: executing program 3 (id=5916): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT], 0x1, 0x17d, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 6m33.540023298s ago: executing program 8 (id=5917): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x11}}) 6m33.335050934s ago: executing program 7 (id=5918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000002c0)="5c00000030000506000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000180005801400018008000100000000000800030064000000", 0x5c, 0x0, 0x0, 0x0) 6m33.193994369s ago: executing program 9 (id=5919): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x14, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) 6m33.054180213s ago: executing program 6 (id=5920): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99800300040000002c0012800e00010069703665727370616e00000018000280040012000500160001000000080015009b950037"], 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 6m32.240134359s ago: executing program 8 (id=5921): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES16], 0x1, 0x223, &(0x7f0000000940)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x3fffffff}}, 0x100) 6m26.613706502s ago: executing program 0 (id=5922): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) 6m25.811131027s ago: executing program 3 (id=5923): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x33, 0x10, 0x0, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x5}}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}]}, 0x50}}, 0x0) 6m24.043825031s ago: executing program 9 (id=5924): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x0) 6m23.22777748s ago: executing program 7 (id=5925): open$dir(&(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x34000, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05405a0c"], 0x8) 6m14.472069261s ago: executing program 36 (id=5920): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99800300040000002c0012800e00010069703665727370616e00000018000280040012000500160001000000080015009b950037"], 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 6m7.075983505s ago: executing program 37 (id=5922): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) 5m58.503820097s ago: executing program 38 (id=5921): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES16], 0x1, 0x223, &(0x7f0000000940)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x3fffffff}}, 0x100) 5m46.607513884s ago: executing program 39 (id=5924): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x0) 5m38.144792328s ago: executing program 40 (id=5923): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x33, 0x10, 0x0, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x5}}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}]}, 0x50}}, 0x0) 5m32.588131879s ago: executing program 41 (id=5925): open$dir(&(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x34000, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05405a0c"], 0x8) 2m39.392535424s ago: executing program 2 (id=5929): r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x4, 0x42100) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0585604, &(0x7f0000000640)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=5926): r0 = fanotify_init(0x8, 0x101000) write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c462200001c"], 0x40) kernel console output (not intermixed with test programs): ng as an active interface with an up link [ 595.925071][T17502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.999200][T17730] netlink: 'syz.3.5161': attribute type 8 has an invalid length. [ 596.168112][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 596.256957][T17739] loop3: detected capacity change from 0 to 64 [ 596.332262][ T24] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 596.334632][T17742] tmpfs: Bad value for 'mpol' [ 596.372589][ T24] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 596.401786][T17502] team0: Port device team_slave_0 added [ 596.409742][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.441291][T17502] team0: Port device team_slave_1 added [ 596.461261][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.501986][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.540146][ T24] usb 3-1: Product: syz [ 596.552136][ T24] usb 3-1: Manufacturer: syz [ 596.578329][ T24] usb 3-1: SerialNumber: syz [ 596.640861][ T24] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 596.689558][T17502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.718720][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.762246][ T4925] Bluetooth: hci2: command tx timeout [ 596.807244][T17502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.838933][T17502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.849218][ T24] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 596.865113][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.896052][T17502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.954524][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 597.010939][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 597.064503][ T24] usb 3-1: USB disconnect, device number 70 [ 597.194167][ T7255] udevd[7255]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.351643][T17765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5171'. [ 597.365651][T17765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5171'. [ 597.377223][T17765] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 597.405951][T17502] hsr_slave_0: entered promiscuous mode [ 597.412719][T17502] hsr_slave_1: entered promiscuous mode [ 597.493726][ T4925] Bluetooth: hci5: command tx timeout [ 597.556505][ T1166] bridge_slave_1: left allmulticast mode [ 597.573474][ T1166] bridge_slave_1: left promiscuous mode [ 597.594177][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.623298][T17771] loop3: detected capacity change from 0 to 512 [ 597.637701][T17771] EXT4-fs: Ignoring removed oldalloc option [ 597.645539][ T1166] bridge_slave_0: left allmulticast mode [ 597.660187][T17771] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 597.675194][ T1166] bridge_slave_0: left promiscuous mode [ 597.699697][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.735995][T17771] EXT4-fs (loop3): 1 truncate cleaned up [ 597.745435][T17771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.820730][ T6045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.042837][T17784] loop0: detected capacity change from 0 to 64 [ 598.221703][ T1166] team0: Port device bridge0 removed [ 598.298315][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.315116][ T1166] bond_slave_0: left promiscuous mode [ 598.329051][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.348693][ T1166] bond_slave_1: left promiscuous mode [ 598.355220][ T1166] bond0 (unregistering): Released all slaves [ 598.375452][T17793] loop0: detected capacity change from 0 to 2048 [ 598.440267][T17793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.720883][ T4925] Bluetooth: hci2: command tx timeout [ 598.934304][T17805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.991463][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 599.406957][ T856] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 599.472557][T17821] loop3: detected capacity change from 0 to 64 [ 599.483271][ T4925] Bluetooth: hci5: command tx timeout [ 599.568653][ T856] usb 3-1: Using ep0 maxpacket: 16 [ 599.577861][ T856] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 599.599866][ T856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.615176][ T856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 599.627783][ T856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.638187][ T856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 599.652421][ T856] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 599.652446][ T1166] hsr_slave_0: left promiscuous mode [ 599.666419][ T856] usb 3-1: Manufacturer: syz [ 599.669609][ T856] usb 3-1: config 0 descriptor?? [ 599.687576][ T1166] hsr_slave_1: left promiscuous mode [ 599.696197][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.723512][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.907737][ T856] usb 3-1: USB disconnect, device number 71 [ 599.943687][T17827] loop0: detected capacity change from 0 to 4096 [ 599.958166][T17827] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 600.031336][T17827] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 600.042223][T17827] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 600.063075][T17827] ntfs3(loop0): ino=1e, mi_enum_attr [ 600.068838][T17827] ntfs3(loop0): ino=1e, mi_enum_attr [ 600.281672][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 600.315277][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 600.703724][ T4925] Bluetooth: hci2: command tx timeout [ 601.108095][T17836] loop0: detected capacity change from 0 to 40427 [ 601.142060][T17836] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 601.169357][T17836] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 601.246742][T17836] F2FS-fs (loop0): invalid crc value [ 601.262993][T17836] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 601.454698][ T4925] Bluetooth: hci5: command tx timeout [ 601.547240][T17502] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 601.619038][T17502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 601.641780][T17502] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 601.706592][T17502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 601.713157][T17836] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 601.768028][T17836] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 601.781402][T17502] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 601.793135][T17836] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 601.830125][T17502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 601.943840][T16189] syz-executor: attempt to access beyond end of device [ 601.943840][T16189] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 601.987854][T16189] CPU: 1 UID: 0 PID: 16189 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 601.987893][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 601.987908][T16189] Call Trace: [ 601.987919][T16189] [ 601.987930][T16189] dump_stack_lvl+0xe8/0x150 [ 601.987974][T16189] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 601.988019][T16189] f2fs_write_end_io+0x1215/0x16f0 [ 601.988050][T16189] ? blkg_put+0x22/0x240 [ 601.988101][T16189] __submit_merged_bio+0x258/0x6a0 [ 601.988138][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.988167][T16189] ? rcu_is_watching+0x16/0xb0 [ 601.988200][T16189] __submit_merged_write_cond+0x3c9/0x4e0 [ 601.988248][T16189] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 601.988302][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.988341][T16189] f2fs_write_data_pages+0x2a27/0x36f0 [ 601.988366][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.988402][T16189] ? __lock_acquire+0x683/0x2cf0 [ 601.988478][T16189] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 601.988502][T16189] ? is_bpf_text_address+0x26/0x2b0 [ 601.988544][T16189] ? arch_stack_walk+0xfb/0x150 [ 601.988602][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.988631][T16189] ? add_lock_to_list+0xc7/0x100 [ 601.988661][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.988691][T16189] ? __lock_acquire+0x13e8/0x2cf0 [ 601.988758][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.988788][T16189] ? do_raw_spin_lock+0x12b/0x2f0 [ 601.988826][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.988860][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.988890][T16189] ? do_raw_spin_unlock+0xf5/0x200 [ 601.988922][T16189] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 601.988950][T16189] do_writepages+0x338/0x560 [ 601.988989][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.989021][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.989056][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.989085][T16189] ? do_raw_spin_unlock+0xf5/0x200 [ 601.989122][T16189] filemap_fdatawrite+0x1e9/0x2f0 [ 601.989165][T16189] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 601.989244][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.989277][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.989312][T16189] ? do_raw_spin_unlock+0xf5/0x200 [ 601.989349][T16189] f2fs_sync_dirty_inodes+0x30e/0x830 [ 601.989400][T16189] f2fs_write_checkpoint+0xa3d/0x2710 [ 601.989430][T16189] ? __lock_acquire+0x683/0x2cf0 [ 601.989504][T16189] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 601.989532][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.989624][T16189] kill_f2fs_super+0x2dd/0x700 [ 601.989663][T16189] ? __pfx_kill_f2fs_super+0x10/0x10 [ 601.989705][T16189] ? call_rcu+0x64d/0x8b0 [ 601.989732][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.989761][T16189] ? lockdep_hardirqs_on+0x7b/0x110 [ 601.989798][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.989844][T16189] deactivate_locked_super+0xbc/0x110 [ 601.989877][T16189] cleanup_mnt+0x3d3/0x460 [ 601.989916][T16189] task_work_run+0x1d9/0x270 [ 601.989960][T16189] ? __pfx_task_work_run+0x10/0x10 [ 601.990013][T16189] exit_to_user_mode_loop+0x204/0x770 [ 601.990050][T16189] ? srso_alias_return_thunk+0x5/0xfbef5 [ 601.990079][T16189] ? rcu_is_watching+0x16/0xb0 [ 601.990112][T16189] do_syscall_64+0x328/0x520 [ 601.990148][T16189] ? trace_irq_disable+0x3b/0x140 [ 601.990185][T16189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.990217][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.990243][T16189] RIP: 0033:0x7ff5c0f9f317 [ 601.990267][T16189] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 601.990288][T16189] RSP: 002b:00007fff2a11fc18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 601.990315][T16189] RAX: 0000000000000000 RBX: 00007ff5c1034474 RCX: 00007ff5c0f9f317 [ 601.990334][T16189] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2a11fcd0 [ 601.990351][T16189] RBP: 00007fff2a11fcd0 R08: 00007fff2a120cd0 R09: 00000000ffffffff [ 601.990369][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2a120d60 [ 601.990387][T16189] R13: 00007ff5c1034474 R14: 00000000000953ac R15: 00007fff2a120da0 [ 601.990435][T16189] [ 602.022102][T17502] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 602.026781][T16189] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 602.235707][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 602.476409][T17502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 602.598838][T17692] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.601630][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 602.606258][T17692] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.625253][T17692] bridge_slave_0: entered allmulticast mode [ 602.625625][ T9] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 602.638756][T17692] bridge_slave_0: entered promiscuous mode [ 602.674841][ T4925] Bluetooth: hci2: command tx timeout [ 602.683122][ T9] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 602.704063][ T9] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 602.731301][T17692] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.736820][ T9] usb 3-1: config 0 has no interface number 1 [ 602.748494][T17692] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.764267][ T9] usb 3-1: config 0 has no interface number 2 [ 602.772648][T17692] bridge_slave_1: entered allmulticast mode [ 602.789194][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.802146][T17692] bridge_slave_1: entered promiscuous mode [ 602.836179][ T9] usb 3-1: config 0 descriptor?? [ 602.984756][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 603.053987][T17904] loop3: detected capacity change from 0 to 64 [ 603.062092][ T9] qcserial 3-1:0.6: Qualcomm USB modem converter detected [ 603.135613][ T1166] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.348940][T17692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.363174][T17908] loop3: detected capacity change from 0 to 256 [ 603.366781][ T6214] usb 3-1: USB disconnect, device number 72 [ 603.381701][ T6214] qcserial 3-1:0.6: device disconnected [ 603.409027][T17692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.436529][ T4925] Bluetooth: hci5: command tx timeout [ 603.497839][T17712] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.540955][T17712] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.560824][T17712] bridge_slave_0: entered allmulticast mode [ 603.575521][T17712] bridge_slave_0: entered promiscuous mode [ 603.648692][T17916] loop3: detected capacity change from 0 to 256 [ 603.656890][T17692] team0: Port device team_slave_0 added [ 603.747753][ T1166] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.810484][T17712] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.825322][T17712] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.847359][T17712] bridge_slave_1: entered allmulticast mode [ 603.874865][T17712] bridge_slave_1: entered promiscuous mode [ 603.926913][T17692] team0: Port device team_slave_1 added [ 604.114233][T17712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.220296][T17926] loop0: detected capacity change from 0 to 64 [ 604.274381][T17926] hfs: get root inode failed [ 604.316968][ T1166] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.769122][T17942] loop3: detected capacity change from 0 to 128 [ 605.194106][T17712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.272646][T17692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.292785][T17692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.331020][T17692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.366098][T17692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.374033][T17692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.410843][T17692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.538541][ T1166] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.612290][T17960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.685448][T17712] team0: Port device team_slave_0 added [ 605.748575][T17712] team0: Port device team_slave_1 added [ 606.058298][T17692] hsr_slave_0: entered promiscuous mode [ 606.095420][T17692] hsr_slave_1: entered promiscuous mode [ 606.118796][T17692] debugfs: 'hsr0' already exists in 'hsr' [ 606.132458][T17692] Cannot create hsr debugfs directory [ 606.168810][T17712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.209676][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.258881][T17712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.294639][T17712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.310246][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.350879][T17712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.365910][T17984] loop2: detected capacity change from 0 to 128 [ 606.397059][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5246'. [ 606.425061][T17984] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 607.049479][T17712] hsr_slave_0: entered promiscuous mode [ 607.071764][T17712] hsr_slave_1: entered promiscuous mode [ 607.100285][T17712] debugfs: 'hsr0' already exists in 'hsr' [ 607.113184][T17712] Cannot create hsr debugfs directory [ 607.161797][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 607.468937][ T1166] bridge0: port 3(team0) entered disabled state [ 607.476336][ T6155] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 607.489114][ T1166] bridge_slave_1: left allmulticast mode [ 607.503356][ T1166] bridge_slave_1: left promiscuous mode [ 607.520219][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.541032][ T1166] bridge_slave_0: left allmulticast mode [ 607.559187][ T1166] bridge_slave_0: left promiscuous mode [ 607.591696][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.630030][ T6155] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 607.650377][ T6155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.665335][ T6155] usb 4-1: Product: syz [ 607.671845][ T6155] usb 4-1: Manufacturer: syz [ 607.681018][T18018] loop2: detected capacity change from 0 to 256 [ 607.687427][ T6155] usb 4-1: SerialNumber: syz [ 607.755556][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 607.914817][T18009] loop0: detected capacity change from 0 to 32768 [ 608.412130][T18026] loop2: detected capacity change from 0 to 256 [ 608.510156][T18026] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x614dc512, utbl_chksum : 0xe619d30d) [ 608.607717][T18028] ieee802154 phy0 wpan0: encryption failed: -22 [ 608.677024][T18026] exFAT-fs (loop2): valid_size(9000) is greater than size(0) [ 608.927641][T18030] ubi0: attaching mtd0 [ 608.959795][T18030] ubi0: scanning is finished [ 608.970753][T18030] ubi0: empty MTD device detected [ 611.207006][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.319075][ T6170] usb 4-1: USB disconnect, device number 94 [ 611.331854][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 611.344294][ T24] ath9k_htc: Failed to initialize the device [ 611.372269][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.375119][ T6170] usb 4-1: ath9k_htc: USB layer deinitialized [ 611.398078][ T1166] bond0 (unregistering): Released all slaves [ 611.789899][T18030] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 611.824499][T18030] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 611.845200][T18047] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5275'. [ 611.855633][T18030] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 611.863305][T18030] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 611.871200][T18030] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 611.903428][T18030] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 611.945075][T18030] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3848192659 [ 611.983674][T18030] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 612.021498][T18044] ubi0: background thread "ubi_bgt0d" started, PID 18044 [ 612.039149][T18050] loop3: detected capacity change from 0 to 512 [ 612.077336][T18050] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 612.231681][T18050] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 612.507549][T18058] loop0: detected capacity change from 0 to 128 [ 612.611969][T18058] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.627227][T18064] loop3: detected capacity change from 0 to 512 [ 612.650080][T18058] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 612.727773][T18064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.778879][T17502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.798413][T18064] ext4 filesystem being mounted at /817/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 612.952757][T16189] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.962856][ T6045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.003787][ T1166] hsr_slave_0: left promiscuous mode [ 613.017464][ T1166] hsr_slave_1: left promiscuous mode [ 613.056871][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.099493][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.136999][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.175768][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.253671][ T1166] veth1_macvtap: left promiscuous mode [ 613.274647][ T1166] veth0_macvtap: left promiscuous mode [ 613.295610][ T1166] veth1_vlan: left promiscuous mode [ 613.312390][ T1166] veth0_vlan: left promiscuous mode [ 613.331045][T18085] loop3: detected capacity change from 0 to 512 [ 613.453677][T18085] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 613.487950][T18085] FAT-fs (loop3): Filesystem has been set read-only [ 613.509804][T18085] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 613.535573][T18085] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 613.652887][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 613.662410][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 613.769759][T18093] loop0: detected capacity change from 0 to 4096 [ 613.872907][T18093] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 613.916843][T18093] ntfs3(loop0): Failed to load $Extend (-22). [ 613.929750][T18093] ntfs3(loop0): Failed to initialize $Extend. [ 613.963362][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5291'. [ 613.972632][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5291'. [ 614.280204][T18103] syz.0.5294 (18103) used greatest stack depth: 18848 bytes left [ 614.316964][ T1166] team_slave_1 (unregistering): left promiscuous mode [ 614.343159][ T1166] team_slave_1 (unregistering): left allmulticast mode [ 614.356449][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 614.387781][T18107] tmpfs: Unknown parameter 'no' [ 614.398884][ T1166] team_slave_0 (unregistering): left promiscuous mode [ 614.420063][ T1166] team_slave_0 (unregistering): left allmulticast mode [ 614.430257][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 614.584063][T18114] loop3: detected capacity change from 0 to 4096 [ 614.704991][ T6214] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 614.846665][T18084] netlink: 'syz.2.5286': attribute type 4 has an invalid length. [ 614.862694][ T6214] usb 1-1: Using ep0 maxpacket: 16 [ 614.879095][ T6214] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 614.895465][ T6214] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD [ 614.905255][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 614.909119][ T6214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 198, changing to 11 [ 614.926154][ T6214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 42683, setting to 1024 [ 614.948160][ T6214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.960329][T18118] loop3: detected capacity change from 0 to 4096 [ 614.966277][ T6214] usb 1-1: Product: syz [ 614.978835][ T6214] usb 1-1: Manufacturer: syz [ 615.010947][ T6214] usb 1-1: SerialNumber: syz [ 615.027203][ T6214] usb 1-1: config 0 descriptor?? [ 615.036998][T18112] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 615.098594][ T6214] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 615.122000][T17502] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.204317][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.211572][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.315440][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.322683][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.370243][ T24] usb 1-1: USB disconnect, device number 84 [ 615.405879][T17692] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 615.462563][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.505336][T17692] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 615.549991][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.566046][T17692] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 615.604893][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.626561][T17692] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 615.664287][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.083354][T17712] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 616.130900][T17712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.156800][T17712] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 616.202116][T17712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.270676][T17712] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 616.303218][T17712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.318240][T18160] loop3: detected capacity change from 0 to 512 [ 616.346048][T17712] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 616.375496][T17712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.413281][T18160] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 616.441477][T18160] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 616.468683][T18160] System zones: 0-1, 15-15, 18-18, 34-34 [ 616.475380][T18160] EXT4-fs (loop3): orphan cleanup on readonly fs [ 616.495215][T18160] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 616.507131][T18160] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 616.522179][T18160] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 616.545298][T18160] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.5312: bad orphan inode 16 [ 616.555664][T18160] loop3: lost filesystem error report for type 5 error -117 [ 616.556115][T18160] ext4_test_bit(bit=15, block=18) = 1 [ 616.563500][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 616.563525][ C0] EXT4-fs (loop3): initial error at time 2000001698: ext4_orphan_get:1429 [ 616.563555][ C0] EXT4-fs (loop3): last error at time 2000001698: ext4_orphan_get:1429 [ 616.613670][T18160] is_bad_inode(inode)=0 [ 616.617873][T18160] NEXT_ORPHAN(inode)=0 [ 616.641258][T18160] max_ino=32 [ 616.652798][T18160] i_nlink=2 [ 616.679570][T18160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 616.806771][T18160] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 616.837994][T18181] mmap: syz.2.5316 (18181) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 616.846123][T17692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.961398][ T6045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.128593][T17692] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.218562][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.225821][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.295200][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.302483][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.357184][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 617.399078][T17712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.439963][ T856] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 617.449458][T18194] loop0: detected capacity change from 0 to 2048 [ 617.561560][T18200] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 617.581241][T17712] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.619842][ T856] usb 4-1: Using ep0 maxpacket: 16 [ 617.650194][ T856] usb 4-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice=1b.ca [ 617.689001][ T856] usb 4-1: config 0 has an invalid interface number: 80 but max is 0 [ 617.692707][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.704490][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.717793][ T856] usb 4-1: config 0 has no interface number 0 [ 617.729875][T18200] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 617.741843][ T856] usb 4-1: config 0 interface 80 has no altsetting 0 [ 617.757707][T18200] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 617.768914][ T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.790606][ T856] usb 4-1: Product: syz [ 617.806030][ T856] usb 4-1: Manufacturer: syz [ 617.827099][T18200] Remounting filesystem read-only [ 617.827657][ T856] usb 4-1: SerialNumber: syz [ 617.851226][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.858442][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.879177][ T856] usb 4-1: config 0 descriptor?? [ 617.923300][T16189] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 617.970535][T17502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.130293][ T856] keyspan 4-1:0.80: Keyspan - (without firmware) converter detected [ 618.203847][ T856] usb 4-1: USB disconnect, device number 95 [ 618.240539][ T856] keyspan 4-1:0.80: device disconnected [ 618.309190][T18216] netlink: 'syz.2.5325': attribute type 1 has an invalid length. [ 619.203508][ T6213] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 619.396756][ T6213] usb 3-1: unable to get BOS descriptor or descriptor too short [ 619.417522][T17502] veth0_vlan: entered promiscuous mode [ 619.425772][ T6213] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 619.467368][ T6213] usb 3-1: config 1 has an invalid interface number: 97 but max is 1 [ 619.492313][ T6213] usb 3-1: config 1 has no interface number 1 [ 619.495862][T17502] veth1_vlan: entered promiscuous mode [ 619.520215][ T6213] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 619.581080][ T6213] usb 3-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 619.627715][ T6213] usb 3-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 619.628865][T17502] veth0_macvtap: entered promiscuous mode [ 619.669266][ T6213] usb 3-1: config 1 interface 0 has no altsetting 0 [ 619.692036][ T6213] usb 3-1: config 1 interface 97 has no altsetting 0 [ 619.712703][ T6213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.731379][T17502] veth1_macvtap: entered promiscuous mode [ 619.738546][ T6213] usb 3-1: Product: syz [ 619.761329][ T6213] usb 3-1: Manufacturer: syz [ 619.789300][ T6213] usb 3-1: SerialNumber: syz [ 619.816989][T17502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.876600][T17502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.934389][T17692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.011060][T18273] loop3: detected capacity change from 0 to 64 [ 620.053502][T17712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.137723][ T6213] smsusb:smsusb_probe: board id=8, interface number 0 [ 620.175702][ T6213] smsusb:smsusb_probe: board id=8, interface number 97 [ 620.228369][ T6213] usb 3-1: USB disconnect, device number 73 [ 620.465566][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 620.555189][ T38] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.698985][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.849367][T16858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.903366][T16858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.003567][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.044068][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.153711][ T6155] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 621.178439][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.223917][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.337890][ T6155] usb 4-1: Using ep0 maxpacket: 16 [ 621.351944][ T6155] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 621.388972][ T6155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.402278][ T6213] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 621.407324][ T6155] usb 4-1: Product: syz [ 621.430537][ T6155] usb 4-1: Manufacturer: syz [ 621.451870][ T6155] usb 4-1: SerialNumber: syz [ 621.462312][T17692] veth0_vlan: entered promiscuous mode [ 621.478896][ T6155] usb 4-1: config 0 descriptor?? [ 621.521647][ T6155] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 621.542300][T17692] veth1_vlan: entered promiscuous mode [ 621.567248][T17712] veth0_vlan: entered promiscuous mode [ 621.581187][ T6213] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 621.613952][ T6213] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.638261][T17712] veth1_vlan: entered promiscuous mode [ 621.647592][ T6213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.673693][ T6213] usb 3-1: Product: syz [ 621.690978][ T6213] usb 3-1: Manufacturer: syz [ 621.705742][ T6213] usb 3-1: SerialNumber: syz [ 621.747993][T17692] veth0_macvtap: entered promiscuous mode [ 621.795886][T17692] veth1_macvtap: entered promiscuous mode [ 621.828433][T18296] loop0: detected capacity change from 0 to 32768 [ 621.857743][T18296] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5340 (18296) [ 621.915947][ T6155] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 621.930308][T18296] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 621.957851][ T6155] visor 4-1:0.0: probe with driver visor failed with error -71 [ 621.965907][T17712] veth0_macvtap: entered promiscuous mode [ 622.004624][ T6155] usb 4-1: USB disconnect, device number 96 [ 622.018463][T17692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.032773][T18296] BTRFS info (device loop0): using crc32c checksum algorithm [ 622.074571][T17712] veth1_macvtap: entered promiscuous mode [ 622.115256][T17692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.166936][ T6213] snd-usb-6fire 3-1:1.0: can't set first interface. [ 622.176229][ T6213] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 622.185784][ T1026] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.186011][ T1026] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.186167][ T1026] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.186500][ T1026] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.216597][T18296] BTRFS info (device loop0): setting nodatasum [ 622.231455][ T6213] usb 3-1: USB disconnect, device number 74 [ 622.245813][T18296] BTRFS info (device loop0): turning on sync discard [ 622.252600][T18296] BTRFS info (device loop0): enabling free space tree [ 622.260503][T18296] BTRFS info (device loop0): enabling auto defrag [ 622.264287][T17712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.408968][T17712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.494744][T16189] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 622.739791][T18339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5347'. [ 622.864339][T16858] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.912959][T16858] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.976563][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.037373][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.262008][ T38] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.263121][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.354790][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.706009][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.716312][T16858] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.740460][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.843529][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 623.877136][T18360] loop3: detected capacity change from 0 to 64 [ 623.999365][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.000467][T18360] syz.3.5354: attempt to access beyond end of device [ 624.000467][T18360] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 624.037631][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.174889][T18337] loop6: detected capacity change from 0 to 32768 [ 624.227678][T18337] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5345 (18337) [ 624.337735][ T30] audit: type=1326 audit(2000001706.961:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18365 comm="syz.0.5356" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ffc0000 [ 624.420441][T18337] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 624.495325][ T30] audit: type=1326 audit(2000001706.961:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18365 comm="syz.0.5356" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ffc0000 [ 624.527310][T18337] BTRFS info (device loop6): using crc32c checksum algorithm [ 624.585080][T18373] netlink: NAT attribute has 8 unknown bytes [ 624.625575][T18373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.642109][ T30] audit: type=1326 audit(2000001706.992:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18365 comm="syz.0.5356" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ffc0000 [ 624.736993][T18374] loop7: detected capacity change from 0 to 16 [ 624.762279][ T30] audit: type=1326 audit(2000001706.992:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18365 comm="syz.0.5356" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ffc0000 [ 624.902475][ T30] audit: type=1326 audit(2000001706.992:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18365 comm="syz.0.5356" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ffc0000 [ 625.033017][T18337] BTRFS info (device loop6): setting nodatasum [ 625.088217][T18337] BTRFS info (device loop6): setting nodatacow [ 625.122807][T18337] BTRFS info (device loop6): disabling tree log [ 625.151424][T18337] BTRFS info (device loop6): turning on async discard [ 625.197772][T18337] BTRFS info (device loop6): enabling free space tree [ 625.222222][T18403] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 625.258339][T18337] BTRFS info (device loop6): max_inline set to 0 [ 625.342005][T18408] loop7: detected capacity change from 0 to 256 [ 625.511178][T17502] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 625.636787][T18417] loop3: detected capacity change from 0 to 256 [ 625.975548][T18425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5372'. [ 626.070368][T18425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5372'. [ 626.691260][T18441] loop7: detected capacity change from 0 to 4096 [ 626.707005][ T856] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 626.789978][T18450] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5382'. [ 626.810363][T18453] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 626.839856][T18451] loop0: detected capacity change from 0 to 512 [ 626.864087][T18451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 626.874720][ T856] usb 4-1: unable to get BOS descriptor or descriptor too short [ 626.894675][T18451] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 626.923626][ T856] usb 4-1: not running at top speed; connect to a high speed hub [ 626.963769][ T856] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 626.964365][T18451] EXT4-fs (loop0): 1 truncate cleaned up [ 626.991121][T18451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.071163][T18458] loop8: detected capacity change from 0 to 512 [ 627.093772][ T856] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.170811][ T856] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.197312][T16189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.209328][ T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.217378][T18461] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 627.247956][T18458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.333392][T18458] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.340912][ T856] usb 4-1: Product: syz [ 627.366314][ T6041] Bluetooth: hci5: command 0x0405 tx timeout [ 627.427512][ T856] usb 4-1: Manufacturer: syz [ 627.462587][T17712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.481849][ T856] usb 4-1: SerialNumber: syz [ 627.600485][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5391'. [ 627.642710][ T30] audit: type=1326 audit(2000001710.425:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.2.5389" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59bd9e0d9 code=0x7ffc0000 [ 627.659597][T18473] netlink: 59 bytes leftover after parsing attributes in process `syz.6.5391'. [ 627.803601][ T30] audit: type=1326 audit(2000001710.425:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.2.5389" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59bd9e0d9 code=0x7ffc0000 [ 627.837170][ T856] usb 4-1: unit 65 not found! [ 627.859592][ T856] usb 4-1: unit 0 not found! [ 627.952322][ T30] audit: type=1326 audit(2000001710.477:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.2.5389" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59bd9e0d9 code=0x7ffc0000 [ 628.027640][ T30] audit: type=1326 audit(2000001710.477:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.2.5389" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59bd9e0d9 code=0x7ffc0000 [ 628.141136][ T30] audit: type=1326 audit(2000001710.498:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.2.5389" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa59bd9e0d9 code=0x7ffc0000 [ 628.164121][ T856] usb 4-1: USB disconnect, device number 97 [ 628.312035][ T7255] udevd[7255]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.726858][ T856] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 629.166771][ T856] usb 9-1: Using ep0 maxpacket: 16 [ 629.240071][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5408'. [ 629.453092][ T856] usb 9-1: unable to get BOS descriptor or descriptor too short [ 629.495924][ T856] usb 9-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 629.692605][ T856] usb 9-1: config 1 has an invalid interface number: 151 but max is 0 [ 629.746327][ T856] usb 9-1: config 1 has no interface number 0 [ 629.790385][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 629.795858][ T856] usb 9-1: config 1 interface 151 has no altsetting 0 [ 629.973603][ T856] usb 9-1: string descriptor 0 read error: -22 [ 630.055333][ T856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.396282][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 630.598933][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 630.681125][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.736858][ T24] usb 8-1: Product: syz [ 630.766525][ T24] usb 8-1: Manufacturer: syz [ 630.797337][ T24] usb 8-1: SerialNumber: syz [ 630.865955][ T24] usb 8-1: config 0 descriptor?? [ 630.913196][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5413'. [ 630.938533][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 631.465422][ T24] sonixb 8-1:0.0: Error reading register 00: -110 [ 631.581210][T18547] bond1: option lacp_active: invalid value (5) [ 631.691849][T18547] bond1 (unregistering): Released all slaves [ 631.976453][ T856] gspca_main: pac7311-2.14.0 probing 093a:260e [ 632.356156][ T856] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 632.443940][ T856] pac7311 9-1:1.151: probe with driver pac7311 failed with error -71 [ 632.762038][T18585] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 632.971798][ T856] usb 9-1: USB disconnect, device number 2 [ 633.045125][T18591] loop6: detected capacity change from 0 to 64 [ 633.268470][ T6170] usb 8-1: USB disconnect, device number 2 [ 633.663515][T18598] loop0: detected capacity change from 0 to 128 [ 634.065247][T18598] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54) [ 634.147978][T18609] x_tables: duplicate underflow at hook 4 [ 634.240187][T18598] FAT-fs (loop0): Filesystem has been set read-only [ 634.424606][T18614] netlink: 'syz.7.5442': attribute type 13 has an invalid length. [ 634.509035][ T6170] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 634.615457][T16189] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54) [ 634.749185][ T6170] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 634.789001][T18614] gretap0: refused to change device tx_queue_len [ 634.825076][ T6170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.865480][T18614] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 634.955574][ T6170] usb 7-1: config 0 descriptor?? [ 634.960803][ T6155] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 634.969605][T18625] exfat: Deprecated parameter 'debug' [ 635.001135][ T6170] cp210x 7-1:0.0: cp210x converter detected [ 635.013562][T18625] exFAT-fs (nullb0): invalid boot record signature [ 635.156443][ T6155] usb 4-1: Using ep0 maxpacket: 32 [ 635.174140][T18625] exFAT-fs (nullb0): failed to read boot sector [ 635.219385][ T6155] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 635.330486][ T6155] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 635.351369][ T6170] usb 7-1: cp210x converter now attached to ttyUSB0 [ 635.373191][T18625] exFAT-fs (nullb0): failed to recognize exfat type [ 635.427975][ T6155] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.526934][ T6155] usb 4-1: config 0 has no interface number 0 [ 635.561375][ T6170] usb 7-1: USB disconnect, device number 2 [ 635.601882][ T6155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.657661][ T6170] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 635.676922][ T6155] usb 4-1: Product: syz [ 635.709101][ T6155] usb 4-1: Manufacturer: syz [ 635.738185][ T6170] cp210x 7-1:0.0: device disconnected [ 635.753725][ T6155] usb 4-1: SerialNumber: syz [ 635.818196][ T6155] usb 4-1: config 0 descriptor?? [ 635.974342][ T6155] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 636.075695][ T6155] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 636.198184][ T6155] usb 4-1: USB disconnect, device number 98 [ 636.728425][T18642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5455'. [ 638.224851][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5465'. [ 638.369344][ T1026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.475843][T18671] loop6: detected capacity change from 0 to 1024 [ 638.515935][T18657] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5462'. [ 638.588030][T18667] loop0: detected capacity change from 0 to 4096 [ 638.870625][T18665] bond1: entered promiscuous mode [ 639.116117][T18676] netlink: Conntrack attr has 1 unknown bytes [ 639.170358][T18676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.349163][T18679] loop6: detected capacity change from 0 to 1024 [ 639.475888][T18679] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 639.554568][ T1026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.601372][T18679] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 639.651404][T18679] EXT4-fs (loop6): orphan cleanup on readonly fs [ 639.683919][T18679] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz.6.5470: Invalid inode table block 0 in block_group 0 [ 639.720227][T18679] loop6: lost filesystem error report for type 5 error -117 [ 639.720602][T18679] EXT4-fs (loop6): Remounting filesystem read-only [ 639.734512][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 639.734537][ C1] EXT4-fs (loop6): initial error at time 2000001723: __ext4_get_inode_loc:4916 [ 639.734568][ C1] EXT4-fs (loop6): last error at time 2000001723: __ext4_get_inode_loc:4916 [ 639.880205][T18679] __quota_error: 4 callbacks suppressed [ 639.880228][T18679] Quota error (device loop6): write_blk: dquota write failed [ 639.985354][T18679] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 640.019919][ T1026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.098973][T18679] EXT4-fs (loop6): 1 truncate cleaned up [ 640.160979][T18679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 640.600630][T17502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.851188][T18691] loop3: detected capacity change from 0 to 128 [ 640.952414][ T1026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.191874][T18691] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 641.629214][ T4925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 641.660930][ T4925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 641.697760][ T4925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 641.807733][ T4925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 641.908179][ T4925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 642.024466][ T6155] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 642.224543][ T6155] usb 8-1: Using ep0 maxpacket: 8 [ 642.279836][ T6155] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 642.353257][ T6155] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 642.436304][ T6155] usb 8-1: config 0 interface 0 has no altsetting 0 [ 642.483678][ T6155] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.524830][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 642.547746][ T6155] usb 8-1: Product: syz [ 642.565252][ T6155] usb 8-1: Manufacturer: syz [ 642.602001][ T6155] usb 8-1: SerialNumber: syz [ 642.672670][ T6155] usb 8-1: config 0 descriptor?? [ 642.746722][ T6155] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 643.085405][ T6155] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 643.093497][T18727] loop0: detected capacity change from 0 to 512 [ 643.157401][ T6155] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 643.203473][ T1026] bridge_slave_1: left allmulticast mode [ 643.217032][ T6155] usb 8-1: USB disconnect, device number 3 [ 643.223860][ T1026] bridge_slave_1: left promiscuous mode [ 643.234614][T18727] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.5489: corrupted in-inode xattr: invalid ea_ino [ 643.249995][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.258825][T18727] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 643.259308][T18727] EXT4-fs (loop0): Remounting filesystem read-only [ 643.268499][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 643.268524][ C1] EXT4-fs (loop0): initial error at time 2000001726: ext4_iget_extra_inode:5210: inode 15 [ 643.268564][ C1] EXT4-fs (loop0): last error at time 2000001726: ext4_iget_extra_inode:5210: inode 15 [ 643.334101][ T1026] bridge_slave_0: left allmulticast mode [ 643.365695][ T1026] bridge_slave_0: left promiscuous mode [ 643.396360][T18727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.415912][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.577810][T18719] loop8: detected capacity change from 0 to 4096 [ 643.807104][T16189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.998550][ T6041] Bluetooth: hci4: command tx timeout [ 644.784317][T18746] loop3: detected capacity change from 0 to 4096 [ 644.918038][T18751] tmpfs: Bad value for 'mpol' [ 644.999560][T18757] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 645.085002][T18759] loop6: detected capacity change from 0 to 64 [ 645.183544][T18756] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5499'. [ 645.379896][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.423318][ T30] audit: type=1800 audit(2000001729.090:96): pid=18746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5491" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 645.513230][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.590044][ T1026] bond0 (unregistering): Released all slaves [ 645.905963][ T1026] IPVS: stopping backup sync thread 17312 ... [ 645.958879][ T6041] Bluetooth: hci4: command tx timeout [ 646.315204][T18779] tmpfs: Bad value for 'mpol' [ 647.250783][T18789] loop7: detected capacity change from 0 to 4096 [ 647.360334][T18789] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 647.476445][T18797] binfmt_misc: register: failed to install interpreter ./file0 [ 647.616313][T18789] ntfs3(loop7): ino=19, mi_enum_attr [ 647.940170][ T6041] Bluetooth: hci4: command tx timeout [ 648.607400][T18815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5518'. [ 648.862949][T18789] ntfs3(loop7): failed to convert "c46c" to iso8859-14 [ 648.922603][T18789] ntfs3(loop7): ino=20, mi_enum_attr [ 649.269504][T18825] CIFS: Attempting to mount //127.0.0.1/share [ 649.423767][T18823] loop6: detected capacity change from 0 to 256 [ 649.888840][T18825] CIFS: VFS: Error connecting to socket. Aborting operation. [ 649.920899][ T6041] Bluetooth: hci4: command tx timeout [ 650.066968][T18815] vlan0: entered promiscuous mode [ 650.580001][ T1026] hsr_slave_0: left promiscuous mode [ 650.656898][ T1026] hsr_slave_1: left promiscuous mode [ 650.699602][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.752183][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.802509][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.868426][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.982262][ T1026] veth1_macvtap: left promiscuous mode [ 651.035236][ T1026] veth0_macvtap: left promiscuous mode [ 651.079097][ T1026] veth1_vlan: left promiscuous mode [ 651.118510][ T1026] veth0_vlan: left promiscuous mode [ 652.614241][T18860] loop3: detected capacity change from 0 to 512 [ 652.699813][T18860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.797754][T18860] ext4 filesystem being mounted at /875/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.003325][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 653.029471][ T6045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.043274][T18866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5541'. [ 653.082409][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 653.682845][T18874] netlink: 'syz.0.5545': attribute type 1 has an invalid length. [ 654.680428][T18883] loop6: detected capacity change from 0 to 64 [ 654.776554][T18890] loop7: detected capacity change from 0 to 512 [ 654.902460][T18890] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0082] [ 654.928060][T18890] EXT4-fs (loop7): orphan cleanup on readonly fs [ 654.968211][T18890] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 654.986418][T18890] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 654.995985][T18890] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.5550: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 655.043628][T18890] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 655.045624][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 655.061269][ C1] EXT4-fs (loop7): last error at time 2000001739: ext4_ext_check_inode:521: inode 13 [ 655.071293][T18890] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.5550: couldn't read orphan inode 13 (err -117) [ 655.093103][T18894] loop3: detected capacity change from 0 to 1024 [ 655.123297][T18890] loop7: lost filesystem error report for type 5 error -117 [ 655.156513][T18890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.485224][T18890] EXT4-fs: Cannot specify journal on remount [ 655.726266][T18894] hfsplus: xattr search failed [ 655.872951][T17692] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.309472][ T1026] IPVS: stop unused estimator thread 0... [ 656.930715][T18698] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.011256][T18698] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.053103][T18698] bridge_slave_0: entered allmulticast mode [ 657.276932][T18698] bridge_slave_0: entered promiscuous mode [ 657.325908][T18698] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.385619][T18698] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.432424][T18698] bridge_slave_1: entered allmulticast mode [ 657.476489][T18698] bridge_slave_1: entered promiscuous mode [ 657.896048][T18698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.107081][T18698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.562450][T18698] team0: Port device team_slave_0 added [ 658.650405][T18698] team0: Port device team_slave_1 added [ 658.831895][T18959] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5576'. [ 658.941939][T18698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.000153][T18698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.260440][T18698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.369472][T18698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.439719][T18698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.567027][T18698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.053600][T18977] loop8: detected capacity change from 0 to 16 [ 660.092365][ T6169] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 660.113578][T18698] hsr_slave_0: entered promiscuous mode [ 660.153647][T18698] hsr_slave_1: entered promiscuous mode [ 660.207789][T18698] debugfs: 'hsr0' already exists in 'hsr' [ 660.247294][T18977] erofs (device loop8): mounted with root inode @ nid 36. [ 660.256703][T18698] Cannot create hsr debugfs directory [ 660.292373][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 660.502639][ T6169] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 660.623763][ T6169] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 660.698966][ T6169] usb 7-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.713612][ T6169] usb 7-1: config 2 interface 0 has no altsetting 0 [ 660.714735][ T6154] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 660.905652][ T6154] usb 4-1: Using ep0 maxpacket: 8 [ 660.928504][ T6154] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 660.969896][ T6154] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 661.005969][ T6154] usb 4-1: config 179 has no interface number 0 [ 661.011460][ T6169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.036328][ T6154] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 661.069404][ T6169] usb 7-1: Product: syz [ 661.084097][ T6154] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 661.106479][ T6169] usb 7-1: Manufacturer: syz [ 661.137599][ T6169] usb 7-1: SerialNumber: syz [ 661.139312][ T6154] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 661.218294][ T6154] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 661.268809][ T6154] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 661.326441][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.413516][T18993] loop0: detected capacity change from 0 to 2048 [ 661.437807][T18983] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 661.811878][T18993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.935086][ T6154] usb 4-1: USB disconnect, device number 99 [ 661.935166][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 661.949391][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 662.262903][ T30] audit: type=1800 audit(2000001746.769:97): pid=18993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5592" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 662.560679][T16189] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.893443][ T6169] ims_pcu 7-1:2.0: Zero length descriptor [ 662.938434][ T6169] ims_pcu 7-1:2.0: probe with driver ims_pcu failed with error -22 [ 663.243250][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5598'. [ 663.570309][ T6169] usb 7-1: USB disconnect, device number 3 [ 663.681866][T18698] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 663.832157][T18698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 663.877988][T18698] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 663.919023][T19022] UBIFS error (pid: 19022): cannot open "ubi:0", error -19 [ 663.992560][T18698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.126905][T18698] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 664.240008][T18698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.322487][T18698] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 664.408309][ T4925] Bluetooth: hci1: command 0x0406 tx timeout [ 664.484680][T18698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.624538][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5609'. [ 665.210683][T18698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.257993][ T6154] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 665.349064][T19061] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5615'. [ 665.427029][T18698] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.497624][ T6154] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 665.631112][ T6154] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.631185][ T6154] usb 9-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 665.631490][T18283] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.631599][T18283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.737335][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.737469][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.754759][ T6154] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.754794][ T6154] usb 9-1: Product: syz [ 665.754818][ T6154] usb 9-1: Manufacturer: syz [ 665.754838][ T6154] usb 9-1: SerialNumber: syz [ 665.791294][ T6154] usb-storage 9-1:1.0: USB Mass Storage device detected [ 665.834035][ T6154] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 665.845147][ T6154] scsi host1: usb-storage 9-1:1.0 [ 666.050830][ T29] usb 9-1: USB disconnect, device number 3 [ 667.184867][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 667.309706][T19090] loop7: detected capacity change from 0 to 1024 [ 667.812595][T19098] loop3: detected capacity change from 0 to 1024 [ 667.938183][T19098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 667.967101][T19098] ext4 filesystem being mounted at /891/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.986670][T19098] EXT4-fs error (device loop3): ext4_xattr_block_list:777: inode #15: comm syz.3.5623: corrupted xattr block 128: invalid size in ea xattr [ 668.356108][ T6045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 668.492968][T19108] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5626'. [ 668.506728][T19109] loop8: detected capacity change from 0 to 512 [ 668.864153][T19117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5629'. [ 669.066159][T19109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 669.243534][T19124] loop6: detected capacity change from 0 to 512 [ 669.301819][T19124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 669.361404][T19109] EXT4-fs (loop8): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 669.606448][T19124] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 669.898613][T18698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.920376][T17712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.955478][T19124] EXT4-fs (loop6): 1 truncate cleaned up [ 670.024266][T19124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.652414][T17502] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.130652][T19154] netlink: 'syz.3.5642': attribute type 28 has an invalid length. [ 671.164393][ T6154] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 671.183969][T19154] netlink: 'syz.3.5642': attribute type 3 has an invalid length. [ 671.329866][T19154] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5642'. [ 671.360921][ T6154] usb 9-1: not running at top speed; connect to a high speed hub [ 671.406205][ T6154] usb 9-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 671.473962][ T6154] usb 9-1: config 11 has an invalid interface number: 95 but max is 0 [ 671.530633][ T6154] usb 9-1: config 11 has no interface number 0 [ 671.592526][ T6154] usb 9-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 671.616515][T19157] loop6: detected capacity change from 0 to 4096 [ 671.655487][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5643'. [ 671.701066][T19157] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 671.712013][ T6154] usb 9-1: config 11 interface 95 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 671.820469][ T6154] usb 9-1: config 11 interface 95 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 671.918013][ T6154] usb 9-1: config 11 interface 95 has no altsetting 0 [ 671.989295][ T30] audit: type=1326 audit(2000001756.963:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5646" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9799e0d9 code=0x7ffc0000 [ 672.064810][ T6154] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 672.129082][ T6154] usb 9-1: Manufacturer: syz [ 672.179935][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 672.186821][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 672.198685][ T30] audit: type=1326 audit(2000001756.984:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5646" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9799e0d9 code=0x7ffc0000 [ 672.291088][T19150] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 672.330216][T19168] loop0: detected capacity change from 0 to 64 [ 672.348689][T19157] ntfs3(loop6): ino=1a, mi_enum_attr [ 672.422177][T19157] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 672.440226][T18698] veth0_vlan: entered promiscuous mode [ 672.469634][ T30] audit: type=1326 audit(2000001757.036:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5646" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9799e0d9 code=0x7ffc0000 [ 672.512129][T19157] ntfs3(loop6): ino=1a, mi_enum_attr [ 672.611354][T19157] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 672.655393][T18698] veth1_vlan: entered promiscuous mode [ 672.675058][ T6154] usbtouchscreen 9-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 672.733430][ T30] audit: type=1326 audit(2000001757.057:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5646" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9799e0d9 code=0x7ffc0000 [ 672.853193][T19171] loop3: detected capacity change from 0 to 512 [ 672.868384][ T6154] usb 9-1: USB disconnect, device number 4 [ 672.964413][ T30] audit: type=1326 audit(2000001757.057:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5646" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fca9799e0d9 code=0x7ffc0000 [ 673.002298][ T30] audit: type=1326 audit(2000001757.057:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5646" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9799e0d9 code=0x7ffc0000 [ 673.027657][ T30] audit: type=1326 audit(2000001757.057:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5646" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9799e0d9 code=0x7ffc0000 [ 673.100378][T19171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 673.226132][ T30] audit: type=1326 audit(2000001757.057:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5646" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fca9799e0d9 code=0x7ffc0000 [ 673.324191][T19171] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.5648: Unimplemented hash flags: 0x0001 [ 673.395271][T18698] veth0_macvtap: entered promiscuous mode [ 673.437048][ T30] audit: type=1326 audit(2000001757.057:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5646" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fca9799e0d9 code=0x7ffc0000 [ 673.475910][T18698] veth1_macvtap: entered promiscuous mode [ 673.525451][T19171] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5648: Corrupt directory, running e2fsck is recommended [ 673.729061][T18698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.886773][T18698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.107777][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.184710][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5654'. [ 674.495615][T19187] ip6gretap1: entered promiscuous mode [ 674.621478][ T6045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.659165][T19187] ip6gretap1: entered allmulticast mode [ 674.774010][T14877] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.036705][T19065] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.151415][T19065] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.580608][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 675.871083][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.942964][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.231099][T18707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.301276][T18707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.998867][T19229] loop3: detected capacity change from 0 to 2048 [ 677.157305][T19229] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 677.330096][T19229] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 677.466254][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5669'. [ 678.889549][T19259] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5681'. [ 679.265226][T19268] loop8: detected capacity change from 0 to 2048 [ 679.387038][T19268] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 679.552160][T19268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.573767][T19275] netlink: 'syz.6.5688': attribute type 15 has an invalid length. [ 679.673594][T19276] loop3: detected capacity change from 0 to 2048 [ 679.785544][T19276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.966447][T19268] UDF-fs: error (device loop8): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 681.091499][T19295] netlink: 'syz.3.5698': attribute type 21 has an invalid length. [ 681.168845][T19295] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5698'. [ 681.333239][T19295] netlink: 'syz.3.5698': attribute type 4 has an invalid length. [ 681.517209][T19295] netlink: 'syz.3.5698': attribute type 5 has an invalid length. [ 681.676142][T19295] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5698'. [ 681.710007][T19308] loop9: detected capacity change from 0 to 164 [ 682.356901][T19316] xt_TCPMSS: Only works on TCP SYN packets [ 683.506783][T19339] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5718'. [ 683.962734][T19347] loop9: detected capacity change from 0 to 512 [ 684.355952][T19347] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 684.459518][T19347] EXT4-fs error (device loop9): ext4_orphan_get:1403: comm syz.9.5722: inode #15: comm syz.9.5722: iget: illegal inode # [ 684.625425][T19347] loop9: lost filesystem error report for type 5 error -117 [ 684.632231][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 684.646023][ C0] EXT4-fs (loop9): initial error at time 2000001770: ext4_orphan_get:1403 [ 684.654616][ C0] EXT4-fs (loop9): last error at time 2000001770: ext4_orphan_get:1403 [ 684.695133][T19347] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.5722: couldn't read orphan inode 15 (err -117) [ 684.794629][T19347] loop9: lost filesystem error report for type 5 error -117 [ 684.992548][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 685.180042][T19369] netlink: 'syz.3.5730': attribute type 1 has an invalid length. [ 685.373210][T19369] netlink: 'syz.3.5730': attribute type 2 has an invalid length. [ 685.477530][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 685.492022][T19347] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.683107][ T6154] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 685.818018][T19380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5733'. [ 685.883090][ T6154] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 685.930747][ T6154] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.003351][ T6154] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.059058][T19347] EXT4-fs error (device loop9): ext4_lookup:1787: comm syz.9.5722: inode #15: comm syz.9.5722: iget: illegal inode # [ 686.108298][ T6154] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 686.184513][ T6154] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 686.318711][ T6154] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.359843][ T6154] usb 7-1: Product: syz [ 686.377304][ T6154] usb 7-1: Manufacturer: syz [ 686.404843][ T6154] usb 7-1: SerialNumber: syz [ 686.426157][T18698] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.884979][ T6154] usb 7-1: Not enough endpoints found in device, aborting! [ 687.056099][ T6154] usb 7-1: USB disconnect, device number 4 [ 687.308822][T19395] loop3: detected capacity change from 0 to 512 [ 687.354074][T19395] EXT4-fs: Ignoring removed i_version option [ 687.578544][T19395] EXT4-fs (loop3): 1 orphan inode deleted [ 687.636341][T19395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.094832][ T6045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.302725][T19411] netlink: 'syz.8.5745': attribute type 2 has an invalid length. [ 688.989116][ T30] audit: type=1326 audit(2000001774.820:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e19e0d9 code=0x7ffc0000 [ 689.197536][ T30] audit: type=1326 audit(2000001774.841:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e19e0d9 code=0x7ffc0000 [ 689.456092][ T30] audit: type=1326 audit(2000001774.883:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e19e0d9 code=0x7ffc0000 [ 689.585951][T19432] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5754'. [ 689.693600][ T30] audit: type=1326 audit(2000001774.893:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e19e0d9 code=0x7ffc0000 [ 689.797431][T19432] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5754'. [ 689.918401][ T30] audit: type=1326 audit(2000001774.925:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fad5e19e0d9 code=0x7ffc0000 [ 690.125396][ T30] audit: type=1326 audit(2000001774.925:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e19e0d9 code=0x7ffc0000 [ 690.375014][ T30] audit: type=1326 audit(2000001774.925:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e19e0d9 code=0x7ffc0000 [ 690.594813][ T30] audit: type=1326 audit(2000001774.935:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad5e19e0d9 code=0x7ffc0000 [ 690.893203][ T30] audit: type=1326 audit(2000001774.935:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5750" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad5e19e0d9 code=0x7ffc0000 [ 691.698989][T19476] loop6: detected capacity change from 0 to 16 [ 691.789485][T19476] erofs (device loop6): mounted with root inode @ nid 36. [ 692.283223][T19476] syz.6.5768: attempt to access beyond end of device [ 692.283223][T19476] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 692.371625][T19487] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5773'. [ 692.712663][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5776'. [ 692.794680][ T30] audit: type=1800 audit(2000001778.819:116): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5768" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 693.011377][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5778'. [ 693.556289][T19508] misc userio: The device must be registered before sending interrupts [ 693.977109][T19514] loop3: detected capacity change from 0 to 1024 [ 694.077371][T19514] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 694.157371][T19514] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 694.261441][T19514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.454857][T19514] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 694.483844][ T6269] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 694.713991][ T6269] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 694.813172][ T6269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.870502][ T6045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.889455][ T6269] usb 7-1: Product: syz [ 694.929138][ T6269] usb 7-1: Manufacturer: syz [ 694.957354][ T6269] usb 7-1: SerialNumber: syz [ 695.318677][T19537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5791'. [ 695.380440][ T6269] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 695.456545][ T6269] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 695.536930][ T6269] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 695.636838][ T6269] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 695.793238][ T6269] usb 7-1: USB disconnect, device number 5 [ 696.243733][T19547] xfrm1: entered allmulticast mode [ 697.015735][ T6269] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 697.227928][ T6269] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 1.00 [ 697.307176][ T6269] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.315481][ T6154] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 697.354220][ T6269] usb 9-1: Product: syz [ 697.381700][ T6269] usb 9-1: Manufacturer: syz [ 697.405061][ T6269] usb 9-1: SerialNumber: syz [ 697.502154][ T6154] usb 1-1: Using ep0 maxpacket: 8 [ 697.526512][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 697.606832][ T6154] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 697.679292][ T6154] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.781125][ T6154] usb 1-1: config 0 has no interface number 0 [ 697.850371][ T6154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.909906][ T6154] usb 1-1: Product: syz [ 697.941563][ T6154] usb 1-1: Manufacturer: syz [ 697.964617][ T6154] usb 1-1: SerialNumber: syz [ 698.005036][ T6154] usb 1-1: config 0 descriptor?? [ 698.068551][ T6154] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 698.124454][ T6154] uvcvideo 1-1:0.31: Failed to create links for entity 32774 [ 698.204632][ T6154] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 698.309730][ T6154] usb 1-1: USB disconnect, device number 85 [ 698.474751][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5794'. [ 698.989523][ T6269] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 1) [ 699.524222][ T6269] usb 9-1: USB disconnect, device number 5 [ 699.916548][ T6774] udevd[6774]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.394476][T19617] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 704.220151][T19694] loop7: detected capacity change from 0 to 512 [ 704.337317][T19694] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 704.394811][T19694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 704.424780][T19694] EXT4-fs (loop7): orphan cleanup on readonly fs [ 704.440364][T19694] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #13: comm syz.7.5852: iget: bad i_size value: 12154761577498 [ 704.576968][T19694] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 704.578843][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 704.594520][ C1] EXT4-fs (loop7): initial error at time 2000001791: ext4_orphan_get:1403: inode 13 [ 704.603960][ C1] EXT4-fs (loop7): last error at time 2000001791: ext4_orphan_get:1403: inode 13 [ 704.620874][T19694] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.5852: couldn't read orphan inode 13 (err -117) [ 704.833922][T19694] loop7: lost filesystem error report for type 5 error -117 [ 704.862526][T19694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 705.851235][T19694] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5852: dx entry: limit 65535 != root limit 120 [ 705.851302][T19694] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5852: Corrupt directory, running e2fsck is recommended [ 706.068507][T17692] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.531341][T19734] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 707.094407][ T6269] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 707.213820][T19747] loop0: detected capacity change from 0 to 16 [ 707.262080][T19747] erofs (device loop0): mounted with root inode @ nid 36. [ 707.298158][ T6269] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 707.329159][ T6269] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.359781][ T6269] usb 8-1: Product: syz [ 707.396551][ T6269] usb 8-1: Manufacturer: syz [ 707.434389][ T6269] usb 8-1: SerialNumber: syz [ 707.473485][ T6269] usb 8-1: config 0 descriptor?? [ 707.975949][ T6269] usb 8-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 708.049713][ T6269] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 708.101386][ T30] audit: type=1326 audit(2000001794.902:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 708.128161][ T6269] f81604 8-1:0.0: probe with driver f81604 failed with error -71 [ 708.157058][T19729] loop9: detected capacity change from 0 to 32768 [ 708.192840][ T6269] usb 8-1: USB disconnect, device number 4 [ 708.207807][ T30] audit: type=1326 audit(2000001794.902:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 708.300217][ T4925] Bluetooth: hci0: command 0x0406 tx timeout [ 708.357029][ T30] audit: type=1326 audit(2000001794.902:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 708.499747][T19729] jfs_lookup: iget failed on inum 32 [ 708.543516][ T30] audit: type=1326 audit(2000001794.902:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 708.692015][T19729] jfs_lookup: iget failed on inum 32 [ 708.794842][ T30] audit: type=1326 audit(2000001794.955:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 708.949724][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5881'. [ 709.024163][ T30] audit: type=1326 audit(2000001794.955:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 709.119205][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5879'. [ 709.168504][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5881'. [ 709.243135][ T30] audit: type=1326 audit(2000001794.955:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 709.381848][T19762] loop0: detected capacity change from 0 to 2048 [ 709.492405][ T30] audit: type=1326 audit(2000001794.955:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 709.768773][ T30] audit: type=1326 audit(2000001794.955:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 710.030311][ T30] audit: type=1326 audit(2000001794.955:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.0.5878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c0f9e0d9 code=0x7ff00000 [ 710.488463][T19762] hpfs: filesystem error: improperly stopped; already mounted read-only [ 710.655050][T19762] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 710.734580][T19762] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000 [ 711.389499][T19797] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 711.471185][T19797] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 711.606160][T19797] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 711.726270][T19797] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 713.180408][ T6041] Bluetooth: hci5: command 0x0405 tx timeout [ 713.186730][ T6041] Bluetooth: hci2: command 0x0406 tx timeout [ 714.182292][T19849] loop3: detected capacity change from 0 to 8 [ 730.722619][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 730.759123][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.945440][T17695] Bluetooth: hci4: command 0x0406 tx timeout [ 772.965784][T17695] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 773.248063][T17695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 773.462444][T17695] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 774.210997][T17695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 774.328347][T17695] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 776.811965][ T4925] Bluetooth: hci6: command tx timeout [ 778.293032][T17695] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 778.361697][T17695] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 778.436850][T17695] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 778.789648][T17695] Bluetooth: hci6: command tx timeout [ 778.846643][T17695] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 779.314976][T17695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 780.765837][ T4925] Bluetooth: hci6: command tx timeout [ 781.104722][T17695] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 781.196544][T17695] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 781.360023][T17695] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 781.654767][T17695] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 781.923260][T17695] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 782.060624][T17695] Bluetooth: hci7: command tx timeout [ 782.756994][ T4925] Bluetooth: hci6: command tx timeout [ 784.042114][ T4925] Bluetooth: hci7: command tx timeout [ 784.499794][ T4925] Bluetooth: hci8: command tx timeout [ 786.035797][ T4925] Bluetooth: hci7: command tx timeout [ 786.480471][ T4925] Bluetooth: hci8: command tx timeout [ 788.013161][ T4925] Bluetooth: hci7: command tx timeout [ 788.474194][ T4925] Bluetooth: hci8: command tx timeout [ 789.234326][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 789.309390][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.452714][ T4925] Bluetooth: hci8: command tx timeout [ 803.052577][T19832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 803.206670][T19832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 803.378056][T19832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 803.675272][T19832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 803.743532][T19832] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 803.893694][T19832] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 803.955926][T19832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 804.046413][T19832] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 804.440894][ T4925] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 804.669937][ T4925] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 806.831463][T19832] Bluetooth: hci0: command tx timeout [ 807.394831][T19832] Bluetooth: hci9: command tx timeout [ 808.818407][T19832] Bluetooth: hci0: command tx timeout [ 809.344340][T19832] Bluetooth: hci9: command tx timeout [ 810.792696][T17695] Bluetooth: hci0: command tx timeout [ 811.126085][T17695] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 811.225010][T17695] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 811.326627][T17695] Bluetooth: hci9: command tx timeout [ 811.357617][T17695] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 811.623731][T17695] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 811.795878][T17695] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 812.772440][T19832] Bluetooth: hci0: command tx timeout [ 813.304557][T19832] Bluetooth: hci9: command tx timeout [ 813.923000][T19859] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.374200][T19832] Bluetooth: hci1: command tx timeout [ 816.363123][T19832] Bluetooth: hci1: command tx timeout [ 818.343739][T19832] Bluetooth: hci1: command tx timeout [ 820.315601][T19832] Bluetooth: hci1: command tx timeout [ 827.903338][T17695] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 827.930144][T17695] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 828.145677][T17695] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 828.410027][T17695] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 828.595130][T17695] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 831.978646][T19832] Bluetooth: hci3: command tx timeout [ 833.956381][T19832] Bluetooth: hci3: command tx timeout [ 835.943237][T19832] Bluetooth: hci3: command tx timeout [ 837.656245][T17695] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.777088][T17695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.908073][T17695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.941417][T17695] Bluetooth: hci3: command tx timeout [ 838.461920][T17695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 838.634959][T17695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 841.046567][T19832] Bluetooth: hci2: command tx timeout [ 843.034370][T19832] Bluetooth: hci2: command tx timeout [ 845.021722][T19832] Bluetooth: hci2: command tx timeout [ 846.567002][T17695] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 846.811061][T17695] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 846.849007][T17695] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 846.987878][T17695] Bluetooth: hci2: command tx timeout [ 847.101290][T17695] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 847.536010][T17695] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 847.756117][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 847.762604][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 850.044925][T17695] Bluetooth: hci4: command tx timeout [ 852.017583][T17695] Bluetooth: hci4: command tx timeout [ 854.000677][T17695] Bluetooth: hci4: command tx timeout [ 855.979820][T17695] Bluetooth: hci4: command tx timeout [ 865.641825][T19832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 865.680851][T19832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 865.808692][T19832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 865.872268][T19832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 865.940674][T19832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 868.575002][T17695] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 868.631798][T17695] Bluetooth: hci5: command tx timeout [ 868.670008][T17695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 868.798254][T17695] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 869.053902][T17695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 869.228635][T17695] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 870.610775][T17695] Bluetooth: hci5: command tx timeout [ 871.913986][T19832] Bluetooth: hci6: command tx timeout [ 872.597798][T19832] Bluetooth: hci5: command tx timeout [ 872.673190][T17695] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 872.691421][T19832] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 872.876176][T17695] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 872.972658][T17695] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 873.153771][T17695] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 873.531800][T17695] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 873.729885][T17695] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 873.898107][T17695] Bluetooth: hci6: command tx timeout [ 874.582853][T19832] Bluetooth: hci5: command tx timeout [ 875.868875][T17695] Bluetooth: hci6: command tx timeout [ 876.107001][T17695] Bluetooth: hci10: command tx timeout [ 877.850237][T17695] Bluetooth: hci6: command tx timeout [ 878.082004][T17695] Bluetooth: hci10: command tx timeout [ 880.062080][T17695] Bluetooth: hci10: command tx timeout [ 881.868823][T19859] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.041607][T17695] Bluetooth: hci10: command tx timeout [ 894.217835][T19859] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.910222][T19832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 904.021296][T19832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 904.123672][T19832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 904.573781][T19832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 904.623995][T19832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 905.730380][T17695] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 905.806783][T17695] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 905.974153][T17695] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 906.235920][T17695] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 906.286215][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 906.341248][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 906.870383][T17695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 907.036704][T17695] Bluetooth: hci0: command tx timeout [ 907.194954][T19859] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.035603][T19832] Bluetooth: hci0: command tx timeout [ 909.256197][T19832] Bluetooth: hci7: command tx timeout [ 910.999436][T19832] Bluetooth: hci0: command tx timeout [ 911.237513][T19832] Bluetooth: hci7: command tx timeout [ 912.981558][T19832] Bluetooth: hci0: command tx timeout [ 913.209416][T19832] Bluetooth: hci7: command tx timeout [ 915.192871][T19832] Bluetooth: hci7: command tx timeout [ 922.260185][T16191] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 922.398899][T16191] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 922.539183][T16191] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 922.874734][T16191] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 922.887402][T16191] Bluetooth: hci9: command 0x0406 tx timeout [ 923.092171][T16191] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 925.859700][T16191] Bluetooth: hci8: command tx timeout [ 927.840897][T16191] Bluetooth: hci8: command tx timeout [ 929.825815][T16191] Bluetooth: hci8: command tx timeout [ 931.813318][T16191] Bluetooth: hci8: command tx timeout [ 935.861150][T16191] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 936.001986][T16191] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 937.858139][T20006] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 943.766208][T19832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 943.874832][T19832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 944.039347][T19832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 944.315126][T19832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 944.513963][T19832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 947.425685][T16191] Bluetooth: hci1: command tx timeout [ 947.885903][T19832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 947.968532][T19832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 948.084725][T19832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 948.373716][T19832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 948.593971][T19832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 949.407322][T16191] Bluetooth: hci1: command tx timeout [ 951.160707][T16191] Bluetooth: hci2: command tx timeout [ 951.388121][T16191] Bluetooth: hci1: command tx timeout [ 953.142960][T16191] Bluetooth: hci2: command tx timeout [ 953.369924][T16191] Bluetooth: hci1: command tx timeout [ 955.125161][T16191] Bluetooth: hci2: command tx timeout [ 957.103375][T16191] Bluetooth: hci2: command tx timeout [ 964.804852][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 964.854907][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 969.894513][T19859] bridge_slave_1: left allmulticast mode [ 970.230341][T19859] bridge_slave_1: left promiscuous mode [ 970.848447][T19859] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.980135][T19832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 971.086392][T19832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 971.254212][T19832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 971.646830][T19832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 971.867760][T19832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 974.572706][T16191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 974.905680][T16191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 974.945160][T16191] Bluetooth: hci3: command tx timeout [ 974.995436][T16191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 975.276410][T16191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 975.465287][T16191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 975.563292][T19859] bridge_slave_0: left allmulticast mode [ 975.888255][T19859] bridge_slave_0: left promiscuous mode [ 976.139980][T19859] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.916402][T19832] Bluetooth: hci3: command tx timeout [ 977.755070][T19832] Bluetooth: hci4: command tx timeout [ 978.904031][T19832] Bluetooth: hci3: command tx timeout [ 979.735956][T16191] Bluetooth: hci4: command tx timeout [ 980.165395][T16191] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 980.212101][T16191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 980.326579][T16191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 980.417667][T16191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 980.589146][T16191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 980.879483][T19832] Bluetooth: hci3: command tx timeout [ 981.721022][T16191] Bluetooth: hci4: command tx timeout [ 983.167677][T19832] Bluetooth: hci5: command tx timeout [ 983.701458][T19832] Bluetooth: hci4: command tx timeout [ 984.346145][ T24] kworker/1:0 (24) used greatest stack depth: 18192 bytes left [ 985.147131][T19832] Bluetooth: hci5: command tx timeout [ 987.130985][T19832] Bluetooth: hci5: command tx timeout [ 989.111688][T19832] Bluetooth: hci5: command tx timeout [ 1017.524825][T16191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1017.568832][T16191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1017.649914][T16191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1017.930963][T16191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1018.194520][T16191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1020.745436][T16191] Bluetooth: hci0: command tx timeout [ 1022.729347][T16191] Bluetooth: hci0: command tx timeout [ 1023.334920][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.354717][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1024.699630][T16191] Bluetooth: hci0: command tx timeout [ 1026.689392][T16191] Bluetooth: hci0: command tx timeout [ 1028.298357][T19832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1028.440909][T19832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1028.521096][T19832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1028.764159][T19832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1028.940136][T17695] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1029.749231][T17695] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1029.826065][T17695] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1029.921517][T17695] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1030.278652][T17695] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1030.457600][T17695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1031.174622][T19832] Bluetooth: hci6: command tx timeout [ 1032.854334][T19832] Bluetooth: hci7: command tx timeout [ 1033.162236][T19832] Bluetooth: hci6: command tx timeout [ 1034.778008][T17695] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1034.822561][T17695] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1034.834281][T16191] Bluetooth: hci7: command tx timeout [ 1034.895150][T17695] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1035.137302][T17695] Bluetooth: hci6: command tx timeout [ 1035.174077][T17695] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1035.408440][T17695] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1036.824634][T19832] Bluetooth: hci7: command tx timeout [ 1037.132733][T19832] Bluetooth: hci6: command tx timeout [ 1037.804528][T19832] Bluetooth: hci8: command tx timeout [ 1038.795107][T19832] Bluetooth: hci7: command tx timeout [ 1039.788186][T19832] Bluetooth: hci8: command tx timeout [ 1041.777993][T17695] Bluetooth: hci8: command tx timeout [ 1042.751387][T17695] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1042.850394][T17695] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1042.923833][T17695] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1043.319179][T17695] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1043.419960][T17695] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1043.771804][T19832] Bluetooth: hci8: command tx timeout [ 1045.882027][T17695] Bluetooth: hci9: command tx timeout [ 1047.880970][T17695] Bluetooth: hci9: command tx timeout [ 1049.061990][T19832] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1049.165550][T19832] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1049.263978][T19832] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1049.653690][T19832] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1049.805395][T19832] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1049.858795][T19832] Bluetooth: hci9: command tx timeout [ 1051.828189][T19832] Bluetooth: hci9: command tx timeout [ 1052.444792][T19832] Bluetooth: hci10: command tx timeout [ 1053.183951][T19859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.418126][T19832] Bluetooth: hci10: command tx timeout [ 1055.725628][T19859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.399100][T19832] Bluetooth: hci10: command tx timeout [ 1057.980659][T19859] bond0 (unregistering): Released all slaves [ 1058.380922][T19832] Bluetooth: hci10: command tx timeout [ 1064.337073][T17695] Bluetooth: hci1: command 0x0406 tx timeout [ 1069.214302][T19832] Bluetooth: hci2: command 0x0406 tx timeout [ 1081.857459][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1081.879273][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1086.664300][T19832] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1086.843388][T19832] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1086.886499][T19832] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1087.054151][T19832] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1087.165433][T19832] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1089.547661][T17695] Bluetooth: hci11: command tx timeout [ 1091.528961][T19832] Bluetooth: hci11: command tx timeout [ 1092.226701][T17695] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 1092.573023][T17695] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1093.516484][T17695] Bluetooth: hci11: command tx timeout [ 1093.893087][T20115] Bluetooth: hci3: command 0x0406 tx timeout [ 1093.900168][T17695] Bluetooth: hci4: command 0x0406 tx timeout [ 1094.531367][T20111] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 1095.491310][T19832] Bluetooth: hci11: command tx timeout [ 1098.467741][T19832] Bluetooth: hci5: command 0x0406 tx timeout [ 1104.677392][T19832] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1104.784266][T19832] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1104.870193][T19832] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1105.187605][T19832] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1105.274678][T19832] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1107.455783][T16191] Bluetooth: hci13: command tx timeout [ 1109.446691][T16191] Bluetooth: hci13: command tx timeout [ 1110.932724][T19859] hsr_slave_0: left promiscuous mode [ 1111.427245][T19832] Bluetooth: hci13: command tx timeout [ 1112.174448][T19859] hsr_slave_1: left promiscuous mode [ 1112.900118][T19832] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1113.036963][T19832] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1113.146905][T19832] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1113.401965][T19832] Bluetooth: hci13: command tx timeout [ 1113.466190][T19832] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1113.658055][T19832] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1114.054084][T19859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.596458][T19859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.987945][T19832] Bluetooth: hci12: command tx timeout [ 1117.310924][T19859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.034162][T19859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.966521][T19832] Bluetooth: hci12: command tx timeout [ 1120.958971][T19832] Bluetooth: hci12: command tx timeout [ 1122.925765][T16191] Bluetooth: hci12: command tx timeout [ 1123.265203][T16191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1123.388057][T16191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1123.448750][T16191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1123.708701][T16191] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1124.118660][T19859] veth1_macvtap: left promiscuous mode [ 1124.198965][T16191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1124.370884][T19859] veth0_macvtap: left promiscuous mode [ 1124.766182][T19859] veth1_vlan: left promiscuous mode [ 1125.272110][T19859] veth0_vlan: left promiscuous mode [ 1126.812040][T16191] Bluetooth: hci2: command tx timeout [ 1128.798423][T16191] Bluetooth: hci2: command tx timeout [ 1130.777561][T16191] Bluetooth: hci2: command tx timeout [ 1131.981895][T19832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1132.179084][T19832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1132.237058][T19832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1132.397005][T19832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1132.449861][T19832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1132.765289][T16191] Bluetooth: hci2: command tx timeout [ 1134.889637][T16191] Bluetooth: hci0: command tx timeout [ 1136.872884][T16191] Bluetooth: hci0: command tx timeout [ 1138.860665][T16191] Bluetooth: hci0: command tx timeout [ 1140.424981][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1140.490400][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1140.835795][T16191] Bluetooth: hci0: command tx timeout [ 1175.886884][T19832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1175.963190][T19832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1176.004192][T19832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1176.439485][T19832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1176.591140][T19832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1179.014296][T19832] Bluetooth: hci1: command tx timeout [ 1180.051233][T19832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1180.209040][T19832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1180.517038][T19832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1180.762765][T19832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1180.906891][T19832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1180.993618][T19832] Bluetooth: hci1: command tx timeout [ 1182.989853][T17695] Bluetooth: hci1: command tx timeout [ 1183.584738][T17695] Bluetooth: hci3: command tx timeout [ 1184.974780][T16191] Bluetooth: hci1: command tx timeout [ 1185.081808][T16191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1185.151922][T16191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1185.281604][T16191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1185.375862][T16191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1185.418352][T16191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1185.575386][T16191] Bluetooth: hci3: command tx timeout [ 1187.479810][T17695] Bluetooth: hci4: command tx timeout [ 1187.547178][T17695] Bluetooth: hci3: command tx timeout [ 1189.452406][T17695] Bluetooth: hci4: command tx timeout [ 1189.532239][T17695] Bluetooth: hci3: command tx timeout [ 1191.433995][T17695] Bluetooth: hci4: command tx timeout [ 1193.416914][T17695] Bluetooth: hci4: command tx timeout [ 1198.067331][T16191] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1198.118339][T16191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1198.167911][T16191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1198.726683][T19832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1198.758762][T19832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1198.798558][T19832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1198.879253][T20115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1198.910386][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1198.916888][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1199.078578][T20115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1199.134838][T19832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1199.227514][T19832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1201.569094][T20115] Bluetooth: hci6: command tx timeout [ 1201.578627][T17695] Bluetooth: hci5: command tx timeout [ 1203.553218][T20115] Bluetooth: hci6: command tx timeout [ 1203.553218][T17695] Bluetooth: hci5: command tx timeout [ 1205.536872][T19832] Bluetooth: hci6: command tx timeout [ 1205.547585][T16191] Bluetooth: hci5: command tx timeout [ 1205.782285][T16191] Bluetooth: hci11: command 0x0406 tx timeout [ 1205.841710][T16191] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1206.049070][T16191] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1206.134293][T16191] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1206.409972][T16191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1206.631729][T16191] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1207.513126][T17695] Bluetooth: hci5: command tx timeout [ 1207.519805][T16191] Bluetooth: hci6: command tx timeout [ 1208.963531][T16191] Bluetooth: hci7: command tx timeout [ 1210.944228][T16191] Bluetooth: hci7: command tx timeout [ 1212.924259][T16191] Bluetooth: hci7: command tx timeout [ 1214.906471][T16191] Bluetooth: hci7: command tx timeout [ 1225.284512][T17695] Bluetooth: hci13: command 0x0406 tx timeout [ 1235.023575][T17695] Bluetooth: hci12: command 0x0406 tx timeout [ 1237.080038][T19859] team0 (unregistering): Port device team_slave_1 removed [ 1238.488093][T17695] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1238.551598][T17695] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1238.616274][T17695] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1238.767253][T17695] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1238.831903][T17695] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1240.969598][T17695] Bluetooth: hci8: command tx timeout [ 1242.458995][T19859] team0 (unregistering): Port device team_slave_0 removed [ 1242.950702][T16191] Bluetooth: hci8: command tx timeout [ 1244.647383][T20115] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1244.705917][T20115] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1244.781259][T20115] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1244.791217][T20115] Bluetooth: hci2: command 0x0406 tx timeout [ 1244.887376][T20115] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1244.925592][T20115] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1244.935528][T20115] Bluetooth: hci8: command tx timeout [ 1246.910845][T16191] Bluetooth: hci8: command tx timeout [ 1247.384232][T16191] Bluetooth: hci9: command tx timeout [ 1249.352710][T17695] Bluetooth: hci9: command tx timeout [ 1249.654222][T17695] Bluetooth: hci0: command 0x0406 tx timeout [ 1251.117717][T17695] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1251.330999][T17695] Bluetooth: hci9: command tx timeout [ 1251.566771][T17695] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1251.618362][T17695] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1251.831415][T17695] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1252.126645][T17695] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1253.319297][T16191] Bluetooth: hci9: command tx timeout [ 1254.462839][T16191] Bluetooth: hci10: command tx timeout [ 1256.446306][T16191] Bluetooth: hci10: command tx timeout [ 1257.430395][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1257.447569][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1258.417989][T16191] Bluetooth: hci10: command tx timeout [ 1260.408624][T17695] Bluetooth: hci10: command tx timeout [ 1260.999592][T17695] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1261.090754][T17695] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1261.201454][T17695] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1261.275130][ T31] INFO: task kworker/u8:14:19857 blocked for more than 143 seconds. [ 1261.431348][T17695] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1261.551730][ T31] Not tainted syzkaller #0 [ 1261.697759][T17695] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1261.732707][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1262.005437][ T31] task:kworker/u8:14 state:D stack:24304 pid:19857 tgid:19857 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1262.779017][ T31] Workqueue: events_unbound linkwatch_event [ 1263.019033][ T31] Call Trace: [ 1263.130733][ T31] [ 1263.270043][ T31] __schedule+0x17d4/0x5820 [ 1263.439030][ T31] ? irqentry_exit+0x218/0x910 [ 1263.620299][ T31] ? trace_irq_disable+0x3b/0x140 [ 1263.843692][ T31] ? __pfx___schedule+0x10/0x10 [ 1264.014095][ T31] ? schedule+0x90/0x2b0 [ 1264.139131][ T31] schedule+0x164/0x2b0 [ 1264.144555][T17695] Bluetooth: hci14: command tx timeout [ 1264.302491][ T31] schedule_preempt_disabled+0x13/0x30 [ 1264.495268][ T31] __mutex_lock+0x7c1/0x1550 [ 1264.644769][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1264.839929][ T31] ? linkwatch_event+0xe/0x60 [ 1265.040923][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1265.222352][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 1265.387271][ T31] ? rtnl_lock+0x9/0x20 [ 1265.553192][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1265.762070][ T31] linkwatch_event+0xe/0x60 [ 1265.887833][ T31] process_scheduled_works+0xc3d/0x1630 [ 1266.119473][T16191] Bluetooth: hci14: command tx timeout [ 1266.162149][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1266.411601][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1266.648751][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1266.867655][ T31] ? assign_work+0x3cf/0x5d0 [ 1266.901197][T16191] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1266.988319][T16191] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1267.069655][T16191] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1267.148325][ T31] worker_thread+0xa47/0xfb0 [ 1267.343763][T16191] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1267.454178][ T31] kthread+0x38b/0x480 [ 1267.521667][T16191] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1267.782305][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1268.096393][T17695] Bluetooth: hci14: command tx timeout [ 1268.124052][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.200614][ T31] ret_from_fork+0x514/0xb70 [ 1268.331379][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1268.515863][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1268.772146][ T31] ? __switch_to+0xc89/0x1420 [ 1268.936955][ T31] ? __pfx_kthread+0x10/0x10 [ 1269.131308][ T31] ret_from_fork_asm+0x1a/0x30 [ 1269.382602][ T31] [ 1269.465079][ T31] INFO: task syz-executor:20107 blocked for more than 152 seconds. [ 1269.698348][T17695] Bluetooth: hci15: command tx timeout [ 1269.747544][ T31] Not tainted syzkaller #0 [ 1269.906781][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1270.078658][T17695] Bluetooth: hci14: command tx timeout [ 1270.109425][ T31] task:syz-executor state:D stack:26648 pid:20107 tgid:20107 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1270.504956][ T31] Call Trace: [ 1270.592543][ T31] [ 1270.753662][ T31] __schedule+0x17d4/0x5820 [ 1270.898145][ T31] ? irqentry_exit+0x218/0x910 [ 1271.100643][ T31] ? __pfx___schedule+0x10/0x10 [ 1271.292378][ T31] ? schedule+0x90/0x2b0