last executing test programs: 3m1.508395608s ago: executing program 4 (id=1313): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x7) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0xe20, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x405}, 0x1c) 3m0.504372056s ago: executing program 4 (id=1317): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x42, 0x5520, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8841, 0x17d) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x300, 0xff, 0x4, 0x0, 0x1}) 2m58.470146495s ago: executing program 4 (id=1326): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1c5042, 0x58) 2m50.087619081s ago: executing program 4 (id=1335): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x15, &(0x7f00000000c0)={[{@nodioread_nolock}, {@nobarrier}, {@mblk_io_submit}, {@nobh}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000000, 0x0) 2m48.799179714s ago: executing program 4 (id=1343): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0xfffffec1) 2m47.864805996s ago: executing program 4 (id=1347): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto(r0, &(0x7f0000000540)="f6b4ff270e6532b2d40765f9e8b460bd68b7e03a08d842e54efc234e21b4fec0541e98608bd3070ff700079b3dc0d7520e7351a1b4266e018855fc4819c097783f98064577274ff947328e4fa0ac578dfad9dba45afb427b80a1b4825dc8e8f06667f93a3d429d004d1933f47ac6e2d5d8b1e58d4eb92fa0a5c5b87b800712e299d0c714c78406947586a02fb600029a4daeb3efe7cba41f2d2d6626f63c7c7f0271cbac55d23e0afc639d9810", 0xfe6d621e554cffe6, 0xd63a66976f7dfbe0, 0x0, 0x0) 2m47.584721521s ago: executing program 32 (id=1347): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto(r0, &(0x7f0000000540)="f6b4ff270e6532b2d40765f9e8b460bd68b7e03a08d842e54efc234e21b4fec0541e98608bd3070ff700079b3dc0d7520e7351a1b4266e018855fc4819c097783f98064577274ff947328e4fa0ac578dfad9dba45afb427b80a1b4825dc8e8f06667f93a3d429d004d1933f47ac6e2d5d8b1e58d4eb92fa0a5c5b87b800712e299d0c714c78406947586a02fb600029a4daeb3efe7cba41f2d2d6626f63c7c7f0271cbac55d23e0afc639d9810", 0xfe6d621e554cffe6, 0xd63a66976f7dfbe0, 0x0, 0x0) 13.948990395s ago: executing program 5 (id=1890): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x2) 13.879318351s ago: executing program 5 (id=1892): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 12.500255252s ago: executing program 2 (id=1894): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x59) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x62, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234", 0x24}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112", 0x2b}, {0x0}], 0x3}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.455066346s ago: executing program 0 (id=1895): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) 12.318126298s ago: executing program 5 (id=1897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 12.265407823s ago: executing program 2 (id=1898): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0) 11.239832453s ago: executing program 3 (id=1899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '#.('}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004880) 11.225449054s ago: executing program 2 (id=1900): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe8, 0xbc, 0x1, 0x10, 0x1164, 0x622, 0xc6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x18, 0x0, [{{0x9, 0x4, 0xf5, 0x7, 0x0, 0xb9, 0xc1, 0x78, 0x2}}]}}]}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) 11.091585056s ago: executing program 3 (id=1901): stat(&(0x7f00000000c0)='./file4\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f00000003c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fat=@gid={'gid', 0x3d, r0}}, {@shortname_winnt}, {@shortname_win95}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@shortname_mixed}, {@rodir}, {@rodir}, {@nonumtail}]}, 0x7, 0x2bd, &(0x7f0000000680)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 11.0451794s ago: executing program 5 (id=1902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x6, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 8.401143052s ago: executing program 0 (id=1906): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xec4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, r2, 0xda, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x868ea000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) keyctl$session_to_parent(0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) keyctl$session_to_parent(0x12) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) 7.323333727s ago: executing program 2 (id=1909): syz_open_dev$vim2m(0x0, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0xd4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) capset(0x0, &(0x7f0000000500)={0x0, 0x8, 0x647, 0x0, 0x40000, 0xe}) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80004) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 6.592089911s ago: executing program 0 (id=1910): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000102030600000000000000"], 0x44}}, 0x0) setns(0xffffffffffffffff, 0x24020000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}, @TCA_STAB={0xfffffffffffffcdb}]}, 0x54}}, 0x8000) sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x1a8, 0x3a, 0x100, 0x70bd25, 0x25dfdbfe, {0x6}, [@typed={0x47, 0x124, 0x0, 0x0, @binary="624b06d61736a22bd10847fb6fd3834cf3c92ef2bb2ee05d31b74205b394dbeab4235569850977e12a0e7b8888c5e594f31a8667b25bea7cb83ba7cd7a31ebb12b5717"}, @nested={0x14c, 0x135, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@loopback}, @generic="401f6d75f00826bdc36cf3811738c43d7b90c40ceb340ed3698d33c981dc5fca54c72f224a230bab20cd92c492fdc467eff0fd7cabaafbffef2d3a3c41d9dc8c27bdb8755c78720a73ad14e2c8f943c5f0f90f8fee1c0d0568a3a6c65ab9bb48c4f7cc02ab04f7b023b694ed82c73443d62a937bd28152c1328c555a0b554189ebfdb4ea6aa29f26ca0ed92e157c8eb0", @generic="156b5ff55ea64a2dde8660fe3236ca2de4294b1180239baf9cf966fae31af2b6a9277ac6024833d974c681047544a8e85a9f742c519940578c5743545ba0973c3e2374fc3cad816ffdf518eb1d5dff2ef6f616507d6dba01cb8b83b4b022dac12a7585d60ec386b41434ac", @typed={0x8, 0x46, 0x0, 0x0, @u32=0xd}, @generic="7843f3673f21d241a2c872b6de092c98b22c860c52446ea6ac08609eba1cdb816c", @nested={0x4, 0xb2}, @typed={0xb, 0x34, 0x0, 0x0, @str='user_id'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20008810}, 0x800) setns(0xffffffffffffffff, 0x2000000) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [{0x20, 0x3}], {}, {0x20, 0x1}}, 0x2c, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001900010027bd7000ffdbdf250a801000fe030001000000000c0009000800288afa0b"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x846) socket$nl_xfrm(0x10, 0x3, 0x6) 5.935536559s ago: executing program 3 (id=1912): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) socket$inet(0x2, 0x3, 0x8d) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0xffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c) splice(r3, 0x0, r4, 0x0, 0x5947, 0xc) 5.198688763s ago: executing program 0 (id=1913): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x217) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x881, 0x0) socket(0x23, 0x5, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 3.783517618s ago: executing program 3 (id=1915): syz_open_dev$vim2m(&(0x7f0000000080), 0xb6f, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg$can_j1939(r3, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/224, 0xe0}, {&(0x7f00000003c0)}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f0000000680)=""/190, 0xbe}], 0x6}, 0x1100) syz_open_dev$sndctrl(0x0, 0x1, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0xb8, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x85, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b, @device_a, {0x0, 0x9}}, @random="a994faf114429a0ee340168bada77e1e2ff5edb6d20c86975e446d30ade64d2b0f43073faf35629df222bf777e7c84fa4682067fad99935dcc072d8f4e8ec8a58bee573b0c84f32c4a489b207f1b2264fb8eb7faf970ff9202ff4357c8ba0ac3b5f2a44fbdfad515e1"}}]}, 0xb8}}, 0x800) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x1204081, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) ppoll(0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r8) 3.585858155s ago: executing program 2 (id=1917): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) shutdown(0xffffffffffffffff, 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) 2.73142645s ago: executing program 1 (id=1918): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000040), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) 2.72828073s ago: executing program 0 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.61379044s ago: executing program 3 (id=1920): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@debug}, {@lazytime}, {@inode_readahead_blks}, {@delalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) 1.725851558s ago: executing program 1 (id=1921): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000380)={r4, 0x0, 0x0, 0x1, 0x10000, 0x8, 0x2, 0x6, 0x1, 0x7f, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x400}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 1.234662032s ago: executing program 0 (id=1922): stat(&(0x7f00000000c0)='./file4\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f00000003c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fat=@gid={'gid', 0x3d, r0}}, {@shortname_winnt}, {@shortname_win95}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@shortname_mixed}, {@rodir}, {@rodir}, {@nonumtail}]}, 0x7, 0x2bd, &(0x7f0000000680)="$eJzs3cFqY1UYB/D/bZM2USFZuBLBC7pwVWbGF2iRCsPUjZKFbnRwOiBJGWghMCJ2ZuVecOU7+A4+gBvfwIVLwZ2zEK8kN7dN09iaoU6l/n6b++We851z7unXdnVPPn39YPjg0dHDp1/+nE6nyNp2tvOsSD9raTx5/14AgJvjWVXlt6p2Wd9WNpJUvdmntRewPADgX7DK/38A4Gb48KOP7+3s7e1+UJad5ODr8aBIfa3bdx7m84yyn1vp5Y+kOlHHr9zd202rLN+ZjTfudif5n/w4+7zzazLNv51e+ov5G7Ne5VTeOjgeDyYzT67tvFQkO1VRd7mTXl5NqnZmg9SX9+7u7d6p08t22mnyM9jI229+N1v/n/vZSi8/fZZHGeXBdIjT/K9ul+W71be/1zNN8ovj8WBz2u9Utf5CfiAAAAAAAAAAAAAAAAAAAAAAAPwvbJUn+vPn7zSnAW5tzbUXT5KT83nq9nPnA81O+DmeO1/nVlmWzTE+40E7dX4rr7XSur4nBwAAAAAAAAAAAAAAAAAAgP+Oo8dfDO+PRvuHZ4IfqknQvbDPYtCau9O81n951vJg+H2yetY/CbI+W9qomEzRme9TNE1zWdWKU3RmY2yuktVdmHQaZO3MHm6fNrVGmS5++M3qm/DG4gM+X7B5cZ+muob3i1wyYGd5kcxVXVOGh0fFCgVZLSm/9b/N2riiGtt4+XnTu0s3avLE7ZPNPJs1KbX5O+0r/k1ZUFzp3x0AAAAAAAAAAAAAAAAAAOC805d+88u5xqfXsiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAbN9/8/boL0F+8sBsdJiiTTO2sXd948PFoyaf8aHhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAb7K8AAAD//2XDTrY=") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 712.373397ms ago: executing program 1 (id=1923): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000102030600000000000000"], 0x44}}, 0x0) setns(0xffffffffffffffff, 0x24020000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}, @TCA_STAB={0xfffffffffffffcdb}]}, 0x54}}, 0x8000) sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x1a8, 0x3a, 0x100, 0x70bd25, 0x25dfdbfe, {0x6}, [@typed={0x47, 0x124, 0x0, 0x0, @binary="624b06d61736a22bd10847fb6fd3834cf3c92ef2bb2ee05d31b74205b394dbeab4235569850977e12a0e7b8888c5e594f31a8667b25bea7cb83ba7cd7a31ebb12b5717"}, @nested={0x14c, 0x135, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@loopback}, @generic="401f6d75f00826bdc36cf3811738c43d7b90c40ceb340ed3698d33c981dc5fca54c72f224a230bab20cd92c492fdc467eff0fd7cabaafbffef2d3a3c41d9dc8c27bdb8755c78720a73ad14e2c8f943c5f0f90f8fee1c0d0568a3a6c65ab9bb48c4f7cc02ab04f7b023b694ed82c73443d62a937bd28152c1328c555a0b554189ebfdb4ea6aa29f26ca0ed92e157c8eb0", @generic="156b5ff55ea64a2dde8660fe3236ca2de4294b1180239baf9cf966fae31af2b6a9277ac6024833d974c681047544a8e85a9f742c519940578c5743545ba0973c3e2374fc3cad816ffdf518eb1d5dff2ef6f616507d6dba01cb8b83b4b022dac12a7585d60ec386b41434ac", @typed={0x8, 0x46, 0x0, 0x0, @u32=0xd}, @generic="7843f3673f21d241a2c872b6de092c98b22c860c52446ea6ac08609eba1cdb816c", @nested={0x4, 0xb2}, @typed={0xb, 0x34, 0x0, 0x0, @str='user_id'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20008810}, 0x800) setns(0xffffffffffffffff, 0x2000000) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [{0x20, 0x3}], {}, {0x20, 0x1}}, 0x2c, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001900010027bd7000ffdbdf250a801000fe030001000000000c0009000800288afa0b"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x846) socket$nl_xfrm(0x10, 0x3, 0x6) 529.262824ms ago: executing program 3 (id=1924): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0) 455.48021ms ago: executing program 2 (id=1925): syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @random="eb63712ee475", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @local}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r0, &(0x7f0000000140), 0xffffffffffffffff, 0x0, 0xc7d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0079c018001101ffffffff000000000a620000ff00fd0600000000"], 0x1c}}, 0x84054) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000003040)="$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") setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000300)=""/160, 0x189000, 0x1000, 0x4, 0x1}, 0x20) r5 = open(&(0x7f0000000040)='./file1\x00', 0x66842, 0x21) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000001000010002000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9ae9070000000000080029005967000044001680400001800c00070003000000540f000014000b00f50e000000000000c8060000000000001000fefffeffff7fc10d0000a60300000c0004000100000040000000140003006261746164765f736c6176655f300000b74f99a9107c1482991084109ee3f2f4e6fbe468"], 0x80}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 228.15302ms ago: executing program 1 (id=1926): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x7) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0xe20, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x405}, 0x1c) 226.27146ms ago: executing program 5 (id=1927): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000340)={0x2, 0x0, 0x8, 0x10, 0x800, 0x4, 0x20d0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = gettid() sched_getattr(r5, &(0x7f00000000c0)={0x38}, 0x38, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xfffd, 0x0, 0x0, 0x1, 0x7}, 0x0) 177.632875ms ago: executing program 1 (id=1928): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) getgroups(0x5, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r3, &(0x7f0000000580)) fchown(r6, r7, r8) tkill(0x0, 0x11) r9 = getpid() sched_setscheduler(r9, 0x2, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x3, r3, r4, r5, r8, 0x42, 0xd}, 0x5, 0x0, 0x1, 0x200000000000000, 0x0, r9, 0x8}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x9400002f) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x1000000, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 0s ago: executing program 1 (id=1929): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xbd, @empty, 0x8}, 0x1c) kernel console output (not intermixed with test programs): MaxPacketSize 0 [ 216.967863][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 216.981516][ T1107] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 217.664655][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 217.771317][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 218.656987][ T1107] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 218.674210][ T6483] capability: warning: `syz.3.690' uses 32-bit capabilities (legacy support in use) [ 219.289145][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.301181][ T1107] usb 1-1: Product: syz [ 219.487448][ T1107] usb 1-1: Manufacturer: syz [ 219.492122][ T1107] usb 1-1: SerialNumber: syz [ 219.673519][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.693'. [ 219.943060][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.693'. [ 219.964803][ T6496] loop4: detected capacity change from 0 to 256 [ 219.980037][ T6490] netlink: 224 bytes leftover after parsing attributes in process `syz.3.693'. [ 220.037471][ T1107] usb 1-1: config 0 descriptor?? [ 220.061679][ T1107] usb 1-1: can't set config #0, error -71 [ 220.069332][ T1107] usb 1-1: USB disconnect, device number 4 [ 220.078015][ T6496] FAT-fs (loop4): Directory bread(block 64) failed [ 220.093651][ T6496] FAT-fs (loop4): Directory bread(block 65) failed [ 220.133265][ T6496] FAT-fs (loop4): Directory bread(block 66) failed [ 220.164711][ T6496] FAT-fs (loop4): Directory bread(block 67) failed [ 220.180154][ T6500] loop3: detected capacity change from 0 to 256 [ 220.191212][ T6496] FAT-fs (loop4): Directory bread(block 68) failed [ 220.219256][ T6496] FAT-fs (loop4): Directory bread(block 69) failed [ 220.226421][ T6496] FAT-fs (loop4): Directory bread(block 70) failed [ 220.233260][ T6496] FAT-fs (loop4): Directory bread(block 71) failed [ 220.239967][ T6496] FAT-fs (loop4): Directory bread(block 72) failed [ 220.265543][ T6496] FAT-fs (loop4): Directory bread(block 73) failed [ 220.291522][ T6500] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 220.340245][ T6502] loop0: detected capacity change from 0 to 1024 [ 220.413692][ T6502] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 220.423226][ T6502] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.448756][ T6502] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 220.461620][ T6502] System zones: 0-1, 3-36 [ 220.473560][ T6502] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 220.970491][ T4639] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 221.005454][ T6523] device syzkaller0 entered promiscuous mode [ 221.012324][ T6524] loop3: detected capacity change from 0 to 2048 [ 221.030777][ T6523] 0: reclassify loop, rule prio 0, protocol 800 [ 221.342208][ T4639] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.384867][ T4639] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 221.460058][ T4639] usb 3-1: config 1 has no interface number 0 [ 221.513017][ T4639] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.758480][ T6524] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 221.978044][ T4639] usb 3-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 221.989753][ T4639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.998059][ T4639] usb 3-1: Product: syz [ 222.002951][ T4639] usb 3-1: Manufacturer: syz [ 222.007579][ T4639] usb 3-1: SerialNumber: syz [ 222.023023][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 222.034016][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 222.048493][ T6529] netlink: 224 bytes leftover after parsing attributes in process `syz.0.707'. [ 222.192918][ T26] audit: type=1326 audit(1771593312.545:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.3.706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a6a03d629 code=0x0 [ 222.221450][ T4639] cdc_ncm 3-1:1.1: skipping garbage [ 222.227088][ T4639] usb 3-1: selecting invalid altsetting 1 [ 223.531404][ T4639] cdc_ncm 3-1:1.1: SET_CRC_MODE failed [ 223.551320][ T4639] usb 3-1: selecting invalid altsetting 1 [ 223.557220][ T4639] cdc_ncm 3-1:1.1: bind() failure [ 223.573979][ T4639] usb 3-1: USB disconnect, device number 4 [ 223.667313][ T6554] loop3: detected capacity change from 0 to 256 [ 223.751499][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.719'. [ 223.774593][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.719'. [ 223.790423][ T6562] netlink: 224 bytes leftover after parsing attributes in process `syz.0.719'. [ 223.837494][ T6554] exfat: Deprecated parameter 'namecase' [ 224.229329][ T6572] overlayfs: invalid redirect (./file0/file1) [ 225.926136][ T6566] device syzkaller0 entered promiscuous mode [ 226.011132][ T6566] 0: reclassify loop, rule prio 0, protocol 800 [ 227.068042][ T6597] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 227.308953][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.731'. [ 227.339548][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.731'. [ 227.369722][ T6600] netlink: 224 bytes leftover after parsing attributes in process `syz.2.731'. [ 228.532786][ T13] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 228.802787][ T6618] ipt_CLUSTERIP: Please specify destination IP [ 228.930817][ T6621] device syzkaller0 entered promiscuous mode [ 228.939874][ T6621] 0: reclassify loop, rule prio 0, protocol 800 [ 228.942038][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.981317][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 229.011306][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.021094][ T13] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.174073][ T6625] loop4: detected capacity change from 0 to 128 [ 229.196568][ T6625] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.213606][ T6625] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.229304][ T6625] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 229.261639][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.284427][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.313643][ T13] usb 1-1: Product: syz [ 229.333854][ T6627] netlink: 'syz.4.742': attribute type 4 has an invalid length. [ 229.341610][ T13] usb 1-1: Manufacturer: syz [ 229.341629][ T13] usb 1-1: SerialNumber: syz [ 229.563914][ T6634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.745'. [ 229.594358][ T6634] netlink: 224 bytes leftover after parsing attributes in process `syz.3.745'. [ 229.798573][ T13] usb 1-1: USB disconnect, device number 5 [ 230.751817][ T6645] device syzkaller0 entered promiscuous mode [ 230.791183][ T6645] 0: reclassify loop, rule prio 0, protocol 800 [ 230.978716][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.052845][ T6653] loop4: detected capacity change from 0 to 256 [ 231.149718][ T6653] FAT-fs (loop4): Directory bread(block 64) failed [ 231.161496][ T6653] FAT-fs (loop4): Directory bread(block 65) failed [ 231.170039][ T6653] FAT-fs (loop4): Directory bread(block 66) failed [ 231.197407][ T6653] FAT-fs (loop4): Directory bread(block 67) failed [ 231.206345][ T6658] netlink: 'syz.1.754': attribute type 4 has an invalid length. [ 231.214904][ T6653] FAT-fs (loop4): Directory bread(block 68) failed [ 231.245391][ T6653] FAT-fs (loop4): Directory bread(block 69) failed [ 231.260489][ T6653] FAT-fs (loop4): Directory bread(block 70) failed [ 231.281538][ T6653] FAT-fs (loop4): Directory bread(block 71) failed [ 231.301465][ T6653] FAT-fs (loop4): Directory bread(block 72) failed [ 231.330449][ T6653] FAT-fs (loop4): Directory bread(block 73) failed [ 231.418691][ T6640] binder: 6638:6640 ioctl c0306201 0 returned -14 [ 231.911967][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.757'. [ 231.948165][ T6666] netlink: 224 bytes leftover after parsing attributes in process `syz.3.757'. [ 232.075952][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 232.087527][ T6668] loop4: detected capacity change from 0 to 512 [ 232.121824][ T6670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.759'. [ 232.173225][ T6670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.759'. [ 233.330042][ T6678] device syzkaller0 entered promiscuous mode [ 233.351206][ T6678] 0: reclassify loop, rule prio 0, protocol 800 [ 233.439042][ T6684] netlink: 'syz.4.765': attribute type 4 has an invalid length. [ 233.640001][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 233.668604][ T6692] netlink: 224 bytes leftover after parsing attributes in process `syz.0.769'. [ 235.397972][ T6711] loop4: detected capacity change from 0 to 512 [ 235.591716][ T6711] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.904773][ T6711] EXT4-fs (loop4): 1 truncate cleaned up [ 235.963338][ T6711] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 236.078284][ T6714] overlayfs: failed to clone lowerpath [ 236.435407][ T6711] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 236.706661][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 236.747826][ T6730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 236.757775][ T6730] netlink: 224 bytes leftover after parsing attributes in process `syz.3.780'. [ 236.919404][ T6736] loop3: detected capacity change from 0 to 512 [ 237.027464][ T6736] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.781: corrupted inode contents [ 237.140134][ T6736] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 237.211041][ T6736] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.781: corrupted inode contents [ 237.265614][ T6736] EXT4-fs error (device loop3): ext4_evict_inode:330: inode #15: comm syz.3.781: mark_inode_dirty error [ 238.191498][ T6736] EXT4-fs (loop3): 1 orphan inode deleted [ 238.211497][ T6736] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,journal_dev=0x0000000000000006,debug_want_extra_isize=0x000000000000000a,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,quota,,errors=continue. Quota mode: writeback. [ 238.259084][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 238.302448][ T6736] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5874: inode #18: comm syz.3.781: bad extra_isize 10 (inode size 256) [ 239.851520][ T2857] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 240.451727][ T2857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.511534][ T2857] usb 4-1: not running at top speed; connect to a high speed hub [ 240.542301][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'. [ 240.588193][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'. [ 240.612661][ T2857] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.631962][ T6772] netlink: 224 bytes leftover after parsing attributes in process `syz.4.791'. [ 240.641217][ T2857] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 240.714785][ T6776] device syzkaller0 entered promiscuous mode [ 240.762193][ T6776] 0: reclassify loop, rule prio 0, protocol 800 [ 240.826219][ T2857] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.845994][ T2857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.880925][ T2857] usb 4-1: Product: syz [ 240.885162][ T2857] usb 4-1: Manufacturer: syz [ 240.889934][ T2857] usb 4-1: SerialNumber: syz [ 241.651329][ T6794] ODEBUG: Out of memory. ODEBUG disabled [ 242.325487][ T6778] loop4: detected capacity change from 0 to 40427 [ 242.397865][ T6778] F2FS-fs (loop4): invalid crc value [ 242.446436][ T2857] usb 4-1: USB disconnect, device number 6 [ 242.482108][ T6778] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.539415][ T6778] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 242.809767][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 242.833418][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.803'. [ 242.865674][ T6804] netlink: 224 bytes leftover after parsing attributes in process `syz.4.803'. [ 242.990621][ T6807] device syzkaller0 entered promiscuous mode [ 243.008070][ T6808] netlink: 'syz.3.805': attribute type 4 has an invalid length. [ 243.016139][ T6807] 0: reclassify loop, rule prio 0, protocol 800 [ 243.139132][ T6800] loop2: detected capacity change from 0 to 40427 [ 243.303735][ T6800] F2FS-fs (loop2): Invalid segment count (0) [ 243.309881][ T6800] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 243.702662][ T6800] F2FS-fs (loop2): invalid crc value [ 243.876188][ T6800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 244.587339][ T6800] F2FS-fs (loop2): Start checkpoint disabled! [ 244.714660][ T6835] loop0: detected capacity change from 0 to 256 [ 244.739422][ T6800] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 244.746922][ T6800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 244.809316][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 244.866700][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.814'. [ 244.896958][ T6839] netlink: 224 bytes leftover after parsing attributes in process `syz.3.814'. [ 245.032070][ T4389] attempt to access beyond end of device [ 245.032070][ T4389] loop2: rw=2049, want=40976, limit=40427 [ 245.112304][ T6842] loop3: detected capacity change from 0 to 1024 [ 245.344759][ T6842] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.496443][ T6850] device syzkaller0 entered promiscuous mode [ 245.508575][ T6850] 0: reclassify loop, rule prio 0, protocol 800 [ 245.766788][ T6852] netlink: 13 bytes leftover after parsing attributes in process `syz.3.816'. [ 246.505496][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 246.672137][ T6874] loop0: detected capacity change from 0 to 512 [ 247.497493][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.826'. [ 247.856157][ T6874] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.822: invalid indirect mapped block 4294967295 (level 1) [ 247.873833][ T6874] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.822: invalid indirect mapped block 4294967295 (level 1) [ 247.890190][ T6874] EXT4-fs (loop0): 2 truncates cleaned up [ 247.896323][ T6874] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 247.935654][ T6877] netlink: 224 bytes leftover after parsing attributes in process `syz.4.826'. [ 248.413081][ T6884] loop3: detected capacity change from 0 to 40427 [ 248.461446][ T4186] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 248.474588][ T6884] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 248.772230][ T6884] F2FS-fs (loop3): invalid crc value [ 248.982924][ T6884] F2FS-fs (loop3): Found nat_bits in checkpoint [ 249.090327][ T6902] loop2: detected capacity change from 0 to 128 [ 249.121355][ T6884] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.181297][ T4186] usb 5-1: Using ep0 maxpacket: 32 [ 249.200685][ T4185] attempt to access beyond end of device [ 249.200685][ T4185] loop3: rw=2049, want=45104, limit=40427 [ 249.311435][ T4186] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 249.340523][ T4186] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.363540][ T4186] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 119, changing to 7 [ 249.383601][ T26] audit: type=1800 audit(1771593339.745:30): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.834" name="file1" dev="loop2" ino=1048644 res=0 errno=0 [ 249.421268][ T26] audit: type=1800 audit(1771593339.755:31): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.834" name="bus" dev="loop2" ino=1048645 res=0 errno=0 [ 250.171203][ T4186] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.181036][ T4186] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 250.193960][ T4186] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.204875][ T4186] usb 5-1: config 1 interface 1 has no altsetting 0 [ 250.371463][ T4186] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.390889][ T4186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.411079][ T4186] usb 5-1: Product: syz [ 250.417616][ T4186] usb 5-1: Manufacturer: syz [ 250.426726][ T4186] usb 5-1: SerialNumber: syz [ 250.877684][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.840'. [ 250.887200][ T4186] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 250.911632][ T4186] usb 5-1: 2:1 : format type 255 is not supported yet [ 250.929669][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.840'. [ 250.975712][ T6925] netlink: 224 bytes leftover after parsing attributes in process `syz.3.840'. [ 250.989910][ T4186] usb 5-1: USB disconnect, device number 4 [ 251.125847][ T6928] loop2: detected capacity change from 0 to 256 [ 251.242823][ T6928] FAT-fs (loop2): Directory bread(block 64) failed [ 251.277537][ T6928] FAT-fs (loop2): Directory bread(block 65) failed [ 251.301401][ T6928] FAT-fs (loop2): Directory bread(block 66) failed [ 251.308068][ T6928] FAT-fs (loop2): Directory bread(block 67) failed [ 251.371364][ T6928] FAT-fs (loop2): Directory bread(block 68) failed [ 251.381850][ T6928] FAT-fs (loop2): Directory bread(block 69) failed [ 251.394897][ T6928] FAT-fs (loop2): Directory bread(block 70) failed [ 251.439305][ T6928] FAT-fs (loop2): Directory bread(block 71) failed [ 251.672157][ T6928] FAT-fs (loop2): Directory bread(block 72) failed [ 251.715833][ T6928] FAT-fs (loop2): Directory bread(block 73) failed [ 252.064744][ T6946] netlink: 13 bytes leftover after parsing attributes in process `syz.1.846'. [ 252.441052][ T6944] loop4: detected capacity change from 0 to 256 [ 252.612431][ T26] audit: type=1800 audit(1771593342.980:32): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.847" name="file1" dev="loop4" ino=1048646 res=0 errno=0 [ 252.633871][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.661471][ T6944] device batadv_slave_0 entered promiscuous mode [ 252.670320][ T6944] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 253.052987][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 253.106655][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 253.162824][ T6957] tipc: Started in network mode [ 253.179231][ T6957] tipc: Node identity aeaeaeaeaeaeaeae, cluster identity 4711 [ 253.210442][ T6957] tipc: Enabling of bearer rejected, failed to enable media [ 253.290230][ T6961] loop2: detected capacity change from 0 to 1024 [ 253.400126][ T6972] loop0: detected capacity change from 0 to 1024 [ 253.454071][ T6961] EXT4-fs (loop2): Ignoring removed orlov option [ 254.061446][ T2857] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 254.078604][ T6972] EXT4-fs (loop0): Ignoring removed orlov option [ 254.092114][ T6961] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 254.258802][ T6972] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,usrjquota=,,errors=continue. Quota mode: none. [ 254.298619][ T26] audit: type=1800 audit(1771593344.660:33): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.857" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 254.351358][ T2857] usb 5-1: Using ep0 maxpacket: 16 [ 254.401728][ T6972] Trying to write to read-only block-device loop0 [ 254.408474][ T6972] Trying to write to read-only block-device loop0 [ 254.504204][ T6972] Trying to write to read-only block-device loop0 [ 254.536551][ T6972] Trying to write to read-only block-device loop0 [ 254.580715][ T6972] Trying to write to read-only block-device loop0 [ 254.608054][ T6972] Trying to write to read-only block-device loop0 [ 254.608113][ T6972] Trying to write to read-only block-device loop0 [ 254.608258][ T6972] Trying to write to read-only block-device loop0 [ 254.608537][ T6972] Trying to write to read-only block-device loop0 [ 254.608590][ T6972] Trying to write to read-only block-device loop0 [ 255.041404][ T2857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 255.111587][ T7001] loop3: detected capacity change from 0 to 256 [ 255.314236][ T26] audit: type=1800 audit(1771593345.670:34): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.864" name="file1" dev="loop3" ino=1048647 res=0 errno=0 [ 255.342953][ T2857] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 255.503294][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.509820][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.536528][ T2857] usb 5-1: config 1 has no interface number 0 [ 255.576108][ T7001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.588685][ T7001] device batadv_slave_0 entered promiscuous mode [ 255.597553][ T7001] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 255.621735][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'. [ 255.673808][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'. [ 255.754692][ T7000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.865'. [ 255.778616][ T2857] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 255.803101][ T2857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.826502][ T2857] usb 5-1: Product: syz [ 255.831968][ T2857] usb 5-1: Manufacturer: syz [ 255.870780][ T2857] usb 5-1: SerialNumber: syz [ 255.912827][ T7009] netlink: 13 bytes leftover after parsing attributes in process `syz.1.861'. [ 255.956232][ T7016] loop0: detected capacity change from 0 to 256 [ 256.013931][ T7016] exfat: Deprecated parameter 'utf8' [ 256.019778][ T7016] exfat: Deprecated parameter 'namecase' [ 256.061427][ T7016] /dev/loop0: Can't open blockdev [ 256.111661][ T7011] loop3: detected capacity change from 0 to 256 [ 256.404602][ T2857] usb 5-1: USB disconnect, device number 5 [ 256.489989][ T7011] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 256.651471][ T7018] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 257.739515][ T7039] loop3: detected capacity change from 0 to 1024 [ 258.864438][ T7044] loop4: detected capacity change from 0 to 256 [ 259.234592][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 259.286669][ T7048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.878'. [ 259.316484][ T7048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.878'. [ 259.451358][ T26] audit: type=1800 audit(1771593349.800:35): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.877" name="file1" dev="loop4" ino=1048649 res=0 errno=0 [ 259.601863][ T7054] loop2: detected capacity change from 0 to 512 [ 259.736417][ T7054] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 259.847172][ T7054] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.390719][ T7074] loop3: detected capacity change from 0 to 1024 [ 260.946291][ T7074] EXT4-fs (loop3): Ignoring removed orlov option [ 261.006530][ T7082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.890'. [ 261.048790][ T7074] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,usrjquota=,,errors=continue. Quota mode: none. [ 261.075295][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.890'. [ 261.098309][ T26] audit: type=1800 audit(1771593351.460:36): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.888" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 261.150617][ T7074] bio_check_ro: 13 callbacks suppressed [ 261.150633][ T7074] Trying to write to read-only block-device loop3 [ 261.170307][ T7082] netlink: 224 bytes leftover after parsing attributes in process `syz.2.890'. [ 261.242495][ T7091] loop0: detected capacity change from 0 to 1024 [ 261.249246][ T7074] Trying to write to read-only block-device loop3 [ 261.265652][ T7074] Trying to write to read-only block-device loop3 [ 261.278305][ T7074] Trying to write to read-only block-device loop3 [ 261.287676][ T7074] Trying to write to read-only block-device loop3 [ 261.327115][ T7074] Trying to write to read-only block-device loop3 [ 261.510076][ T7074] Trying to write to read-only block-device loop3 [ 261.557967][ T7074] Trying to write to read-only block-device loop3 [ 261.565742][ T7074] Trying to write to read-only block-device loop3 [ 261.576776][ T7074] Trying to write to read-only block-device loop3 [ 262.710972][ T7104] device batadv_slave_0 entered promiscuous mode [ 263.165971][ T7112] loop2: detected capacity change from 0 to 512 [ 263.457603][ T7112] EXT4-fs (loop2): invalid inodes per group: 3120562208 [ 263.457603][ T7112] [ 263.789192][ T7130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.905'. [ 263.793057][ T7131] loop3: detected capacity change from 0 to 512 [ 263.807403][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'. [ 263.982756][ T7140] device syzkaller0 entered promiscuous mode [ 265.274098][ T7151] loop0: detected capacity change from 0 to 256 [ 265.287422][ T7149] loop3: detected capacity change from 0 to 1024 [ 266.880423][ T7166] IPv6: sit1: Disabled Multicast RS [ 268.341077][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.917'. [ 268.413571][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.917'. [ 268.427879][ T7179] loop0: detected capacity change from 0 to 256 [ 268.452116][ T7172] netlink: 224 bytes leftover after parsing attributes in process `syz.3.917'. [ 268.553274][ T7179] loop2: detected capacity change from 0 to 7 [ 268.612720][ T7179] Dev loop2: unable to read RDB block 7 [ 268.618376][ T7179] loop2: AHDI p1 p2 p3 [ 268.661473][ T7179] loop2: partition table partially beyond EOD, truncated [ 268.669133][ T7179] loop2: p1 start 1601398130 is beyond EOD, truncated [ 268.736318][ T7179] loop2: p2 start 1702059890 is beyond EOD, truncated [ 269.159129][ T7204] tipc: Started in network mode [ 269.181408][ T7204] tipc: Node identity fcc744240012, cluster identity 4711 [ 269.442446][ T7204] tipc: Enabling of bearer rejected, failed to enable media [ 269.835321][ T7219] netlink: 'syz.4.921': attribute type 12 has an invalid length. [ 270.020397][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.932'. [ 270.535341][ T7236] device syzkaller0 entered promiscuous mode [ 272.387338][ T7241] tipc: Started in network mode [ 272.402841][ T7241] tipc: Node identity aeaeaeaeaeaeaeae, cluster identity 4711 [ 272.410421][ T7241] tipc: Enabling of bearer rejected, failed to enable media [ 273.011314][ T7266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'. [ 273.332038][ T7267] netlink: 224 bytes leftover after parsing attributes in process `syz.0.944'. [ 274.594938][ T7290] tipc: Started in network mode [ 274.623051][ T7290] tipc: Node identity , cluster identity 4711 [ 274.646684][ T7290] tipc: Failed to set node id, please configure manually [ 274.681298][ T7290] tipc: Enabling of bearer rejected, failed to enable media [ 274.724619][ T7292] device syzkaller0 entered promiscuous mode [ 274.899186][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.957'. [ 274.950191][ T7302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.957'. [ 275.277965][ T7308] loop3: detected capacity change from 0 to 256 [ 275.391373][ T7308] /dev/loop3: Can't open blockdev [ 276.226341][ T2857] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 276.491294][ T2857] usb 1-1: Using ep0 maxpacket: 32 [ 276.929332][ T7325] tipc: Enabling of bearer rejected, failed to enable media [ 276.932345][ T2857] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 276.979322][ T2857] usb 1-1: config 0 has no interface number 0 [ 276.998649][ T2857] usb 1-1: config 0 interface 222 has no altsetting 0 [ 277.049378][ T7329] device syzkaller0 entered promiscuous mode [ 277.170513][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.970'. [ 277.211356][ T2857] usb 1-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 277.230701][ T2857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.240844][ T2857] usb 1-1: Product: syz [ 277.245137][ T2857] usb 1-1: Manufacturer: syz [ 277.249766][ T2857] usb 1-1: SerialNumber: syz [ 277.280715][ T2857] usb 1-1: config 0 descriptor?? [ 277.342287][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 277.711278][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 277.927196][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 278.152288][ T21] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 278.280666][ T21] usb 4-1: config 1 has no interface number 0 [ 278.552200][ T21] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 278.658400][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.813608][ T21] usb 4-1: Product: syz [ 278.846816][ T21] usb 4-1: Manufacturer: syz [ 278.885512][ T21] usb 4-1: SerialNumber: syz [ 280.473758][ T21] usb 4-1: USB disconnect, device number 7 [ 280.486927][ T7365] loop0: detected capacity change from 0 to 128 [ 280.492044][ T2857] cdc_mbim: probe of 1-1:0.222 failed with error -71 [ 280.545110][ T2857] usb 1-1: USB disconnect, device number 6 [ 280.577422][ T7365] loop0: detected capacity change from 0 to 1024 [ 280.606625][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.981'. [ 280.638167][ T7367] netlink: 224 bytes leftover after parsing attributes in process `syz.4.981'. [ 280.704464][ T7369] device syzkaller0 entered promiscuous mode [ 281.794553][ T7380] loop3: detected capacity change from 0 to 128 [ 283.276783][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.994'. [ 283.321574][ T7399] netlink: 224 bytes leftover after parsing attributes in process `syz.0.994'. [ 284.823776][ T4471] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 284.992931][ T7412] device syzkaller0 entered promiscuous mode [ 285.201175][ T7418] tipc: Started in network mode [ 285.206499][ T7418] tipc: Node identity aeaeaeaeaeaeaeae, cluster identity 4711 [ 285.219503][ T7418] tipc: Enabling of bearer rejected, failed to enable media [ 285.246712][ T7418] loop3: detected capacity change from 0 to 1024 [ 285.264826][ T4471] usb 3-1: Using ep0 maxpacket: 32 [ 285.401504][ T4471] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 285.414561][ T4471] usb 3-1: config 0 has no interface number 0 [ 285.427513][ T4471] usb 3-1: config 0 interface 222 has no altsetting 0 [ 285.604618][ T4227] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 285.631510][ T4471] usb 3-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 285.645048][ T4471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.662090][ T4471] usb 3-1: Product: syz [ 285.670842][ T4471] usb 3-1: Manufacturer: syz [ 285.681342][ T4471] usb 3-1: SerialNumber: syz [ 285.711467][ T4471] usb 3-1: config 0 descriptor?? [ 285.985270][ T4227] usb 5-1: Using ep0 maxpacket: 32 [ 286.401433][ T4227] usb 5-1: config 0 has an invalid interface number: 222 but max is 0 [ 287.481328][ T4227] usb 5-1: config 0 has no interface number 0 [ 287.487494][ T4227] usb 5-1: config 0 interface 222 has no altsetting 0 [ 287.694238][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1005'. [ 287.720898][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1005'. [ 287.759214][ T7437] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1005'. [ 287.876364][ T4227] usb 5-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 287.921576][ T4471] cdc_mbim: probe of 3-1:0.222 failed with error -71 [ 287.922151][ T7439] fuse: Bad value for 'fd' [ 287.938597][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.982669][ T4471] usb 3-1: USB disconnect, device number 5 [ 287.988581][ T4227] usb 5-1: Product: syz [ 287.997693][ T4227] usb 5-1: Manufacturer: syz [ 288.011414][ T4227] usb 5-1: SerialNumber: syz [ 288.037104][ T4227] usb 5-1: config 0 descriptor?? [ 289.782186][ T4227] cdc_mbim: probe of 5-1:0.222 failed with error -71 [ 289.853777][ T4227] usb 5-1: USB disconnect, device number 6 [ 289.952386][ T7464] tipc: Enabling of bearer rejected, failed to enable media [ 289.996126][ T7464] loop2: detected capacity change from 0 to 1024 [ 290.225275][ T7464] EXT4-fs (loop2): Ignoring removed orlov option [ 291.072248][ T7464] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 291.122987][ T7486] loop0: detected capacity change from 0 to 512 [ 291.365124][ T7494] loop0: detected capacity change from 0 to 128 [ 291.374782][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1017'. [ 291.407135][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1017'. [ 291.451930][ T7495] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1017'. [ 291.472617][ T7494] loop0: detected capacity change from 0 to 1024 [ 291.746550][ T7499] netlink: 'syz.3.1020': attribute type 4 has an invalid length. [ 292.312183][ T4186] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 292.409157][ T7508] device syzkaller0 entered promiscuous mode [ 292.871254][ T4186] usb 4-1: Using ep0 maxpacket: 32 [ 292.994214][ T4186] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 293.019309][ T4186] usb 4-1: config 0 has no interface number 0 [ 293.127748][ T4186] usb 4-1: config 0 interface 222 has no altsetting 0 [ 293.411603][ T4186] usb 4-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 293.480755][ T4186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.646008][ T4186] usb 4-1: Product: syz [ 293.668455][ T4186] usb 4-1: Manufacturer: syz [ 293.714127][ T4186] usb 4-1: SerialNumber: syz [ 293.762181][ T4186] usb 4-1: config 0 descriptor?? [ 293.782610][ T7520] tipc: Enabling of bearer rejected, failed to enable media [ 293.800901][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1029'. [ 293.850644][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1029'. [ 293.876304][ T7524] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1029'. [ 294.321351][ T7528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1028'. [ 294.706667][ T7531] netlink: 'syz.0.1031': attribute type 4 has an invalid length. [ 296.025287][ T7539] loop4: detected capacity change from 0 to 128 [ 296.179283][ T7543] loop0: detected capacity change from 0 to 128 [ 296.391412][ T26] audit: type=1800 audit(1771593386.680:37): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1033" name="bus" dev="loop4" ino=1048651 res=0 errno=0 [ 296.728643][ T7549] loop0: detected capacity change from 0 to 256 [ 296.750817][ T1632] attempt to access beyond end of device [ 296.750817][ T1632] loop4: rw=1, want=609, limit=128 [ 296.795680][ T7551] loop2: detected capacity change from 0 to 512 [ 296.811446][ T1632] attempt to access beyond end of device [ 296.811446][ T1632] loop4: rw=1, want=641, limit=128 [ 296.857917][ T1632] attempt to access beyond end of device [ 296.857917][ T1632] loop4: rw=1, want=713, limit=128 [ 296.981467][ T4186] cdc_mbim: probe of 4-1:0.222 failed with error -71 [ 296.993269][ T7551] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 297.016346][ T7551] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (1) [ 297.050663][ T4186] usb 4-1: USB disconnect, device number 8 [ 297.063567][ T7553] loop3: detected capacity change from 0 to 256 [ 297.091756][ T1632] attempt to access beyond end of device [ 297.091756][ T1632] loop4: rw=1, want=785, limit=128 [ 297.113002][ T1632] attempt to access beyond end of device [ 297.113002][ T1632] loop4: rw=1, want=873, limit=128 [ 297.139134][ T1632] attempt to access beyond end of device [ 297.139134][ T1632] loop4: rw=1, want=1025, limit=128 [ 297.161881][ T7553] exfat: Deprecated parameter 'namecase' [ 297.178202][ T7553] exfat: Unknown parameter 'keep_last_dots' [ 297.179615][ T1632] attempt to access beyond end of device [ 297.179615][ T1632] loop4: rw=1, want=569, limit=128 [ 297.197422][ T1632] attempt to access beyond end of device [ 297.197422][ T1632] loop4: rw=1, want=617, limit=128 [ 297.234741][ T1632] attempt to access beyond end of device [ 297.234741][ T1632] loop4: rw=1, want=681, limit=128 [ 297.376056][ T1632] attempt to access beyond end of device [ 297.376056][ T1632] loop4: rw=1, want=737, limit=128 [ 297.570900][ T7557] tipc: Enabling of bearer rejected, failed to enable media [ 297.648068][ T7557] loop2: detected capacity change from 0 to 1024 [ 297.693325][ T7573] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 297.723449][ T7557] EXT4-fs (loop2): Ignoring removed orlov option [ 297.785335][ T7557] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 297.912609][ T7578] loop0: detected capacity change from 0 to 128 [ 299.215069][ T7595] kvm: pic: single mode not supported [ 299.215088][ T7595] kvm: pic: level sensitive irq not supported [ 299.320521][ T7607] netlink: 'syz.2.1056': attribute type 4 has an invalid length. [ 299.506337][ T7611] loop3: detected capacity change from 0 to 128 [ 299.541414][ T4471] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 299.981441][ T4471] usb 5-1: unable to get BOS descriptor or descriptor too short [ 300.041640][ T4471] usb 5-1: not running at top speed; connect to a high speed hub [ 300.115935][ T7622] loop0: detected capacity change from 0 to 128 [ 300.131730][ T4471] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.153237][ T4471] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 301.185555][ T4471] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.212701][ T4471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.239668][ T4471] usb 5-1: Product: syz [ 301.250768][ T4471] usb 5-1: Manufacturer: syz [ 301.264618][ T4471] usb 5-1: SerialNumber: syz [ 301.299923][ T7632] netlink: 'syz.1.1067': attribute type 4 has an invalid length. [ 302.361515][ T4471] usb 5-1: USB disconnect, device number 7 [ 303.880439][ T7666] netlink: 'syz.3.1078': attribute type 4 has an invalid length. [ 303.953030][ T7673] loop4: detected capacity change from 0 to 128 [ 303.980024][ T7674] loop2: detected capacity change from 0 to 256 [ 304.021690][ T7673] EXT4-fs (loop4): Test dummy encryption mode enabled [ 304.028550][ T7673] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 304.146407][ T7676] loop3: detected capacity change from 0 to 2048 [ 305.628112][ T7701] loop3: detected capacity change from 0 to 128 [ 305.650359][ T7703] netlink: 'syz.2.1092': attribute type 4 has an invalid length. [ 306.040109][ T7722] loop2: detected capacity change from 0 to 256 [ 306.181146][ T7729] kvm: pic: single mode not supported [ 306.181165][ T7729] kvm: pic: level sensitive irq not supported [ 306.729107][ T7732] fuse: Bad value for 'fd' [ 306.823049][ T7734] netlink: 'syz.2.1107': attribute type 4 has an invalid length. [ 306.889525][ T7740] loop4: detected capacity change from 0 to 128 [ 306.962172][ T7740] EXT4-fs (loop4): Test dummy encryption mode enabled [ 306.979764][ T7740] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 307.198530][ T7757] loop2: detected capacity change from 0 to 2048 [ 307.304630][ T7757] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 307.331381][ T7757] System zones: 0-7 [ 307.340864][ T7757] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none. [ 308.043933][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1118'. [ 308.056251][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1118'. [ 308.511963][ T7775] netlink: 'syz.4.1121': attribute type 4 has an invalid length. [ 309.065388][ T7792] loop0: detected capacity change from 0 to 128 [ 309.479484][ T7806] netlink: 'syz.1.1133': attribute type 4 has an invalid length. [ 309.969953][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1134'. [ 310.917469][ T7833] loop3: detected capacity change from 0 to 1024 [ 310.933844][ T7835] netlink: 'syz.4.1144': attribute type 4 has an invalid length. [ 310.987396][ T7831] loop2: detected capacity change from 0 to 4096 [ 311.170567][ T7831] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.205851][ T7841] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1143'. [ 312.408483][ T7853] loop3: detected capacity change from 0 to 2048 [ 312.609168][ T7868] netlink: 'syz.2.1156': attribute type 4 has an invalid length. [ 312.914875][ T7875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1150'. [ 313.581730][ T7879] loop0: detected capacity change from 0 to 1024 [ 313.981910][ T7879] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1160'. [ 315.200556][ T7900] netlink: 'syz.0.1167': attribute type 4 has an invalid length. [ 315.939809][ T7915] loop3: detected capacity change from 0 to 2048 [ 316.305460][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1172'. [ 317.005070][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.011579][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.111583][ T7924] loop3: detected capacity change from 0 to 1024 [ 318.504854][ T7927] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1175'. [ 318.788009][ T7938] loop4: detected capacity change from 0 to 512 [ 318.839758][ T7942] netlink: 'syz.0.1181': attribute type 4 has an invalid length. [ 318.865965][ T7938] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 319.066328][ T7938] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 319.130829][ T7938] EXT4-fs (loop4): 1 truncate cleaned up [ 319.174299][ T7938] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000007,journal_dev=0x0000000000000001,debug_want_extra_isize=0x000000000000006a,auto_da_alloc=0x0000000000008001,errors=remount-ro,nouid32,. Quota mode: none. [ 319.284981][ T7947] loop3: detected capacity change from 0 to 256 [ 319.545468][ T7956] xt_hashlimit: size too large, truncated to 1048576 [ 319.681877][ T7957] loop4: detected capacity change from 0 to 1024 [ 319.837991][ T7961] tipc: Enabling of bearer rejected, failed to enable media [ 319.927995][ T7965] loop3: detected capacity change from 0 to 512 [ 319.935036][ T7957] EXT4-fs (loop4): Ignoring removed orlov option [ 320.509503][ T7957] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 320.849822][ T7974] loop3: detected capacity change from 0 to 1024 [ 321.231440][ T7974] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1191'. [ 321.628986][ T7983] netlink: 'syz.3.1194': attribute type 4 has an invalid length. [ 322.932841][ T7996] tipc: Enabling of bearer rejected, failed to enable media [ 324.108714][ T7991] loop0: detected capacity change from 0 to 131072 [ 324.495694][ T7987] loop3: detected capacity change from 0 to 131072 [ 324.511807][ T8009] netlink: 'syz.0.1205': attribute type 4 has an invalid length. [ 325.433070][ T8026] tipc: Enabling of bearer rejected, failed to enable media [ 325.669686][ T8031] loop2: detected capacity change from 0 to 2048 [ 325.792737][ T8031] FAT-fs (loop2): Unrecognized mount option "?¥ÿ" or missing value [ 326.140965][ T8040] No such timeout policy "syz1" [ 326.164555][ T8040] xt_hashlimit: size too large, truncated to 1048576 [ 327.473058][ T8043] netlink: 'syz.4.1217': attribute type 4 has an invalid length. [ 327.489273][ T8047] loop0: detected capacity change from 0 to 512 [ 327.873709][ T8052] loop4: detected capacity change from 0 to 2048 [ 328.076069][ T4177] loop4: p1 p3 p4 [ 328.082833][ T4177] loop4: p4 size 589824 extends beyond EOD, truncated [ 328.182629][ T8052] loop4: p1 p3 p4 [ 328.208614][ T8052] loop4: p4 size 589824 extends beyond EOD, truncated [ 328.396861][ T3561] loop4: p1 p3 p4 [ 328.410034][ T3561] loop4: p4 size 589824 extends beyond EOD, truncated [ 328.637802][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'. [ 329.374730][ T4662] udevd[4662]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 329.408572][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 329.412597][ T5207] udevd[5207]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 329.518535][ T4662] udevd[4662]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 329.519938][ T5207] udevd[5207]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 329.541032][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 329.743399][ T5207] udevd[5207]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 329.756003][ T4662] udevd[4662]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 330.012623][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 330.611508][ T8082] netlink: 'syz.0.1230': attribute type 4 has an invalid length. [ 331.083539][ T2857] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 331.360903][ T8101] loop4: detected capacity change from 0 to 4096 [ 331.606005][ T2857] usb 4-1: Using ep0 maxpacket: 32 [ 332.243718][ T8107] loop0: detected capacity change from 0 to 256 [ 332.250681][ T8107] /dev/loop0: Can't open blockdev [ 332.257316][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.414852][ T8101] EXT4-fs (loop4): Test dummy encryption mode enabled [ 332.441380][ T2857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.466026][ T2857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.528687][ T8101] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,noauto_da_alloc,barrier,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,init_itable=0x000000000000d530,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 332.562714][ T2857] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.631232][ T2857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.672656][ T8107] device batadv_slave_0 entered promiscuous mode [ 332.682775][ T8107] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 332.699773][ T2857] usb 4-1: config 0 descriptor?? [ 332.763805][ T2857] hub 4-1:0.0: USB hub found [ 332.954402][ T8101] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 333.052026][ T2857] hub 4-1:0.0: 1 port detected [ 333.140188][ T8132] loop0: detected capacity change from 0 to 1024 [ 333.479711][ T8101] fscrypt (loop4): Error allocating 'xts(aes)' transform: -4 [ 333.527292][ T8142] loop2: detected capacity change from 0 to 256 [ 333.594938][ T8142] exfat: Deprecated parameter 'utf8' [ 333.611406][ T8144] loop0: detected capacity change from 0 to 512 [ 333.628106][ T8142] exfat: Deprecated parameter 'utf8' [ 333.639132][ T8142] exfat: Deprecated parameter 'utf8' [ 333.702313][ T8142] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 333.850667][ T2857] usb 4-1: USB disconnect, device number 9 [ 335.247970][ T8163] loop3: detected capacity change from 0 to 256 [ 335.471403][ T8163] /dev/loop3: Can't open blockdev [ 335.906302][ T8165] loop2: detected capacity change from 0 to 256 [ 335.971304][ T8165] exFAT-fs (loop2): failed to read boot sector [ 335.993453][ T8165] exFAT-fs (loop2): failed to recognize exfat type [ 335.998188][ T8167] loop3: detected capacity change from 0 to 1024 [ 336.296650][ T8170] loop2: detected capacity change from 0 to 512 [ 336.549869][ T8173] loop3: detected capacity change from 0 to 256 [ 336.608495][ T8170] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 336.634012][ T8180] loop4: detected capacity change from 0 to 256 [ 336.669586][ T8170] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.870327][ T8182] loop3: detected capacity change from 0 to 4096 [ 336.969651][ T8186] loop2: detected capacity change from 0 to 1024 [ 337.101396][ T8186] EXT4-fs (loop2): inline encryption not supported [ 337.118306][ T8186] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.268901][ T8188] loop4: detected capacity change from 0 to 512 [ 337.579194][ T8186] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,abort,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 337.624867][ T8188] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 337.637855][ T8188] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.712703][ T8188] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.1261: invalid size [ 337.725826][ T8188] EXT4-fs (loop4): Remounting filesystem read-only [ 338.155557][ T8200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1266'. [ 338.180866][ T8200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1266'. [ 338.834818][ T8206] loop4: detected capacity change from 0 to 256 [ 339.173175][ T26] audit: type=1800 audit(1771593429.330:38): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1265" name="file1" dev="loop4" ino=1048676 res=0 errno=0 [ 339.636387][ T26] audit: type=1326 audit(1771593430.000:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c6f9d629 code=0x7ffc0000 [ 339.721883][ T26] audit: type=1326 audit(1771593430.050:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c6f9d629 code=0x7ffc0000 [ 339.819524][ T26] audit: type=1326 audit(1771593430.050:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3c6f9d629 code=0x7ffc0000 [ 339.879328][ T8228] loop3: detected capacity change from 0 to 512 [ 339.928422][ T26] audit: type=1326 audit(1771593430.050:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c6f9d629 code=0x7ffc0000 [ 340.031564][ T26] audit: type=1326 audit(1771593430.050:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c6f9d629 code=0x7ffc0000 [ 340.116856][ T26] audit: type=1326 audit(1771593430.050:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c6f9d629 code=0x7ffc0000 [ 340.291226][ T26] audit: type=1326 audit(1771593430.050:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c6f9d629 code=0x7ffc0000 [ 341.071298][ T26] audit: type=1326 audit(1771593430.050:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c6f9d629 code=0x7ffc0000 [ 341.285148][ T26] audit: type=1326 audit(1771593430.050:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3c6f9d629 code=0x7ffc0000 [ 343.014310][ T8264] loop3: detected capacity change from 0 to 512 [ 343.373475][ T8273] 9pnet: Unknown protocol version 9p20\++} [ 344.289434][ T8275] netlink: 'syz.4.1290': attribute type 12 has an invalid length. [ 344.643699][ T8284] loop2: detected capacity change from 0 to 1024 [ 344.666258][ T8284] EXT4-fs (loop2): Ignoring removed nobh option [ 344.701702][ T8284] EXT4-fs (loop2): inline encryption not supported [ 344.708277][ T8284] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 344.751654][ T4227] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 344.857340][ T8284] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nojournal_checksum,usrquota,dioread_lock,nolazytime,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x00000000000007fd,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 345.021318][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 345.161443][ T4227] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 345.181365][ T4227] usb 1-1: config 0 has no interface number 0 [ 345.187508][ T4227] usb 1-1: config 0 interface 222 has no altsetting 0 [ 345.235158][ T8292] loop3: detected capacity change from 0 to 256 [ 345.611293][ T8298] loop4: detected capacity change from 0 to 256 [ 346.160464][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 346.160480][ T26] audit: type=1800 audit(1771593436.520:74): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1295" name="file1" dev="loop4" ino=1048677 res=0 errno=0 [ 346.211466][ T8292] /dev/loop3: Can't open blockdev [ 346.243841][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1297'. [ 346.621428][ T4227] usb 1-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 346.630543][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.682163][ T4227] usb 1-1: Product: syz [ 346.686388][ T4227] usb 1-1: Manufacturer: syz [ 346.701308][ T4227] usb 1-1: SerialNumber: syz [ 346.756731][ T4227] usb 1-1: config 0 descriptor?? [ 346.824996][ T8321] device syzkaller0 entered promiscuous mode [ 347.108207][ T8326] loop4: detected capacity change from 0 to 128 [ 347.232030][ T8323] netlink: 'syz.3.1305': attribute type 12 has an invalid length. [ 347.307286][ T8326] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 347.607541][ T8326] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.716842][ T8338] loop3: detected capacity change from 0 to 256 [ 349.525848][ T8338] /dev/loop3: Can't open blockdev [ 349.557114][ T8343] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 349.566428][ T8343] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 349.576124][ T8343] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 349.591932][ T26] audit: type=1800 audit(1771593439.920:75): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1306" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 349.631359][ T4227] cdc_mbim: probe of 1-1:0.222 failed with error -71 [ 349.686205][ T4227] usb 1-1: USB disconnect, device number 7 [ 350.480585][ T8353] loop3: detected capacity change from 0 to 1024 [ 350.947664][ T8365] device syzkaller0 entered promiscuous mode [ 351.789505][ T8368] loop2: detected capacity change from 0 to 1024 [ 351.919241][ T8368] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 351.941623][ T8368] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.997595][ T8368] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.1318: lblock 3 mapped to illegal pblock 3 (length 3) [ 352.063862][ T8375] tipc: Enabling of bearer rejected, failed to enable media [ 352.079801][ T8368] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 352.108696][ T8375] loop3: detected capacity change from 0 to 1024 [ 352.123021][ T8368] EXT4-fs (loop2): This should not happen!! Data will be lost [ 352.123021][ T8368] [ 352.171388][ T4186] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 352.187857][ T8378] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.1318: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 352.219776][ T8378] EXT4-fs error (device loop2) in ext4_setattr:5626: Corrupt filesystem [ 352.297321][ T8361] loop4: detected capacity change from 0 to 40427 [ 352.340647][ T8361] F2FS-fs (loop4): invalid crc value [ 352.388251][ T8361] F2FS-fs (loop4): Found nat_bits in checkpoint [ 352.431053][ T8385] device syzkaller0 entered promiscuous mode [ 352.451418][ T4186] usb 1-1: Using ep0 maxpacket: 32 [ 352.549170][ T8361] F2FS-fs (loop4): Start checkpoint disabled! [ 352.588708][ T8361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 352.596571][ T4186] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 352.605127][ T4186] usb 1-1: config 0 has no interface number 0 [ 352.621304][ T4186] usb 1-1: config 0 interface 222 has no altsetting 0 [ 352.795930][ T8396] loop2: detected capacity change from 0 to 512 [ 352.821380][ T4186] usb 1-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 352.878759][ T4186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.899623][ T4186] usb 1-1: Product: syz [ 352.922179][ T8396] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 352.943178][ T4186] usb 1-1: Manufacturer: syz [ 352.965477][ T144] handle_bad_sector: 3 callbacks suppressed [ 352.965491][ T144] attempt to access beyond end of device [ 352.965491][ T144] loop4: rw=2049, want=40976, limit=40427 [ 352.982929][ T4186] usb 1-1: SerialNumber: syz [ 353.000934][ T4186] usb 1-1: config 0 descriptor?? [ 353.007039][ T8396] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.881767][ T8396] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 354.366292][ T8396] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 355.951522][ T8415] cgroup: Unknown subsys name 'hash' [ 356.151682][ T8415] udc-core: couldn't find an available UDC or it's busy [ 356.158671][ T8415] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 360.554825][ T4186] cdc_mbim: probe of 1-1:0.222 failed with error -71 [ 360.581406][ T4186] usb 1-1: USB disconnect, device number 8 [ 360.696315][ T8420] device syzkaller0 entered promiscuous mode [ 360.726573][ T8396] EXT4-fs (loop2): This should not happen!! Data will be lost [ 360.726573][ T8396] [ 360.774638][ T8396] EXT4-fs (loop2): Total free blocks count 0 [ 360.804575][ T8396] EXT4-fs (loop2): Free/Dirty block details [ 360.810571][ T8396] EXT4-fs (loop2): free_blocks=65280 [ 360.847269][ T8396] EXT4-fs (loop2): dirty_blocks=1 [ 360.911247][ T8396] EXT4-fs (loop2): Block reservation details [ 360.950796][ T8396] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 361.136561][ T8432] loop2: detected capacity change from 0 to 512 [ 361.165422][ T8435] loop4: detected capacity change from 0 to 512 [ 361.186155][ T8436] loop0: detected capacity change from 0 to 512 [ 361.212889][ T8432] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 361.237187][ T8435] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 361.254685][ T8432] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 361.271354][ T8435] EXT4-fs (loop4): Ignoring removed nobh option [ 361.284651][ T8432] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 361.304838][ T8435] EXT4-fs (loop4): orphan cleanup on readonly fs [ 361.315946][ T8435] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 361.319872][ T8432] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 361.343530][ T8435] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1335: attempt to clear invalid blocks 2 len 1 [ 361.365130][ T8432] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 361.373891][ T8432] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e11c, mo2=0000] [ 361.382025][ T8432] EXT4-fs (loop2): failed to initialize system zone (-117) [ 361.389402][ T8432] EXT4-fs (loop2): mount failed [ 361.457822][ T8435] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 361.481756][ T8435] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1335: invalid indirect mapped block 1819239214 (level 0) [ 361.518151][ T8435] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1335: invalid indirect mapped block 1819239214 (level 1) [ 361.542200][ T8435] EXT4-fs (loop4): 1 truncate cleaned up [ 361.548036][ T8435] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,nobarrier,mblk_io_submit,nobh,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 361.674420][ T8449] loop0: detected capacity change from 0 to 256 [ 362.395216][ T4196] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 362.496449][ T4196] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz-executor: corrupted in-inode xattr [ 362.517335][ T4196] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz-executor: corrupted in-inode xattr [ 363.424979][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.469077][ T8469] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1340'. [ 363.478578][ T8469] device gretap0 entered promiscuous mode [ 363.619696][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.702685][ T8480] loop0: detected capacity change from 0 to 1024 [ 363.724815][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.784769][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.804246][ T8497] chnl_net:caif_netlink_parms(): no params data found [ 366.142244][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.155054][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.197554][ T8497] device bridge_slave_0 entered promiscuous mode [ 366.221312][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 366.232788][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.267740][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.332420][ T8497] device bridge_slave_1 entered promiscuous mode [ 366.435411][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.503547][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.634338][ T8497] team0: Port device team_slave_0 added [ 366.694843][ T8497] team0: Port device team_slave_1 added [ 366.779754][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.792986][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.914943][ T8586] loop3: detected capacity change from 0 to 128 [ 366.949453][ T8497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.989527][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.996654][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.022711][ T8497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.914657][ T8497] device hsr_slave_0 entered promiscuous mode [ 368.078664][ T8497] device hsr_slave_1 entered promiscuous mode [ 368.090892][ T8497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.467335][ T4649] Bluetooth: hci4: command 0x041b tx timeout [ 368.480298][ T8497] Cannot create hsr debugfs directory [ 368.878368][ T8600] loop2: detected capacity change from 0 to 512 [ 368.997548][ T8600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 369.021233][ T8600] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 369.094213][ T8600] overlayfs: failed to resolve './file0': -2 [ 369.100418][ T144] device hsr_slave_0 left promiscuous mode [ 369.115354][ T8603] netlink: 'syz.3.1371': attribute type 29 has an invalid length. [ 369.135341][ T144] device hsr_slave_1 left promiscuous mode [ 369.178465][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.209620][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.240675][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.295253][ T144] device bridge_slave_1 left promiscuous mode [ 369.311449][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.359838][ T144] device bridge_slave_0 left promiscuous mode [ 369.371870][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.416001][ T8613] loop0: detected capacity change from 0 to 512 [ 369.435480][ T144] device veth1_macvtap left promiscuous mode [ 369.447337][ T144] device veth0_macvtap left promiscuous mode [ 369.464336][ T144] device veth1_vlan left promiscuous mode [ 369.479359][ T144] device veth0_vlan left promiscuous mode [ 369.718858][ T144] bond1 (unregistering): Released all slaves [ 369.935458][ T144] team0 (unregistering): Port device team_slave_1 removed [ 369.972603][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.993785][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.114663][ T144] bond0 (unregistering): Released all slaves [ 370.190699][ T8603] netlink: 'syz.3.1371': attribute type 29 has an invalid length. [ 370.341314][ T8627] loop3: detected capacity change from 0 to 16 [ 370.371934][ T8627] /dev/loop3: Can't open blockdev [ 370.409539][ T8625] loop2: detected capacity change from 0 to 2048 [ 370.419169][ T4177] udevd[4177]: incorrect erofs checksum on /dev/loop3 [ 370.501903][ T8625] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 370.510076][ T8625] System zones: 0-7 [ 370.541233][ T4649] Bluetooth: hci4: command 0x040f tx timeout [ 370.555412][ T8637] loop3: detected capacity change from 0 to 256 [ 370.565385][ T8625] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none. [ 370.679078][ T8497] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 370.714957][ T8497] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 370.817189][ T8497] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 370.824507][ T8637] /dev/loop3: Can't open blockdev [ 371.474354][ T8497] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 371.883568][ T2857] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 372.638764][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 372.777196][ T8660] loop3: detected capacity change from 0 to 128 [ 373.362493][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.403036][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.457281][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.482121][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.536534][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.573887][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.582405][ T8638] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 373.625927][ T8638] EXT4-fs (loop2): Remounting filesystem read-only [ 373.643024][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.650174][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.737639][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.858827][ T8673] autofs4:pid:8673:autofs_fill_super: called with bogus options [ 373.873563][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.904699][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.911837][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.980612][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.127941][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.941311][ T2857] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 375.002732][ T2857] usb 1-1: can't read configurations, error -71 [ 375.475964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 375.504891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 375.713584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.016462][ T8690] loop0: detected capacity change from 0 to 128 [ 376.265522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.323006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.343677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.362157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.382688][ T8700] loop2: detected capacity change from 0 to 256 [ 376.400525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.501375][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.509709][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.549818][ T8497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.574198][ T8700] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 376.971419][ T8700] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 377.682934][ T8700] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 377.918794][ T8713] tipc: Enabling of bearer rejected, failed to enable media [ 378.060668][ T8717] loop0: detected capacity change from 0 to 1024 [ 378.210884][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.320512][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.335711][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.533156][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.539496][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.367567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.396532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.575883][ T8771] tipc: Enabling of bearer rejected, failed to enable media [ 381.107728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.151743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.198804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.211844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.235774][ T8497] device veth0_vlan entered promiscuous mode [ 381.283794][ T8497] device veth1_vlan entered promiscuous mode [ 381.347607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 381.385937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 381.420739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.453771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.478933][ T8497] device veth0_macvtap entered promiscuous mode [ 381.507545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 381.533626][ T8497] device veth1_macvtap entered promiscuous mode [ 381.591282][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.691961][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.766401][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.822530][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.840745][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.850747][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.862273][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.872197][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.882638][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.903856][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.929656][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 382.944354][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.951842][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.997368][ T8797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.037042][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.047296][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.058131][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 383.067482][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.109701][ T8497] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.139613][ T8497] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.165652][ T8497] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.194002][ T8497] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.443123][ T8820] tipc: Enabling of bearer rejected, failed to enable media [ 384.179096][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.205090][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.260252][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.269424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 384.276300][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.320036][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 384.605663][ T8836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1422'. [ 384.624135][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 384.633519][ T8836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1422'. [ 384.654620][ T8836] fuse: Bad value for 'fd' [ 385.401643][ T8838] loop5: detected capacity change from 0 to 128 [ 385.514926][ T8838] EXT4-fs (loop5): Test dummy encryption mode enabled [ 385.581372][ T8838] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 386.502381][ T8854] device syzkaller0 entered promiscuous mode [ 386.559912][ T8854] 0: reclassify loop, rule prio 0, protocol 800 [ 386.755083][ T8865] tipc: Started in network mode [ 386.760011][ T8865] tipc: Node identity fcc744240012, cluster identity 4711 [ 386.861296][ T8865] tipc: Enabling of bearer rejected, failed to enable media [ 387.470086][ T8860] loop5: detected capacity change from 0 to 1024 [ 387.539880][ T8860] EXT4-fs (loop5): Ignoring removed orlov option [ 387.644900][ T8874] loop2: detected capacity change from 0 to 1024 [ 387.707834][ T8860] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 387.768729][ T8874] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 387.856345][ T8851] loop0: detected capacity change from 0 to 40427 [ 388.050107][ T8888] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1433'. [ 388.066930][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'. [ 388.076369][ T8888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1433'. [ 388.095582][ T8888] fuse: Bad value for 'fd' [ 388.997455][ T8904] loop2: detected capacity change from 0 to 512 [ 389.765812][ T8904] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 389.888691][ T8916] loop0: detected capacity change from 0 to 1024 [ 389.898078][ T8904] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.524725][ T8904] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #12: comm syz.2.1435: Directory hole found for htree leaf block 0 [ 390.983659][ T8936] loop0: detected capacity change from 0 to 1024 [ 391.004413][ T8934] tipc: Enabling of bearer rejected, failed to enable media [ 391.398702][ T8955] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1450'. [ 391.417043][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1450'. [ 391.427385][ T8955] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1450'. [ 391.445444][ T8955] fuse: Bad value for 'fd' [ 392.670187][ T8966] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 392.701345][ T8963] loop2: detected capacity change from 0 to 128 [ 392.770931][ T8971] device syzkaller0 entered promiscuous mode [ 392.805346][ T8971] 0: reclassify loop, rule prio 0, protocol 800 [ 392.933725][ T8963] EXT4-fs (loop2): Test dummy encryption mode enabled [ 392.940569][ T8963] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 394.016484][ T8995] loop5: detected capacity change from 0 to 256 [ 394.097754][ T8991] tipc: Enabling of bearer rejected, failed to enable media [ 394.178877][ T8991] loop2: detected capacity change from 0 to 1024 [ 394.217754][ T8991] EXT4-fs (loop2): Ignoring removed orlov option [ 394.306668][ T8991] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 394.569110][ T8989] loop0: detected capacity change from 0 to 40427 [ 394.816119][ T9014] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1466'. [ 394.833420][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1466'. [ 394.843167][ T9014] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1466'. [ 394.862518][ T9014] fuse: Bad value for 'fd' [ 399.091959][ T9052] tipc: Enabling of bearer rejected, failed to enable media [ 399.621411][ T4649] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 400.914416][ T9076] loop2: detected capacity change from 0 to 512 [ 401.014144][ T9077] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1480'. [ 401.031428][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 401.042788][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1480'. [ 401.063431][ T9077] fuse: Bad value for 'fd' [ 401.161505][ T4649] usb 6-1: unable to get BOS descriptor or descriptor too short [ 401.292544][ T4649] usb 6-1: not running at top speed; connect to a high speed hub [ 401.542618][ T4649] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.562987][ T4649] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 401.679716][ T9076] EXT4-fs (loop2): Test dummy encryption mode enabled [ 401.691280][ T4649] usb 6-1: string descriptor 0 read error: -71 [ 401.697529][ T4649] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.721301][ T9076] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 401.755942][ T4649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.841305][ T4649] usb 6-1: can't set config #1, error -71 [ 401.849095][ T4649] usb 6-1: USB disconnect, device number 2 [ 402.173997][ T9103] tipc: Enabling of bearer rejected, failed to enable media [ 402.229271][ T9103] loop0: detected capacity change from 0 to 1024 [ 403.247991][ T9137] loop5: detected capacity change from 0 to 4096 [ 403.521865][ T9137] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 403.552640][ T4643] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 403.742405][ T9151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1497'. [ 403.761516][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 403.770838][ T9151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1497'. [ 403.789616][ T9151] fuse: Bad value for 'fd' [ 404.161775][ T4643] usb 3-1: unable to get BOS descriptor or descriptor too short [ 404.261270][ T4643] usb 3-1: not running at top speed; connect to a high speed hub [ 404.362092][ T4643] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.390121][ T4643] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 404.741700][ T4643] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.973273][ T4643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.332060][ T4643] usb 3-1: Product: syz [ 405.336452][ T4643] usb 3-1: Manufacturer: syz [ 405.342012][ T4643] usb 3-1: SerialNumber: syz [ 405.502991][ T9169] device syzkaller0 entered promiscuous mode [ 405.532547][ T9169] 0: reclassify loop, rule prio 0, protocol 800 [ 405.892239][ T4643] usb 3-1: USB disconnect, device number 6 [ 405.906810][ T4177] udevd[4177]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory [ 406.199571][ T9176] loop5: detected capacity change from 0 to 512 [ 406.225821][ T9178] tipc: Enabling of bearer rejected, failed to enable media [ 406.248357][ T9176] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 406.283311][ T9176] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.1500: corrupted xattr entries [ 406.322185][ T9176] EXT4-fs (loop5): 1 orphan inode deleted [ 406.329452][ T9176] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 406.540909][ T9186] loop2: detected capacity change from 0 to 2048 [ 406.733259][ T9186] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 406.749684][ T9186] System zones: 0-7 [ 406.759018][ T9186] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none. [ 407.481715][ T9194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1507'. [ 408.249544][ T9200] loop5: detected capacity change from 0 to 512 [ 408.465264][ T9204] loop2: detected capacity change from 0 to 128 [ 408.507466][ T26] audit: type=1800 audit(1771593498.870:76): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1511" name="file1" dev="loop2" ino=1048685 res=0 errno=0 [ 408.578970][ T26] audit: type=1800 audit(1771593498.930:77): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1511" name="bus" dev="loop2" ino=1048686 res=0 errno=0 [ 408.606677][ T9204] attempt to access beyond end of device [ 408.606677][ T9204] loop2: rw=2049, want=761, limit=128 [ 408.713457][ T9208] device syzkaller0 entered promiscuous mode [ 408.736650][ T9208] 0: reclassify loop, rule prio 0, protocol 800 [ 408.928412][ T9218] tipc: Enabling of bearer rejected, failed to enable media [ 409.238188][ T4288] attempt to access beyond end of device [ 409.238188][ T4288] loop2: rw=1, want=1041, limit=128 [ 409.281327][ T4227] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 409.306122][ T9225] loop5: detected capacity change from 0 to 1024 [ 409.335042][ T9225] EXT4-fs (loop5): Ignoring removed orlov option [ 409.370051][ T9229] loop2: detected capacity change from 0 to 1024 [ 409.383822][ T9225] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,usrjquota=,,errors=continue. Quota mode: none. [ 409.450920][ T9229] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 409.501659][ T9225] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.1520: Allocating blocks 257-513 which overlap fs metadata [ 409.575530][ T9238] netlink: 'syz.3.1526': attribute type 4 has an invalid length. [ 409.709176][ T9250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1525'. [ 409.725886][ T9249] tipc: Enabling of bearer rejected, failed to enable media [ 409.753223][ T4227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 409.811453][ T4227] usb 1-1: not running at top speed; connect to a high speed hub [ 409.813568][ T9250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1525'. [ 409.863254][ T9259] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1525'. [ 409.875794][ T9255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1525'. [ 409.911445][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.931988][ T4227] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 409.986174][ T9264] loop5: detected capacity change from 0 to 512 [ 410.161466][ T4227] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.203597][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.221264][ T4227] usb 1-1: Product: syz [ 410.225561][ T4227] usb 1-1: Manufacturer: syz [ 410.230221][ T4227] usb 1-1: SerialNumber: syz [ 410.253375][ T9264] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1531: bad orphan inode 15 [ 410.318370][ T9264] ext4_test_bit(bit=14, block=18) = 1 [ 410.368092][ T9264] is_bad_inode(inode)=0 [ 410.398626][ T9264] NEXT_ORPHAN(inode)=1023 [ 410.444312][ T9264] max_ino=32 [ 410.447565][ T9264] i_nlink=0 [ 410.470537][ T9264] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2923: inode #15: comm syz.5.1531: corrupted xattr block 19 [ 410.493264][ T9264] EXT4-fs warning (device loop5): ext4_evict_inode:302: xattr delete (err -117) [ 410.531278][ T9264] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 410.566309][ T9264] ext4 filesystem being mounted at /20/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 410.672967][ T9264] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz.5.1531: Directory hole found for htree leaf block 0 [ 410.759289][ T4226] usb 1-1: USB disconnect, device number 11 [ 410.859745][ T9291] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1538'. [ 410.882430][ T9291] fuse: Bad value for 'fd' [ 412.653053][ T9302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1542'. [ 412.691291][ T9302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1542'. [ 412.727135][ T9305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1542'. [ 412.757674][ T9304] device syzkaller0 entered promiscuous mode [ 412.811034][ T9302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1542'. [ 412.851472][ T9304] 0: reclassify loop, rule prio 0, protocol 800 [ 412.983047][ T9298] loop5: detected capacity change from 0 to 16 [ 413.101329][ T9298] erofs: (device loop5): mounted with root inode @ nid 36. [ 413.128170][ T8504] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000] [ 413.175633][ T9298] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192] [ 413.218300][ T9318] loop2: detected capacity change from 0 to 128 [ 413.261519][ T26] audit: type=1800 audit(1771593503.630:78): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1540" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 413.683073][ T9327] netlink: 'syz.0.1549': attribute type 12 has an invalid length. [ 413.757152][ T9318] attempt to access beyond end of device [ 413.757152][ T9318] loop2: rw=2049, want=218, limit=128 [ 413.795415][ T9325] pit: kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 413.828743][ T9325] pit: kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 413.858533][ T9325] pit: kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 413.890963][ T9325] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 413.938591][ T9325] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 413.967881][ T9325] pit: kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 413.994532][ T9325] pit: kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 414.026239][ T9325] pit: kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 414.051912][ T9325] pit: kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 414.081037][ T9325] pit: kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 414.530411][ T9344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1551'. [ 414.552282][ T9344] fuse: Bad value for 'fd' [ 416.085969][ T9352] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1554'. [ 416.126401][ T9352] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1554'. [ 416.175613][ T9358] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1554'. [ 416.216165][ T9352] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1554'. [ 416.481238][ T4227] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 416.962821][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1559'. [ 418.346754][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.383683][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.395018][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.424877][ T9398] device bridge_slave_0 left promiscuous mode [ 418.433795][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.296574][ T9398] device bridge_slave_1 left promiscuous mode [ 419.302843][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.012002][ T4227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 421.111388][ T4227] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 421.118993][ T4227] usb 3-1: can't read configurations, error -71 [ 421.203950][ T9398] bond0: (slave bond_slave_0): Releasing backup interface [ 421.331642][ T9398] bond0: (slave bond_slave_1): Releasing backup interface [ 421.367944][ T9424] __nla_validate_parse: 1 callbacks suppressed [ 421.367958][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1570'. [ 421.448229][ T9428] Cannot find del_set index 2 as target [ 421.483467][ T9398] team0: Port device team_slave_0 removed [ 421.538100][ T9432] program syz.2.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.574175][ T9398] team0: Port device team_slave_1 removed [ 421.580906][ T9398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.617327][ T9398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.624862][ T9398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.762928][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1570'. [ 421.811828][ T9429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1570'. [ 421.841475][ T9430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1570'. [ 422.021534][ T9453] device veth0 entered promiscuous mode [ 422.143380][ T9453] device veth0 left promiscuous mode [ 422.371593][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #241!!! [ 422.381208][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 422.390542][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 422.456582][ T9458] netlink: 'syz.5.1571': attribute type 12 has an invalid length. [ 422.481275][ T4227] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 424.520560][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 424.529527][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 424.538416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 425.902228][ T4227] usb 3-1: device descriptor read/all, error -71 [ 426.229024][ T9489] loop2: detected capacity change from 0 to 2048 [ 426.409343][ T9489] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 426.475885][ T9489] System zones: 0-7 [ 427.854662][ T9489] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none. [ 428.662042][ T9508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1584'. [ 433.682345][ T9565] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1600'. [ 433.809782][ T9565] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1600'. [ 434.083554][ T9569] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.850491][ T9565] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1600'. [ 435.402950][ T23] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 435.811722][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 435.882802][ T23] usb 6-1: not running at top speed; connect to a high speed hub [ 436.481352][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.508066][ T9624] netlink: 'syz.1.1603': attribute type 12 has an invalid length. [ 436.530624][ T23] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 436.745141][ T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.766817][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.791396][ T9571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.820948][ T23] usb 6-1: Product: syz [ 436.845866][ T23] usb 6-1: Manufacturer: syz [ 436.867861][ T23] usb 6-1: SerialNumber: syz [ 437.575388][ T23] usb 6-1: USB disconnect, device number 3 [ 439.834398][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.840774][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.235580][ T9677] xt_ecn: cannot match TCP bits for non-tcp packets [ 440.391324][ T26] audit: type=1326 audit(1771593530.750:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.5.1618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea9516d629 code=0x0 [ 442.539235][ T9745] netlink: 'syz.5.1630': attribute type 12 has an invalid length. [ 442.808094][ T9747] overlayfs: failed to clone lowerpath [ 443.635131][ T9754] netlink: 'syz.5.1642': attribute type 29 has an invalid length. [ 443.662033][ T9754] netlink: 'syz.5.1642': attribute type 29 has an invalid length. [ 443.690915][ T9757] netlink: 'syz.5.1642': attribute type 29 has an invalid length. [ 443.717484][ T9754] netlink: 'syz.5.1642': attribute type 29 has an invalid length. [ 443.804905][ T9762] trusted_key: encrypted_key: insufficient parameters specified [ 445.051272][ T4186] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 445.574597][ T4186] usb 1-1: unable to get BOS descriptor or descriptor too short [ 446.557399][ T4186] usb 1-1: not running at top speed; connect to a high speed hub [ 446.689702][ T4186] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.708558][ T4186] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 447.331110][ T9789] xt_hashlimit: size too large, truncated to 1048576 [ 447.481242][ T4186] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.500013][ T4186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.515121][ T4186] usb 1-1: Product: syz [ 447.541738][ T4186] usb 1-1: can't set config #1, error -71 [ 447.554336][ T4186] usb 1-1: USB disconnect, device number 12 [ 447.569372][ T9798] netlink: 'syz.0.1653': attribute type 29 has an invalid length. [ 447.579565][ T9798] netlink: 'syz.0.1653': attribute type 29 has an invalid length. [ 447.589658][ T9798] netlink: 'syz.0.1653': attribute type 29 has an invalid length. [ 447.597895][ T9798] netlink: 'syz.0.1653': attribute type 29 has an invalid length. [ 448.408002][ T9807] netlink: 'syz.1.1651': attribute type 12 has an invalid length. [ 450.737742][ T9838] loop2: detected capacity change from 0 to 2048 [ 450.821927][ T9838] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 450.842214][ T9838] System zones: 0-7 [ 450.866793][ T9838] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none. [ 450.937600][ T9845] netlink: 'syz.3.1665': attribute type 29 has an invalid length. [ 451.011236][ T1334] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 451.020991][ T9845] netlink: 'syz.3.1665': attribute type 29 has an invalid length. [ 451.071833][ T9848] netlink: 'syz.3.1665': attribute type 29 has an invalid length. [ 451.102673][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1663'. [ 451.131517][ T9845] netlink: 'syz.3.1665': attribute type 29 has an invalid length. [ 451.453872][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1663'. [ 451.812344][ T1334] usb 6-1: unable to get BOS descriptor or descriptor too short [ 451.821038][ T9863] netlink: 'syz.3.1668': attribute type 12 has an invalid length. [ 452.172214][ T1334] usb 6-1: not running at top speed; connect to a high speed hub [ 452.735212][ T1334] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.789375][ T1334] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 453.421267][ T1334] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.432537][ T1334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.443733][ T1334] usb 6-1: Product: syz [ 453.449007][ T1334] usb 6-1: Manufacturer: syz [ 453.455782][ T1334] usb 6-1: SerialNumber: syz [ 454.401441][ T1334] usb 6-1: can't set config #1, error -71 [ 454.430069][ T1334] usb 6-1: USB disconnect, device number 4 [ 454.739490][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'. [ 454.765748][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'. [ 455.336168][ T9910] netlink: 'syz.0.1681': attribute type 12 has an invalid length. [ 457.116182][ T9944] loop2: detected capacity change from 0 to 2048 [ 457.328898][ T9944] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 457.401061][ T9955] netlink: 'syz.5.1695': attribute type 12 has an invalid length. [ 457.758833][ T9944] System zones: 0-7 [ 458.183879][ T9944] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none. [ 458.553278][ T9966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1697'. [ 458.597574][ T9965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1693'. [ 458.621918][ T9966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1697'. [ 461.595965][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1713'. [ 461.606625][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1713'. [ 461.761289][ T2857] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 462.021211][ T2857] usb 3-1: Using ep0 maxpacket: 8 [ 462.141394][ T2857] usb 3-1: config 33 has an invalid interface number: 214 but max is 1 [ 462.214963][ T2857] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 462.370705][ T2857] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 462.400237][ T2857] usb 3-1: config 33 has no interface number 0 [ 462.692397][ T2857] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 462.719391][ T2857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.727763][ T2857] usb 3-1: Product: syz [ 462.737796][ T2857] usb 3-1: Manufacturer: syz [ 462.742651][ T2857] usb 3-1: SerialNumber: syz [ 463.894696][ T2857] cypress_m8 3-1:33.214: HID->COM RS232 Adapter converter detected [ 463.905575][ T2857] cyphidcom ttyUSB0: required endpoint is missing [ 463.914635][ T2857] usb 3-1: USB disconnect, device number 11 [ 463.952920][ T2857] cypress_m8 3-1:33.214: device disconnected [ 465.028820][ T4186] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 465.381845][T10053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1725'. [ 465.392463][T10053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1725'. [ 465.492347][ T4186] usb 6-1: Using ep0 maxpacket: 32 [ 465.621394][ T4186] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 465.633865][ T4186] usb 6-1: config 0 has no interface number 0 [ 465.647448][ T4186] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 465.881257][ T4186] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 465.893521][ T4186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.901938][ T4186] usb 6-1: Product: syz [ 465.907527][ T4186] usb 6-1: Manufacturer: syz [ 465.912587][ T4186] usb 6-1: SerialNumber: syz [ 465.918959][ T4186] usb 6-1: config 0 descriptor?? [ 465.951506][T10042] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 467.432710][T10042] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 467.681301][ T2857] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 468.041346][ T2857] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 468.091398][ T2857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.149574][ T2857] usb 3-1: config 0 descriptor?? [ 469.011370][ T2857] [drm:udl_init] *ERROR* Selecting channel failed [ 469.038868][ T2857] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 469.072280][ T2857] [drm] Initialized udl on minor 2 [ 469.111560][ T2857] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.139518][ T2857] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 469.169147][ T2857] usb 3-1: USB disconnect, device number 12 [ 469.189796][ T4643] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 469.218475][ T4643] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 469.256193][ T4643] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 469.721419][T10094] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1739'. [ 469.810686][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 469.820084][T10094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1739'. [ 469.839406][T10094] fuse: Bad value for 'fd' [ 470.324741][ T4186] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 470.357810][ T4186] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 470.421727][ T4186] asix: probe of 6-1:0.188 failed with error -71 [ 470.523900][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1740'. [ 470.533912][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1740'. [ 470.581785][ T4186] usb 6-1: USB disconnect, device number 5 [ 471.449750][T10112] loop5: detected capacity change from 0 to 128 [ 471.461268][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1743'. [ 471.830195][T10112] EXT4-fs (loop5): Test dummy encryption mode enabled [ 471.861275][T10112] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 472.524435][ T4643] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 472.781250][ T4643] usb 3-1: Using ep0 maxpacket: 32 [ 473.042072][ T4643] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.207907][ T4643] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 473.217241][ T4643] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 473.227781][ T4643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.327095][ T4643] usb 3-1: config 0 descriptor?? [ 473.507027][T10133] loop5: detected capacity change from 0 to 2048 [ 473.584717][T10135] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1752'. [ 473.601818][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 473.611296][T10135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1752'. [ 473.630719][T10135] fuse: Bad value for 'fd' [ 474.371070][T10133] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 474.379458][T10133] System zones: 0-7 [ 474.462042][T10133] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none. [ 474.521209][T10121] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1748'. [ 474.571764][T10144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1753'. [ 474.582813][T10144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1753'. [ 474.600302][ T2857] usb 3-1: USB disconnect, device number 13 [ 476.430349][T10173] fuse: Bad value for 'fd' [ 476.849790][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'. [ 476.859110][T10180] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1765'. [ 476.872362][T10180] fuse: Bad value for 'fd' [ 477.045330][ T4643] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 477.868356][T10188] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 478.746866][T10196] netlink: 'syz.3.1769': attribute type 12 has an invalid length. [ 478.801323][ T4643] usb 3-1: unable to get BOS descriptor or descriptor too short [ 478.852898][ T4643] usb 3-1: not running at top speed; connect to a high speed hub [ 478.941849][ T4643] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.974985][ T4643] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 479.111430][ T4643] usb 3-1: string descriptor 0 read error: -71 [ 479.127017][ T4643] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.197333][ T4643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.441507][ T4643] usb 3-1: can't set config #1, error -71 [ 479.449829][ T4643] usb 3-1: USB disconnect, device number 14 [ 480.506290][ T4643] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 480.812029][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1779'. [ 480.812531][T10222] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1779'. [ 480.823263][T10222] fuse: Bad value for 'fd' [ 481.721814][ T4643] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.741330][ T4643] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 481.753917][ T4643] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.515638][T10201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.831500][ T4643] usb 3-1: string descriptor 0 read error: -71 [ 482.843091][ T4643] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=77.fe [ 482.852810][ T4643] usb 3-1: New USB device strings: Mfr=40, Product=49, SerialNumber=3 [ 482.901688][ T4643] usb 3-1: can't set config #1, error -71 [ 482.924731][ T4643] usb 3-1: USB disconnect, device number 15 [ 485.331394][ T4649] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 485.678255][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 485.687431][T10257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1790'. [ 485.698169][T10257] fuse: Bad value for 'fd' [ 488.075019][T10265] netlink: 'syz.5.1792': attribute type 12 has an invalid length. [ 489.165361][ T4649] usb 1-1: device not accepting address 13, error -71 [ 489.398863][T10281] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1795'. [ 489.571269][ T4649] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 489.591576][ T2857] Bluetooth: hci4: command 0x0406 tx timeout [ 489.996381][ T4649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.046462][ T4649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.081276][ T4649] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.763247][ T4649] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.877309][ T4649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.912937][ T4649] usb 1-1: config 0 descriptor?? [ 491.418168][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 491.473309][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 491.548844][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 491.627817][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 491.951204][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 491.984425][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.040668][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.049678][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.217510][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.225618][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.233074][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.240464][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.247895][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.255319][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.262742][ T4649] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 492.270618][ T4649] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 492.341239][ T4226] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 493.840998][ T4649] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 493.870122][ T4649] usb 1-1: USB disconnect, device number 14 [ 494.329675][T10328] fido_id[10328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 494.503503][ T4226] usb 6-1: unable to get BOS descriptor or descriptor too short [ 494.553317][ T4226] usb 6-1: not running at top speed; connect to a high speed hub [ 495.331276][ T4226] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 495.486180][ T4226] usb 6-1: can't read configurations, error -71 [ 498.541239][ T4649] Bluetooth: hci0: command 0x1407 tx timeout [ 500.353426][T10396] netlink: 'syz.0.1834': attribute type 27 has an invalid length. [ 501.382317][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.390525][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.124518][T10520] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1866'. [ 509.135250][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 509.144298][T10520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1866'. [ 509.154688][T10520] fuse: Bad value for 'fd' [ 509.682790][T10530] loop5: detected capacity change from 0 to 128 [ 509.773219][T10530] EXT4-fs (loop5): Test dummy encryption mode enabled [ 509.821347][T10530] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 510.691325][ T4640] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 510.857229][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1874'. [ 510.989258][ T4640] usb 3-1: Using ep0 maxpacket: 32 [ 511.288973][ T4640] usb 3-1: unable to get BOS descriptor or descriptor too short [ 511.991455][ T4640] usb 3-1: config 255 has an invalid interface number: 81 but max is 0 [ 511.999718][ T4640] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 512.027799][ T4640] usb 3-1: config 255 has no interface number 0 [ 512.148983][ T4640] usb 3-1: config 255 interface 81 altsetting 3 has an invalid endpoint with address 0x93, skipping [ 512.208973][ T4640] usb 3-1: config 255 interface 81 has no altsetting 0 [ 513.321287][ T4640] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 513.343098][ T4640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.373000][ T4640] usb 3-1: Product: syz [ 513.412002][ T4640] usb 3-1: can't set config #255, error -71 [ 513.441568][ T4640] usb 3-1: USB disconnect, device number 16 [ 513.541263][ T23] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 513.964524][T10568] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1882'. [ 513.974389][ T2857] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 513.982555][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 513.991566][T10568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1882'. [ 514.002185][T10568] fuse: Bad value for 'fd' [ 514.081364][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 514.126895][T10570] loop2: detected capacity change from 0 to 128 [ 514.141390][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 514.209990][T10570] EXT4-fs (loop2): Test dummy encryption mode enabled [ 514.231394][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.251246][ T2857] usb 6-1: Using ep0 maxpacket: 32 [ 514.268841][ T23] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 514.279783][T10570] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 514.375480][ T2857] usb 6-1: config 0 has an invalid interface number: 222 but max is 0 [ 514.390204][ T2857] usb 6-1: config 0 has no interface number 0 [ 514.406919][ T2857] usb 6-1: config 0 interface 222 has no altsetting 0 [ 514.751302][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.781706][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.999147][ T23] usb 1-1: Product: syz [ 515.013745][ T23] usb 1-1: Manufacturer: syz [ 515.021485][ T2857] usb 6-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=3a.be [ 515.106296][ T2857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.117424][ T23] usb 1-1: SerialNumber: syz [ 515.179914][ T2857] usb 6-1: Product: syz [ 515.185867][ T2857] usb 6-1: Manufacturer: syz [ 515.190864][ T2857] usb 6-1: SerialNumber: syz [ 515.217586][ T2857] usb 6-1: config 0 descriptor?? [ 518.176496][ T2857] cdc_mbim: probe of 6-1:0.222 failed with error -71 [ 518.221425][ T2857] usb 6-1: USB disconnect, device number 8 [ 518.751385][ T23] usb 1-1: USB disconnect, device number 15 [ 518.980972][T10608] tipc: Enabled bearer , priority 0 [ 519.064663][T10614] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1896'. [ 519.074905][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 519.083905][T10614] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1896'. [ 519.094424][T10614] fuse: Bad value for 'fd' [ 520.030529][T10608] tipc: Disabling bearer [ 520.046901][ T4226] tipc: Node number set to 4241835044 [ 520.487337][ T4639] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 520.731212][ T4639] usb 3-1: Using ep0 maxpacket: 16 [ 521.520852][ T4639] usb 3-1: config 0 has an invalid interface number: 245 but max is 0 [ 521.543918][ T4639] usb 3-1: config 0 has no interface number 0 [ 521.590900][ T4639] usb 3-1: config 0 interface 245 has no altsetting 0 [ 522.351296][ T4639] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc [ 522.384639][ T4639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.429669][ T4639] usb 3-1: Product: syz [ 522.441164][ T4639] usb 3-1: Manufacturer: syz [ 522.451417][ T4639] usb 3-1: SerialNumber: syz [ 522.457867][ T4639] usb 3-1: config 0 descriptor?? [ 522.743476][ T4639] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 522.875751][ T4639] usb 3-1: selecting invalid altsetting 0 [ 523.359339][ T2425] pvrusb2: Invalid write control endpoint [ 523.486296][ T4639] usb 3-1: USB disconnect, device number 17 [ 524.053540][ T2425] pvrusb2: Invalid write control endpoint [ 524.066424][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 524.371332][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 524.379661][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 524.419293][ T2425] pvrusb2: Device being rendered inoperable [ 524.458772][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 524.493193][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 524.612928][ T2425] pvrusb2: Attached sub-driver cx25840 [ 524.779109][ T2425] pvrusb2: Attempted to execute control transfer when device not ok [ 524.802261][ T2425] pvrusb2: Attempted to execute control transfer when device not ok [ 524.842699][ T2425] pvrusb2: Attempted to execute control transfer when device not ok [ 524.916567][T10662] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1910'. [ 524.921284][ T2425] pvrusb2: Attempted to execute control transfer when device not ok [ 524.934684][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 524.943675][T10662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1910'. [ 524.954448][T10662] fuse: Bad value for 'fd' [ 524.973985][ T2425] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 526.935192][T10678] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 527.433818][ T2425] TUNER: Unable to find symbol tda829x_probe() [ 528.452367][ T2425] DVB: Unable to find symbol tda9887_attach() [ 528.458477][ T2425] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 528.523558][ T2425] pvrusb2: Attached sub-driver tuner [ 528.528954][ T2425] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 528.564486][ T2425] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 530.181310][ T4639] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 530.403056][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1920'. [ 530.413164][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1920'. [ 530.684497][T10715] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1923'. [ 530.746824][T10718] fuse: Bad value for 'fd' [ 530.752067][ T4639] usb 3-1: device descriptor read/all, error -71 [ 530.864369][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1923'. [ 530.873333][T10715] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1923'. [ 531.250436][T10736] loop2: detected capacity change from 0 to 256 [ 531.258634][T10737] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 531.268473][T10737] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 10737, name: syz.5.1927 [ 531.277574][T10737] 1 lock held by syz.5.1927/10737: [ 531.282671][T10737] #0: ffffffff8c3443b8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 531.292411][T10737] irq event stamp: 682 [ 531.296479][T10737] hardirqs last enabled at (681): [] _raw_spin_unlock_irqrestore+0x82/0x120 [ 531.306801][T10737] hardirqs last disabled at (682): [] _raw_spin_lock_irq+0x86/0xf0 [ 531.316264][T10737] softirqs last enabled at (666): [] ip_setsockopt+0x58a/0x3130 [ 531.325555][T10737] softirqs last disabled at (664): [] release_sock+0x2b/0x1b0 [ 531.334582][T10737] Preemption disabled at: [ 531.334589][T10737] [<0000000000000000>] 0x0 [ 531.343341][T10737] CPU: 1 PID: 10737 Comm: syz.5.1927 Not tainted syzkaller #0 [ 531.350799][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.360859][T10737] Call Trace: [ 531.364146][T10737] [ 531.367081][T10737] dump_stack_lvl+0x188/0x250 [ 531.371779][T10737] ? ip_setsockopt+0x58a/0x3130 [ 531.376641][T10737] ? show_regs_print_info+0x20/0x20 [ 531.381847][T10737] ? load_image+0x400/0x400 [ 531.386362][T10737] ___might_sleep+0x493/0x610 [ 531.391077][T10737] ? __might_sleep+0xf0/0xf0 [ 531.395681][T10737] down_read+0x20/0x2e0 [ 531.399842][T10737] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 531.405177][T10737] ? kernfs_find_ns+0x510/0x510 [ 531.410055][T10737] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 531.416233][T10737] cgroup_get_from_path+0x5f/0x2f0 [ 531.421346][T10737] cgroup_mt_check_v1+0x1ae/0x2c0 [ 531.426378][T10737] xt_check_match+0x425/0xaf0 [ 531.431060][T10737] ? xt_check_proc_name+0x240/0x240 [ 531.436266][T10737] ? pcpu_alloc+0x1121/0x1770 [ 531.440952][T10737] ? xt_find_match+0x1e1/0x210 [ 531.445723][T10737] translate_table+0x1551/0x20e0 [ 531.450676][T10737] ? ipt_register_table+0x800/0x800 [ 531.455878][T10737] ? __might_fault+0xb7/0x110 [ 531.460555][T10737] ? __lock_acquire+0x7d10/0x7d10 [ 531.465595][T10737] ? _copy_from_user+0x111/0x170 [ 531.470548][T10737] do_ipt_set_ctl+0x964/0xd80 [ 531.475231][T10737] ? nf_setsockopt+0x218/0x280 [ 531.480014][T10737] ? ipt_unregister_table_exit+0x220/0x220 [ 531.485816][T10737] ? __lock_acquire+0x7d10/0x7d10 [ 531.490840][T10737] ? __mutex_lock_common+0x465/0x2400 [ 531.496228][T10737] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 531.501867][T10737] ? mutex_unlock+0x10/0x10 [ 531.506388][T10737] ? __local_bh_enable_ip+0x136/0x1c0 [ 531.511786][T10737] ? lockdep_hardirqs_on+0x94/0x140 [ 531.517005][T10737] ? __local_bh_enable_ip+0x136/0x1c0 [ 531.522388][T10737] nf_setsockopt+0x25f/0x280 [ 531.526989][T10737] ip_setsockopt+0x207d/0x3130 [ 531.531765][T10737] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 531.537151][T10737] ? __might_sleep+0xf0/0xf0 [ 531.541747][T10737] ? rcu_lock_release+0x9/0x20 [ 531.546518][T10737] tcp_setsockopt+0x240/0x1e90 [ 531.551292][T10737] ? aa_sk_perm+0x7dc/0x910 [ 531.555809][T10737] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 531.561189][T10737] ? aa_af_perm+0x340/0x340 [ 531.565693][T10737] ? __fget_files+0x40f/0x480 [ 531.570376][T10737] ? aa_sock_opt_perm+0x74/0x100 [ 531.575320][T10737] ? sock_common_setsockopt+0x32/0xb0 [ 531.580709][T10737] ? sock_common_recvmsg+0x1c0/0x1c0 [ 531.586012][T10737] __sys_setsockopt+0x2bf/0x3d0 [ 531.590891][T10737] __x64_sys_setsockopt+0xb1/0xc0 [ 531.595924][T10737] do_syscall_64+0x4c/0xa0 [ 531.600341][T10737] ? clear_bhb_loop+0x30/0x80 [ 531.605027][T10737] ? clear_bhb_loop+0x30/0x80 [ 531.609724][T10737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.615637][T10737] RIP: 0033:0x7fea9516d629 [ 531.620051][T10737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.639659][T10737] RSP: 002b:00007fea93385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 531.648084][T10737] RAX: ffffffffffffffda RBX: 00007fea953e7180 RCX: 00007fea9516d629 [ 531.656060][T10737] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 531.664028][T10737] RBP: 00007fea95203b39 R08: 00000000000022f8 R09: 0000000000000000 [ 531.672008][T10737] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 531.679988][T10737] R13: 00007fea953e7218 R14: 00007fea953e7180 R15: 00007ffebff2b7a8 [ 531.688008][T10737] [ 531.691039][T10737] [ 531.693363][T10737] ============================= [ 531.698198][T10737] [ BUG: Invalid wait context ] [ 531.703043][T10737] syzkaller #0 Tainted: G W [ 531.708854][T10737] ----------------------------- [ 531.713701][T10737] syz.5.1927/10737 is trying to lock: [ 531.719085][T10737] ffffffff8c44f9d0 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 531.728576][T10737] other info that might help us debug this: [ 531.734458][T10737] context-{4:4} [ 531.737913][T10737] 1 lock held by syz.5.1927/10737: [ 531.743024][T10737] #0: ffffffff8c3443b8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 531.752776][T10737] stack backtrace: [ 531.756497][T10737] CPU: 1 PID: 10737 Comm: syz.5.1927 Tainted: G W syzkaller #0 [ 531.765354][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.775422][T10737] Call Trace: [ 531.778718][T10737] [ 531.781659][T10737] dump_stack_lvl+0x188/0x250 [ 531.786374][T10737] ? show_regs_print_info+0x20/0x20 [ 531.791585][T10737] ? load_image+0x400/0x400 [ 531.796112][T10737] __lock_acquire+0x1bf8/0x7d10 [ 531.800996][T10737] ? 0xffffffffa002a000 [ 531.805158][T10737] ? verify_lock_unused+0x140/0x140 [ 531.810373][T10737] ? __printk_cpu_unlock+0x5f/0x70 [ 531.815491][T10737] ? dump_stack_lvl+0x1fd/0x250 [ 531.820467][T10737] ? ip_setsockopt+0x58a/0x3130 [ 531.825332][T10737] ? show_regs_print_info+0x20/0x20 [ 531.830535][T10737] ? load_image+0x400/0x400 [ 531.835048][T10737] lock_acquire+0x19e/0x400 [ 531.839564][T10737] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 531.845041][T10737] ? __might_sleep+0xf0/0xf0 [ 531.849640][T10737] ? read_lock_is_recursive+0x10/0x10 [ 531.855019][T10737] down_read+0x44/0x2e0 [ 531.859175][T10737] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 531.864649][T10737] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 531.869951][T10737] ? kernfs_find_ns+0x510/0x510 [ 531.874823][T10737] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 531.880985][T10737] cgroup_get_from_path+0x5f/0x2f0 [ 531.886106][T10737] cgroup_mt_check_v1+0x1ae/0x2c0 [ 531.891143][T10737] xt_check_match+0x425/0xaf0 [ 531.895829][T10737] ? xt_check_proc_name+0x240/0x240 [ 531.901023][T10737] ? pcpu_alloc+0x1121/0x1770 [ 531.905714][T10737] ? xt_find_match+0x1e1/0x210 [ 531.910481][T10737] translate_table+0x1551/0x20e0 [ 531.915418][T10737] ? ipt_register_table+0x800/0x800 [ 531.920642][T10737] ? __might_fault+0xb7/0x110 [ 531.925322][T10737] ? __lock_acquire+0x7d10/0x7d10 [ 531.930345][T10737] ? _copy_from_user+0x111/0x170 [ 531.935278][T10737] do_ipt_set_ctl+0x964/0xd80 [ 531.939959][T10737] ? nf_setsockopt+0x218/0x280 [ 531.944727][T10737] ? ipt_unregister_table_exit+0x220/0x220 [ 531.950531][T10737] ? __lock_acquire+0x7d10/0x7d10 [ 531.955553][T10737] ? __mutex_lock_common+0x465/0x2400 [ 531.960929][T10737] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 531.966681][T10737] ? mutex_unlock+0x10/0x10 [ 531.971194][T10737] ? __local_bh_enable_ip+0x136/0x1c0 [ 531.976568][T10737] ? lockdep_hardirqs_on+0x94/0x140 [ 531.981791][T10737] ? __local_bh_enable_ip+0x136/0x1c0 [ 531.987178][T10737] nf_setsockopt+0x25f/0x280 [ 531.991777][T10737] ip_setsockopt+0x207d/0x3130 [ 531.996548][T10737] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 532.001928][T10737] ? __might_sleep+0xf0/0xf0 [ 532.006523][T10737] ? rcu_lock_release+0x9/0x20 [ 532.011289][T10737] tcp_setsockopt+0x240/0x1e90 [ 532.016060][T10737] ? aa_sk_perm+0x7dc/0x910 [ 532.020564][T10737] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 532.025939][T10737] ? aa_af_perm+0x340/0x340 [ 532.030441][T10737] ? __fget_files+0x40f/0x480 [ 532.035124][T10737] ? aa_sock_opt_perm+0x74/0x100 [ 532.040068][T10737] ? sock_common_setsockopt+0x32/0xb0 [ 532.045457][T10737] ? sock_common_recvmsg+0x1c0/0x1c0 [ 532.050745][T10737] __sys_setsockopt+0x2bf/0x3d0 [ 532.055600][T10737] __x64_sys_setsockopt+0xb1/0xc0 [ 532.060631][T10737] do_syscall_64+0x4c/0xa0 [ 532.065057][T10737] ? clear_bhb_loop+0x30/0x80 [ 532.069732][T10737] ? clear_bhb_loop+0x30/0x80 [ 532.074406][T10737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.080300][T10737] RIP: 0033:0x7fea9516d629 [ 532.084720][T10737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.104323][T10737] RSP: 002b:00007fea93385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 532.112756][T10737] RAX: ffffffffffffffda RBX: 00007fea953e7180 RCX: 00007fea9516d629 [ 532.120742][T10737] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 532.128715][T10737] RBP: 00007fea95203b39 R08: 00000000000022f8 R09: 0000000000000000 [ 532.136691][T10737] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 532.144750][T10737] R13: 00007fea953e7218 R14: 00007fea953e7180 R15: 00007ffebff2b7a8 [ 532.152727][T10737] [ 532.317991][ T26] audit: type=1800 audit(1771593622.680:80): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1925" name="file1" dev="loop2" ino=1048688 res=0 errno=0 [ 532.501531][T10737] xt_cgroup: invalid path, errno=-2