last executing test programs: 1m13.128374056s ago: executing program 3 (id=1557): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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") chdir(0x0) semget$private(0x0, 0x3, 0xa0) read$msr(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mount$bind(0x0, 0x0, 0x0, 0x201008, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) 1m12.431336268s ago: executing program 3 (id=1559): mkdir(&(0x7f0000000300)='./bus\x00', 0x36) mkdir(&(0x7f0000000580)='./file0\x00', 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1m10.278015687s ago: executing program 3 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x9, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x7fffffff}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m8.787643638s ago: executing program 3 (id=1571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_setup(0x2, &(0x7f0000002400)) 1m7.610411663s ago: executing program 3 (id=1573): syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x1ad72f7) accept4$netrom(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) 1m6.144383349s ago: executing program 3 (id=1578): sysinfo(&(0x7f0000000000)=""/196) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 50.169115847s ago: executing program 32 (id=1578): sysinfo(&(0x7f0000000000)=""/196) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 16.348091944s ago: executing program 0 (id=1663): dup(0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x40000804) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 16.343574248s ago: executing program 2 (id=1674): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000002fc0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x18, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 16.040712116s ago: executing program 0 (id=1664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000021c0)=ANY=[], 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000240)={0x0, 0x26, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r4, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 14.194689201s ago: executing program 2 (id=1668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000007c0), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a3, &(0x7f00000006c0)="$eJzs0L9rE2Ecx/H397knPyq05kQcKtiAxXilmtxVRZyCU4UcODgaNKSxKSZqehmstJBFCqJ28B9wq6MKOokoiGNxEBz0XLpJM4iDOkVyeTL4N/R5Dfe57xfuvs/zbUadKAPkWK9TJuEwxScEDczIqKfUKF+b+ofJrVFw0dQPTT4zOR2t3btZa7Uaq/kLedz/GsCvPO6T8x+nTCt6wRFFXygjX36u12tyPWRQpq2WQtwKc49wqnS8x0zrSQ5fw2Gg4FKPjhQqcLDYbd8pRmu5Uyvt2nJjuXErCBbOlc6USmeD4o2VVqP0CvEeiOIpG3ghmZAJb4NUlfs7+gDzgnhNFTuiIF1la8c5eXy+j/L2GCC8K/TJfNPNvLrCCbJXhxfKmg2EzFaYSKFJBi0il9VL8fVn/TulyPYc53T9dmtpM4f8TW+XZS8r/i6pgk8w57MwXA2HeM9mzGzMYsx2zO53ZuTNcMp4r7o3fD431VGO8WfA3Vq3u+qn4YPokKAQErgwmfxOJedy4a35xgRfxy+WZVmWZVmWZVnWPvAvAAD//32BYck=") 13.032219706s ago: executing program 2 (id=1670): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 12.494783177s ago: executing program 0 (id=1671): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 11.263974484s ago: executing program 4 (id=1673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r3, 0x2}, 0x20) 11.166977282s ago: executing program 0 (id=1675): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, 0x0, &(0x7f00000001c0)) ptrace(0x10, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 10.253774008s ago: executing program 4 (id=1677): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 9.317748765s ago: executing program 5 (id=1678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) 9.264054721s ago: executing program 5 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 9.015389593s ago: executing program 0 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 8.452193826s ago: executing program 1 (id=1681): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 8.231722442s ago: executing program 5 (id=1682): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r2, 0x400, 0x0) truncate(0x0, 0x1000000) close_range(r0, 0xffffffffffffffff, 0x0) 7.086993371s ago: executing program 1 (id=1683): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 7.085654888s ago: executing program 0 (id=1684): r0 = socket(0xa, 0x3, 0x1) getsockopt(r0, 0xff, 0xfffffffb, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="03000000082001"], 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.814198532s ago: executing program 4 (id=1685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.943184054s ago: executing program 1 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 5.77278382s ago: executing program 2 (id=1687): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, r3, 0x4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x281, 0xffffffff, {0x0, 0x2710}, {0x0, 0x2710}, {0x3, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, '%\x00'}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x3}, 0x1e) 4.517098497s ago: executing program 1 (id=1688): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.515941493s ago: executing program 4 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0) 3.393137485s ago: executing program 4 (id=1690): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]}) 3.3928987s ago: executing program 5 (id=1691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 2.126530608s ago: executing program 5 (id=1692): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) 2.01522541s ago: executing program 4 (id=1693): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000700)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 1.977071794s ago: executing program 2 (id=1694): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001700)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000180)=""/160, &(0x7f00000000c0)=0xa0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}, {&(0x7f0000000380)=""/150, 0x7fffdff8}], 0x2, 0x7, 0x0) 1.879992547s ago: executing program 1 (id=1695): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000041c0)=@base={0x2, 0x4, 0x9, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 83.449759ms ago: executing program 5 (id=1696): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 74.260015ms ago: executing program 2 (id=1697): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000400), 0x59e5, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x6, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x39}, "642068691208be2ada9018b7e8e8ff5496b68b4c237c5a27897247f3f4500d218e61591bef23ab1d0f23f67fc0a17736eb067228155baa53ff"}, 0x3d) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x10010, 0xffffffffffffffff, 0x7712e000) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001980)={0x0}}, 0x20000000) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000002d40)='.dead\x00', &(0x7f0000002d80)={'syz', 0x0}, &(0x7f0000002dc0), 0x0, r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x8, 0x101000) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 0s ago: executing program 1 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/172, 0xac}], 0x1, &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfefb) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000380)) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000000440)={[{@part={'part', 0x3d, 0xf34}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@uid}, {@nodecompose}, {@nodecompose}, {}, {@uid}, {}, {@nodecompose}]}, 0x1, 0x6b4, &(0x7f0000001f80)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): 193) [ 141.230218][ T30] audit: type=1800 audit(1755570856.177:6): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.193" name="memory.swap.current" dev="mqueue" ino=11606 res=0 errno=0 [ 141.307980][ T6671] loop3: detected capacity change from 0 to 1024 [ 141.748650][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 142.529802][ T6693] tipc: Started in network mode [ 142.703034][ T6693] tipc: Node identity 5a3a06b719b1, cluster identity 4711 [ 143.229597][ T6693] tipc: Enabled bearer , priority 0 [ 143.260062][ T6700] syzkaller0: entered promiscuous mode [ 143.290300][ T6700] syzkaller0: entered allmulticast mode [ 143.303413][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.349727][ T6702] No source specified [ 143.541756][ T6693] tipc: Resetting bearer [ 143.649195][ T6693] tipc: Disabling bearer [ 143.701168][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 146.003575][ T30] audit: type=1800 audit(1755570860.957:7): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.215" name="/" dev="9p" ino=2 res=0 errno=0 [ 147.040403][ T5926] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 147.275568][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 147.380594][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.420429][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.538005][ T6767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.790239][ T5926] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 147.873381][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.964438][ T5926] usb 5-1: config 0 descriptor?? [ 148.239477][ T6775] loop5: detected capacity change from 0 to 128 [ 148.369864][ T6775] FAT-fs (loop5): Directory bread(block 32) failed [ 148.442219][ T5926] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 148.460230][ T6775] FAT-fs (loop5): Directory bread(block 33) failed [ 148.624105][ T6775] FAT-fs (loop5): Directory bread(block 34) failed [ 148.672653][ T6775] FAT-fs (loop5): Directory bread(block 35) failed [ 148.743453][ T6775] FAT-fs (loop5): Directory bread(block 36) failed [ 148.750078][ T6775] FAT-fs (loop5): Directory bread(block 37) failed [ 148.757682][ T6775] FAT-fs (loop5): Directory bread(block 38) failed [ 148.764301][ T6775] FAT-fs (loop5): Directory bread(block 39) failed [ 148.803575][ T5926] usb 5-1: USB disconnect, device number 2 [ 148.828586][ T6775] FAT-fs (loop5): Directory bread(block 40) failed [ 148.878874][ T6787] fido_id[6787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 148.900820][ T6775] FAT-fs (loop5): Directory bread(block 41) failed [ 149.914269][ T6804] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 150.012947][ T6804] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 150.739427][ T6803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.767735][ T6832] syz_tun: entered allmulticast mode [ 151.857571][ T6831] syz_tun: left allmulticast mode [ 152.523547][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 152.533554][ T6841] bridge_slave_1: left allmulticast mode [ 152.539180][ T6841] bridge_slave_1: left promiscuous mode [ 152.546347][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.572284][ T6841] bridge_slave_0: left allmulticast mode [ 152.642235][ T6841] bridge_slave_0: left promiscuous mode [ 152.700107][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.782866][ T6845] netlink: 14 bytes leftover after parsing attributes in process `syz.5.248'. [ 152.918962][ T6845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.944576][ T6845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.970033][ T6845] bond0 (unregistering): Released all slaves [ 153.510285][ T5941] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.199017][ T5941] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 154.248545][ T5941] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.325761][ T5941] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 154.362799][ T60] veth0_to_bond: left promiscuous mode [ 154.389477][ T5941] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.424261][ T5941] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.453572][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.493836][ T5941] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.542173][ T5941] usb 6-1: invalid MIDI out EP 0 [ 154.713274][ T5941] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 155.590220][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.770090][ T5943] usb 6-1: USB disconnect, device number 2 [ 155.943333][ T10] usb 5-1: config 2 interface 0 has no altsetting 0 [ 155.961974][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 155.979496][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.997992][ T10] usb 5-1: Product: syz [ 156.002868][ T10] usb 5-1: Manufacturer: syz [ 156.007731][ T10] usb 5-1: SerialNumber: syz [ 159.402357][ T10] ims_pcu 5-1:2.0: Zero length descriptor [ 159.959029][ T10] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22 [ 159.971071][ T10] usb 5-1: USB disconnect, device number 3 [ 163.543313][ T30] audit: type=1326 audit(1755570878.497:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.4.287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1732d8ebe9 code=0x0 [ 167.246469][ T7005] block device autoloading is deprecated and will be removed. [ 169.083856][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.310'. [ 169.093159][ T7038] bridge_slave_1: left allmulticast mode [ 169.098971][ T7038] bridge_slave_1: left promiscuous mode [ 169.488702][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.659976][ T7038] bridge_slave_0: left allmulticast mode [ 169.811976][ T7038] bridge_slave_0: left promiscuous mode [ 169.817727][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.962314][ T7060] netlink: 60 bytes leftover after parsing attributes in process `syz.1.317'. [ 172.820405][ T5859] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 172.828880][ T5859] Bluetooth: hci5: Injecting HCI hardware error event [ 172.836935][ T5179] Bluetooth: hci5: hardware error 0x00 [ 173.733165][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 174.906792][ T5179] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 175.441283][ T5943] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 175.720186][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 175.764554][ T5943] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 175.836637][ T5943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.907905][ T5943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.989126][ T5943] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.038190][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.078510][ T5943] usb 2-1: Product: syz [ 176.110167][ T5943] usb 2-1: Manufacturer: syz [ 176.146964][ T5943] usb 2-1: SerialNumber: syz [ 176.595730][ T5943] usb 2-1: 0:2 : does not exist [ 177.649784][ T5943] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 177.753990][ T5943] usb 2-1: USB disconnect, device number 2 [ 177.819092][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.533299][ T7146] syz_tun: entered allmulticast mode [ 180.545635][ T7143] syz_tun: left allmulticast mode [ 181.239454][ T7154] loop3: detected capacity change from 0 to 2048 [ 181.685784][ T7154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 181.929033][ T7171] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 182.067378][ T7171] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 398 with error 28 [ 182.121359][ T7171] EXT4-fs (loop3): This should not happen!! Data will be lost [ 182.121359][ T7171] [ 182.494077][ T7171] EXT4-fs (loop3): Total free blocks count 0 [ 182.614417][ T7171] EXT4-fs (loop3): Free/Dirty block details [ 182.620542][ T7171] EXT4-fs (loop3): free_blocks=2415919104 [ 182.629930][ T7171] EXT4-fs (loop3): dirty_blocks=400 [ 182.638041][ T7171] EXT4-fs (loop3): Block reservation details [ 182.666339][ T7171] EXT4-fs (loop3): i_reserved_data_blocks=25 [ 184.220052][ T1159] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 186.811152][ T7216] loop5: detected capacity change from 0 to 1024 [ 187.185741][ T7216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.343160][ T7216] EXT4-fs error (device loop5): ext4_find_dest_de:2051: inode #2: block 16: comm syz.5.361: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 187.733338][ T7232] netlink: 'syz.2.365': attribute type 12 has an invalid length. [ 188.292252][ T5860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.613788][ T7270] loop4: detected capacity change from 0 to 128 [ 194.687324][ T7270] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 194.748090][ T7270] hpfs: hpfs_map_sector(): read error [ 196.345573][ T7294] loop1: detected capacity change from 0 to 512 [ 196.388755][ T7294] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.417932][ T7294] EXT4-fs: inline encryption not supported [ 196.484150][ T7294] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.509199][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 196.670898][ T7294] EXT4-fs (loop1): Test dummy encryption mode enabled [ 196.710255][ T7294] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 196.752742][ T7294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.662254][ T7294] EXT4-fs (loop1): 1 truncate cleaned up [ 197.668583][ T7294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.605059][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.154551][ T5179] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 199.163033][ T5179] Bluetooth: hci3: Injecting HCI hardware error event [ 199.170259][ T5179] Bluetooth: hci3: hardware error 0x00 [ 200.480865][ T5941] Process accounting resumed [ 201.059734][ T7341] loop1: detected capacity change from 0 to 128 [ 201.095157][ T7341] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 201.192315][ T7341] hpfs: hpfs_map_sector(): read error [ 201.681684][ T5941] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 201.873080][ T5179] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 201.898089][ T5941] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 202.008263][ T5941] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.256848][ T5941] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 202.279538][ T7350] loop1: detected capacity change from 0 to 512 [ 202.293533][ T5941] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.311687][ T7350] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.333071][ T7350] EXT4-fs: inline encryption not supported [ 202.338939][ T7350] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.363574][ T5941] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.387571][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.397780][ T7350] EXT4-fs (loop1): Test dummy encryption mode enabled [ 202.410066][ T7350] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.445917][ T5941] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.467170][ T5941] usb 5-1: invalid MIDI out EP 0 [ 202.528391][ T7350] EXT4-fs (loop1): 1 truncate cleaned up [ 202.615966][ T7350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.832442][ T5941] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 202.865130][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.071447][ T5941] usb 5-1: USB disconnect, device number 4 [ 204.770680][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.401317][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.870992][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 206.877194][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 206.886028][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 206.893353][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 207.027167][ T7394] loop2: detected capacity change from 0 to 128 [ 207.072828][ T7394] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 207.252373][ T7394] hpfs: hpfs_map_sector(): read error [ 209.441215][ T7423] netlink: 148 bytes leftover after parsing attributes in process `syz.3.422'. [ 211.880187][ T6537] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 212.030305][ T6537] usb 4-1: Using ep0 maxpacket: 8 [ 212.044449][ T6537] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 212.054354][ T6537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.078801][ T6537] usb 4-1: Product: syz [ 212.120326][ T6537] usb 4-1: Manufacturer: syz [ 212.222331][ T6537] usb 4-1: SerialNumber: syz [ 212.273078][ T6537] usb 4-1: config 0 descriptor?? [ 212.523021][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.437'. [ 212.602753][ T6537] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.473091][ T6537] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 214.717194][ T6537] usb 4-1: USB disconnect, device number 2 [ 215.440452][ T5942] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 216.593060][ T7508] loop4: detected capacity change from 0 to 1024 [ 216.644071][ T5942] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.660685][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.862308][ T5942] usb 2-1: config 0 descriptor?? [ 216.916391][ T5942] cp210x 2-1:0.0: cp210x converter detected [ 218.033608][ T5942] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 218.090181][ T5942] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 218.120256][ T5942] usb 2-1: cp210x converter now attached to ttyUSB0 [ 218.161035][ T5942] usb 2-1: USB disconnect, device number 3 [ 218.191045][ T5942] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.219202][ T5942] cp210x 2-1:0.0: device disconnected [ 218.765396][ T7529] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 219.845796][ T7530] delete_channel: no stack [ 225.718258][ T7599] loop3: detected capacity change from 0 to 256 [ 225.770005][ T7599] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.918110][ T7599] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 225.957827][ T7610] loop5: detected capacity change from 0 to 1024 [ 226.002465][ T7610] EXT4-fs: Ignoring removed nobh option [ 226.015381][ T7610] EXT4-fs: Ignoring removed bh option [ 226.103102][ T7599] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 226.134921][ T30] audit: type=1326 audit(1755570941.077:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6a18ebe9 code=0x7ffc0000 [ 226.260477][ T7610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.357990][ T30] audit: type=1326 audit(1755570941.077:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6a18ebe9 code=0x7ffc0000 [ 226.450008][ T30] audit: type=1326 audit(1755570941.077:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a6a18ebe9 code=0x7ffc0000 [ 226.650288][ T30] audit: type=1326 audit(1755570941.087:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6a18ebe9 code=0x7ffc0000 [ 226.703364][ T7623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.717289][ T30] audit: type=1326 audit(1755570941.087:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6a18ebe9 code=0x7ffc0000 [ 226.753509][ T5860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.958348][ T7623] bond_slave_0: entered promiscuous mode [ 226.964088][ T7623] bond_slave_1: entered promiscuous mode [ 226.996203][ T30] audit: type=1326 audit(1755570941.087:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1a6a18ebe9 code=0x7ffc0000 [ 227.018673][ T30] audit: type=1326 audit(1755570941.087:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a6a18ec23 code=0x7ffc0000 [ 227.065573][ T7623] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.075117][ T30] audit: type=1326 audit(1755570941.087:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1a6a18d69f code=0x7ffc0000 [ 227.628914][ T30] audit: type=1326 audit(1755570941.117:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1a6a18ec77 code=0x7ffc0000 [ 227.760212][ T30] audit: type=1326 audit(1755570941.117:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a6a18d550 code=0x7ffc0000 [ 227.772523][ T7623] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 227.801077][ T7630] netlink: 148 bytes leftover after parsing attributes in process `syz.5.490'. [ 229.510560][ T7640] delete_channel: no stack [ 232.331934][ T7674] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 233.667062][ T7699] syzkaller0: entered promiscuous mode [ 233.682970][ T7699] syzkaller0: entered allmulticast mode [ 237.661728][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 237.661781][ T30] audit: type=1326 audit(1755570952.537:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.2.519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f382ef8ebe9 code=0x0 [ 239.223377][ T7743] loop3: detected capacity change from 0 to 512 [ 239.471857][ T7743] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.596580][ T7743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.480405][ T7743] EXT4-fs error (device loop3): ext4_readdir:262: inode #2: block 3: comm syz.3.523: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 240.543452][ T7743] EXT4-fs error (device loop3): ext4_readdir:262: inode #2: block 12: comm syz.3.523: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 240.813387][ T7743] EXT4-fs error (device loop3): ext4_readdir:262: inode #2: block 13: comm syz.3.523: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 241.022922][ T7751] loop1: detected capacity change from 0 to 32768 [ 241.147533][ T5865] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1125: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 241.322832][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.351813][ T7751] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 241.830717][ T7751] XFS (loop1): Ending clean mount [ 241.954112][ T30] audit: type=1804 audit(1755570956.897:43): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.527" name="/newroot/81/file0/bus" dev="loop1" ino=9289 res=1 errno=0 [ 242.600402][ T5876] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 243.260196][ T5959] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 243.414597][ T5959] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.542345][ T5959] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 243.567779][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.594068][ T5959] usb 6-1: config 0 descriptor?? [ 243.657379][ T5959] pwc: Askey VC010 type 2 USB webcam detected. [ 244.036608][ T5959] pwc: recv_control_msg error -32 req 02 val 2b00 [ 244.047747][ T5959] pwc: recv_control_msg error -32 req 02 val 2700 [ 244.056012][ T5959] pwc: recv_control_msg error -32 req 02 val 2c00 [ 244.064477][ T5959] pwc: recv_control_msg error -32 req 04 val 1000 [ 244.072242][ T5959] pwc: recv_control_msg error -32 req 04 val 1300 [ 244.115093][ T5959] pwc: recv_control_msg error -32 req 04 val 1400 [ 244.125260][ T5959] pwc: recv_control_msg error -32 req 02 val 2000 [ 244.134716][ T5959] pwc: recv_control_msg error -32 req 02 val 2100 [ 244.168465][ T7824] loop2: detected capacity change from 0 to 2048 [ 244.476518][ T5959] pwc: recv_control_msg error -71 req 02 val 2500 [ 244.738286][ T5959] pwc: recv_control_msg error -71 req 02 val 2400 [ 244.745355][ T5959] pwc: recv_control_msg error -71 req 02 val 2600 [ 244.821087][ T5959] pwc: recv_control_msg error -71 req 02 val 2900 [ 244.830169][ T7826] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.830749][ T5959] pwc: recv_control_msg error -71 req 02 val 2800 [ 244.860559][ T5959] pwc: recv_control_msg error -71 req 04 val 1100 [ 244.905716][ T5959] pwc: recv_control_msg error -71 req 04 val 1200 [ 244.936269][ T30] audit: type=1800 audit(1755570959.887:44): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.546" name="bus" dev="loop2" ino=2097152 res=0 errno=0 [ 244.977388][ T5959] pwc: Registered as video103. [ 244.982689][ T7824] syz.2.546: attempt to access beyond end of device [ 244.982689][ T7824] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 245.015898][ T5959] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 245.030299][ T7824] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 245.074996][ T7824] syz.2.546: attempt to access beyond end of device [ 245.074996][ T7824] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 245.100634][ T7824] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 245.109184][ T7824] NILFS (loop2): error -5 truncating bmap (ino=16) [ 245.110070][ T6537] IPVS: starting estimator thread 0... [ 245.134998][ T5959] usb 6-1: USB disconnect, device number 3 [ 245.141301][ T6539] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 245.260388][ T7833] IPVS: using max 31 ests per chain, 74400 per kthread [ 245.300293][ T6539] usb 2-1: Using ep0 maxpacket: 16 [ 245.771379][ T6539] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 245.942404][ T6539] usb 2-1: config 0 has no interface number 0 [ 246.188378][ T6539] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=84.33 [ 246.214044][ T6539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.246481][ T6539] usb 2-1: Product: syz [ 246.250826][ T6539] usb 2-1: Manufacturer: syz [ 246.255536][ T6539] usb 2-1: SerialNumber: syz [ 246.262202][ T6539] usb 2-1: config 0 descriptor?? [ 246.269499][ T6539] usb-storage 2-1:0.236: USB Mass Storage device detected [ 246.280474][ T6539] usb-storage 2-1:0.236: device ignored [ 246.391841][ T7837] loop3: detected capacity change from 0 to 1024 [ 246.508043][ T7837] EXT4-fs: Ignoring removed nobh option [ 246.519617][ T7837] EXT4-fs: Ignoring removed bh option [ 246.620524][ T7844] program syz.5.550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.630326][ T7844] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 246.829865][ T7837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.590611][ T10] usb 2-1: USB disconnect, device number 4 [ 248.177746][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 248.204963][ T7867] vlan2: entered allmulticast mode [ 248.210088][ T7867] bridge0: entered allmulticast mode [ 248.215681][ T7867] bridge1: port 1(vlan2) entered blocking state [ 248.222599][ T7867] bridge1: port 1(vlan2) entered disabled state [ 248.230033][ T7867] vlan2: entered promiscuous mode [ 248.235100][ T7867] bridge0: entered promiscuous mode [ 248.273092][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.408599][ T7890] loop7: detected capacity change from 0 to 16384 [ 250.772293][ T7890] loop7: detected capacity change from 16384 to 0 [ 250.780900][ C1] I/O error, dev loop7, sector 16256 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.823637][ C1] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 252.341364][ T7917] netlink: 'syz.5.571': attribute type 4 has an invalid length. [ 252.468163][ T7919] netlink: 'syz.5.571': attribute type 4 has an invalid length. [ 257.299956][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 257.327080][ T7964] loop5: detected capacity change from 0 to 2048 [ 257.545449][ T7966] Zero length message leads to an empty skb [ 258.339288][ T7977] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.491867][ T7980] syz.5.587: attempt to access beyond end of device [ 258.491867][ T7980] loop5: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 258.560657][ T7980] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15) [ 258.561592][ T30] audit: type=1800 audit(1755570973.517:45): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.587" name="bus" dev="loop5" ino=2097152 res=0 errno=0 [ 258.601742][ T7980] syz.5.587: attempt to access beyond end of device [ 258.601742][ T7980] loop5: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 258.654694][ T7980] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15) [ 258.726396][ T7980] NILFS (loop5): error -5 truncating bmap (ino=16) [ 259.495578][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.5.594'. [ 259.762949][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.594'. [ 263.570175][ T30] audit: type=1326 audit(1755570978.517:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.5.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc26958ebe9 code=0x0 [ 265.803026][ T8052] binder: 8051:8052 unknown command 0 [ 265.833682][ T8052] binder: 8051:8052 ioctl c0306201 200000000080 returned -22 [ 265.881167][ T8053] syz.2.613 uses obsolete (PF_INET,SOCK_PACKET) [ 266.183507][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.433730][ T8052] binder_alloc: 8051: binder_alloc_buf, no vma [ 268.801731][ T8085] netlink: 56 bytes leftover after parsing attributes in process `syz.0.624'. [ 271.996979][ T5959] IPVS: starting estimator thread 0... [ 273.080224][ T8105] IPVS: using max 31 ests per chain, 74400 per kthread [ 273.357857][ T8117] program syz.4.632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.367605][ T8117] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.693645][ T8166] program syz.2.649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.703420][ T8166] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 278.320871][ T30] audit: type=1800 audit(1755570993.277:47): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.648" name="/" dev="9p" ino=2 res=0 errno=0 [ 278.556024][ T8172] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 278.579042][ T8172] netlink: 'syz.2.650': attribute type 4 has an invalid length. [ 278.675738][ T8172] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.650'. [ 278.819088][ T8175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.651'. [ 278.888868][ T8177] netlink: 'syz.4.652': attribute type 10 has an invalid length. [ 278.940423][ T8178] netlink: 'syz.4.652': attribute type 10 has an invalid length. [ 278.955142][ T8177] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.040226][ T8177] bond0: (slave team0): Enslaving as an active interface with an up link [ 279.176363][ T8178] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 279.260805][ T8179] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.334432][ T8179] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 281.449461][ T8202] binder: 8201:8202 ioctl c0306201 0 returned -14 [ 281.897454][ T8213] evm: overlay not supported [ 285.002489][ T8263] netlink: 'syz.4.671': attribute type 4 has an invalid length. [ 285.855367][ T8263] netlink: 'syz.4.671': attribute type 4 has an invalid length. [ 288.737876][ T8288] warning: `syz.2.677' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 293.929703][ T8326] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.332505][ T5942] IPVS: starting estimator thread 0... [ 295.060236][ T8330] IPVS: using max 29 ests per chain, 69600 per kthread [ 295.881239][ T8345] loop3: detected capacity change from 0 to 8 [ 295.927447][ T8345] squashfs: Unknown parameter '01777777777777777777777' [ 297.556290][ T8359] loop3: detected capacity change from 0 to 4096 [ 297.614396][ T8363] syzkaller0: entered promiscuous mode [ 297.634420][ T8363] syzkaller0: entered allmulticast mode [ 297.930719][ T8359] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 298.112259][ T8359] ntfs3(loop3): Failed to load $Extend (-22). [ 298.118372][ T8359] ntfs3(loop3): Failed to initialize $Extend. [ 298.900124][ T30] audit: type=1804 audit(1755571013.847:48): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.696" name="/newroot/104/file0/bus" dev="loop3" ino=33 res=1 errno=0 [ 299.156847][ T8378] overlayfs: failed to clone upperpath [ 299.558102][ T8386] comedi comedi0: pcm3724: I/O port conflict (0x3,16) [ 300.361681][ T8400] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 307.659776][ T8472] loop1: detected capacity change from 0 to 128 [ 307.749527][ T8472] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 307.799976][ T8472] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.128308][ T5876] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.707733][ T8510] capability: warning: `syz.0.733' uses deprecated v2 capabilities in a way that may be insecure [ 312.746711][ T8540] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 314.592069][ T8556] loop4: detected capacity change from 0 to 8 [ 314.679603][ T8556] squashfs: Unknown parameter '01777777777777777777777' [ 316.197602][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 317.144465][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 317.464612][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.487703][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 317.499397][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.519687][ T10] usb 3-1: config 0 descriptor?? [ 317.528819][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 320.400669][ T5213] bcm5974 3-1:0.0: could not read from device [ 320.463768][ T8616] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 320.486461][ T5213] bcm5974 3-1:0.0: could not read from device [ 320.497681][ T10] usb 3-1: USB disconnect, device number 4 [ 321.074036][ T8613] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 321.432648][ T5863] bcm5974 3-1:0.0: could not read from device [ 327.021239][ T8655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.303395][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.261132][ T8672] loop1: detected capacity change from 0 to 2048 [ 330.363875][ T8672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.427017][ T8672] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.677813][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.850142][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 337.075993][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.284348][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.296661][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.308609][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.343770][ T8742] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 337.385874][ T8747] loop3: detected capacity change from 0 to 256 [ 337.426021][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.531252][ T5943] usb 2-1: USB disconnect, device number 5 [ 340.093821][ T8762] mmap: syz.4.801 (8762) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 344.409537][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805374cc00: rx timeout, send abort [ 344.917795][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805374cc00: abort rx timeout. Force session deactivation [ 347.334473][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 347.963498][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 348.383556][ T8817] hsr_slave_1 (unregistering): left promiscuous mode [ 349.987549][ T8845] sctp: [Deprecated]: syz.1.824 (pid 8845) Use of int in maxseg socket option. [ 349.987549][ T8845] Use struct sctp_assoc_value instead [ 354.171653][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.837'. [ 359.278339][ T8930] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 359.846921][ T8933] loop3: detected capacity change from 0 to 1024 [ 360.828627][ T8930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.853720][ T8934] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 360.904453][ T8937] vlan2: entered allmulticast mode [ 361.035881][ T8937] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 361.099291][ T8937] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 363.255634][ T8962] binder: 8961:8962 ioctl c00c620f 0 returned -14 [ 363.579929][ T8965] loop4: detected capacity change from 0 to 2048 [ 364.169455][ T8965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.194111][ T8965] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.395592][ T8977] netlink: 'syz.5.863': attribute type 1 has an invalid length. [ 364.668562][ T8983] gretap1: entered promiscuous mode [ 365.258430][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.274187][ T8983] bond0: (slave gretap1): making interface the new active one [ 365.424594][ T8983] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 365.742507][ T8977] macvlan2: entered promiscuous mode [ 365.756814][ T8977] macvlan2: entered allmulticast mode [ 365.763963][ T8977] bond0: entered promiscuous mode [ 365.770350][ T8977] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 366.347121][ T8977] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 366.811976][ T8977] bond0: left promiscuous mode [ 368.946763][ T30] audit: type=1800 audit(1755571083.897:49): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.875" name="/" dev="9p" ino=2 res=0 errno=0 [ 369.970158][ T1212] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 370.216278][ T1212] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.270633][ T1212] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.292950][ T1212] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.340529][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.381472][ T9027] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 370.413836][ T1212] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.576095][ T9043] loop3: detected capacity change from 0 to 2048 [ 371.754065][ T1212] usb 6-1: USB disconnect, device number 4 [ 371.827696][ T9043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.840205][ T9043] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.948008][ T6235] udevd[6235]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.063387][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.320691][ T9065] sctp: [Deprecated]: syz.4.885 (pid 9065) Use of int in maxseg socket option. [ 373.320691][ T9065] Use struct sctp_assoc_value instead [ 374.402202][ T9079] loop2: detected capacity change from 0 to 2048 [ 374.437224][ T9082] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.583204][ T30] audit: type=1800 audit(1755571089.537:50): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.890" name="file1" dev="loop2" ino=19 res=0 errno=0 [ 375.513794][ T9082] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 375.600220][ T9082] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 375.835693][ T9082] Remounting filesystem read-only [ 375.870739][ T5864] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 376.061315][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 376.229507][ T9101] netlink: 'syz.1.897': attribute type 12 has an invalid length. [ 379.048910][ T9138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.905'. [ 383.379310][ T9174] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 383.433222][ T9174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.588341][ T9174] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 383.848616][ T9174] vlan3: entered allmulticast mode [ 383.873656][ T9174] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 383.921074][ T9174] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 385.302376][ T5179] Bluetooth: hci4: command 0x0406 tx timeout [ 388.180967][ T9218] netlink: 'syz.0.926': attribute type 12 has an invalid length. [ 389.063493][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.847356][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 391.699462][ T9247] loop2: detected capacity change from 0 to 4096 [ 391.929278][ T9247] ntfs3(loop2): ino=1a, mi_enum_attr [ 392.072169][ T9247] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 392.178551][ T9261] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 394.737424][ T6537] libceph: connect (1)[c::]:6789 error -101 [ 394.795614][ T9289] netlink: 'syz.2.945': attribute type 12 has an invalid length. [ 395.328081][ T6537] libceph: mon0 (1)[c::]:6789 connect error [ 395.432691][ T9286] ceph: No mds server is up or the cluster is laggy [ 400.576869][ T9332] loop3: detected capacity change from 0 to 2048 [ 401.163490][ T9338] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.381306][ T30] audit: type=1800 audit(1755571116.337:51): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.960" name="file1" dev="loop3" ino=19 res=0 errno=0 [ 402.044427][ T9345] netlink: 188 bytes leftover after parsing attributes in process `syz.1.961'. [ 402.397846][ T9352] netlink: 'syz.4.963': attribute type 12 has an invalid length. [ 403.103684][ T9338] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 403.130664][ T9338] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 403.172796][ T9338] Remounting filesystem read-only [ 403.190398][ T5865] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 404.068354][ T9365] netlink: 'syz.1.967': attribute type 1 has an invalid length. [ 404.414058][ T9372] netlink: 'syz.2.969': attribute type 16 has an invalid length. [ 404.422049][ T9372] netlink: 'syz.2.969': attribute type 17 has an invalid length. [ 405.516041][ T9365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.852691][ T9377] vlan3: entered allmulticast mode [ 405.857832][ T9377] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 406.452764][ T9377] bond2: (slave vlan3): making interface the new active one [ 406.466192][ T9377] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 406.719277][ T9385] netlink: 'syz.2.974': attribute type 1 has an invalid length. [ 406.896570][ T9385] gretap1: entered promiscuous mode [ 407.029807][ T9385] bond2: (slave gretap1): making interface the new active one [ 407.065835][ T9385] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 407.120123][ T9394] macvlan3: entered promiscuous mode [ 407.170625][ T9394] macvlan3: entered allmulticast mode [ 407.224020][ T9394] bond2: entered promiscuous mode [ 407.260507][ T9394] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 407.351654][ T9394] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 407.424775][ T9394] bond2: left promiscuous mode [ 412.894199][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 416.339481][ T9483] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 417.884354][ T9501] loop3: detected capacity change from 0 to 512 [ 418.015769][ T9501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.050261][ T9501] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.131555][ T9483] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 418.181148][ T9483] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 419.183832][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.269334][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.515482][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.109701][ T9527] trusted_key: syz.1.1014 sent an empty control message without MSG_MORE. [ 423.425014][ T9558] loop4: detected capacity change from 0 to 4096 [ 424.160967][ T9558] ntfs3(loop4): ino=1a, mi_enum_attr [ 424.178809][ T9558] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 425.960254][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 427.462781][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 427.522322][ T9585] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 427.706036][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 428.336456][ T10] usb 2-1: string descriptor 0 read error: -71 [ 428.440174][ T10] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 428.449257][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.770741][ T10] usb 2-1: config 0 descriptor?? [ 428.776152][ T10] usb 2-1: can't set config #0, error -71 [ 428.902079][ T9603] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 428.921600][ T10] usb 2-1: USB disconnect, device number 6 [ 428.994657][ T9603] loop4: detected capacity change from 0 to 64 [ 433.601092][ T9663] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 433.634284][ T9662] loop1: detected capacity change from 0 to 1024 [ 433.810830][ T5941] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 433.847491][ T9662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.880005][ T9662] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.970674][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 434.416069][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 434.430774][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.548862][ T9674] overlayfs: failed to clone upperpath [ 434.557985][ T9662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.572943][ T5941] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 434.595663][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.641958][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.658679][ T5941] usb 4-1: Product: syz [ 434.668392][ T5941] usb 4-1: Manufacturer: syz [ 434.673521][ T5941] usb 4-1: SerialNumber: syz [ 434.685417][ T5941] usb 4-1: config 0 descriptor?? [ 434.699457][ T5941] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 434.712962][ T5941] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 436.549254][ T5941] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 436.557247][ T30] audit: type=1326 audit(1755571151.507:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.0.1060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f905f78ebe9 code=0x0 [ 436.721203][ T5941] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 438.220685][ T5941] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 438.661509][ T9707] netlink: 'syz.0.1064': attribute type 16 has an invalid length. [ 438.669411][ T9707] netlink: 'syz.0.1064': attribute type 17 has an invalid length. [ 439.300533][ T5941] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 439.328002][ T5941] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 439.657915][ T5941] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 439.715028][ T5941] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 439.742670][ T5941] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 439.916726][ T5941] usb 4-1: USB disconnect, device number 3 [ 441.694573][ T9753] loop2: detected capacity change from 0 to 256 [ 442.469955][ T9753] FAT-fs (loop2): Directory bread(block 64) failed [ 442.477721][ T9753] FAT-fs (loop2): Directory bread(block 65) failed [ 442.710246][ T9753] FAT-fs (loop2): Directory bread(block 66) failed [ 442.733536][ T9753] FAT-fs (loop2): Directory bread(block 67) failed [ 442.768915][ T9753] FAT-fs (loop2): Directory bread(block 68) failed [ 442.819154][ T9753] FAT-fs (loop2): Directory bread(block 69) failed [ 442.867745][ T9753] FAT-fs (loop2): Directory bread(block 70) failed [ 442.897680][ T9753] FAT-fs (loop2): Directory bread(block 71) failed [ 443.092149][ T9753] FAT-fs (loop2): Directory bread(block 72) failed [ 443.186460][ T9753] FAT-fs (loop2): Directory bread(block 73) failed [ 446.143260][ T9785] netlink: 'syz.5.1080': attribute type 16 has an invalid length. [ 446.151188][ T9785] netlink: 'syz.5.1080': attribute type 17 has an invalid length. [ 449.721071][ T30] audit: type=1804 audit(1755571164.677:53): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1088" name="/newroot/173/file1" dev="fuse" ino=1 res=1 errno=0 [ 449.841911][ T30] audit: type=1800 audit(1755571164.677:54): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1088" name="/" dev="fuse" ino=1 res=0 errno=0 [ 450.520735][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.335537][ T9836] bridge: RTM_NEWNEIGH with invalid ether address [ 455.616929][ T9854] loop3: detected capacity change from 0 to 4096 [ 455.856878][ T9854] ntfs3(loop3): ino=1a, mi_enum_attr [ 456.441375][ T9854] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 456.488126][ T9871] loop1: detected capacity change from 0 to 64 [ 456.870162][ T9871] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 456.980193][ T9871] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 457.345590][ T9871] netlink: 'syz.1.1106': attribute type 2 has an invalid length. [ 460.099616][ T9897] loop4: detected capacity change from 0 to 512 [ 460.155474][ T9902] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 461.191593][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 461.339467][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 461.573104][ T9897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.582672][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 461.590152][ T9897] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.630641][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 461.655721][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 461.839503][ T9929] ptrace attach of "./syz-executor exec"[5857] was attempted by " [ 462.406482][ T5942] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 462.715696][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.759220][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.806908][ T5942] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 462.867055][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.400765][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.431029][ T9943] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1121'. [ 463.443153][ T5942] usb 4-1: config 0 descriptor?? [ 463.609486][ T5959] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 463.770111][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 463.854368][ T5942] elo 0003:04E7:0030.0004: item fetching failed at offset 5/7 [ 463.866174][ T5942] elo 0003:04E7:0030.0004: parse failed [ 463.872170][ T5942] elo 0003:04E7:0030.0004: probe with driver elo failed with error -22 [ 463.913253][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 464.462414][ T5942] usb 4-1: USB disconnect, device number 4 [ 464.472917][ T5959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 464.500332][ T5959] usb 2-1: no configurations [ 464.509126][ T5959] usb 2-1: can't read configurations, error -22 [ 465.870093][ T30] audit: type=1804 audit(1755571180.817:55): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1129" name="/newroot/185/file1" dev="fuse" ino=1 res=1 errno=0 [ 465.900150][ T30] audit: type=1804 audit(1755571180.847:56): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1129" name="/newroot/185/file1" dev="fuse" ino=1 res=1 errno=0 [ 465.921970][ T30] audit: type=1800 audit(1755571180.847:57): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1129" name="/" dev="fuse" ino=1 res=0 errno=0 [ 466.753663][ T9963] delete_channel: no stack [ 466.944622][ T9970] loop1: detected capacity change from 0 to 2048 [ 467.045660][ T9970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.048914][ T9974] loop5: detected capacity change from 0 to 1024 [ 467.118538][ T9974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.174240][ T9974] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.037094][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.626891][ T9974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.734720][ T5860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.067433][T10000] netlink: 'syz.3.1141': attribute type 4 has an invalid length. [ 469.108296][T10003] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1142'. [ 471.075695][T10024] overlayfs: failed to clone upperpath [ 474.498572][ T2987] Bluetooth: hci6: Frame reassembly failed (-84) [ 474.909832][T10056] syz.2.1160 (10056) used greatest stack depth: 19480 bytes left [ 475.101910][T10069] loop2: detected capacity change from 0 to 2048 [ 476.343460][ T5875] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 476.481301][T10069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.121692][T10090] loop3: detected capacity change from 0 to 512 [ 477.143879][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.268627][T10090] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 477.319156][T10090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e02c, mo2=0002] [ 477.360423][T10090] System zones: 1-12 [ 477.364690][T10090] EXT4-fs (loop3): orphan cleanup on readonly fs [ 477.371094][T10090] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1168: bad orphan inode 267 [ 477.396780][T10090] EXT4-fs (loop3): Remounting filesystem read-only [ 477.409852][T10090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 477.597685][T10090] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 478.190267][T10090] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 478.776412][T10090] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 478.894426][T10090] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 479.150884][T10111] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 479.264052][T10090] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 479.336872][T10114] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 479.385658][T10090] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 479.420805][T10090] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 479.452798][T10090] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1168: error -117 reading directory block [ 480.181948][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 486.921684][T10181] loop5: detected capacity change from 0 to 16 [ 486.959908][T10181] erofs (device loop5): mounted with root inode @ nid 36. [ 487.760543][T10183] syz.5.1193: attempt to access beyond end of device [ 487.760543][T10183] loop5: rw=524288, sector=128, nr_sectors = 8 limit=16 [ 487.888036][T10183] syz.5.1193: attempt to access beyond end of device [ 487.888036][T10183] loop5: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 488.158090][T10183] erofs (device loop5): read error -95 @ 1 of nid 89 [ 489.806744][ T30] audit: type=1800 audit(1755571204.717:58): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1193" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 490.555426][ T8235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.705982][ T8235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.720133][T10203] nvme_fabrics: missing parameter 'transport=%s' [ 490.726461][T10203] nvme_fabrics: missing parameter 'nqn=%s' [ 490.737204][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 491.458031][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 491.639057][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 491.714348][ T6537] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 491.873104][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 491.960123][ T6537] usb 4-1: Using ep0 maxpacket: 8 [ 492.256559][ T6537] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.280155][ T6537] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 492.289462][ T6537] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 492.416138][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 492.465275][ T6537] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 492.484992][ T6537] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 492.496225][ T6537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.509835][ T6537] hub 4-1:1.0: bad descriptor, ignoring hub [ 492.553558][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 492.583548][ T6537] hub 4-1:1.0: probe with driver hub failed with error -5 [ 492.740072][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 492.863725][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 492.892802][ T6537] cdc_wdm 4-1:1.0: skipping garbage [ 492.914987][ T6537] cdc_wdm 4-1:1.0: skipping garbage [ 492.983608][ T6537] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 492.990393][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 493.037617][ T6537] cdc_wdm 4-1:1.0: Unknown control protocol [ 493.450790][ T6537] usb 4-1: USB disconnect, device number 5 [ 493.701032][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 496.167075][ T8235] net_ratelimit: 12 callbacks suppressed [ 496.167100][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 496.379724][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 496.513118][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 496.636175][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 496.760657][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 496.881189][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 497.115359][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 497.762561][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 497.885514][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 499.922489][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 501.192844][ T8235] net_ratelimit: 4 callbacks suppressed [ 501.192899][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 501.346302][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 502.310118][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 502.574932][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 503.492132][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 503.701898][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 506.902290][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 507.508757][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 507.653315][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 507.850438][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 507.960700][T10333] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 507.978946][T10333] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 508.030619][T10333] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 508.609756][T10333] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 508.610136][T10333] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 508.610613][T10333] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 508.610996][T10333] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 508.611559][T10333] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 508.612174][T10333] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 508.612495][T10333] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 508.612706][T10333] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 508.979731][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 509.106268][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 509.218432][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 509.340561][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 509.536648][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 510.302246][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 511.197050][ T30] audit: type=1326 audit(1755571225.657:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.2.1242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f382ef8ebe9 code=0x0 [ 511.920518][ T36] net_ratelimit: 6 callbacks suppressed [ 511.920567][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 511.980634][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.142952][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 512.250712][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 512.411027][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 512.815192][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 513.540058][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 513.694407][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 513.843749][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 514.020441][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 514.782430][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 516.948813][ T8237] net_ratelimit: 2 callbacks suppressed [ 516.948838][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 517.144847][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 517.322752][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 517.430544][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 517.570952][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 519.301277][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 519.410180][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 519.530671][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 519.555635][T10419] loop2: detected capacity change from 0 to 512 [ 519.635144][T10419] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 519.646399][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 519.798246][T10419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e02c, mo2=0002] [ 519.967994][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 520.060947][T10419] System zones: 1-12 [ 520.067421][T10419] EXT4-fs (loop2): orphan cleanup on readonly fs [ 520.220377][T10419] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1258: bad orphan inode 267 [ 520.243512][T10419] EXT4-fs (loop2): Remounting filesystem read-only [ 520.452968][T10419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 521.074175][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 521.364103][T10443] loop1: detected capacity change from 0 to 1024 [ 522.115820][ T8237] net_ratelimit: 6 callbacks suppressed [ 522.115849][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 522.329020][T10443] hfsplus: bad catalog entry type [ 522.358618][T10443] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1268'. [ 522.363184][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 522.408641][T10443] gretap0: entered promiscuous mode [ 522.499738][T10443] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1268'. [ 522.513399][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 522.570990][T10443] 0ªX¹¦D: renamed from gretap0 [ 522.631346][T10443] 0ªX¹¦D: left promiscuous mode [ 522.636578][T10443] 0ªX¹¦D: entered allmulticast mode [ 522.648275][T10443] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 522.760193][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 522.870623][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 522.887383][ T1159] hfsplus: b-tree write err: -5, ino 4 [ 522.980475][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 523.110481][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 523.217200][T10467] loop4: detected capacity change from 0 to 512 [ 523.231266][T10467] EXT4-fs: Ignoring removed orlov option [ 523.243148][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 523.318214][ T6537] IPVS: starting estimator thread 0... [ 523.327216][T10467] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 523.353251][T10467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 523.367718][T10467] EXT4-fs error (device loop4): ext4_iget_extra_inode:5103: inode #15: comm syz.4.1274: corrupted in-inode xattr: e_value size too large [ 523.404833][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 523.410146][T10472] IPVS: using max 41 ests per chain, 98400 per kthread [ 523.436678][T10475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.466929][T10467] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.1274: couldn't read orphan inode 15 (err -117) [ 523.512874][T10467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.500064][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.438715][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.540065][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.314821][ T36] net_ratelimit: 15 callbacks suppressed [ 527.314868][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 527.960184][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 528.476275][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 528.695082][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 529.352934][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 530.611110][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 530.852364][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 531.390475][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 531.428024][T10534] input: syz1 as /devices/virtual/input/input8 [ 531.506266][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 531.770821][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 532.463779][ T8243] net_ratelimit: 1 callbacks suppressed [ 532.463804][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 532.504631][T10546] loop3: detected capacity change from 0 to 8 [ 532.718030][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 532.872246][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 532.982559][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 533.595248][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 534.266333][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 534.427776][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 535.976212][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 536.901563][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 537.135001][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 537.250100][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 537.520563][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 537.611169][T10586] loop1: detected capacity change from 0 to 4096 [ 537.620563][T10586] ntfs3: Unknown parameter 'iochasKt' [ 537.694798][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 537.841023][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 538.100243][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 538.260520][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 538.460464][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 538.590247][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 538.718758][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 538.802303][T10601] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 539.025121][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 539.170177][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 541.075731][T10625] loop3: detected capacity change from 0 to 8 [ 542.090411][T10625] SQUASHFS error: Failed to read block 0x4de: -5 [ 542.226905][T10625] SQUASHFS error: Failed to read block 0x4de: -5 [ 542.322484][ T30] audit: type=1800 audit(1755571257.277:60): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1336" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 542.620697][ T2987] net_ratelimit: 13 callbacks suppressed [ 542.620722][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 543.294902][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 543.440197][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 543.653200][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 544.410637][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 544.520236][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 544.769721][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 545.768396][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 546.292048][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 546.318764][T10673] loop3: detected capacity change from 0 to 1024 [ 546.404158][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 547.682701][ T12] net_ratelimit: 1 callbacks suppressed [ 547.682726][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 547.792695][ T49] hfsplus: b-tree write err: -5, ino 4 [ 547.812246][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 547.924779][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 547.972809][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1344'. [ 548.790053][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 548.950539][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 549.100119][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 549.472020][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 549.567085][T10707] loop1: detected capacity change from 0 to 2048 [ 549.620610][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 549.633804][T10707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 549.872469][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 550.030137][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 551.268818][T10720] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 552.865429][ T8243] net_ratelimit: 8 callbacks suppressed [ 552.865454][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 552.916244][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1356'. [ 553.099361][T10732] bond1 (unregistering): Released all slaves [ 553.680392][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 553.810144][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 553.940499][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 554.070501][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 554.272836][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 554.487754][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 554.670418][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 555.140234][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 555.390220][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 557.940135][ T1159] net_ratelimit: 7 callbacks suppressed [ 557.940165][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 558.073365][ T30] audit: type=1326 audit(1755571273.027:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 558.200682][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 558.221806][T10771] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 558.242552][ T30] audit: type=1326 audit(1755571273.057:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 558.292904][T10771] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 558.314094][T10771] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 558.323528][T10771] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 558.331774][T10771] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 558.339091][T10771] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 558.346073][T10771] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 558.353097][T10771] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 558.361753][T10771] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 558.368714][T10771] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 558.376006][T10771] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 558.675662][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 558.685350][ T30] audit: type=1326 audit(1755571273.057:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 558.737554][ T5959] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 558.800655][ T30] audit: type=1326 audit(1755571273.057:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 558.800887][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 558.854149][ T30] audit: type=1326 audit(1755571273.067:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 558.928131][ T30] audit: type=1326 audit(1755571273.067:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 558.941110][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 558.961070][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 558.990988][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.000970][ T30] audit: type=1326 audit(1755571273.067:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 559.020073][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.224894][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 559.236853][ T5959] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.252267][ T30] audit: type=1326 audit(1755571273.067:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 559.274053][ T5959] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 560.240139][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 560.260473][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 560.268435][ T30] audit: type=1326 audit(1755571273.067:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 560.520561][T10797] delete_channel: no stack [ 560.832991][ T5959] usb 2-1: Product: syz [ 560.837233][ T5959] usb 2-1: Manufacturer: syz [ 560.851055][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 560.907723][ T30] audit: type=1326 audit(1755571273.077:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.1.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e7218ebe9 code=0x7ffc0000 [ 560.944200][ T5959] usb 2-1: SerialNumber: syz [ 560.960402][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 561.003568][ T5959] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 561.256148][ T5959] usb 2-1: USB disconnect, device number 9 [ 562.212446][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 562.972576][ T1159] net_ratelimit: 1 callbacks suppressed [ 562.972602][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 563.055270][ T5959] appletouch 2-1:1.0: input: appletouch disconnected [ 563.835951][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 564.217275][T10825] loop4: detected capacity change from 0 to 2048 [ 564.223948][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 564.451029][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 564.483910][T10831] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 564.524971][T10831] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 564.533952][T10825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.551943][T10831] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 564.558428][T10831] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 564.564509][T10835] loop1: detected capacity change from 0 to 8 [ 564.571729][T10831] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 564.812966][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 564.964005][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 565.400694][T10831] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 565.460570][T10831] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 565.467321][T10831] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 565.474271][T10831] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 565.481162][T10831] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 565.500667][T10835] SQUASHFS error: Failed to read block 0x4de: -5 [ 565.507725][T10831] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 565.514582][T10835] SQUASHFS error: Failed to read block 0x4de: -5 [ 565.532672][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 565.569608][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 565.569632][ T30] audit: type=1800 audit(1755571280.477:111): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1385" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 565.609557][T10835] SQUASHFS error: Failed to read block 0x4de: -5 [ 565.617296][T10835] SQUASHFS error: Failed to read block 0x4de: -5 [ 565.628776][T10835] SQUASHFS error: Failed to read block 0x4de: -5 [ 565.638141][T10835] SQUASHFS error: Failed to read block 0x4de: -5 [ 565.715237][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 565.895005][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 566.426875][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 568.064462][ T1053] net_ratelimit: 1 callbacks suppressed [ 568.064492][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 568.462792][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 570.013637][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 570.779641][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 570.923227][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 571.430464][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 571.657285][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 571.958156][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 572.557125][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 572.687639][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 573.191256][ T1159] net_ratelimit: 1 callbacks suppressed [ 573.191288][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 573.289951][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1403'. [ 573.745439][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 573.760231][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.762370][T10910] binder: BINDER_SET_CONTEXT_MGR already set [ 573.782266][T10910] binder: 10909:10910 ioctl 4018620d 2000000002c0 returned -16 [ 573.927795][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 574.064368][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 574.200117][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 574.380060][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 576.124495][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 576.252288][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 576.420413][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 576.540200][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 576.700168][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 577.890399][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 578.596469][ T12] net_ratelimit: 3 callbacks suppressed [ 578.596493][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 578.623678][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 578.669454][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 578.784451][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 578.830031][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.858796][ T10] usb 2-1: Product: syz [ 578.870295][ T10] usb 2-1: Manufacturer: syz [ 578.874905][ T10] usb 2-1: SerialNumber: syz [ 579.056008][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 579.061480][ T10] usb 2-1: config 0 descriptor?? [ 579.621654][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 579.798864][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 579.815031][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.066515][T10959] loop2: detected capacity change from 0 to 128 [ 580.210253][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 580.329286][T10962] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 580.603346][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 580.623319][ T10] usb 2-1: USB disconnect, device number 10 [ 580.640299][T10959] EXT4-fs (loop2): Test dummy encryption mode enabled [ 580.733283][T10959] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 580.800454][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 580.883674][T10959] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 581.029004][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 581.320700][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 581.706224][T10974] loop4: detected capacity change from 0 to 32768 [ 581.713308][T10974] XFS: ikeep mount option is deprecated. [ 581.743971][ T5864] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 581.809116][T10974] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 582.100460][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 582.576351][T10974] XFS (loop4): Ending clean mount [ 582.582958][T10974] XFS (loop4): Quotacheck needed: Please wait. [ 582.596106][T10974] XFS (loop4): Quotacheck: Done. [ 583.159277][T10993] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 583.931173][ T5867] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 583.942837][T10993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.986625][ T8243] net_ratelimit: 8 callbacks suppressed [ 583.986671][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 584.420345][T10998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.731027][T10998] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 584.761617][T10998] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 586.110167][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 586.288303][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 586.925054][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 587.516143][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 588.651363][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 588.833968][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 588.972993][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 589.592652][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 590.109973][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805152f000: rx timeout, send abort [ 590.237653][T11037] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 590.256581][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 590.384241][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 590.558115][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 591.343757][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 591.872783][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 592.073986][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 593.151586][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 593.260110][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 594.650348][ T12] net_ratelimit: 5 callbacks suppressed [ 594.650378][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 595.546018][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 596.294439][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 596.830255][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 597.183137][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 597.256590][T11107] binder: BINDER_SET_CONTEXT_MGR already set [ 597.262910][T11107] binder: 11104:11107 ioctl 4018620d 2000000002c0 returned -16 [ 597.310339][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 597.811428][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 598.168917][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 598.310270][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 598.420623][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 599.811683][ T3016] net_ratelimit: 4 callbacks suppressed [ 599.811713][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 600.860762][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 601.013587][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 601.953911][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 602.080117][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 602.200086][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 602.320118][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 602.450136][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 602.590733][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 602.990072][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 604.842753][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 605.431424][ T1053] net_ratelimit: 6 callbacks suppressed [ 605.431447][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 605.560151][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 605.717176][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 606.038422][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 606.064123][T11189] loop4: detected capacity change from 0 to 512 [ 606.180621][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 606.290304][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 606.378144][T11189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 606.400491][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 606.511919][T11189] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.569557][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 607.128369][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 607.250221][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 608.253585][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 608.937650][T11221] loop5: detected capacity change from 0 to 128 [ 608.973162][T11221] EXT4-fs (loop5): Test dummy encryption mode enabled [ 610.180150][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 610.191933][T11221] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 610.441540][ T2918] net_ratelimit: 15 callbacks suppressed [ 610.441562][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 610.454276][T11221] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 610.544269][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 610.577463][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 610.594884][ T10] usb 4-1: config 179 has no interface number 0 [ 610.605004][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 610.616407][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 610.628004][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 610.639442][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 610.672301][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 610.692370][ T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 610.871921][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 611.385818][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 611.426413][ T5860] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 611.442838][ T10] usb 4-1: config 179 interface 65 has no altsetting 0 [ 611.451873][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 611.461187][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.616576][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10 [ 611.634390][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 611.894011][ T10] usb 4-1: USB disconnect, device number 6 [ 611.970185][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 612.871871][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 612.980539][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 613.361010][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 613.993011][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 614.175151][T11264] loop1: detected capacity change from 0 to 512 [ 614.362804][T11264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 614.381177][T11264] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.903284][ T2918] net_ratelimit: 6 callbacks suppressed [ 615.903312][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 616.061613][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 616.172136][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 616.530389][ T30] audit: type=1400 audit(1755571331.437:112): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=":ched_switch" pid=11288 comm="syz.4.1505" [ 616.897707][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 616.922546][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 617.173672][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 618.187459][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 618.443960][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 618.570740][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 618.914763][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 619.040049][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 620.934564][ T60] net_ratelimit: 5 callbacks suppressed [ 620.934585][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 621.181717][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 621.300100][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 621.421621][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 621.533106][T11322] loop4: detected capacity change from 0 to 40427 [ 621.581575][T11322] F2FS-fs (loop4): invalid crc value [ 621.704601][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 621.785696][T11322] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 621.831503][T11322] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 621.850200][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 622.176836][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 622.421550][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 622.445918][ T5867] syz-executor: attempt to access beyond end of device [ 622.445918][ T5867] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 622.496513][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 622.496549][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.496566][ T5867] Call Trace: [ 622.496574][ T5867] [ 622.496584][ T5867] dump_stack_lvl+0x16c/0x1f0 [ 622.496626][ T5867] f2fs_handle_critical_error+0x624/0x9f0 [ 622.496665][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.496699][ T5867] ? f2fs_build_fault_attr+0x53/0x1f0 [ 622.496732][ T5867] f2fs_write_end_io+0x958/0xcf0 [ 622.496770][ T5867] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 622.496805][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.496838][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.496880][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.496913][ T5867] ? lock_release+0x201/0x2f0 [ 622.496959][ T5867] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 622.496995][ T5867] bio_endio+0x70d/0x850 [ 622.497036][ T5867] submit_bio_noacct+0x306/0x1eb0 [ 622.497071][ T5867] __submit_merged_bio+0x33c/0x770 [ 622.497110][ T5867] __submit_merged_write_cond+0x319/0x3f0 [ 622.497152][ T5867] f2fs_write_cache_pages+0x2067/0x2570 [ 622.497206][ T5867] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 622.497249][ T5867] ? is_bpf_text_address+0x94/0x1a0 [ 622.497295][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.497328][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.497362][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.497395][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.497429][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.497461][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.497495][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.497535][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.497568][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.497609][ T5867] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 622.497664][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.497697][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.497730][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.497763][ T5867] ? lock_release+0x201/0x2f0 [ 622.497804][ T5867] ? bpf_ksym_find+0x124/0x1c0 [ 622.497839][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.497878][ T5867] f2fs_write_data_pages+0x4ad/0xd90 [ 622.497924][ T5867] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 622.497966][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.498004][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.498036][ T5867] ? xas_move_index+0xb0/0x110 [ 622.498073][ T5867] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 622.498117][ T5867] do_writepages+0x27a/0x600 [ 622.498155][ T5867] ? __pfx_do_writepages+0x10/0x10 [ 622.498189][ T5867] ? do_raw_spin_unlock+0x172/0x230 [ 622.498219][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.498252][ T5867] ? _raw_spin_unlock+0x28/0x50 [ 622.498285][ T5867] filemap_fdatawrite_wbc+0x104/0x160 [ 622.498323][ T5867] __filemap_fdatawrite_range+0xb9/0x100 [ 622.498369][ T5867] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 622.498436][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.498468][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.498502][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.498535][ T5867] ? lock_release+0x201/0x2f0 [ 622.498576][ T5867] ? do_raw_spin_unlock+0x172/0x230 [ 622.498606][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.498642][ T5867] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 622.498695][ T5867] block_operations+0x2b0/0xfe0 [ 622.498741][ T5867] ? __pfx___schedule+0x10/0x10 [ 622.498774][ T5867] ? __pfx_block_operations+0x10/0x10 [ 622.498818][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.498875][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.498908][ T5867] ? down_write+0x14d/0x200 [ 622.498947][ T5867] ? __pfx_down_write+0x10/0x10 [ 622.498988][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.499021][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.499057][ T5867] f2fs_write_checkpoint+0x2b8/0x4c60 [ 622.499086][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.499119][ T5867] ? kfree+0x2b4/0x4d0 [ 622.499152][ T5867] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 622.499187][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.499220][ T5867] ? rcu_is_watching+0x12/0xc0 [ 622.499254][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.499287][ T5867] ? kthread_stop+0x273/0x630 [ 622.499314][ T5867] kill_f2fs_super+0x3c2/0x470 [ 622.499340][ T5867] ? __pfx_kill_f2fs_super+0x10/0x10 [ 622.499374][ T5867] deactivate_locked_super+0xc1/0x1a0 [ 622.499416][ T5867] deactivate_super+0xde/0x100 [ 622.499457][ T5867] cleanup_mnt+0x225/0x450 [ 622.499499][ T5867] task_work_run+0x150/0x240 [ 622.499530][ T5867] ? __pfx_task_work_run+0x10/0x10 [ 622.499559][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.499593][ T5867] ? __pfx___x64_sys_umount+0x10/0x10 [ 622.499620][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.499656][ T5867] exit_to_user_mode_loop+0xeb/0x110 [ 622.499686][ T5867] do_syscall_64+0x3f6/0x4c0 [ 622.499725][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.499753][ T5867] RIP: 0033:0x7f1732d8ff17 [ 622.499773][ T5867] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 622.499801][ T5867] RSP: 002b:00007ffeda6fcaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 622.499827][ T5867] RAX: 0000000000000000 RBX: 00007f1732e11c05 RCX: 00007f1732d8ff17 [ 622.499845][ T5867] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeda6fcbb0 [ 622.499865][ T5867] RBP: 00007ffeda6fcbb0 R08: 0000000000000000 R09: 0000000000000000 [ 622.499883][ T5867] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeda6fdc40 [ 622.499901][ T5867] R13: 00007f1732e11c05 R14: 0000000000097e8c R15: 00007ffeda6fdc80 [ 622.499928][ T5867] [ 622.499938][ T5867] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 623.117024][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 623.254097][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 623.781630][T11351] syz.1.1523 (11351): drop_caches: 2 [ 624.455744][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 625.574961][T11372] gretap1: entered promiscuous mode [ 625.732291][T11372] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 627.295863][T11374] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 627.320030][T11374] bond2 (unregistering): Released all slaves [ 629.569144][ T1053] net_ratelimit: 8 callbacks suppressed [ 629.569176][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 629.838629][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 630.580334][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 630.639528][ T5959] IPVS: starting estimator thread 0... [ 630.650100][T11405] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 630.720401][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 630.762553][T11407] IPVS: using max 41 ests per chain, 98400 per kthread [ 630.830053][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 631.015737][ T3016] bond1: (slave wlan0): failed to get link speed/duplex [ 631.555082][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 631.771498][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 631.962390][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 632.610507][T11424] futex_wake_op: syz.5.1541 tries to shift op by -1; fix this program [ 634.759468][ T1053] net_ratelimit: 4 callbacks suppressed [ 634.759501][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 634.835032][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.020312][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 635.391680][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 635.824134][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 636.589102][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 636.605632][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052e6a000: rx timeout, send abort [ 636.614237][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888052e6a000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 637.065752][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 637.333885][ T1159] bond1: (slave wlan0): failed to get link speed/duplex [ 637.979582][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 638.283937][ T60] bond1: (slave wlan0): failed to get link speed/duplex [ 639.243129][ T8244] bond1: (slave wlan0): failed to get link speed/duplex [ 640.679184][ T8243] net_ratelimit: 3 callbacks suppressed [ 640.679218][ T8243] bond1: (slave wlan0): failed to get link speed/duplex [ 640.838322][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 641.007314][T11508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.069324][T11508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.091806][T11509] loop3: detected capacity change from 0 to 16 [ 641.464289][T11509] erofs (device loop3): mounted with root inode @ nid 36. [ 641.531469][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 641.646560][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 641.935102][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 642.421642][T11518] overlayfs: upper fs does not support file handles, falling back to index=off. [ 642.548340][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 642.720155][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 642.910162][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 643.720406][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 643.833627][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 644.047267][T11536] loop5: detected capacity change from 0 to 2048 [ 645.329205][T11536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.342540][T11536] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.338689][ T6070] net_ratelimit: 5 callbacks suppressed [ 646.338722][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 646.474422][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 646.614459][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 646.631029][ T5860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.750563][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 646.937472][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 647.334170][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 648.071885][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 648.200245][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 648.731084][ T30] audit: type=1326 audit(1755571363.667:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 648.765368][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 648.920144][ T30] audit: type=1326 audit(1755571363.677:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 648.984739][ T30] audit: type=1326 audit(1755571363.677:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 648.990255][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 649.155813][ T30] audit: type=1326 audit(1755571363.677:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 649.229023][ T30] audit: type=1326 audit(1755571363.707:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 649.511887][ T30] audit: type=1326 audit(1755571363.707:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 649.571674][ T30] audit: type=1326 audit(1755571363.707:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 650.559080][ T30] audit: type=1326 audit(1755571363.707:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 650.761982][ T30] audit: type=1326 audit(1755571363.717:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 650.785413][ T30] audit: type=1326 audit(1755571363.717:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc26958ebe9 code=0x7ffc0000 [ 651.783688][ T6070] net_ratelimit: 10 callbacks suppressed [ 651.783725][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 651.990853][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 652.135160][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 652.280115][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 653.007704][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 653.203193][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 654.670858][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 654.824646][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 654.950161][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 655.537699][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 656.916194][T10661] net_ratelimit: 6 callbacks suppressed [ 656.916229][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 657.119590][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 657.290346][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 657.889564][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 658.160485][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 658.370186][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 658.482413][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 660.204040][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 661.293026][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 661.492426][T11673] bond0: (slave syz_tun): Releasing backup interface [ 664.299750][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 664.660021][ T5943] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 664.834405][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 664.990229][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 665.118983][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 665.569329][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 666.636442][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 666.995524][ T49] bond1: (slave wlan0): failed to get link speed/duplex [ 667.843371][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 668.018846][T10806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 668.029022][T10806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 668.037679][T10806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 668.045011][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 668.075790][T10806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 668.085487][T10806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 669.830097][ T5943] usb 3-1: device descriptor read/64, error -110 [ 670.122991][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 670.626078][T10806] Bluetooth: hci6: command tx timeout [ 670.810294][ T5943] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 671.003884][ T5943] usb 3-1: device descriptor read/64, error -32 [ 671.176918][ T5943] usb usb3-port1: attempt power cycle [ 672.660136][T10806] Bluetooth: hci6: command tx timeout [ 672.680302][ T5943] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 672.720520][ T5943] usb 3-1: device descriptor read/8, error -32 [ 672.872177][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.031585][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 673.045733][ T5943] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 673.128102][ T5943] usb 3-1: device descriptor read/8, error -32 [ 673.149748][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.234643][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 673.270105][ T5943] raw-gadget.0 gadget.2: failed to queue suspend event [ 673.304932][ T5943] usb usb3-port1: unable to enumerate USB device [ 673.310100][T11676] raw-gadget.0 gadget.2: failed to queue disconnect event [ 673.322549][T11676] delete_channel: no stack [ 673.421997][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.808582][T11696] delete_channel: no stack [ 673.876124][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 674.423404][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 674.459573][T11742] loop2: detected capacity change from 0 to 2048 [ 674.611508][ T8235] bond1: (slave wlan0): failed to get link speed/duplex [ 675.224178][T10806] Bluetooth: hci6: command tx timeout [ 676.651846][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.702925][T11742] EXT4-fs: error -4 creating inode table initialization thread [ 676.734594][T11742] EXT4-fs (loop2): mount failed [ 677.300127][T10806] Bluetooth: hci6: command tx timeout [ 677.351457][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 679.800554][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 680.000897][T11718] chnl_net:caif_netlink_parms(): no params data found [ 681.687577][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 684.005571][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 685.871181][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 686.786529][T11823] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 686.793107][T11823] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 686.845649][T11823] vhci_hcd vhci_hcd.0: Device attached [ 686.895834][T11830] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 686.902392][T11830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 686.982315][T11830] vhci_hcd vhci_hcd.0: Device attached [ 687.038154][T11823] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 687.044741][T11823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 687.195037][ T6539] vhci_hcd: vhci_device speed not set [ 687.201060][T11823] vhci_hcd vhci_hcd.0: Device attached [ 687.253890][T11830] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 687.260661][T11830] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 687.268593][ T6539] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 688.528420][T11830] vhci_hcd vhci_hcd.0: Device attached [ 688.660540][T11826] vhci_hcd: connection reset by peer [ 688.660552][T11831] vhci_hcd: connection closed [ 688.660835][T11839] vhci_hcd: connection closed [ 688.670307][T11844] vhci_hcd: connection closed [ 688.690310][ T8237] vhci_hcd: stop threads [ 689.051810][ T8237] vhci_hcd: release socket [ 689.078712][ T8237] vhci_hcd: disconnect device [ 689.112079][ T8237] vhci_hcd: stop threads [ 689.125818][ T8237] vhci_hcd: release socket [ 689.134984][ T8237] vhci_hcd: disconnect device [ 689.145761][ T8237] vhci_hcd: stop threads [ 689.313391][ T8237] vhci_hcd: release socket [ 689.906071][ T2987] bond1: (slave wlan0): failed to get link speed/duplex [ 689.908867][ T8237] vhci_hcd: disconnect device [ 689.990187][T11718] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.006335][T11718] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.030785][T11718] bridge_slave_0: entered allmulticast mode [ 690.050346][ T8237] vhci_hcd: stop threads [ 690.054665][ T8237] vhci_hcd: release socket [ 690.096767][T11718] bridge_slave_0: entered promiscuous mode [ 690.115058][ T8237] vhci_hcd: disconnect device [ 690.183887][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 691.400391][T11718] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.407619][T11718] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.508939][T11718] bridge_slave_1: entered allmulticast mode [ 692.099086][T11718] bridge_slave_1: entered promiscuous mode [ 692.215113][T11718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.237575][T11718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.153931][T11885] program syz.4.1651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.533347][ T6539] vhci_hcd: vhci_device speed not set [ 693.756017][T11718] team0: Port device team_slave_0 added [ 693.911787][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 693.950725][T11893] netlink: 'syz.5.1655': attribute type 32 has an invalid length. [ 693.960371][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 693.996422][T11718] team0: Port device team_slave_1 added [ 695.156705][ T8239] bond1: (slave wlan0): failed to get link speed/duplex [ 695.196674][T11718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.230121][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.368114][T11718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.408574][T11718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.311023][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.512475][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.577721][T11718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.783903][ T49] hsr_slave_0: left promiscuous mode [ 697.804854][ T49] hsr_slave_1: left promiscuous mode [ 697.855700][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.900313][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.934502][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.985704][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.039308][ T49] veth1_macvtap: left promiscuous mode [ 698.057766][ T49] veth0_macvtap: left promiscuous mode [ 698.078398][ T49] veth1_vlan: left promiscuous mode [ 698.084385][ T49] veth0_vlan: left promiscuous mode [ 700.081413][T11961] loop2: detected capacity change from 0 to 8 [ 700.099634][ T49] team0 (unregistering): Port device team_slave_1 removed [ 700.125735][T11961] SQUASHFS error: lzo decompression failed, data probably corrupt [ 700.134339][T11961] SQUASHFS error: Failed to read block 0x144: -5 [ 700.140963][T11961] SQUASHFS error: Unable to read metadata cache entry [142] [ 700.148263][T11961] SQUASHFS error: Unable to read inode 0x11f [ 700.952481][ T49] team0 (unregistering): Port device team_slave_0 removed [ 701.403478][T11718] hsr_slave_0: entered promiscuous mode [ 701.464273][T11718] hsr_slave_1: entered promiscuous mode [ 701.480968][T11718] debugfs: 'hsr0' already exists in 'hsr' [ 701.486771][T11718] Cannot create hsr debugfs directory [ 702.630867][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 703.090509][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 703.810122][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 704.050583][T10661] bond1: (slave wlan0): failed to get link speed/duplex [ 704.050866][ T49] IPVS: stop unused estimator thread 0... [ 705.002355][ T1053] bond1: (slave wlan0): failed to get link speed/duplex [ 705.623426][T11718] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 705.808432][T11718] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 705.913512][T12010] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1680'. [ 706.280390][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 706.292414][T11718] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 706.302664][T11718] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 707.470101][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 708.852182][ T2918] bond1: (slave wlan0): failed to get link speed/duplex [ 709.550208][ T8237] bond1: (slave wlan0): failed to get link speed/duplex [ 709.574246][T11718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.669778][T11718] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.559040][T12078] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 712.565663][T12078] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 712.574452][T12078] vhci_hcd vhci_hcd.0: Device attached [ 712.950351][ T6539] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 713.352604][T12079] vhci_hcd: connection closed [ 713.365563][ T2987] vhci_hcd: stop threads [ 713.495921][ T2987] vhci_hcd: release socket [ 713.795145][ T6070] bond1: (slave wlan0): failed to get link speed/duplex [ 713.802505][ T2987] vhci_hcd: disconnect device [ 713.917398][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.924612][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.021376][ T6543] ------------[ cut here ]------------ [ 714.026904][ T6543] WARNING: CPU: 1 PID: 6543 at io_uring/io_uring.c:2981 io_ring_exit_work+0x3fc/0x10a0 [ 714.036860][ T6543] Modules linked in: [ 714.040878][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 714.050637][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 714.060949][ T6543] Workqueue: iou_exit io_ring_exit_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 714.066553][ T6543] RIP: 0010:io_ring_exit_work+0x3fc/0x10a0 [ 714.072470][ T6543] Code: 0f 85 b6 0a 00 00 48 8b 05 e1 ee 4a 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 bf 68 e5 fc 4d 85 f6 79 12 e8 45 6d e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 33 6d e5 fc 48 8b 74 24 60 [ 714.092313][ T6543] RSP: 0018:ffffc90003227a90 EFLAGS: 00010293 [ 714.098410][ T6543] RAX: 0000000000000000 RBX: ffff888034cb46c8 RCX: ffffffff84d62331 [ 714.107336][ T6543] RDX: ffff88802da95a00 RSI: ffffffff84d6233b RDI: 0000000000000007 [ 714.108790][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.116155][ T6543] RBP: ffffc90003227c50 R08: 0000000000000007 R09: 0000000000000000 [ 714.122589][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.130581][ T6543] R10: fffffffffffffffd R11: 0000000000000000 R12: ffff888034cb4000 [ 714.145897][ T6543] R13: dffffc0000000000 R14: fffffffffffffffd R15: ffff888034cb4040 [ 714.153977][ T6543] FS: 0000000000000000(0000) GS:ffff8881247bd000(0000) knlGS:0000000000000000 [ 714.162983][ T6543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.169598][ T6543] CR2: 0000200000205030 CR3: 0000000049ff0000 CR4: 0000000000350ef0 [ 714.177879][ T6543] Call Trace: [ 714.181434][ T6543] [ 714.184385][ T6543] ? do_raw_spin_lock+0x12c/0x2b0 [ 714.189455][ T6543] ? __pfx_io_ring_exit_work+0x10/0x10 [ 714.195567][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.201566][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.207297][ T6543] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 714.214150][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.219830][ T6543] ? debug_object_deactivate+0x1ec/0x3a0 [ 714.226577][ T6543] ? lock_acquire+0x2cd/0x350 [ 714.232021][ T6543] ? rcu_is_watching+0x12/0xc0 [ 714.236825][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.242634][ T6543] ? rcu_is_watching+0x12/0xc0 [ 714.247475][ T6543] process_one_work+0x9cf/0x1b70 [ 714.252517][ T6543] ? __pfx_fsnotify_mark_destroy_workfn+0x10/0x10 [ 714.258990][ T6543] ? __pfx_process_one_work+0x10/0x10 [ 714.264873][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.270621][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.276298][ T6543] ? assign_work+0x1a0/0x250 [ 714.280969][ T6543] worker_thread+0x6c8/0xf10 [ 714.285599][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.291337][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.297016][ T6543] ? __kthread_parkme+0x19e/0x250 [ 714.302161][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.307828][ T6543] ? __pfx_worker_thread+0x10/0x10 [ 714.313605][ T6543] kthread+0x3c5/0x780 [ 714.317706][ T6543] ? __pfx_kthread+0x10/0x10 [ 714.322864][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.328530][ T6543] ? rcu_is_watching+0x12/0xc0 [ 714.333379][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.339039][ T6543] ? rcu_is_watching+0x12/0xc0 [ 714.343891][ T6543] ? __pfx_kthread+0x10/0x10 [ 714.348521][ T6543] ret_from_fork+0x5d7/0x6f0 [ 714.353221][ T6543] ? __pfx_kthread+0x10/0x10 [ 714.357842][ T6543] ret_from_fork_asm+0x1a/0x30 [ 714.362704][ T6543] [ 714.365726][ T6543] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 714.373129][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 714.382693][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 714.392768][ T6543] Workqueue: iou_exit io_ring_exit_work [ 714.398349][ T6543] Call Trace: [ 714.401622][ T6543] [ 714.404565][ T6543] dump_stack_lvl+0x3d/0x1f0 [ 714.409188][ T6543] vpanic+0x6e8/0x7a0 [ 714.413236][ T6543] ? __pfx_vpanic+0x10/0x10 [ 714.417773][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.423479][ T6543] ? io_ring_exit_work+0x3fc/0x10a0 [ 714.428724][ T6543] panic+0xca/0xd0 [ 714.432516][ T6543] ? __pfx_panic+0x10/0x10 [ 714.437172][ T6543] ? check_panic_on_warn+0x1f/0xb0 [ 714.442313][ T6543] check_panic_on_warn+0xab/0xb0 [ 714.447288][ T6543] __warn+0xf6/0x3c0 [ 714.451185][ T6543] ? io_ring_exit_work+0x3fc/0x10a0 [ 714.456400][ T6543] report_bug+0x3c3/0x580 [ 714.460808][ T6543] ? io_ring_exit_work+0x3fc/0x10a0 [ 714.466026][ T6543] handle_bug+0x184/0x210 [ 714.470409][ T6543] exc_invalid_op+0x17/0x50 [ 714.474939][ T6543] asm_exc_invalid_op+0x1a/0x20 [ 714.479794][ T6543] RIP: 0010:io_ring_exit_work+0x3fc/0x10a0 [ 714.485614][ T6543] Code: 0f 85 b6 0a 00 00 48 8b 05 e1 ee 4a 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 bf 68 e5 fc 4d 85 f6 79 12 e8 45 6d e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 33 6d e5 fc 48 8b 74 24 60 [ 714.505233][ T6543] RSP: 0018:ffffc90003227a90 EFLAGS: 00010293 [ 714.511330][ T6543] RAX: 0000000000000000 RBX: ffff888034cb46c8 RCX: ffffffff84d62331 [ 714.519299][ T6543] RDX: ffff88802da95a00 RSI: ffffffff84d6233b RDI: 0000000000000007 [ 714.527275][ T6543] RBP: ffffc90003227c50 R08: 0000000000000007 R09: 0000000000000000 [ 714.535255][ T6543] R10: fffffffffffffffd R11: 0000000000000000 R12: ffff888034cb4000 [ 714.543231][ T6543] R13: dffffc0000000000 R14: fffffffffffffffd R15: ffff888034cb4040 [ 714.551212][ T6543] ? io_ring_exit_work+0x3f1/0x10a0 [ 714.556420][ T6543] ? io_ring_exit_work+0x3fb/0x10a0 [ 714.561651][ T6543] ? do_raw_spin_lock+0x12c/0x2b0 [ 714.566705][ T6543] ? __pfx_io_ring_exit_work+0x10/0x10 [ 714.572180][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.577831][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.583481][ T6543] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 714.589320][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.594977][ T6543] ? debug_object_deactivate+0x1ec/0x3a0 [ 714.600642][ T6543] ? lock_acquire+0x2cd/0x350 [ 714.605349][ T6543] ? rcu_is_watching+0x12/0xc0 [ 714.610133][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.615774][ T6543] ? rcu_is_watching+0x12/0xc0 [ 714.620571][ T6543] process_one_work+0x9cf/0x1b70 [ 714.625544][ T6543] ? __pfx_fsnotify_mark_destroy_workfn+0x10/0x10 [ 714.631977][ T6543] ? __pfx_process_one_work+0x10/0x10 [ 714.637357][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.643009][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.648679][ T6543] ? assign_work+0x1a0/0x250 [ 714.653309][ T6543] worker_thread+0x6c8/0xf10 [ 714.657919][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.663570][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.669210][ T6543] ? __kthread_parkme+0x19e/0x250 [ 714.674262][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.679921][ T6543] ? __pfx_worker_thread+0x10/0x10 [ 714.685056][ T6543] kthread+0x3c5/0x780 [ 714.689130][ T6543] ? __pfx_kthread+0x10/0x10 [ 714.693725][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.699363][ T6543] ? rcu_is_watching+0x12/0xc0 [ 714.704142][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.709797][ T6543] ? rcu_is_watching+0x12/0xc0 [ 714.714585][ T6543] ? __pfx_kthread+0x10/0x10 [ 714.719180][ T6543] ret_from_fork+0x5d7/0x6f0 [ 714.723775][ T6543] ? __pfx_kthread+0x10/0x10 [ 714.728364][ T6543] ret_from_fork_asm+0x1a/0x30 [ 714.733146][ T6543] [ 714.736434][ T6543] Kernel Offset: disabled [ 714.740757][ T6543] Rebooting in 86400 seconds..