last executing test programs: 1m26.671466355s ago: executing program 3 (id=453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r1, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xd41, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd33, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd1f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 1m26.183825181s ago: executing program 3 (id=460): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1000000}], 0x4000004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m26.104384454s ago: executing program 3 (id=461): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m25.61967567s ago: executing program 3 (id=468): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$cgroup2(0x0, &(0x7f00000006c0)='.\x00', &(0x7f0000000700), 0xc0, 0x0) 1m25.511921954s ago: executing program 3 (id=471): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1m24.324685122s ago: executing program 3 (id=479): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 1m24.060038942s ago: executing program 32 (id=479): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 7.780090492s ago: executing program 4 (id=1254): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/71, 0x47}, 0x6}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x4000, 0x0, 0x0) 7.651847397s ago: executing program 4 (id=1256): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) fchdir(r1) r2 = fanotify_init(0x1a, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r2, 0x541, 0x1023, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 7.441245674s ago: executing program 4 (id=1258): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r3, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 7.23600398s ago: executing program 4 (id=1261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 6.982929548s ago: executing program 4 (id=1264): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) 6.875029542s ago: executing program 2 (id=1266): syz_usb_connect(0x3, 0x24, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) shutdown(r2, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 4.753085722s ago: executing program 5 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x200, 0x1) 4.608023128s ago: executing program 5 (id=1281): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x89f3, 0x20001116) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x18, 0x44000}}], 0x1, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x80047453, &(0x7f0000000000)=0x69a32cb2) 4.402402294s ago: executing program 5 (id=1282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1010410, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@noquota}]}, 0x0, 0x76a, &(0x7f0000000fc0)="$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") ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.124057403s ago: executing program 0 (id=1284): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.92370373s ago: executing program 5 (id=1285): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x40140921, 0x101) 3.845917332s ago: executing program 0 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 3.416030437s ago: executing program 0 (id=1289): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.290289351s ago: executing program 2 (id=1291): syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000001f80)='./bus\x00', 0x5b003, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(0x0) syz_mount_image$fuse(0x0, 0x0, 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 3.199634814s ago: executing program 0 (id=1293): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r1, 0x2, 0x1) 3.147958136s ago: executing program 2 (id=1294): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x20}}, 0x10, 0x0}, 0x0) 3.01201923s ago: executing program 5 (id=1295): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 2.957542452s ago: executing program 2 (id=1296): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x24, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0xa, 0x11, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x10, 0x7de, 0x74, 0xe, 0xdc, [{0x2, 0x1b74, 0x5, 0x6}, {0x2, 0x7, 0xaad, 0x4}, {0x8, 0xa8f1, 0x8, 0x4}, {0x1, 0x9, 0x3, 0x1}, {0x3, 0xfff, 0x6, 0xfffffffc}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 2.777813848s ago: executing program 2 (id=1297): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0xa0000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000ec0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) r1 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SEND(r1, 0xd0009411, &(0x7f0000000180)={{r1}, 0x0, 0x0, 0xfffffeffffffffff, 0xc}) 2.12380023s ago: executing program 0 (id=1302): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x10, 0x40, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @multicast2}}}}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1.965865435s ago: executing program 1 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110) 1.667932455s ago: executing program 4 (id=1305): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000600)="06", 0x1}], 0x1, 0x0) 1.163708072s ago: executing program 5 (id=1306): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2a1080, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0xf9db5000) syz_clone(0x222000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.122918363s ago: executing program 2 (id=1307): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x1269, &(0x7f00000002c0)={0x1, 0x0, 0x98, &(0x7f0000000140)={0xa8, 0x5469, 0x1}}) 1.041384796s ago: executing program 1 (id=1308): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.041187756s ago: executing program 0 (id=1309): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 470.054915ms ago: executing program 1 (id=1310): inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 294.32284ms ago: executing program 1 (id=1311): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000a80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003300)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) 199.978544ms ago: executing program 1 (id=1312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x100000020, 0x3, 0x2, 0x106c, 0x102, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x10, 0x6, 0x0, 0x8000], 0x1, 0x3c4210}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)}, 0x40000020) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=1313): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc957, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0xd, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x0, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x419, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc55, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7fc, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x80000001, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 34896][ T4275] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.142505][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.168065][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.179594][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.196640][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.226823][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.245660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.257888][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.268866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.276542][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.299382][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.314927][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.326903][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.335899][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.357686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.489309][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.529808][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.558858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.619523][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.642953][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.660056][ T3090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.680859][ T3090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.738225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.758347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.810250][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.822162][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.839277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.955041][ T4296] loop1: detected capacity change from 0 to 256 [ 59.008080][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 59.011759][ T4296] ======================================================= [ 59.011759][ T4296] WARNING: The mand mount option has been deprecated and [ 59.011759][ T4296] and is ignored by this kernel. Remove the mand [ 59.011759][ T4296] option from the mount to silence this warning. [ 59.011759][ T4296] ======================================================= [ 59.027435][ T4302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 59.051632][ C1] vkms_vblank_simulate: vblank timer overrun [ 59.059728][ T4296] exfat: Deprecated parameter 'utf8' [ 59.123772][ T4297] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.136655][ T4296] exfat: Bad value for 'errors' [ 59.160574][ T2855] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.229375][ T4296] xt_hashlimit: size too large, truncated to 1048576 [ 59.248523][ T4304] netlink: 'syz.3.15': attribute type 27 has an invalid length. [ 59.372599][ T4309] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 59.400452][ T2855] usb 1-1: Using ep0 maxpacket: 32 [ 59.527287][ T2855] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 59.536709][ T2855] usb 1-1: config 0 has no interface number 0 [ 59.560648][ T2855] usb 1-1: config 0 interface 184 has no altsetting 0 [ 59.578358][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 59.624769][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 59.635502][ T25] audit: type=1326 audit(1781016915.577:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.2.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3980cfabd7 code=0x0 [ 59.636267][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 59.658621][ C1] vkms_vblank_simulate: vblank timer overrun [ 59.659121][ T4261] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.693315][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 59.699845][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 59.735179][ T2855] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 59.750288][ T2855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.768812][ T2855] usb 1-1: Product: syz [ 59.773108][ T2855] usb 1-1: Manufacturer: syz [ 59.777829][ T2855] usb 1-1: SerialNumber: syz [ 59.817059][ T2855] usb 1-1: config 0 descriptor?? [ 59.878865][ T2855] smsc75xx v1.0.0 [ 59.942050][ T4261] usb 5-1: Using ep0 maxpacket: 8 [ 60.220784][ T4261] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 60.230308][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.259638][ T4261] usb 5-1: Product: syz [ 60.266894][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.274256][ T4261] usb 5-1: Manufacturer: syz [ 60.278899][ T4261] usb 5-1: SerialNumber: syz [ 60.293213][ T4261] usb 5-1: config 0 descriptor?? [ 60.301229][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.315821][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.343974][ T4261] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 60.357755][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.370699][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.382262][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.393378][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.403309][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.414191][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.425552][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.437429][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.451582][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.463211][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.474300][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.501548][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.511509][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.522591][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.535388][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.540609][ T2855] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 60.562224][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.586122][ T2855] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 61.427231][ T4357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 61.439708][ T4357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 61.451997][ T4357] Zero length message leads to an empty skb [ 61.530700][ T2855] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 61.550426][ T2855] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 61.569595][ T2855] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 61.588488][ T2855] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 61.637003][ T2855] usb 1-1: USB disconnect, device number 2 [ 61.791486][ T4367] loop1: detected capacity change from 0 to 256 [ 62.150489][ T4261] gspca_sonixj: i2c_w8 err -71 [ 62.166374][ T4387] sock: sock_set_timeout: `syz.2.45' (pid 4387) tries to set negative timeout [ 62.240570][ T4261] sonixj: probe of 5-1:0.0 failed with error -71 [ 62.257351][ T4261] usb 5-1: USB disconnect, device number 2 [ 62.305906][ T4393] loop1: detected capacity change from 0 to 512 [ 62.359575][ T4396] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET) [ 62.380894][ T4393] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.432031][ T4393] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.481797][ T4393] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.48: bad orphan inode 131083 [ 62.530634][ T4393] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 62.650014][ T4407] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 62.666463][ T4393] syz.1.48 (pid 4393) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 63.044313][ T4425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.61'. [ 63.058043][ T4427] loop1: detected capacity change from 0 to 512 [ 63.105375][ T4427] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 63.125186][ T4427] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.230453][ T2855] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 63.344356][ T4438] loop3: detected capacity change from 0 to 128 [ 63.393624][ T4438] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 63.474816][ T4438] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 63.493784][ T4443] loop1: detected capacity change from 0 to 256 [ 63.505786][ T4438] FAT-fs (loop3): Filesystem has been set read-only [ 63.576220][ T4443] FAT-fs (loop1): Directory bread(block 64) failed [ 63.585359][ T4197] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 63.598250][ T4443] FAT-fs (loop1): Directory bread(block 65) failed [ 63.601210][ T2855] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 63.606022][ T4443] FAT-fs (loop1): Directory bread(block 66) failed [ 63.622813][ T4443] FAT-fs (loop1): Directory bread(block 67) failed [ 63.624131][ T2855] usb 1-1: config 0 has no interface number 0 [ 63.629464][ T4443] FAT-fs (loop1): Directory bread(block 68) failed [ 63.629496][ T4443] FAT-fs (loop1): Directory bread(block 69) failed [ 63.629556][ T4443] FAT-fs (loop1): Directory bread(block 70) failed [ 63.629582][ T4443] FAT-fs (loop1): Directory bread(block 71) failed [ 63.662975][ T2855] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 63.668093][ T4443] FAT-fs (loop1): Directory bread(block 72) failed [ 63.685501][ T2855] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 63.710512][ T4443] FAT-fs (loop1): Directory bread(block 73) failed [ 63.860726][ T2855] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 63.890441][ T2855] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 63.898473][ T2855] usb 1-1: Product: syz [ 63.930490][ T2855] usb 1-1: SerialNumber: syz [ 63.947713][ T2855] usb 1-1: config 0 descriptor?? [ 63.994029][ T2855] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input5 [ 64.036721][ T4457] loop1: detected capacity change from 0 to 512 [ 64.076892][ T4457] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.105307][ T4457] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.145616][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 64.159495][ T4457] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.183700][ T4457] EXT4-fs (loop1): 1 truncate cleaned up [ 64.189640][ T4457] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 64.264209][ T1107] usb 1-1: USB disconnect, device number 3 [ 64.377034][ T4467] netlink: 'syz.1.76': attribute type 3 has an invalid length. [ 64.955475][ T4483] loop0: detected capacity change from 0 to 512 [ 65.066915][ T4483] EXT4-fs (loop0): invalid journal inode [ 65.083109][ T4483] EXT4-fs (loop0): can't get journal size [ 65.136507][ T4483] EXT4-fs (loop0): 1 truncate cleaned up [ 65.169550][ T4483] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 65.230995][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 65.295885][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 65.315188][ T4489] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 65.336060][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 65.372201][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 65.441008][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 65.476408][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 65.527854][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 65.686581][ T4487] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 65.874280][ T4499] loop1: detected capacity change from 0 to 512 [ 65.965376][ T4499] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 65.997404][ T4499] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.697036][ T4521] Illegal XDP return value 4294967274, expect packet loss! [ 67.824747][ T4552] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 68.204192][ T4561] loop4: detected capacity change from 0 to 512 [ 68.328120][ T4561] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.400345][ T4567] loop0: detected capacity change from 0 to 256 [ 68.429194][ T4561] EXT4-fs (loop4): 1 truncate cleaned up [ 68.436252][ T4561] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 68.460291][ T26] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 68.484888][ T25] audit: type=1800 audit(1781016924.427:3): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.110" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 68.527680][ T4561] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 68.546395][ T4561] EXT4-fs (loop4): Remounting filesystem read-only [ 68.553686][ T4561] EXT4-fs error (device loop4): ext4_setattr:5586: inode #15: comm syz.4.110: mark_inode_dirty error [ 68.555721][ T4567] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 68.583579][ T4561] EXT4-fs (loop4): Remounting filesystem read-only [ 68.625689][ T4561] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem [ 68.659792][ T4561] EXT4-fs (loop4): Remounting filesystem read-only [ 68.711617][ T4571] process 'syz.3.114' launched '/dev/fd/4' with NULL argv: empty string added [ 68.896935][ T26] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 68.914273][ T26] usb 2-1: config 0 has an invalid interface number: 255 but max is 1 [ 68.943267][ T26] usb 2-1: config 0 has no interface number 0 [ 68.949380][ T26] usb 2-1: config 0 has no interface number 1 [ 68.998128][ T26] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 69.033870][ T26] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 69.073702][ T26] usb 2-1: config 0 interface 255 has no altsetting 0 [ 69.311387][ T26] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 69.324927][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.341784][ T26] usb 2-1: Product: syz [ 69.346715][ T26] usb 2-1: Manufacturer: syz [ 69.351846][ T26] usb 2-1: SerialNumber: syz [ 69.370088][ T26] usb 2-1: config 0 descriptor?? [ 69.451066][ T26] usb 2-1: selecting invalid altsetting 0 [ 69.461327][ T26] usb 2-1: Could not set interface, error -22 [ 69.711111][ T26] usb 2-1: USB disconnect, device number 2 [ 69.889365][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 70.120324][ T4603] netlink: 'syz.3.127': attribute type 39 has an invalid length. [ 70.176768][ T4604] netlink: 'syz.2.128': attribute type 9 has an invalid length. [ 70.189422][ T4604] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.128'. [ 70.537084][ T4618] loop4: detected capacity change from 0 to 256 [ 70.612609][ T4618] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 70.713251][ T4618] exFAT-fs (loop4): hint_cluster is invalid (17) [ 70.742789][ T4627] loop0: detected capacity change from 0 to 512 [ 70.909753][ T4627] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.139: missing EA_INODE flag [ 70.938363][ T4627] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.139: error while reading EA inode 2 err=-117 [ 71.022719][ T4627] EXT4-fs (loop0): 1 orphan inode deleted [ 71.028491][ T4627] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 71.151316][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.157887][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.209492][ T4646] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.143'. [ 71.236640][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.143'. [ 72.180673][ T4261] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.304512][ T25] audit: type=1326 audit(1781016928.247:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.2.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3980cfabd7 code=0x0 [ 72.550542][ T4261] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 72.560834][ T4261] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 72.721225][ T4261] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 72.730441][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.738441][ T4261] usb 1-1: Product: syz [ 72.743009][ T4261] usb 1-1: Manufacturer: syz [ 72.747606][ T4261] usb 1-1: SerialNumber: syz [ 73.082797][ T4261] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 73.096614][ T4261] dvb_usb_af9015: probe of 1-1:2.0 failed with error -22 [ 73.160823][ T4261] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 73.187696][ T4261] dvb_usb_af9035: probe of 1-1:2.0 failed with error -22 [ 73.227847][ T4261] usb 1-1: USB disconnect, device number 4 [ 73.352446][ T4694] kvm: emulating exchange as write [ 73.355013][ T4691] loop2: detected capacity change from 0 to 4096 [ 73.476927][ T4691] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 73.509355][ T4691] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 73.666629][ T4696] loop3: detected capacity change from 0 to 8192 [ 73.831343][ T4196] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 73.853976][ T4196] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 73.997689][ T4696] capability: warning: `syz.3.163' uses deprecated v2 capabilities in a way that may be insecure [ 74.152308][ T4711] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.465667][ T4724] loop3: detected capacity change from 0 to 512 [ 74.496937][ T4726] loop0: detected capacity change from 0 to 128 [ 74.499513][ T4730] loop1: detected capacity change from 0 to 512 [ 74.549243][ T4724] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.563868][ T4730] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.580567][ T4261] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.584628][ T4724] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.617380][ T4726] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.631392][ T4734] overlayfs: failed to clone upperpath [ 74.636564][ T4726] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.687913][ T4730] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.176: invalid indirect mapped block 256 (level 2) [ 74.730862][ T4730] EXT4-fs (loop1): 2 truncates cleaned up [ 74.736638][ T4730] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 74.940823][ T4261] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.949547][ T4261] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.960097][ T4261] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.970633][ T4261] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.008850][ T4261] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.150707][ T4261] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.170303][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.185888][ T4261] usb 3-1: Product: syz [ 75.190082][ T4261] usb 3-1: Manufacturer: syz [ 75.251293][ T4261] cdc_wdm 3-1:1.0: skipping garbage [ 75.257202][ T4261] cdc_wdm 3-1:1.0: skipping garbage [ 75.320762][ T4261] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 75.352566][ T4261] cdc_wdm 3-1:1.0: Unknown control protocol [ 75.433669][ T4730] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.176: bg 0: block 5: invalid block bitmap [ 75.496751][ T4717] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 75.512149][ T26] usb 3-1: USB disconnect, device number 2 [ 75.623700][ T4758] device hsr0 entered promiscuous mode [ 75.634399][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 75.676356][ T4760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 75.812812][ T4764] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 76.090736][ T4782] overlayfs: failed to clone lowerpath [ 76.262431][ T13] cfg80211: failed to load regulatory.db [ 76.345546][ T4796] loop0: detected capacity change from 0 to 512 [ 76.424662][ T4802] bridge0: port 3(vlan2) entered blocking state [ 76.431284][ T4802] bridge0: port 3(vlan2) entered disabled state [ 76.438536][ T4802] device vlan2 entered promiscuous mode [ 76.451034][ T4802] bridge0: mtu less than device minimum [ 76.520808][ T4796] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.680215][ T4796] EXT4-fs error (device loop0): ext4_fill_super:4872: inode #2: comm syz.0.197: inode has both inline data and extents flags [ 76.793462][ T4796] EXT4-fs (loop0): get root inode failed [ 76.830511][ T4796] EXT4-fs (loop0): mount failed [ 77.169232][ T4801] loop2: detected capacity change from 0 to 131072 [ 77.205039][ T4818] device bridge_slave_0 left promiscuous mode [ 77.213496][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.231587][ T4818] device bridge_slave_1 left promiscuous mode [ 77.237811][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.249189][ T4818] bond0: (slave bond_slave_0): Releasing backup interface [ 77.279135][ T4801] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 77.287836][ T4801] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 77.304550][ T4801] F2FS-fs (loop2): invalid crc value [ 77.326824][ T4818] bond0: (slave bond_slave_1): Releasing backup interface [ 77.343011][ T4801] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.412390][ T4801] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 77.419779][ T4801] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 77.469504][ T4818] team0: Port device team_slave_0 removed [ 77.556742][ T4818] team0: Port device team_slave_1 removed [ 77.567460][ T4818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.610487][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.622330][ T4818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.630915][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.788774][ T4830] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 77.797907][ T4830] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 77.810090][ T4830] netlink: 264 bytes leftover after parsing attributes in process `syz.1.213'. [ 77.819437][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 77.828597][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.838140][ T4830] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 77.852975][ T4830] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 77.879913][ T4830] netlink: 264 bytes leftover after parsing attributes in process `syz.1.213'. [ 77.900240][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 78.090581][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 78.149839][ T4840] loop3: detected capacity change from 0 to 256 [ 78.258334][ T4840] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 78.270778][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.351626][ T26] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7 [ 78.576386][ T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.592654][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.616560][ T26] usb 1-1: Product: syz [ 78.627161][ T26] usb 1-1: Manufacturer: syz [ 78.633191][ T26] usb 1-1: SerialNumber: syz [ 78.641911][ T4855] input: syz0 as /devices/virtual/input/input7 [ 78.680255][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.687691][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.916128][ T4863] loop3: detected capacity change from 0 to 4096 [ 78.969138][ T4868] loop1: detected capacity change from 0 to 512 [ 79.015983][ T4870] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 79.041084][ T26] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 79.065514][ T4868] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 79.086890][ T26] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 79.108875][ T26] usb 1-1: 2:1 : invalid channels 0 [ 79.203308][ T26] usb 1-1: USB disconnect, device number 5 [ 79.220240][ T4868] EXT4-fs (loop1): 1 truncate cleaned up [ 79.240767][ T4868] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x000000000000000a,bsddf,sb=0x0000000000000012,resgid=0x0000000000000000,usrjquota=,,errors=continue. Quota mode: none. [ 79.437146][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.639991][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 79.961595][ T4889] loop3: detected capacity change from 0 to 32768 [ 80.184398][ T4889] [ 80.184398][ T4889] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.184398][ T4889] [ 80.289169][ T4901] TCP: TCP_TX_DELAY enabled [ 80.326112][ T4889] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 80.326112][ T4889] [ 80.384515][ T4889] ERROR: (device loop3): remounting filesystem as read-only [ 80.860701][ T4920] loop0: detected capacity change from 0 to 512 [ 80.948177][ T4920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.098555][ T4920] EXT4-fs (loop0): 1 truncate cleaned up [ 81.104365][ T4920] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 81.280639][ T25] audit: type=1800 audit(1781016937.177:5): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.246" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 81.340766][ T4920] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 81.414345][ T4920] EXT4-fs (loop0): Remounting filesystem read-only [ 81.486791][ T4920] EXT4-fs error (device loop0): ext4_setattr:5586: inode #15: comm syz.0.246: mark_inode_dirty error [ 81.581106][ T4920] EXT4-fs (loop0): Remounting filesystem read-only [ 81.619939][ T4920] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 81.676675][ T4920] EXT4-fs (loop0): Remounting filesystem read-only [ 81.752054][ T4926] loop1: detected capacity change from 0 to 131072 [ 81.835081][ T4926] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 81.843289][ T4926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.853582][ T4926] F2FS-fs (loop1): invalid crc value [ 81.877794][ T4926] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.951446][ T4926] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.958522][ T4926] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 82.067079][ T4949] loop3: detected capacity change from 0 to 1024 [ 82.186361][ T4949] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 82.306878][ T4949] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,sysvgroups,nodelalloc,journal_dev=0x0000000000000001,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 82.384686][ T4963] netlink: 'syz.4.255': attribute type 1 has an invalid length. [ 82.691487][ T4963] device bond1 entered promiscuous mode [ 82.720814][ T4963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.789185][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'. [ 82.880565][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'. [ 82.985005][ T4969] bond1: (slave bridge1): making interface the new active one [ 83.060297][ T4969] device bridge1 entered promiscuous mode [ 83.079392][ T4969] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 83.113284][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 83.549230][ T1107] libceph: connect (1)[c::]:6789 error -101 [ 83.558894][ T1107] libceph: mon0 (1)[c::]:6789 connect error [ 83.645993][ T1107] libceph: connect (1)[c::]:6789 error -101 [ 83.668135][ T1107] libceph: mon0 (1)[c::]:6789 connect error [ 83.720478][ T5001] ceph: No mds server is up or the cluster is laggy [ 84.154333][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 84.253935][ T5032] bridge1: port 1(vlan2) entered blocking state [ 84.279346][ T5032] bridge1: port 1(vlan2) entered disabled state [ 84.391949][ T5033] tipc: Enabling of bearer rejected, failed to enable media [ 84.441561][ T5033] tipc: Started in network mode [ 84.460948][ T5033] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 84.497300][ T5033] tipc: Enabling of bearer rejected, failed to enable media [ 84.863769][ T5053] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 84.921788][ T5057] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 85.293267][ T5068] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.280'. [ 85.700638][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.060688][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 86.081940][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 86.098974][ T13] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 86.108738][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.136265][ T13] usb 3-1: config 0 descriptor?? [ 86.218909][ T5092] loop1: detected capacity change from 0 to 256 [ 86.337380][ T5092] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 86.410556][ T13] ath6kl: Failed to submit usb control message: -71 [ 86.417236][ T13] ath6kl: unable to send the bmi data to the device: -71 [ 86.459924][ T13] ath6kl: Unable to send get target info: -71 [ 86.470407][ T5092] exFAT-fs (loop1): hint_cluster is invalid (17) [ 86.486009][ T13] ath6kl: Failed to init ath6kl core: -71 [ 86.530336][ T13] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 86.573733][ T13] usb 3-1: USB disconnect, device number 3 [ 87.011523][ T5106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.296'. [ 87.095855][ T5106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 87.601772][ T5122] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 87.924204][ T5134] netlink: 'syz.0.306': attribute type 39 has an invalid length. [ 88.887519][ T5155] device vlan2 entered promiscuous mode [ 88.900631][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.906773][ T5155] device bond0 entered promiscuous mode [ 88.916485][ T5155] device bond_slave_0 entered promiscuous mode [ 88.929902][ T5155] device bond_slave_1 entered promiscuous mode [ 88.974341][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 89.082772][ T5155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.107755][ T5155] device bond_slave_0 left promiscuous mode [ 89.138068][ T5155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.165460][ T5155] device bond_slave_1 left promiscuous mode [ 89.172403][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 89.203175][ T5155] bond0 (unregistering): Released all slaves [ 89.311344][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.331662][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.481406][ T26] usb 3-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 89.498899][ T26] usb 3-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 89.516603][ T26] usb 3-1: Product: syz [ 89.531253][ T26] usb 3-1: Manufacturer: syz [ 89.548432][ T26] usb 3-1: config 0 descriptor?? [ 90.066635][ T26] hid-generic 0003:25DD:F3D2.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 90.253821][ T5170] loop3: detected capacity change from 0 to 40427 [ 90.363073][ T5170] F2FS-fs (loop3): invalid crc value [ 90.411935][ T5170] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.492890][ T5170] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 90.519848][ T5170] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 90.588108][ T5170] attempt to access beyond end of device [ 90.588108][ T5170] loop3: rw=2049, want=40968, limit=40427 [ 90.662550][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 90.885671][ T4291] usb 3-1: USB disconnect, device number 4 [ 91.374550][ T5211] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 91.406117][ T5211] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.330'. [ 91.564174][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 91.807446][ T5235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.314282][ T5226] loop0: detected capacity change from 0 to 32768 [ 92.455625][ T5258] overlayfs: failed to clone upperpath [ 92.506937][ T5226] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.854191][ T26] libceph: connect (1)[c::]:6789 error -101 [ 92.900957][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 92.948725][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 92.955627][ T5274] ceph: No mds server is up or the cluster is laggy [ 93.287788][ T5291] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.499012][ T5302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 93.550038][ T5302] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 93.709684][ T5309] Invalid ELF header len 1 [ 93.990921][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 94.019366][ T5327] loop3: detected capacity change from 0 to 128 [ 94.032031][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 94.061655][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 94.074300][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 94.108740][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 94.120482][ T5327] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 94.155640][ T5327] hpfs: filesystem error: improperly stopped [ 94.163620][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 94.183402][ T5327] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 94.198172][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 94.211188][ T5327] hpfs: You really don't want any checks? You are crazy... [ 94.232760][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.241609][ T5327] hpfs: Code page index out of array [ 94.246928][ T5327] hpfs: code page support is disabled [ 94.266229][ T5327] hpfs: hpfs_map_4sectors(): unaligned read [ 94.283456][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.299316][ T5327] hpfs: hpfs_map_4sectors(): unaligned read [ 94.304115][ T5341] netlink: 44 bytes leftover after parsing attributes in process `syz.0.373'. [ 94.308552][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.327118][ T5327] hpfs: filesystem error: unable to find root dir [ 94.373581][ T5325] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.412569][ T5325] bridge0: mtu less than device minimum [ 94.418961][ T5325] device bridge_slave_1 left promiscuous mode [ 94.460277][ T5325] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.501203][ T5325] bridge0: mtu less than device minimum [ 94.528733][ T5325] bond0: (slave bond_slave_0): Releasing backup interface [ 94.561950][ T5325] bond0: (slave bond_slave_1): Releasing backup interface [ 94.665206][ T5345] loop3: detected capacity change from 0 to 4096 [ 94.678703][ T5325] team0: Port device team_slave_0 removed [ 94.755329][ T5325] team0: Port device team_slave_1 removed [ 94.778552][ T5325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.826139][ T5325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.885572][ T5325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.894148][ T5325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.949747][ T5325] device vlan2 left promiscuous mode [ 94.976538][ T5325] device bridge_slave_0 left promiscuous mode [ 94.990657][ T5347] IPv4: Oversized IP packet from 127.202.26.0 [ 95.009326][ T5325] bridge0: port 3(vlan2) entered disabled state [ 95.019763][ T5325] bond1: (slave bridge1): Releasing backup interface [ 95.034396][ T5325] device bridge1 left promiscuous mode [ 95.275797][ T5357] xt_hashlimit: size too large, truncated to 1048576 [ 95.764021][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.798422][ T5386] loop2: detected capacity change from 0 to 1024 [ 95.806900][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.830520][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.887299][ T5386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.909856][ T5383] device bridge_slave_0 left promiscuous mode [ 95.984534][ T5383] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.090254][ T5383] device bridge_slave_1 left promiscuous mode [ 96.123970][ T5383] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.293755][ T5383] team0: Port device team_slave_0 removed [ 96.389010][ T5383] team0: Port device team_slave_1 removed [ 96.424846][ T5383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.470636][ T5383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.552999][ T5383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.630496][ T5383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.882279][ T5397] sctp: [Deprecated]: syz.2.398 (pid 5397) Use of int in maxseg socket option. [ 96.882279][ T5397] Use struct sctp_assoc_value instead [ 97.024606][ T5403] overlayfs: failed to clone upperpath [ 97.092727][ T5405] loop0: detected capacity change from 0 to 2048 [ 97.138579][ T5408] overlayfs: failed to clone upperpath [ 97.144740][ T5405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.501811][ T5418] loop5: detected capacity change from 0 to 7 [ 97.533091][ T4182] loop5: [ 97.536338][ T4182] loop5: partition table partially beyond EOD, truncated [ 97.596042][ T5418] loop5: [ 97.603429][ T5418] loop5: partition table partially beyond EOD, truncated [ 98.059166][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 98.108405][ C1] vcan0: j1939_session_tx_dat: 0xffff888078506400: queue data error: -100 [ 99.186495][ T5450] loop2: detected capacity change from 0 to 2048 [ 99.328586][ T5450] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.357884][ T5450] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.565530][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.683397][ T5469] loop3: detected capacity change from 0 to 4096 [ 99.702760][ T5469] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 99.773489][ T25] audit: type=1800 audit(1781016955.717:6): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.427" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 99.866595][ T5474] syz.2.429 sent an empty control message without MSG_MORE. [ 99.897430][ T1172] ntfs3: loop3: ino=1b, Internal error [ 99.905447][ T1172] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22. [ 99.970683][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.060648][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.076450][ T13] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.096272][ T13] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 100.108990][ T13] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 100.122511][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 100.133647][ T13] usb 1-1: config 1 interface 1 has no altsetting 0 [ 100.340666][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.380588][ T13] usb 1-1: string descriptor 0 read error: -22 [ 100.386901][ T13] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 100.396085][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.630501][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 100.820762][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.090697][ T1107] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.100568][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.123754][ T1107] usb 4-1: Product: syz [ 101.136037][ T1107] usb 4-1: Manufacturer: syz [ 101.149537][ T1107] usb 4-1: SerialNumber: syz [ 101.244613][ T5502] xt_hashlimit: size too large, truncated to 1048576 [ 101.570647][ T1107] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.600523][ T1107] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 101.739149][ T1107] usb 4-1: USB disconnect, device number 2 [ 102.342738][ T4291] usb 1-1: USB disconnect, device number 6 [ 102.634991][ T5527] loop3: detected capacity change from 0 to 40427 [ 102.655738][ T5527] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 102.686356][ T5527] F2FS-fs (loop3): invalid crc value [ 102.716096][ T5527] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.809652][ T5527] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.982437][ T4197] attempt to access beyond end of device [ 102.982437][ T4197] loop3: rw=2049, want=45104, limit=40427 [ 103.070554][ T4291] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 103.614609][ T146] Bluetooth: hci1: link tx timeout [ 103.620105][ T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.633596][ T146] Bluetooth: hci1: link tx timeout [ 103.638874][ T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.647242][ T146] Bluetooth: hci1: link tx timeout [ 103.658194][ T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.681500][ T146] Bluetooth: hci1: link tx timeout [ 103.686689][ T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.694777][ T146] Bluetooth: hci1: link tx timeout [ 103.699903][ T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.708057][ T146] Bluetooth: hci1: link tx timeout [ 103.713770][ T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 104.091034][ T1107] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 104.128361][ T5592] fuse: Bad value for 'fd' [ 104.174012][ T5594] overlayfs: failed to clone upperpath [ 104.624170][ T5602] kvm: pic: level sensitive irq not supported [ 104.624576][ T5602] kvm: pic: non byte write [ 104.671757][ T1107] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 104.692648][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.726209][ T1107] usb 3-1: Product: syz [ 104.739911][ T1107] usb 3-1: Manufacturer: syz [ 104.745214][ T1107] usb 3-1: SerialNumber: syz [ 104.796711][ T5605] loop0: detected capacity change from 0 to 1024 [ 104.806958][ T4958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.837579][ T5605] EXT4-fs (loop0): Ignoring removed bh option [ 104.924510][ T4958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.931169][ T5605] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 105.027222][ T4958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.111264][ T4958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.201036][ T5605] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.476: Invalid inode table block 0 in block_group 0 [ 105.236584][ T5605] EXT4-fs (loop0): Remounting filesystem read-only [ 105.244583][ T5605] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.476: Invalid inode table block 0 in block_group 0 [ 105.266156][ T5605] EXT4-fs (loop0): Remounting filesystem read-only [ 105.286658][ T5605] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 105.302024][ T1107] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 105.369903][ T5605] EXT4-fs (loop0): Remounting filesystem read-only [ 105.538768][ T1172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 105.563098][ T1172] EXT4-fs (loop0): Remounting filesystem read-only [ 105.700759][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 106.106581][ T5636] chnl_net:caif_netlink_parms(): no params data found [ 106.170859][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.185230][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.207674][ T5636] device bridge_slave_0 entered promiscuous mode [ 106.290013][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.310704][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.329269][ T5636] device bridge_slave_1 entered promiscuous mode [ 106.438501][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.519641][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.635293][ T4958] device hsr_slave_0 left promiscuous mode [ 106.645697][ T4958] device hsr_slave_1 left promiscuous mode [ 106.696874][ T4958] device veth1_macvtap left promiscuous mode [ 106.707094][ T4958] device veth0_macvtap left promiscuous mode [ 106.717698][ T4958] device veth1_vlan left promiscuous mode [ 106.728918][ T4958] device veth0_vlan left promiscuous mode [ 106.853510][ T13] usb 3-1: USB disconnect, device number 5 [ 106.885849][ T13] usblp0: removed [ 107.131878][ T4255] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.375889][ T4958] bond0 (unregistering): Released all slaves [ 108.283590][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 108.322581][ T5636] team0: Port device team_slave_0 added [ 108.355950][ T5691] tipc: Enabling of bearer rejected, failed to enable media [ 108.380245][ T5636] team0: Port device team_slave_1 added [ 108.472531][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.489759][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.536463][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.577514][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.595034][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.670473][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.823210][ T5636] device hsr_slave_0 entered promiscuous mode [ 108.847037][ T5636] device hsr_slave_1 entered promiscuous mode [ 108.856825][ T5636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.895681][ T5636] Cannot create hsr debugfs directory [ 108.916130][ T5701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 108.940520][ T5701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 109.140471][ T4291] Bluetooth: hci5: command 0x1003 tx timeout [ 109.151769][ T146] Bluetooth: hci5: sending frame failed (-49) [ 109.394424][ T5636] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.438606][ T5636] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.456826][ T5636] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.482313][ T5636] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.715948][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.773401][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.786293][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.822919][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.846055][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.856717][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.891167][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.898302][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.955941][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.006965][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.041165][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.076684][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.083850][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.143064][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.182486][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.236443][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.273762][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.297214][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.336715][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.345484][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 110.381298][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.412647][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.458408][ T5636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.490855][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.526881][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.544693][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.577176][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.928383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.942153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.976604][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.232292][ T1107] Bluetooth: hci5: command 0x1001 tx timeout [ 111.243659][ T146] Bluetooth: hci5: sending frame failed (-49) [ 111.635800][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.691965][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.751093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.770864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.786111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.812147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.842514][ T5636] device veth0_vlan entered promiscuous mode [ 111.887632][ T5636] device veth1_vlan entered promiscuous mode [ 111.987509][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.001220][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.024521][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.053474][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.092932][ T5636] device veth0_macvtap entered promiscuous mode [ 112.134183][ T5636] device veth1_macvtap entered promiscuous mode [ 112.206187][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.223923][ T5774] loop0: detected capacity change from 0 to 32768 [ 112.246928][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.297750][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.341115][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.365324][ T5774] XFS (loop0): Mounting V5 Filesystem [ 112.394812][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.430755][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 112.443023][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.464494][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.488822][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.498353][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.512041][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.523346][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.534206][ T5636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.545579][ T5636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.557632][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.584192][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.612974][ T5774] XFS (loop0): Ending clean mount [ 112.636387][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.693842][ T5636] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.721092][ T5636] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.776240][ T5636] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.810585][ T5636] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.040703][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.048554][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.091804][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.100016][ T4190] XFS (loop0): Unmounting Filesystem [ 113.106273][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.121819][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.135282][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.308690][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 113.686816][ T5841] libceph: secret too big 32 [ 114.510739][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 114.632195][ T5856] loop0: detected capacity change from 0 to 32768 [ 114.713765][ T5856] XFS (loop0): Mounting V5 Filesystem [ 114.798183][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 114.813834][ T5856] XFS (loop0): Ending clean mount [ 114.898310][ T4190] XFS (loop0): Unmounting Filesystem [ 116.775862][ T5973] device batadv_slave_1 entered promiscuous mode [ 116.784389][ T5973] device macvtap0 entered promiscuous mode [ 116.792670][ T5971] device macvtap0 left promiscuous mode [ 116.799704][ T5971] device batadv_slave_1 left promiscuous mode [ 117.164918][ T5983] netlink: 68 bytes leftover after parsing attributes in process `syz.1.562'. [ 117.992723][ T5994] loop0: detected capacity change from 0 to 32768 [ 118.086607][ T5994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.566 (5994) [ 118.178012][ T5994] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 118.198704][ T5994] BTRFS warning (device loop0): excessive commit interval 3581 [ 118.215431][ T5994] BTRFS info (device loop0): force zlib compression, level 3 [ 118.230989][ T5994] BTRFS info (device loop0): metadata ratio 107050 [ 118.256955][ T5994] BTRFS info (device loop0): turning on flush-on-commit [ 118.280516][ T5994] BTRFS info (device loop0): max_inline at 4096 [ 118.308332][ T5994] BTRFS info (device loop0): using free space tree [ 118.335941][ T5994] BTRFS info (device loop0): has skinny extents [ 118.625316][ T5994] BTRFS info (device loop0): enabling ssd optimizations [ 118.802495][ T6041] raw_sendmsg: syz.1.578 forgot to set AF_INET. Fix it! [ 120.283868][ T6064] loop5: detected capacity change from 0 to 512 [ 120.396243][ T6064] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.414101][ T6064] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 120.446819][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 120.460482][ T6064] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 58368 [ 120.747925][ T6083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.588'. [ 120.832164][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.590'. [ 120.952509][ T6062] loop2: detected capacity change from 0 to 32768 [ 121.301954][ T6062] XFS (loop2): Mounting V5 Filesystem [ 121.470512][ T6079] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.537200][ T6062] XFS (loop2): Ending clean mount [ 121.568684][ T6062] XFS (loop2): Quotacheck needed: Please wait. [ 121.651974][ T6062] XFS (loop2): Quotacheck: Done. [ 121.721831][ T6079] usb 1-1: Using ep0 maxpacket: 16 [ 121.775074][ T6081] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 121.784533][ T25] audit: type=1804 audit(1781016977.717:7): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.585" name="/newroot/105/file0/file0/file0" dev="loop2" ino=9284 res=1 errno=0 [ 121.862598][ T4196] XFS (loop2): Unmounting Filesystem [ 121.880805][ T6079] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.960776][ T6079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.026465][ T6081] usb 6-1: Using ep0 maxpacket: 8 [ 122.130731][ T6079] usb 1-1: New USB device found, idVendor=bdb8, idProduct=f3ff, bcdDevice=ff.c2 [ 122.139819][ T6079] usb 1-1: New USB device strings: Mfr=248, Product=2, SerialNumber=3 [ 122.148275][ T6079] usb 1-1: Product: syz [ 122.153146][ T6079] usb 1-1: Manufacturer: syz [ 122.157779][ T6079] usb 1-1: SerialNumber: syz [ 122.190702][ T6081] usb 6-1: unable to get BOS descriptor or descriptor too short [ 122.270869][ T6081] usb 6-1: config 8 has an invalid interface number: 42 but max is 0 [ 122.281526][ T6081] usb 6-1: config 8 has no interface number 0 [ 122.288350][ T6081] usb 6-1: config 8 interface 42 has no altsetting 0 [ 122.451514][ T6081] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 122.475632][ T6081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.513902][ T6081] usb 6-1: Product: syz [ 122.528514][ T6081] usb 6-1: Manufacturer: syz [ 122.548777][ T6081] usb 6-1: SerialNumber: syz [ 122.851590][ T6081] empeg 6-1:8.42: empeg converter detected [ 122.857515][ T6081] usb 6-1: active config #8 != 1 ?? [ 122.957266][ T6081] usb 1-1: USB disconnect, device number 8 [ 123.101575][ T6079] usb 6-1: USB disconnect, device number 2 [ 123.380523][ T6079] Bluetooth: hci0: command 0x2016 tx timeout [ 123.834837][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 123.878832][ T6178] device veth0_macvtap left promiscuous mode [ 124.614879][ T6205] loop2: detected capacity change from 0 to 512 [ 124.626310][ T6192] loop5: detected capacity change from 0 to 32768 [ 124.680231][ T6205] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.759622][ T6205] EXT4-fs (loop2): 1 truncate cleaned up [ 124.766906][ T6205] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000010000,,errors=continue. Quota mode: none. [ 124.797921][ T276] ERROR: (device loop5): diFree: numfree > numinos [ 124.797921][ T276] [ 124.800868][ T6209] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 124.856072][ T276] ERROR: (device loop5): remounting filesystem as read-only [ 124.891265][ T6205] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.632: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 125.028862][ T6156] overlayfs: failed to resolve './file0': -2 [ 125.673274][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 125.686939][ T6081] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.706634][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 125.902719][ T25] audit: type=1326 audit(1781016981.847:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.1.651" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc7ab7ee59 code=0x0 [ 125.933563][ T6081] usb 3-1: Using ep0 maxpacket: 8 [ 126.055882][ T6081] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.072209][ T6289] tipc: Started in network mode [ 126.079401][ T6081] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.093061][ T6289] tipc: Node identity ac1414aa, cluster identity 4711 [ 126.110806][ T6081] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.123852][ T6289] tipc: Enabled bearer , priority 10 [ 126.133655][ T6081] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.151328][ T6292] netlink: 'syz.0.652': attribute type 13 has an invalid length. [ 126.159201][ T6081] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.183555][ T6081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.222208][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.378679][ T6307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.656'. [ 126.460823][ T6081] usb 3-1: GET_CAPABILITIES returned 0 [ 126.466369][ T6081] usbtmc 3-1:16.0: can't read capabilities [ 126.710474][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.720976][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.730098][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.739203][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.748263][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.757307][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.766434][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.775489][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.784561][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.793601][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.802645][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.811682][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.820723][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.829758][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.838792][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 126.847825][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 127.077074][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 127.152363][ T6081] usb 3-1: USB disconnect, device number 6 [ 127.211606][ T13] tipc: Node number set to 2886997162 [ 127.231975][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 127.263553][ T6346] netlink: 9 bytes leftover after parsing attributes in process `syz.4.664'. [ 128.036552][ T6376] loop2: detected capacity change from 0 to 4096 [ 128.179069][ T6376] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 128.228745][ T6376] EXT4-fs (loop2): inline encryption not supported [ 128.263709][ T6376] EXT4-fs (loop2): Test dummy encryption mode enabled [ 128.326230][ T6376] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 128.390719][ T6376] System zones: 0-5 [ 128.417853][ T6376] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 128.648059][ T25] audit: type=1800 audit(1781016984.587:9): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.673" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 128.807864][ T6403] 9pnet: Insufficient options for proto=fd [ 128.955076][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 129.340274][ T6384] loop0: detected capacity change from 0 to 32768 [ 129.424016][ T6384] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.675 (6384) [ 129.477630][ T25] audit: type=1326 audit(1781016985.417:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.686" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3980d00e59 code=0x7ffc0000 [ 129.501612][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.611814][ T6384] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 129.629463][ T25] audit: type=1326 audit(1781016985.467:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.686" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3980d00e59 code=0x7ffc0000 [ 129.653387][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.673331][ T6384] BTRFS info (device loop0): setting nodatacow, compression disabled [ 129.704924][ T6384] BTRFS info (device loop0): turning on flush-on-commit [ 129.734408][ T6384] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 129.767001][ T25] audit: type=1326 audit(1781016985.467:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.686" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3980d00e59 code=0x7ffc0000 [ 129.785137][ T6384] BTRFS info (device loop0): use lzo compression, level 0 [ 129.843473][ T6384] BTRFS info (device loop0): setting nodatasum [ 129.864171][ T6384] BTRFS info (device loop0): use no compression [ 129.868316][ T25] audit: type=1326 audit(1781016985.467:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.686" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3980d00e59 code=0x7ffc0000 [ 129.887906][ T6384] BTRFS info (device loop0): trying to use backup root at mount time [ 129.944481][ T6384] BTRFS info (device loop0): max_inline at 0 [ 129.972984][ T6384] BTRFS info (device loop0): using free space tree [ 129.977506][ T25] audit: type=1326 audit(1781016985.467:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.686" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3980d00e59 code=0x7ffc0000 [ 129.996394][ T6384] BTRFS info (device loop0): has skinny extents [ 130.003426][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.101028][ T6448] loop5: detected capacity change from 0 to 512 [ 130.124046][ T25] audit: type=1326 audit(1781016985.467:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.686" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3980d00e59 code=0x7ffc0000 [ 130.148079][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.167470][ T25] audit: type=1326 audit(1781016985.467:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.686" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3980d00e59 code=0x7ffc0000 [ 130.193921][ T25] audit: type=1326 audit(1781016985.467:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.686" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3980d00e59 code=0x7ffc0000 [ 130.218199][ T25] audit: type=1326 audit(1781016985.467:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.686" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3980d00e59 code=0x7ffc0000 [ 130.292512][ T6448] EXT4-fs (loop5): Ignoring removed bh option [ 130.329850][ T1172] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 130.345594][ T6384] BTRFS warning (device loop0): couldn't read tree root [ 130.353337][ T1172] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 130.365421][ T6384] BTRFS warning (device loop0): couldn't read tree root [ 130.387361][ T6384] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 130.392623][ T6448] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.690: corrupted in-inode xattr [ 130.400739][ T6384] BTRFS warning (device loop0): couldn't read tree root [ 130.435482][ T6384] BTRFS info (device loop0): enabling ssd optimizations [ 130.445171][ T6384] BTRFS info (device loop0): clearing free space tree [ 130.454258][ T6384] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.467506][ T6384] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.534473][ T6448] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.690: couldn't read orphan inode 15 (err -117) [ 130.563205][ T6448] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 130.593907][ T6384] BTRFS info (device loop0): creating free space tree [ 130.614775][ T6384] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.660894][ T6384] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.928778][ T6448] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.690: Unrecognised inode hash code 4 [ 131.012470][ T6448] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.690: Corrupt directory, running e2fsck is recommended [ 131.026426][ T6487] tipc: Started in network mode [ 131.041752][ T6487] tipc: Node identity f8000000, cluster identity 4711 [ 131.052143][ T6448] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.690: Unrecognised inode hash code 4 [ 131.075960][ T6487] tipc: Node number set to 4160749568 [ 131.101874][ T6448] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.690: Corrupt directory, running e2fsck is recommended [ 131.752980][ T6524] loop5: detected capacity change from 0 to 512 [ 131.870595][ T6524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a817e02c, mo2=0102] [ 131.929998][ T6524] System zones: 1-12 [ 131.958417][ T6524] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.702: invalid indirect mapped block 8 (level 2) [ 132.070585][ T6524] EXT4-fs (loop5): Remounting filesystem read-only [ 132.080017][ T6524] EXT4-fs (loop5): 1 truncate cleaned up [ 132.094858][ T6524] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,grpquota,abort,max_dir_size_kb=0x0000000000000009,errors=remount-ro,init_itable,noauto_da_alloc,. Quota mode: writeback. [ 132.598697][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.605118][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.743242][ T6535] loop0: detected capacity change from 0 to 32768 [ 132.885777][ T6576] overlayfs: failed to clone upperpath [ 132.937385][ T6535] XFS (loop0): Mounting V5 Filesystem [ 133.095263][ T6573] relay: one or more items not logged [item size (56) > sub-buffer size (14)] [ 133.118958][ T6535] XFS (loop0): Ending clean mount [ 133.182291][ T6535] XFS (loop0): Quotacheck needed: Please wait. [ 133.250180][ T6590] loop2: detected capacity change from 0 to 1764 [ 133.314491][ T6535] XFS (loop0): Quotacheck: Done. [ 133.524395][ T4190] XFS (loop0): Unmounting Filesystem [ 133.887954][ T6569] loop5: detected capacity change from 0 to 32768 [ 133.952107][ T6569] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.717 (6569) [ 134.144343][ T6569] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 134.192046][ T6569] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.223878][ T6569] BTRFS info (device loop5): use zstd compression, level 3 [ 134.260691][ T6569] BTRFS info (device loop5): use no compression [ 134.266993][ T6569] BTRFS info (device loop5): using free space tree [ 134.310093][ T6569] BTRFS info (device loop5): has skinny extents [ 134.616294][ T6569] BTRFS info (device loop5): enabling ssd optimizations [ 135.511789][ T6664] sock: sock_set_timeout: `syz.2.742' (pid 6664) tries to set negative timeout [ 135.610220][ T6668] loop2: detected capacity change from 0 to 256 [ 135.693507][ T6668] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 135.913564][ T6678] bridge0: port 3(syz_tun) entered blocking state [ 135.921388][ T6678] bridge0: port 3(syz_tun) entered disabled state [ 135.931032][ T6678] device syz_tun entered promiscuous mode [ 135.938027][ T6678] bridge0: port 3(syz_tun) entered blocking state [ 135.945158][ T6678] bridge0: port 3(syz_tun) entered forwarding state [ 136.015576][ T6683] netlink: 'syz.5.751': attribute type 2 has an invalid length. [ 136.068903][ T6687] loop2: detected capacity change from 0 to 128 [ 136.115700][ T6687] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.137992][ T6687] hpfs: filesystem error: improperly stopped [ 136.153640][ T6687] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 136.178234][ T6687] hpfs: You really don't want any checks? You are crazy... [ 136.200778][ T6687] hpfs: Code page index out of array [ 136.216337][ T6687] hpfs: code page support is disabled [ 136.230145][ T6687] hpfs: hpfs_map_4sectors(): unaligned read [ 136.240688][ T6687] hpfs: hpfs_map_4sectors(): unaligned read [ 136.254230][ T6687] hpfs: filesystem error: unable to find root dir [ 136.512787][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.761'. [ 137.737252][ T6727] loop5: detected capacity change from 0 to 64 [ 138.169066][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.605283][ T6753] loop2: detected capacity change from 0 to 64 [ 138.746573][ T6755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.754665][ T6755] IPv6: NLM_F_CREATE should be set when creating new route [ 138.807425][ T6758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.976776][ T6765] fuse: Bad value for 'fd' [ 139.620996][ T6054] wlan1: Trigger new scan to find an IBSS to join [ 139.722648][ T6794] loop5: detected capacity change from 0 to 512 [ 139.784270][ T6794] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 139.848551][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 139.857606][ T6794] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.797: inode #1: comm syz.5.797: iget: illegal inode # [ 140.003108][ T6794] EXT4-fs (loop5): Remounting filesystem read-only [ 140.010720][ T6789] loop0: detected capacity change from 0 to 32768 [ 140.017498][ T6794] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.797: error while reading EA inode 1 err=-117 [ 140.050605][ T6794] EXT4-fs (loop5): Remounting filesystem read-only [ 140.061311][ T6794] EXT4-fs (loop5): 1 orphan inode deleted [ 140.067204][ T6794] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,nombcache,noinit_itable,nomblk_io_submit,nodelalloc,nobarrier,inode_readahead_blks=0x0000000000000000,usrjquota=,block_validity,discard,noquota,. Quota mode: none. [ 140.117150][ T6789] XFS (loop0): Mounting V5 Filesystem [ 140.171182][ T6794] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.797: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 140.343633][ T6789] XFS (loop0): Ending clean mount [ 140.420570][ T6794] EXT4-fs (loop5): Remounting filesystem read-only [ 140.582212][ T4190] XFS (loop0): Unmounting Filesystem [ 140.742790][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.432665][ T6844] loop0: detected capacity change from 0 to 1024 [ 141.508549][ T6844] EXT4-fs (loop0): blocks per group (0) and clusters per group (32) inconsistent [ 141.520305][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 141.745092][ T6849] team0: Port device team_slave_0 removed [ 141.854820][ T6858] lo speed is unknown, defaulting to 1000 [ 141.886284][ T6858] lo speed is unknown, defaulting to 1000 [ 141.901849][ T6856] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.912928][ T6858] lo speed is unknown, defaulting to 1000 [ 142.582592][ T6516] lo speed is unknown, defaulting to 1000 [ 142.580320][ T6858] infiniband sz1: set active [ 142.656180][ T6858] infiniband sz1: added lo [ 142.912937][ T25] kauditd_printk_skb: 288 callbacks suppressed [ 142.912950][ T25] audit: type=1326 audit(1781016998.857:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 143.008712][ T6858] RDS/IB: sz1: added [ 143.073900][ T6858] smc: adding ib device sz1 with port count 1 [ 143.073951][ T25] audit: type=1326 audit(1781016998.917:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 143.110636][ T6858] smc: ib device sz1 port 1 has pnetid [ 143.142322][ T6081] lo speed is unknown, defaulting to 1000 [ 143.162299][ T6876] loop2: detected capacity change from 0 to 32768 [ 143.165071][ T6858] lo speed is unknown, defaulting to 1000 [ 143.192663][ T25] audit: type=1326 audit(1781016998.917:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 143.265885][ T6876] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.827 (6876) [ 143.327459][ T6876] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 143.359688][ T25] audit: type=1326 audit(1781016998.917:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 143.384558][ T6876] BTRFS info (device loop2): setting nodatasum [ 143.400455][ T6876] BTRFS info (device loop2): force zlib compression, level 3 [ 143.407886][ T6876] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 143.427384][ T25] audit: type=1326 audit(1781016998.917:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 143.500526][ T6876] BTRFS info (device loop2): use lzo compression, level 0 [ 143.517295][ T6861] loop0: detected capacity change from 0 to 32768 [ 143.523910][ T6876] BTRFS info (device loop2): turning on flush-on-commit [ 143.557466][ T6876] BTRFS info (device loop2): enabling auto defrag [ 143.572201][ T25] audit: type=1326 audit(1781016998.917:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 143.620901][ T6876] BTRFS info (device loop2): max_inline at 4096 [ 143.650439][ T6876] BTRFS info (device loop2): using free space tree [ 143.689314][ T6876] BTRFS info (device loop2): has skinny extents [ 143.699665][ T6861] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.820 (6861) [ 143.711090][ T25] audit: type=1326 audit(1781016998.917:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 143.792202][ T25] audit: type=1326 audit(1781016998.917:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 143.816970][ T25] audit: type=1326 audit(1781016998.917:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 143.880035][ T4178] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4178) [ 143.966929][ T25] audit: type=1326 audit(1781016998.917:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.5.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a244c2e59 code=0x7ffc0000 [ 144.035994][ T6858] lo speed is unknown, defaulting to 1000 [ 144.188485][ T6928] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.210801][ T6876] BTRFS info (device loop2): enabling ssd optimizations [ 144.285199][ T6858] lo speed is unknown, defaulting to 1000 [ 144.512069][ T6858] lo speed is unknown, defaulting to 1000 [ 144.521785][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 144.543148][ T6935] batman_adv: batadv0: Adding interface: dummy0 [ 144.561773][ T6935] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.668120][ T6935] batman_adv: batadv0: Interface activated: dummy0 [ 144.710786][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 144.796756][ T6942] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.810448][ T6942] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.819296][ T6942] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.828147][ T6942] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.893605][ T6941] batadv0: mtu less than device minimum [ 144.903840][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 144.917003][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 144.929416][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 144.941873][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 144.954340][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 144.966752][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 144.979234][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 144.991765][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 145.004198][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 145.099678][ T6858] lo speed is unknown, defaulting to 1000 [ 145.110741][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 146.038262][ T6984] lo speed is unknown, defaulting to 1000 [ 146.300695][ T6991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.860'. [ 147.057927][ T7005] loop0: detected capacity change from 0 to 2048 [ 147.400769][ T6074] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.650621][ T6074] usb 1-1: Using ep0 maxpacket: 8 [ 147.690904][ T6661] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 147.775248][ T6074] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 147.798524][ T6074] usb 1-1: config 179 has no interface number 0 [ 147.817188][ T6074] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 66, changing to 10 [ 147.847429][ T6074] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 41473, setting to 1024 [ 147.881833][ T6074] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.905361][ T6074] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 147.928988][ T6074] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 147.956800][ T6074] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 147.976117][ T6074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.080803][ T6661] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.092088][ T6661] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.200548][ T6661] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.224050][ T6661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.240199][ T6661] usb 6-1: SerialNumber: syz [ 148.379468][ T6074] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input9 [ 148.485308][ T7005] udc-core: couldn't find an available UDC or it's busy [ 148.511402][ T7005] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 148.558060][ T6661] usb 6-1: 0:2 : does not exist [ 148.619303][ T6661] usb 6-1: USB disconnect, device number 3 [ 148.638867][ T7051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.883'. [ 148.707423][ T7052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.883'. [ 148.744138][ T6074] usb 1-1: USB disconnect, device number 9 [ 148.760638][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 148.770093][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 148.883884][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.019444][ T7065] overlayfs: failed to clone upperpath [ 149.037192][ T7065] overlayfs: failed to clone upperpath [ 149.465369][ T7068] loop5: detected capacity change from 0 to 4096 [ 149.756700][ T7063] loop2: detected capacity change from 0 to 131072 [ 149.782416][ T7082] overlayfs: failed to clone upperpath [ 149.800094][ T7068] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 149.839908][ T7063] F2FS-fs (loop2): invalid crc value [ 149.897947][ T7063] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.953486][ T7063] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 149.999351][ T7063] F2FS-fs (loop2): invalid namelen(0), ino:8, run fsck to fix. [ 150.130672][ T6075] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 150.148535][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 150.540891][ T6075] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 150.569412][ T6075] usb 1-1: config 0 has no interface number 0 [ 150.579579][ T6075] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.679906][ T7099] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 150.708236][ T7099] netlink: 'syz.1.904': attribute type 4 has an invalid length. [ 150.716242][ T7099] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.904'. [ 150.749586][ T7101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.770806][ T6075] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 150.800312][ T6075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.808421][ T6075] usb 1-1: Product: syz [ 150.830627][ T6075] usb 1-1: Manufacturer: syz [ 150.840445][ T6075] usb 1-1: SerialNumber: syz [ 150.865051][ T6075] usb 1-1: config 0 descriptor?? [ 150.938674][ T6075] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 151.247701][ T7114] netlink: 'syz.1.910': attribute type 13 has an invalid length. [ 151.266177][ T7114] netlink: 'syz.1.910': attribute type 17 has an invalid length. [ 151.350827][ T6076] usb 1-1: USB disconnect, device number 10 [ 151.356862][ T5636] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 151.375407][ T6076] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 151.410336][ T7114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.422317][ T7114] net_ratelimit: 10 callbacks suppressed [ 151.422327][ T7114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.584376][ T7159] device syzkaller1 entered promiscuous mode [ 153.056264][ T7180] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 153.069007][ T7152] overlayfs: failed to resolve './file0': -2 [ 153.131354][ T7180] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.141156][ T7180] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.150830][ T7180] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.163308][ T7182] loop2: detected capacity change from 0 to 2048 [ 153.165220][ T7180] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.222303][ T7180] bond1: (slave geneve2): making interface the new active one [ 153.234185][ T7180] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 153.262579][ T7180] syz.0.934 (7180) used greatest stack depth: 20112 bytes left [ 153.446790][ T7182] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.545132][ T7196] loop5: detected capacity change from 0 to 128 [ 153.616462][ T7196] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 153.757029][ T25] kauditd_printk_skb: 24 callbacks suppressed [ 153.757043][ T25] audit: type=1804 audit(1781017009.697:341): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.940" name="/newroot/71/file1/file1" dev="loop5" ino=94 res=1 errno=0 [ 153.786464][ T7203] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 153.969960][ T7198] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 154.007232][ T7198] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 154.230336][ T9] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 154.260268][ T9] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 154.347114][ T7209] loop2: detected capacity change from 0 to 32768 [ 154.447968][ T7209] XFS (loop2): Mounting V5 Filesystem [ 154.460833][ T6076] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 154.593431][ T7209] XFS (loop2): Ending clean mount [ 154.603596][ T7209] XFS (loop2): Quotacheck needed: Please wait. [ 154.700494][ T6076] usb 1-1: Using ep0 maxpacket: 32 [ 154.776991][ T7209] XFS (loop2): Quotacheck: Done. [ 154.830659][ T6076] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 154.848474][ T6076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.898153][ T6076] usb 1-1: config 0 descriptor?? [ 154.903282][ T4196] XFS (loop2): Unmounting Filesystem [ 154.960182][ T6076] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 154.992637][ T7242] overlayfs: failed to clone upperpath [ 155.345010][ T7253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.370162][ T7253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.630595][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.880543][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 156.175126][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0048, bcdDevice= 0.40 [ 156.200447][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.208657][ T13] usb 3-1: Product: syz [ 156.220596][ T13] usb 3-1: Manufacturer: syz [ 156.225244][ T13] usb 3-1: SerialNumber: syz [ 156.790627][ T6076] gspca_vc032x: reg_w err -71 [ 156.795604][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.811634][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.817780][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.830334][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.837174][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.850209][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.857206][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.866861][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.897196][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.915846][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.926479][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.933547][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.938988][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.948918][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.956088][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.966071][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.972878][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.978292][ T6076] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.998193][ T6076] gspca_vc032x: Unknown sensor... [ 157.007045][ T6076] vc032x: probe of 1-1:0.0 failed with error -22 [ 157.019781][ T6076] usb 1-1: USB disconnect, device number 11 [ 157.909148][ T7322] lo speed is unknown, defaulting to 1000 [ 157.970860][ T7323] netlink: 'syz.5.985': attribute type 16 has an invalid length. [ 157.995478][ T7323] netlink: 'syz.5.985': attribute type 17 has an invalid length. [ 158.055233][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.107291][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.133731][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.157470][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 158.172542][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 158.187278][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 158.209038][ T7323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.280571][ T6661] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 158.502335][ T13] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 158.561278][ T13] usb 3-1: USB disconnect, device number 7 [ 158.741074][ T6661] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.841960][ T6661] usb 1-1: config 0 has no interfaces? [ 159.136159][ T6661] usb 1-1: string descriptor 0 read error: -22 [ 159.146078][ T6661] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 159.165705][ T6661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.197988][ T6661] usb 1-1: config 0 descriptor?? [ 159.493893][ T6076] usb 1-1: USB disconnect, device number 12 [ 160.100592][ T7422] ip6tnl0: Caught tx_queue_len zero misconfig [ 160.139998][ T7423] netlink: 'syz.5.1020': attribute type 13 has an invalid length. [ 160.168171][ T7423] netlink: 'syz.5.1020': attribute type 17 has an invalid length. [ 160.373479][ T7423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.416715][ T7423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.446821][ T7423] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 160.475602][ T7423] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 160.519391][ T7423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.543540][ T7430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.581826][ T25] audit: type=1326 audit(1781017017.517:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 161.643110][ T25] audit: type=1326 audit(1781017017.557:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 161.697911][ T25] audit: type=1326 audit(1781017017.557:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 161.806183][ T25] audit: type=1326 audit(1781017017.557:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 161.883804][ T25] audit: type=1326 audit(1781017017.567:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 161.981244][ T25] audit: type=1326 audit(1781017017.567:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 162.065557][ T25] audit: type=1326 audit(1781017017.567:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 162.225677][ T25] audit: type=1326 audit(1781017017.567:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 162.365586][ T25] audit: type=1326 audit(1781017017.567:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 162.448124][ T25] audit: type=1326 audit(1781017017.567:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59ae50e59 code=0x7ffc0000 [ 162.605709][ T7492] loop5: detected capacity change from 0 to 128 [ 162.765068][ T7492] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.800263][ T7492] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.004645][ T7498] loop0: detected capacity change from 0 to 32768 [ 163.078721][ T7498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1049 (7498) [ 163.112524][ T7498] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 163.121669][ T7498] BTRFS info (device loop0): enabling auto defrag [ 163.128115][ T7498] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 163.137777][ T7498] BTRFS info (device loop0): use zstd compression, level 3 [ 163.145035][ T7498] BTRFS info (device loop0): turning on async discard [ 163.151879][ T7498] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 163.162527][ T7498] BTRFS info (device loop0): trying to use backup root at mount time [ 163.170677][ T7498] BTRFS info (device loop0): enabling ssd optimizations [ 163.177622][ T7498] BTRFS info (device loop0): using spread ssd allocation scheme [ 163.185442][ T7498] BTRFS info (device loop0): disabling free space tree [ 163.192334][ T7498] BTRFS error (device loop0): cannot disable free space tree [ 163.204444][ T7498] BTRFS error (device loop0): open_ctree failed: -22 [ 163.255439][ T7492] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 163.260663][ T4182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4182) [ 163.469586][ T7492] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 164.647115][ T7548] loop5: detected capacity change from 0 to 512 [ 164.712717][ T7548] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1063: inode has both inline data and extents flags [ 164.801769][ T7548] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1063: couldn't read orphan inode 15 (err -117) [ 164.845817][ T7548] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.262596][ T7572] loop2: detected capacity change from 0 to 128 [ 165.320494][ T6661] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 165.373378][ T7572] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.426371][ T7572] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.490077][ T7587] lo speed is unknown, defaulting to 1000 [ 165.711111][ T6661] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.725344][ T6661] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.740160][ T7601] xt_time: unknown flags 0xc [ 165.746066][ T6661] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.783980][ T7597] xt_CT: No such helper "snmp_trap" [ 165.788964][ T6661] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.950783][ T6661] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.970258][ T6661] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.991621][ T6661] usb 1-1: Product: syz [ 165.995823][ T6661] usb 1-1: Manufacturer: syz [ 166.071627][ T6661] cdc_wdm 1-1:1.0: skipping garbage [ 166.087073][ T6661] cdc_wdm 1-1:1.0: skipping garbage [ 166.105787][ T6661] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 166.122026][ T6661] cdc_wdm 1-1:1.0: Unknown control protocol [ 166.226926][ T7611] overlayfs: failed to clone upperpath [ 166.326717][ T6516] usb 1-1: USB disconnect, device number 13 [ 166.921888][ T6516] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 167.130553][ T6661] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.320657][ T6516] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.340669][ T6516] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.366198][ T6516] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.393307][ T6516] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.541041][ T6661] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.549691][ T6661] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 167.570654][ T6516] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.579726][ T6516] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.617144][ T6516] usb 1-1: Product: syz [ 167.627210][ T6661] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.647394][ T6516] usb 1-1: Manufacturer: syz [ 167.673650][ T6661] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 167.718187][ T6661] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 167.731692][ T6516] cdc_wdm 1-1:1.0: skipping garbage [ 167.736928][ T6516] cdc_wdm 1-1:1.0: skipping garbage [ 167.789162][ T6516] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 167.834457][ T6516] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.951263][ T6661] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.977200][ T6661] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.996120][ T6661] usb 3-1: Product: syz [ 168.000339][ T6661] usb 3-1: Manufacturer: syz [ 168.062931][ T7648] netlink: 'syz.1.1102': attribute type 11 has an invalid length. [ 168.083339][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1102'. [ 168.086660][ T6661] cdc_wdm 3-1:1.0: skipping garbage [ 168.100982][ T6661] cdc_wdm 3-1:1.0: skipping garbage [ 168.124783][ T6661] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 168.141639][ T6661] cdc_wdm 3-1:1.0: Unknown control protocol [ 168.292466][ T6661] usb 3-1: USB disconnect, device number 8 [ 168.517650][ T7665] loop5: detected capacity change from 0 to 128 [ 168.541962][ T21] usb 1-1: USB disconnect, device number 14 [ 168.648768][ T25] kauditd_printk_skb: 31 callbacks suppressed [ 168.648782][ T25] audit: type=1800 audit(1781017024.587:383): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1109" name="bus" dev="loop5" ino=1048605 res=0 errno=0 [ 168.656603][ T7668] Trying to write to read-only block-device loop5 [ 168.693419][ T7668] Trying to write to read-only block-device loop5 [ 168.700146][ T7668] attempt to access beyond end of device [ 168.700146][ T7668] loop5: rw=2049, want=657, limit=128 [ 168.895889][ T5636] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 168.918051][ T5636] FAT-fs (loop5): Filesystem has been set read-only [ 168.926982][ T7676] overlayfs: failed to clone upperpath [ 168.942266][ T5636] Trying to write to read-only block-device loop5 [ 168.952447][ T5636] Trying to write to read-only block-device loop5 [ 168.969249][ T5636] Trying to write to read-only block-device loop5 [ 168.976400][ T5636] Trying to write to read-only block-device loop5 [ 168.990605][ T6661] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.292313][ T7689] loop5: detected capacity change from 0 to 512 [ 169.375921][ T6661] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.395283][ T6661] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 169.443375][ T6661] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.460003][ T6661] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 169.485353][ T6661] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 169.545082][ T7694] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 169.665821][ T6661] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.687622][ T6661] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.716621][ T6661] usb 3-1: Product: syz [ 169.726755][ T6661] usb 3-1: Manufacturer: syz [ 169.781612][ T6661] cdc_wdm 3-1:1.0: skipping garbage [ 169.786867][ T6661] cdc_wdm 3-1:1.0: skipping garbage [ 169.813448][ T6661] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 169.819417][ T6661] cdc_wdm 3-1:1.0: Unknown control protocol [ 169.880564][ T6661] usb 3-1: USB disconnect, device number 9 [ 169.892210][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 170.108186][ T7691] loop0: detected capacity change from 0 to 32768 [ 170.280608][ T21] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 170.309109][ T21] usb 6-1: config 128 has no interface number 0 [ 170.342921][ T21] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 170.387912][ T21] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 170.435395][ T21] usb 6-1: config 128 interface 148 has no altsetting 0 [ 170.643513][ T21] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 170.672754][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.690929][ T21] usb 6-1: Product: syz [ 170.710429][ T21] usb 6-1: Manufacturer: syz [ 170.723845][ T21] usb 6-1: SerialNumber: syz [ 171.007357][ T7730] fuse: Bad value for 'fd' [ 171.059818][ T21] usb 6-1: USB disconnect, device number 4 [ 171.607364][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 171.685112][ T7748] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 171.710564][ T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 171.980582][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 172.079544][ T7764] device ipip0 entered promiscuous mode [ 172.088569][ T7764] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 172.100810][ T7764] bond0: (slave ipip0): Error -95 calling set_mac_address [ 172.111903][ T21] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 172.122106][ T21] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.132138][ T21] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.142113][ T21] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 172.152339][ T21] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.165933][ T21] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.175187][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.460649][ T21] usb 6-1: usb_control_msg returned -32 [ 172.466276][ T21] usbtmc 6-1:16.0: can't read capabilities [ 172.485291][ T7790] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 172.536645][ T7795] loop2: detected capacity change from 0 to 512 [ 172.565556][ T7790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.600486][ T7795] EXT4-fs (loop2): #blocks per group too big: 8724480 [ 172.656466][ T7797] bond1: (slave dummy0): making interface the new active one [ 172.711494][ T7797] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 172.721734][ T7802] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 172.728565][ T7804] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.729565][ T7802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1157'. [ 172.775669][ T7802] device dummy0 entered promiscuous mode [ 172.852376][ T7802] bond1: (slave dummy0): Releasing active interface [ 172.933662][ T7812] loop0: detected capacity change from 0 to 4096 [ 172.996749][ T7815] capability: warning: `syz.2.1166' uses 32-bit capabilities (legacy support in use) [ 173.029991][ T7812] EXT4-fs (loop0): Test dummy encryption mode enabled [ 173.052227][ T7812] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 173.077166][ T7812] System zones: 0-5 [ 173.083793][ T7812] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 173.310510][ T7823] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 173.502002][ T13] usb 6-1: USB disconnect, device number 5 [ 174.094663][ T7848] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 174.136607][ T7848] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 174.146417][ T7848] team0: Failed to send options change via netlink (err -105) [ 174.182192][ T7848] team0: Port device netdevsim0 added [ 174.646710][ T7865] bridge0: port 3(syz_tun) entered disabled state [ 174.685108][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.692432][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.238724][ T7865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.277094][ T7865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.612458][ T7865] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.620634][ T6512] Bluetooth: hci3: command 0x0406 tx timeout [ 175.626783][ T7865] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.628688][ T6512] Bluetooth: hci0: command 0x0406 tx timeout [ 175.637116][ T7865] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.659979][ T6512] Bluetooth: hci2: command 0x0406 tx timeout [ 175.682229][ T7865] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.737818][ T7888] loop0: detected capacity change from 0 to 2048 [ 175.805411][ T4182] loop0: p1 < > p4 < > [ 175.857881][ T7878] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1190'. [ 175.877760][ T7888] loop0: p1 < > p4 < > [ 175.929127][ T7892] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1195'. [ 175.979661][ T3560] loop0: p1 < > p4 < > [ 176.221889][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 176.224339][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 176.334239][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 176.356528][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 176.399035][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 176.423387][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 176.661222][ T7891] loop2: detected capacity change from 0 to 32768 [ 176.819438][ T7891] XFS (loop2): Mounting V5 Filesystem [ 176.897079][ T7891] XFS (loop2): Ending clean mount [ 177.073889][ T7935] device vti0 entered promiscuous mode [ 177.556444][ T7957] loop5: detected capacity change from 0 to 8192 [ 177.867458][ T7971] overlayfs: failed to clone upperpath [ 178.577346][ T4196] XFS (loop2): Unmounting Filesystem [ 178.900073][ T7986] loop5: detected capacity change from 0 to 32768 [ 179.340060][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1234'. [ 179.397770][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1234'. [ 179.568973][ T8015] lo speed is unknown, defaulting to 1000 [ 179.602583][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 179.605304][ T8013] loop5: detected capacity change from 0 to 4096 [ 179.642287][ T8013] /dev/loop5: Can't open blockdev [ 179.649476][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 179.719037][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 179.789825][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 179.827031][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 179.852575][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 179.882795][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 179.919190][ T8018] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 179.959985][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1238'. [ 179.987422][ T8007] lo speed is unknown, defaulting to 1000 [ 180.572694][ T8047] trusted_key: encrypted_key: key trusted:syz not found [ 180.581988][ T8047] xt_recent: Unsupported userspace flags (000000b1) [ 180.643315][ T6512] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.744004][ T6512] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.922524][ T8032] loop5: detected capacity change from 0 to 40427 [ 183.565114][ T8108] loop5: detected capacity change from 0 to 128 [ 183.678734][ T4182] udevd[4182]: incorrect ext4 checksum on /dev/loop5 [ 183.707554][ T8108] Trying to write to read-only block-device loop5 [ 183.756474][ T4182] udevd[4182]: incorrect ext4 checksum on /dev/loop5 [ 185.370251][ T8133] loop5: detected capacity change from 0 to 1024 [ 185.569920][ T8133] loop5: detected capacity change from 0 to 2048 [ 185.981645][ T8145] block device autoloading is deprecated and will be removed. [ 186.739168][ T8165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1296'. [ 187.307309][ T8177] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1300'. [ 187.733378][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 187.767393][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 187.794429][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 187.825732][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 187.836261][ T8091] Set syz1 is full, maxelem 65536 reached [ 187.851753][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 187.889763][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 187.891100][ T8169] loop2: detected capacity change from 0 to 32768 [ 187.921115][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 187.961308][ T8169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1297 (8169) [ 187.961612][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.037026][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.065427][ T8169] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 188.081640][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.098562][ T8169] BTRFS info (device loop2): using free space tree [ 188.123822][ T8169] BTRFS info (device loop2): has skinny extents [ 188.245691][ T8187] team0: Port device netdevsim0 removed [ 188.313717][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 188.330041][ T8188] team0: Mode changed to "loadbalance" [ 188.402347][ T8169] BTRFS info (device loop2): enabling ssd optimizations [ 188.709877][ T4182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4182) [ 188.737974][ T8217] loop0: detected capacity change from 0 to 512 [ 189.176908][ T8217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.1309: missing EA_INODE flag [ 189.264796][ T8217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1309: error while reading EA inode 2 err=-117 [ 189.279735][ T8227] 0x0000000000a8-0x000000005511 : "" [ 189.329664][ T8217] EXT4-fs (loop0): 1 orphan inode deleted [ 189.373263][ T8217] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 189.426026][ T8227] ftl_cs: FTL header corrupt! [ 189.633814][ T8217] overlayfs: failed to resolve './file1/file0': -2 [ 189.673815][ T9] [ 189.676178][ T9] ============================================ [ 189.682299][ T9] WARNING: possible recursive locking detected [ 189.688427][ T9] syzkaller #0 Not tainted [ 189.692814][ T9] -------------------------------------------- [ 189.698941][ T9] kworker/u4:0/9 is trying to acquire lock: [ 189.704802][ T9] ffffe8ffffd6d140 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x585/0x9a0 [ 189.714088][ T9] [ 189.714088][ T9] but task is already holding lock: [ 189.721438][ T9] ffffe8ffffc74490 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x41c/0x9a0 [ 189.730656][ T9] [ 189.730656][ T9] other info that might help us debug this: [ 189.738689][ T9] Possible unsafe locking scenario: [ 189.738689][ T9] [ 189.746111][ T9] CPU0 [ 189.749375][ T9] ---- [ 189.752627][ T9] lock(&pd_list->lock); [ 189.756929][ T9] lock(&pd_list->lock); [ 189.761229][ T9] [ 189.761229][ T9] *** DEADLOCK *** [ 189.761229][ T9] [ 189.769346][ T9] May be due to missing lock nesting notation [ 189.769346][ T9] [ 189.777725][ T9] 3 locks held by kworker/u4:0/9: [ 189.782723][ T9] #0: ffff888141ff0938 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 189.794005][ T9] #1: ffffc90000ce7d00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 189.805298][ T9] #2: ffffe8ffffc74490 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x41c/0x9a0 [ 189.815028][ T9] [ 189.815028][ T9] stack backtrace: [ 189.820906][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 189.828170][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.838211][ T9] Workqueue: pencrypt_parallel padata_parallel_worker [ 189.844975][ T9] Call Trace: [ 189.848241][ T9] [ 189.851154][ T9] dump_stack_lvl+0x188/0x250 [ 189.855811][ T9] ? show_regs_print_info+0x20/0x20 [ 189.860984][ T9] ? load_image+0x400/0x400 [ 189.865469][ T9] __lock_acquire+0x1236/0x7d10 [ 189.870300][ T9] ? mark_lock+0x94/0x320 [ 189.874611][ T9] ? verify_lock_unused+0x140/0x140 [ 189.879873][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 189.885828][ T9] ? lock_chain_count+0x20/0x20 [ 189.890658][ T9] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 189.896790][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 189.901968][ T9] lock_acquire+0x19e/0x400 [ 189.906444][ T9] ? padata_do_serial+0x585/0x9a0 [ 189.911441][ T9] ? queue_work_on+0x196/0x1f0 [ 189.916177][ T9] ? queue_work_on+0x1a0/0x1f0 [ 189.920913][ T9] ? read_lock_is_recursive+0x10/0x10 [ 189.926264][ T9] ? wq_worker_last_func+0x40/0x40 [ 189.931351][ T9] ? __rwlock_init+0x140/0x140 [ 189.936087][ T9] _raw_spin_lock+0x2a/0x40 [ 189.940567][ T9] ? padata_do_serial+0x585/0x9a0 [ 189.945579][ T9] padata_do_serial+0x585/0x9a0 [ 189.950415][ T9] padata_parallel_worker+0x5c/0x1a0 [ 189.955680][ T9] process_one_work+0x85f/0x1010 [ 189.960602][ T9] ? worker_detach_from_pool+0x240/0x240 [ 189.966214][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 189.971480][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.976483][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.982015][ T9] ? wq_worker_running+0x97/0x170 [ 189.987026][ T9] worker_thread+0xaa6/0x1290 [ 189.991683][ T9] kthread+0x436/0x520 [ 189.995729][ T9] ? rcu_lock_release+0x20/0x20 [ 190.000555][ T9] ? kthread_blkcg+0xd0/0xd0 [ 190.005126][ T9] ret_from_fork+0x1f/0x30 [ 190.009518][ T9] [ 194.030648][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.036978][ T1419] ieee802154 phy1 wpan1: encryption failed: -22