last executing test programs: 1m47.815486481s ago: executing program 3 (id=2696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m47.570732463s ago: executing program 3 (id=2697): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0x88000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x0, 0x7, 0x0, 0x1, 0x38, 0x9, 0x7, 0xc0000000, 0x7, 0x0, 0x64fc, 0x101, 0x1, 0x8f000000, 0x12, 0x34, {0xa6c, 0x1}, 0x6b, 0x9}}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r6, 0x6, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 1m46.564543754s ago: executing program 3 (id=2700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x20) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m44.771143544s ago: executing program 3 (id=2705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m41.204224659s ago: executing program 3 (id=2715): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x20) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m40.200558033s ago: executing program 3 (id=2724): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0x88000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x0, 0x7, 0x0, 0x1, 0x38, 0x9, 0x7, 0xc0000000, 0x7, 0x0, 0x64fc, 0x101, 0x1, 0x8f000000, 0x12, 0x34, {0xa6c, 0x1}, 0x6b, 0x9}}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x6, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 1m3.415412295s ago: executing program 0 (id=2834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$peeksig(0x4209, r0, 0x0, &(0x7f0000000700)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x21, &(0x7f00000000c0)={0x3, 0x1584, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) memfd_create(0x0, 0x1) 1m2.375199702s ago: executing program 0 (id=2837): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$set_timeout(0xf, 0x0, 0xa0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001100)=ANY=[@ANYBLOB="20000000720001030100000404", @ANYRES32=r1, @ANYBLOB="080001"], 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4040885) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80202, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 59.849905374s ago: executing program 0 (id=2840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x2) 57.995318197s ago: executing program 0 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = shmget$private(0x0, 0x400000, 0x4, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) unshare(0x2c020400) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() process_vm_readv(r5, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/141, 0x8d}], 0x1, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 55.381080722s ago: executing program 0 (id=2847): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0x88000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x0, 0x7, 0x0, 0x1, 0x38, 0x9, 0x7, 0xc0000000, 0x7, 0x0, 0x64fc, 0x101, 0x1, 0x8f000000, 0x12, 0x34, {0xa6c, 0x1}, 0x6b, 0x9}}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x6, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 49.952446585s ago: executing program 0 (id=2859): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="85", 0x1, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000880)={0x27, 0x0, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) sendmmsg(r4, &(0x7f0000003740)=[{{&(0x7f0000000000)=@generic={0xf, "77a7f0b96ce573cec7dec6164fd645ca3fe9ac4eae9b5fab1e1401050102dd36914c54fbb4e8b53384415932a8f5fc2e80729baf8ac2fe77feabd073acc8036cc9e530bc4d45564aabe4843d830fd66c3207b90526ab791bc480f092e6a25157efd1782b582cf4cef7f72cde328938fa32ecabadded54433c6b1f13b4f1e"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="5c97994dc3ce805c6684b14ea8f86d14f95ba8b301a63e8510c30797c328f9eaffd37967035f262a6e4811e53db9adf911738e689638c19c02d254a549faaaa017f4c55dbc5623ae7d19f870dff3aef84c0e6ca36dc75549f8086ba486b3411647a119305ec6c9bc686afe63be9fa38de2689d19202506104d7b3fd919f0f0", 0x7f}], 0x1}}], 0x1, 0x20000800) r5 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x105000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, 0x0, 0x24088040) keyctl$read(0xb, r1, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) r7 = syz_usb_connect_ath9k(0x3, 0x7f, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f0000000000)=ANY=[@ANYRES64=r6]) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x82) dup3(r8, r0, 0x80000) 33.25062783s ago: executing program 32 (id=2859): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="85", 0x1, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000880)={0x27, 0x0, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) sendmmsg(r4, &(0x7f0000003740)=[{{&(0x7f0000000000)=@generic={0xf, "77a7f0b96ce573cec7dec6164fd645ca3fe9ac4eae9b5fab1e1401050102dd36914c54fbb4e8b53384415932a8f5fc2e80729baf8ac2fe77feabd073acc8036cc9e530bc4d45564aabe4843d830fd66c3207b90526ab791bc480f092e6a25157efd1782b582cf4cef7f72cde328938fa32ecabadded54433c6b1f13b4f1e"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="5c97994dc3ce805c6684b14ea8f86d14f95ba8b301a63e8510c30797c328f9eaffd37967035f262a6e4811e53db9adf911738e689638c19c02d254a549faaaa017f4c55dbc5623ae7d19f870dff3aef84c0e6ca36dc75549f8086ba486b3411647a119305ec6c9bc686afe63be9fa38de2689d19202506104d7b3fd919f0f0", 0x7f}], 0x1}}], 0x1, 0x20000800) r5 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x105000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, 0x0, 0x24088040) keyctl$read(0xb, r1, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) r7 = syz_usb_connect_ath9k(0x3, 0x7f, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f0000000000)=ANY=[@ANYRES64=r6]) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x82) dup3(r8, r0, 0x80000) 9.415132458s ago: executing program 4 (id=2941): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000201c1b341b00000000000109022400c100009000090401000103000200092100000001220200090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) 7.295419911s ago: executing program 4 (id=2950): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="20060d000000ae566767d94d831ec3ff27bcc1f121478b"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.82344271s ago: executing program 2 (id=2955): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(0xffffffffffffffff, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {0x0}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {0x0}, {&(0x7f00000005c0)}], 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_io_uring_setup(0x149f, &(0x7f0000001600)={0x0, 0x3ddc, 0x8, 0x2, 0x33}, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000001c0)=[r5], 0x1) close(r5) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) 5.537944893s ago: executing program 2 (id=2957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003780)={0x1, [{0x0, 0x0, 0x1000000, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x40, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x97, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0xffffffc0, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x2, 0x0, 0x561, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x95b, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xfeda80c, &(0x7f0000002780)}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.343464761s ago: executing program 1 (id=2958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db2d82e6036cbb7e31105314a0fe5f5989bce02d44c1641ffc1cd7d99f6d010251ce2340064f5cac4f96a73d6983035797d24dd1d5f72084b2979a327b1631b445d3ca60d4a2d216cf6a20bf4c449b790b1cea906d2c8203173bb46f2d23ee787772e35c17223f0f1dfc8faab1a7e7d53b3f1839a3", 0x75}], 0x1}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5.331409437s ago: executing program 2 (id=2959): syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) readv(r4, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000080)=0x80000001, 0x4) 3.962517602s ago: executing program 2 (id=2960): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000008c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) 3.9104882s ago: executing program 4 (id=2961): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$set_timeout(0xf, 0x0, 0xa0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001100)=ANY=[@ANYBLOB="20000000720001030100000404", @ANYRES32=r1, @ANYBLOB="080001"], 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x40000) sendmsg$nl_route(r1, 0x0, 0x4040885) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80202, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 3.702795133s ago: executing program 2 (id=2962): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x20) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.702635152s ago: executing program 1 (id=2963): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) 2.57695737s ago: executing program 1 (id=2964): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc, 0x80, 0x3, 0x2, 0xfb59c2c5, 0x3657}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) 2.568410669s ago: executing program 4 (id=2965): close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) 2.381326704s ago: executing program 2 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x24, 0x2c, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) syz_open_dev$vcsn(&(0x7f0000000040), 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 878.060815ms ago: executing program 1 (id=2967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003780)={0x1, [{0x0, 0x0, 0x1000000, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x40, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x97, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0xffffffc0, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x2, 0x0, 0x561, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x95b, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xfeda80c, &(0x7f0000002780)}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 864.379831ms ago: executing program 4 (id=2968): pipe(&(0x7f00000001c0)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) rmdir(0x0) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfa0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x60c01, 0x0) connect$802154_dgram(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0x0) unshare(0x20000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c0002800800014084bf95770c62fe23c7972363141f0d"], 0x44}}, 0x4000050) 682.376238ms ago: executing program 1 (id=2969): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="20060d000000ae566767d94d831ec3ff27bcc1f121478b2d34"], 0x0, 0x0, 0x0, 0x0, 0x0}) 99.488899ms ago: executing program 1 (id=2970): socket$nl_generic(0x10, 0x3, 0x10) truncate(0x0, 0xe2) r0 = socket$inet(0x2, 0x1, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) 0s ago: executing program 4 (id=2971): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8410, &(0x7f00000006c0), 0x2, 0x24b, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a9741, 0x160) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) kernel console output (not intermixed with test programs): ngth: 1 < 11 [ 356.577179][ T8498] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.834'. [ 356.675861][ T8456] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 356.876965][ T8504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'. [ 357.204646][ T8509] fuse: Bad value for 'rootmode' [ 357.310640][ T8492] syz.0.833 (8492) used greatest stack depth: 17160 bytes left [ 357.446046][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 357.658455][ T5608] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 357.662389][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 358.945361][ T8533] binder: BINDER_SET_CONTEXT_MGR already set [ 358.945375][ T8533] binder: 8532:8533 ioctl 4018620d 200000000180 returned -16 [ 359.076993][ T8536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.849'. [ 360.034252][ T8539] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.848'. [ 360.111107][ T8541] loop3: detected capacity change from 0 to 128 [ 360.166727][ T8541] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 361.594870][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.857'. [ 361.619643][ T8559] erspan0: entered promiscuous mode [ 361.625606][ T8559] macvtap2: entered promiscuous mode [ 361.631942][ T8559] macvtap2: entered allmulticast mode [ 361.631979][ T8559] erspan0: entered allmulticast mode [ 361.726118][ T5608] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 361.893287][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2 [ 361.919302][ T8568] binder: BINDER_SET_CONTEXT_MGR already set [ 361.919314][ T8568] binder: 8567:8568 ioctl 4018620d 200000000180 returned -16 [ 361.931451][ T8561] erspan0: left allmulticast mode [ 361.931763][ T8561] erspan0: left promiscuous mode [ 361.964682][ T8561] macvtap2: left promiscuous mode [ 361.964707][ T8561] macvtap2: left allmulticast mode [ 361.975287][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2 [ 362.060078][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'. [ 362.655296][ T8582] loop0: detected capacity change from 0 to 1024 [ 362.665731][ T8582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.184756][ T8582] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 363.980218][ T8582] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 5: comm syz.0.863: lblock 5 mapped to illegal pblock 5 (length 1) [ 363.980324][ T8582] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 363.988273][ C0] EXT4-fs (loop0): initial error at time 1783135740: ext4_map_blocks:833: inode 3: block 5 [ 363.988322][ C0] EXT4-fs (loop0): last error at time 1783135740: ext4_map_blocks:833: inode 3: block 5 [ 364.045698][ T8582] Quota error (device loop0): write_blk: dquota write failed [ 364.045793][ T8582] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 364.045999][ T8582] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 364.046067][ T8582] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.863: Failed to acquire dquot type 0 [ 364.046086][ T8582] loop0: lost filesystem error report for type 5 error -117 [ 364.078145][ T8582] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 5: comm syz.0.863: lblock 5 mapped to illegal pblock 5 (length 1) [ 364.078181][ T8582] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 364.164459][ T8582] Quota error (device loop0): do_insert_tree: Can't read tree quota block 5 [ 364.164601][ T8582] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 364.164642][ T8582] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.863: Failed to acquire dquot type 0 [ 364.164661][ T8582] loop0: lost filesystem error report for type 5 error -117 [ 364.228346][ T8582] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.863: Freeing blocks not in datazone - block = 0, count = 4096 [ 364.228382][ T8582] loop0: lost filesystem error report for type 5 error -117 [ 364.302385][ T8582] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 5: comm syz.0.863: lblock 5 mapped to illegal pblock 5 (length 1) [ 364.302425][ T8582] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 364.365882][ T8582] Quota error (device loop0): do_insert_tree: Can't read tree quota block 5 [ 364.366034][ T8582] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 364.366075][ T8582] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.863: Failed to acquire dquot type 0 [ 364.366094][ T8582] loop0: lost filesystem error report for type 5 error -117 [ 364.521123][ T8582] EXT4-fs (loop0): 1 orphan inode deleted [ 364.604337][ T8582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.615598][ T5608] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 364.739534][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.829502][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 364.892844][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.869'. [ 364.902187][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 365.220211][ T8612] binder: BINDER_SET_CONTEXT_MGR already set [ 365.220225][ T8612] binder: 8609:8612 ioctl 4018620d 200000000180 returned -16 [ 365.415238][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 366.008899][ T8617] erspan0: entered promiscuous mode [ 366.014999][ T8617] macvtap1: entered promiscuous mode [ 366.020953][ T8617] macvtap1: entered allmulticast mode [ 366.020971][ T8617] erspan0: entered allmulticast mode [ 366.237852][ T8622] erspan0: left allmulticast mode [ 366.237983][ T8622] erspan0: left promiscuous mode [ 366.283406][ T8622] macvtap1: left promiscuous mode [ 366.283432][ T8622] macvtap1: left allmulticast mode [ 366.773661][ T5608] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 367.659176][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.883'. [ 367.759082][ T8648] loop4: detected capacity change from 0 to 512 [ 367.760999][ T8648] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 367.859001][ T8648] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 368.203228][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 368.226818][ T5607] Flush: task=udevd[5607] dev=loop4 state=2 [ 368.552066][ T5607] Teardown: task=udevd[5607] dev=loop4 state=2 [ 369.941488][ T5608] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 370.680708][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.895'. [ 372.591565][ T5608] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 373.431870][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'. [ 374.153074][ T8744] loop4: detected capacity change from 0 to 256 [ 374.933578][ T8744] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.933596][ T8744] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 375.404281][ T8744] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 375.408608][ T8744] exFAT-fs (loop4): failed to load alloc-bitmap [ 375.408623][ T8744] exFAT-fs (loop4): failed to recognize exfat type [ 375.410414][ T8744] Flush: task=syz.4.911[8744] dev=loop4 state=2 [ 375.585056][ T8744] Teardown: task=syz.4.911[8744] dev=loop4 state=2 [ 378.316126][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.922'. [ 378.612240][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.612329][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.005935][ T37] audit: type=1326 audit(1783135756.031:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8806 comm="syz.3.932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e3ddde59 code=0x0 [ 380.269442][ T8818] fuse: Unknown parameter 'user_i00000000000000000000' [ 380.553409][ T8824] loop1: detected capacity change from 0 to 256 [ 381.314115][ T8824] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 382.412991][ T5607] Flush: task=udevd[5607] dev=loop1 state=2 [ 382.491821][ T5607] Teardown: task=udevd[5607] dev=loop1 state=2 [ 382.567004][ T8841] loop2: detected capacity change from 0 to 64 [ 382.591095][ T8841] MINIX-fs: mounting file system with errors, running fsck is recommended [ 382.791095][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 382.883860][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 382.989689][ T8855] fuse: Unknown parameter 'user_i00000000000000000000' [ 384.305122][ T37] audit: type=1326 audit(1783135760.331:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8870 comm="syz.2.952" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801749de59 code=0x0 [ 385.640371][ T8892] loop4: detected capacity change from 0 to 64 [ 385.675654][ T8892] MINIX-fs: mounting file system with errors, running fsck is recommended [ 386.034089][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 386.101681][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 386.697585][ T8906] fuse: Unknown parameter 'user_id00000000000000000000' [ 386.864738][ T37] audit: type=1326 audit(1783135762.881:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8909 comm="syz.2.965" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801749de59 code=0x0 [ 390.860770][ T37] audit: type=1326 audit(1783135766.881:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8950 comm="syz.0.979" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0238f0de59 code=0x0 [ 399.782968][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 400.189603][ T9046] loop0: detected capacity change from 0 to 64 [ 401.044653][ T9046] MINIX-fs: mounting file system with errors, running fsck is recommended [ 401.299374][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.311692][ T9060] bridge0: port 2(bridge_slave_1) entered listening state [ 401.313001][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.313195][ T9060] bridge0: port 1(bridge_slave_0) entered listening state [ 401.323489][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 401.363991][ T9060] team0: Port device bridge0 added [ 401.932656][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 403.116216][ T9069] loop0: detected capacity change from 0 to 128 [ 403.120823][ T9069] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 403.866781][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 404.439708][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 404.541756][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 406.137338][ T9105] loop3: detected capacity change from 0 to 64 [ 406.184397][ T9105] MINIX-fs: mounting file system with errors, running fsck is recommended [ 406.504646][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2 [ 406.595923][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2 [ 410.048052][ T9144] loop3: detected capacity change from 0 to 64 [ 410.328680][ T9144] MINIX-fs: mounting file system with errors, running fsck is recommended [ 411.959015][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2 [ 412.112571][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2 [ 414.067170][ T9202] loop0: detected capacity change from 0 to 64 [ 414.692703][ T9202] MINIX-fs: mounting file system with errors, running fsck is recommended [ 415.098293][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1063'. [ 415.501619][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 415.604501][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 416.131850][ T5730] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 416.351533][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 416.351707][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 416.561530][ T5730] usb 5-1: device descriptor read/64, error -71 [ 417.187261][ T9246] loop0: detected capacity change from 0 to 128 [ 417.190993][ T9246] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 417.271429][ T5730] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 418.355875][ T5730] usb 5-1: device descriptor read/64, error -71 [ 418.463106][ T5730] usb usb5-port1: attempt power cycle [ 418.549381][ T9259] loop1: detected capacity change from 0 to 64 [ 418.675178][ T9259] MINIX-fs: mounting file system with errors, running fsck is recommended [ 418.941632][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 419.007442][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 419.051842][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 419.113757][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 419.319177][ T9268] ALSA: mixer_oss: invalid OSS volume 'u' [ 420.113516][ T9275] loop1: detected capacity change from 0 to 4096 [ 422.258852][ T9275] ntfs3(loop1): Failed to read $UpCase (-4). [ 422.792338][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 422.966348][ T5611] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 423.011721][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 423.812600][ T5611] usb 3-1: device descriptor read/64, error -71 [ 423.913851][ T9309] loop1: detected capacity change from 0 to 64 [ 423.916811][ T9309] MINIX-fs: mounting file system with errors, running fsck is recommended [ 424.169579][ T5611] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 424.267256][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 424.301379][ T5611] usb 3-1: device descriptor read/64, error -71 [ 424.381798][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 424.424231][ T5611] usb usb3-port1: attempt power cycle [ 424.568810][ T9318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1098'. [ 424.875442][ T5611] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 424.904282][ T5611] usb 3-1: device descriptor read/8, error -71 [ 426.071496][ T5611] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 426.515974][ T5611] usb 3-1: device descriptor read/8, error -71 [ 426.585405][ T9328] fuse: Unknown parameter '0x0000000000000004' [ 426.621863][ T5611] usb usb3-port1: unable to enumerate USB device [ 428.535447][ T9349] loop3: detected capacity change from 0 to 64 [ 428.538256][ T9349] MINIX-fs: mounting file system with errors, running fsck is recommended [ 428.711486][ T5611] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 428.779999][ T9352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1111'. [ 428.883216][ T5611] usb 1-1: device descriptor read/64, error -71 [ 428.986815][ T9361] fuse: Unknown parameter 'fd0x0000000000000004' [ 429.482092][ T5611] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 429.607081][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2 [ 430.041435][ T5611] usb 1-1: device descriptor read/64, error -71 [ 430.054194][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2 [ 430.152358][ T5611] usb usb1-port1: attempt power cycle [ 430.641400][ T5611] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 430.893051][ T5611] usb 1-1: device descriptor read/8, error -71 [ 431.522425][ T5611] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 431.713174][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.713194][ C1] bridge0: topology change detected, propagating [ 431.713487][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.713500][ C1] bridge0: topology change detected, propagating [ 431.741461][ T5611] usb 1-1: device not accepting address 8, error -71 [ 431.742847][ T5611] usb usb1-port1: unable to enumerate USB device [ 434.373636][ T9405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1125'. [ 436.681618][ T5826] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 436.811415][ T5826] usb 1-1: device descriptor read/64, error -71 [ 437.061469][ T5826] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 437.982048][ T5826] usb 1-1: device descriptor read/64, error -71 [ 438.094182][ T5826] usb usb1-port1: attempt power cycle [ 439.336442][ T9453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1138'. [ 440.705834][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.705917][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.955878][ T9488] ALSA: mixer_oss: invalid OSS volume 'u' [ 444.554185][ T9497] binder: 9496:9497 ioctl c0306201 0 returned -14 [ 444.772970][ T9501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1154'. [ 446.200782][ T9522] loop1: detected capacity change from 0 to 128 [ 446.203150][ T9522] ext4: Unknown parameter 'fsmagic' [ 446.208105][ T9522] Flush: task=syz.1.1160[9522] dev=loop1 state=2 [ 446.291396][ T9522] Teardown: task=syz.1.1160[9522] dev=loop1 state=2 [ 448.281138][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1168'. [ 449.749042][ T9576] loop3: detected capacity change from 0 to 128 [ 450.314760][ T9569] ALSA: mixer_oss: invalid OSS volume 'u' [ 450.470484][ T9576] ext4: Unknown parameter 'fsmagic' [ 451.430285][ T5620] Flush: task=udevd[5620] dev=loop3 state=2 [ 451.998365][ T5620] Teardown: task=udevd[5620] dev=loop3 state=2 [ 453.056365][ T9597] loop4: detected capacity change from 0 to 128 [ 453.057491][ T9597] ext4: Unknown parameter 'fsmagic' [ 453.411988][ T5607] Flush: task=udevd[5607] dev=loop4 state=2 [ 453.739190][ T5607] Teardown: task=udevd[5607] dev=loop4 state=2 [ 455.189435][ T9626] loop1: detected capacity change from 0 to 128 [ 455.225043][ T9626] ext4: Unknown parameter 'fsmagic' [ 456.208226][ T5607] Flush: task=udevd[5607] dev=loop1 state=2 [ 456.333158][ T5607] Teardown: task=udevd[5607] dev=loop1 state=2 [ 457.454725][ T9669] loop2: detected capacity change from 0 to 128 [ 457.460937][ T9669] ext4: Unknown parameter 'fsmagic' [ 458.448459][ T5607] Flush: task=udevd[5607] dev=loop2 state=2 [ 458.531533][ T5607] Teardown: task=udevd[5607] dev=loop2 state=2 [ 461.575521][ T9700] loop2: detected capacity change from 0 to 128 [ 461.589924][ T9700] ext4: Unknown parameter 'fsmagic' [ 462.722261][ T5607] Flush: task=udevd[5607] dev=loop2 state=2 [ 462.864794][ T5607] Teardown: task=udevd[5607] dev=loop2 state=2 [ 467.881488][ T5611] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 468.191998][ T5611] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 468.192027][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.767557][ T5611] usb 4-1: config 0 descriptor?? [ 468.835076][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.839637][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.860808][ T9773] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.861087][ T9773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.864567][ T9773] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.865907][ T9773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.954036][ T9773] team0: Port device bridge0 added [ 469.300161][ T9779] loop1: detected capacity change from 0 to 128 [ 469.320779][ T9779] ext4: Unknown parameter 'fsmagic' [ 469.373961][ T9768] binder: BINDER_SET_CONTEXT_MGR already set [ 469.373990][ T9768] binder: 9766:9768 ioctl 4018620d 200000000040 returned -16 [ 469.498168][ T5607] Flush: task=udevd[5607] dev=loop1 state=2 [ 469.842444][ T5607] Teardown: task=udevd[5607] dev=loop1 state=2 [ 471.207660][ T9787] loop2: detected capacity change from 0 to 64 [ 471.265196][ T9787] MINIX-fs: mounting file system with errors, running fsck is recommended [ 471.427729][ T5611] usb 4-1: Cannot set autoneg [ 471.428316][ T5611] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 471.557512][ T5611] usb 4-1: USB disconnect, device number 5 [ 471.868186][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 472.741389][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 474.155050][ T9825] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1245'. [ 476.191148][ T9860] loop1: detected capacity change from 0 to 128 [ 476.192959][ T9860] ext4: Unknown parameter 'fsmagic' [ 476.193333][ T9860] Flush: task=syz.1.1254[9860] dev=loop1 state=2 [ 476.283075][ T9860] Teardown: task=syz.1.1254[9860] dev=loop1 state=2 [ 477.615013][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 477.813649][ T9871] warning: `syz.3.1258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 479.825589][ T9883] ALSA: mixer_oss: invalid OSS volume 'u' [ 481.157536][ T9899] loop4: detected capacity change from 0 to 128 [ 481.158712][ T9899] ext4: Unknown parameter 'fsmagic' [ 481.159768][ T9899] Flush: task=syz.4.1266[9899] dev=loop4 state=2 [ 481.302637][ T9899] Teardown: task=syz.4.1266[9899] dev=loop4 state=2 [ 483.092680][ T9911] capability: warning: `syz.4.1269' uses deprecated v2 capabilities in a way that may be insecure [ 483.402391][ T9913] fuse: Bad value for 'fd' [ 486.264874][ T9938] ALSA: mixer_oss: invalid OSS volume 'u' [ 488.233337][ T5826] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 489.128795][ T5826] usb 4-1: device descriptor read/all, error -71 [ 489.240079][ T9959] fuse: Bad value for 'fd' [ 491.065572][ T9976] ALSA: mixer_oss: invalid OSS volume 'u' [ 497.382833][ T5737] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 497.823524][ T5737] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 497.823550][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.882020][ T5737] usb 3-1: config 0 descriptor?? [ 498.775001][T10032] ALSA: mixer_oss: invalid OSS volume 'u' [ 501.474482][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.474567][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.517477][ T5737] usb 3-1: Cannot set autoneg [ 501.590155][ T5737] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 502.685929][ T5737] usb 3-1: USB disconnect, device number 7 [ 503.918097][T10075] loop4: detected capacity change from 0 to 128 [ 503.926698][T10075] ext4: Unknown parameter 'fsmagic' [ 503.927124][T10075] Flush: task=syz.4.1314[10075] dev=loop4 state=2 [ 504.432996][T10067] ALSA: mixer_oss: invalid OSS volume 'u' [ 504.884312][T10079] ALSA: mixer_oss: invalid OSS volume 'u' [ 505.312901][T10075] Teardown: task=syz.4.1314[10075] dev=loop4 state=2 [ 506.062987][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1320'. [ 507.331553][ T5826] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 507.613654][ T5826] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 507.613681][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.633937][ T5826] usb 2-1: config 0 descriptor?? [ 508.265103][T10116] ALSA: mixer_oss: invalid OSS volume 'u' [ 508.690267][T10126] loop4: detected capacity change from 0 to 128 [ 508.699530][T10126] ext4: Unknown parameter 'fsmagic' [ 508.699942][T10126] Flush: task=syz.4.1330[10126] dev=loop4 state=2 [ 508.801689][T10126] Teardown: task=syz.4.1330[10126] dev=loop4 state=2 [ 510.489353][ T5826] usb 2-1: Cannot set autoneg [ 510.489576][ T5826] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 510.907043][ T5826] usb 2-1: USB disconnect, device number 2 [ 514.175634][T10184] loop3: detected capacity change from 0 to 64 [ 514.201569][ T5611] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 514.365399][ T5611] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 514.365427][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.426071][ T5611] usb 2-1: config 0 descriptor?? [ 515.902430][ T5599] Flush: task=syz-executor[5599] dev=loop3 state=2 [ 516.594301][ T5599] Teardown: task=syz-executor[5599] dev=loop3 state=2 [ 517.103258][ T5611] usb 2-1: Cannot set autoneg [ 517.103510][ T5611] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 517.186584][ T5611] usb 2-1: USB disconnect, device number 3 [ 519.401914][T10232] ALSA: mixer_oss: invalid OSS volume 'u' [ 522.583073][T10253] loop4: detected capacity change from 0 to 32768 [ 523.176275][T10253] loop4: p1 < > p3 < > p4 [ 523.186216][T10253] loop4: p4 start 1426063360 is beyond EOD, truncated [ 523.698148][ T9331] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 524.191648][ T9331] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 524.191709][ T9331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.992201][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.993995][T10265] bridge0: port 2(bridge_slave_1) entered listening state [ 525.019691][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.372290][T10265] bridge0: port 1(bridge_slave_0) entered listening state [ 525.964200][T10265] team0: Port device bridge0 added [ 526.333430][T10063] Flush: task=udevd[10063] dev=loop4 state=2 [ 526.335142][ T9331] usb 4-1: config 0 descriptor?? [ 526.410849][ T9331] usb 4-1: can't set config #0, error -71 [ 526.438396][T10063] Teardown: task=udevd[10063] dev=loop4 state=2 [ 526.452762][ T9331] usb 4-1: USB disconnect, device number 8 [ 529.458888][T10061] udevd[10061]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 529.471485][T10063] udevd[10063]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 529.711899][T10210] udevd[10210]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 529.716240][T10063] udevd[10063]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 531.306514][ T7235] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 531.575579][ T7235] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 531.575608][ T7235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.609709][ T7235] usb 1-1: config 0 descriptor?? [ 532.604825][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 534.819926][ T7235] usb 1-1: Cannot set autoneg [ 534.820193][ T7235] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 534.882549][ T7235] usb 1-1: USB disconnect, device number 12 [ 535.311440][ T7235] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 535.493307][ T7235] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 535.493338][ T7235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.553244][ T7235] usb 1-1: config 0 descriptor?? [ 535.591057][ T7235] cp210x 1-1:0.0: cp210x converter detected [ 535.621026][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 535.790002][ T7235] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 535.790028][ T7235] cp210x 1-1:0.0: querying part number failed [ 535.824991][ T7235] usb 1-1: cp210x converter now attached to ttyUSB0 [ 537.770262][T10408] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5600] was attempted by " [ 537.935839][T10411] loop3: detected capacity change from 0 to 4096 [ 538.106569][ T32] usb 1-1: USB disconnect, device number 13 [ 538.138620][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 538.165186][ T32] cp210x 1-1:0.0: device disconnected [ 538.239455][T10404] ALSA: mixer_oss: invalid OSS volume 'u' [ 539.229088][T10423] overlayfs: overlapping lowerdir path [ 540.513250][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 540.513970][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 541.421321][T10453] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 541.502669][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 542.201653][T10446] ALSA: mixer_oss: invalid OSS volume 'u' [ 542.313372][ T45] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 542.313399][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.381528][ T45] usb 3-1: config 0 descriptor?? [ 542.401859][ T45] cp210x 3-1:0.0: cp210x converter detected [ 543.282533][ T45] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 543.282560][ T45] cp210x 3-1:0.0: querying part number failed [ 543.310363][ T45] usb 3-1: cp210x converter now attached to ttyUSB0 [ 544.057069][T10477] loop1: detected capacity change from 0 to 32768 [ 544.068083][T10477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1441 (10477) [ 544.085683][T10477] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 544.085777][T10477] BTRFS info (device loop1): using crc32c checksum algorithm [ 545.144134][T10477] BTRFS info (device loop1): enabling ssd optimizations [ 545.144179][T10477] BTRFS info (device loop1): turning on flush-on-commit [ 545.144190][T10477] BTRFS info (device loop1): turning on async discard [ 545.144197][T10477] BTRFS info (device loop1): enabling free space tree [ 545.144205][T10477] BTRFS info (device loop1): enabling auto defrag [ 545.144271][T10477] BTRFS info (device loop1): force zlib compression, level 3 [ 545.144282][T10477] BTRFS info (device loop1): max_inline set to 4096 [ 545.464542][ T37] audit: type=1800 audit(1783135921.431:11): pid=10477 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.1441" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 545.573816][ T5955] usb 3-1: USB disconnect, device number 8 [ 545.603399][ T5955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 545.604038][ T5955] cp210x 3-1:0.0: device disconnected [ 546.518611][T10501] ALSA: mixer_oss: invalid OSS volume 'u' [ 547.587440][T10527] loop4: detected capacity change from 0 to 128 [ 547.603394][T10527] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 548.180379][ T5944] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 548.423183][ T5944] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 548.423212][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.538128][ T5944] usb 1-1: config 0 descriptor?? [ 548.561698][ T5944] cp210x 1-1:0.0: cp210x converter detected [ 548.745836][ T5600] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 548.779023][ T5944] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 548.779049][ T5944] cp210x 1-1:0.0: querying part number failed [ 548.833299][ T5944] usb 1-1: cp210x converter now attached to ttyUSB0 [ 549.120037][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 549.211583][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 550.209057][T10548] ALSA: mixer_oss: invalid OSS volume 'u' [ 551.391812][T10061] Flush: task=udevd[10061] dev=loop1 state=2 [ 551.447847][ T5826] usb 1-1: USB disconnect, device number 14 [ 551.492001][T10061] Teardown: task=udevd[10061] dev=loop1 state=2 [ 552.284609][ T5826] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 552.335120][ T5826] cp210x 1-1:0.0: device disconnected [ 554.692986][T10591] ALSA: mixer_oss: invalid OSS volume 'u' [ 555.871353][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.871371][ C1] bridge0: topology change detected, propagating [ 555.871711][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.871725][ C1] bridge0: topology change detected, propagating [ 557.801457][ T9331] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 557.954902][T10660] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 557.981350][ T9331] usb 5-1: Using ep0 maxpacket: 16 [ 558.001350][ T9331] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 558.001377][ T9331] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 558.001394][ T9331] usb 5-1: Product: syz [ 558.001405][ T9331] usb 5-1: SerialNumber: syz [ 558.171605][ T9331] usb 5-1: config 0 descriptor?? [ 558.588968][ T9331] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 558.620971][ T9331] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 558.632615][ T9331] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 558.632871][ T9331] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 560.445244][T10692] syz.2.1501 uses obsolete (PF_INET,SOCK_PACKET) [ 560.677658][T10698] loop0: detected capacity change from 0 to 64 [ 560.711164][T10698] MINIX-fs: mounting file system with errors, running fsck is recommended [ 560.732539][T10697] loop2: detected capacity change from 0 to 512 [ 560.767435][ T5944] usb 5-1: USB disconnect, device number 5 [ 561.477965][T10697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1501: iget: bad extra_isize 58 (inode size 256) [ 561.478010][T10697] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 561.621244][ C1] EXT4-fs (loop2): initial error at time 1783135937: ext4_xattr_inode_iget:441: inode 11 [ 561.621278][ C1] EXT4-fs (loop2): last error at time 1783135937: ext4_xattr_inode_iget:441: inode 11 [ 562.108076][T10697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1501: error while reading EA inode 11 err=-117 [ 562.108098][T10697] loop2: lost filesystem error report for type 5 error -117 [ 562.231547][T10697] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 562.232725][T10697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1501: iget: bad extra_isize 58 (inode size 256) [ 562.232753][T10697] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 562.250530][T10697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1501: error while reading EA inode 11 err=-117 [ 562.250563][T10697] loop2: lost filesystem error report for type 5 error -117 [ 562.251966][T10697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.1501: iget: bad extra_isize 58 (inode size 256) [ 562.251994][T10697] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 562.274488][T10697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1501: error while reading EA inode 18 err=-117 [ 562.274521][T10697] loop2: lost filesystem error report for type 5 error -117 [ 562.275431][T10697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.1501: iget: bad extra_isize 58 (inode size 256) [ 562.275459][T10697] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 562.276033][T10697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1501: error while reading EA inode 18 err=-117 [ 562.276058][T10697] loop2: lost filesystem error report for type 5 error -117 [ 562.315812][T10697] EXT4-fs (loop2): 1 orphan inode deleted [ 562.322834][T10697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.604343][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 562.688531][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 562.924856][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.936472][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.533544][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.640187][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 565.693801][T10751] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 565.741944][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 566.042708][T10744] ALSA: mixer_oss: invalid OSS volume 'u' [ 567.017624][T10753] syz.3.1519 (10753) used greatest stack depth: 17104 bytes left [ 570.640820][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 570.682927][T10807] syz_tun: entered promiscuous mode [ 570.693012][T10807] macvtap1: entered promiscuous mode [ 570.699344][T10807] macvtap1: entered allmulticast mode [ 570.699361][T10807] syz_tun: entered allmulticast mode [ 571.084430][T10813] loop1: detected capacity change from 0 to 64 [ 571.088856][T10813] MINIX-fs: mounting file system with errors, running fsck is recommended [ 572.572483][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 572.687256][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 573.118394][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 574.983843][T10858] loop2: detected capacity change from 0 to 64 [ 575.013623][T10858] MINIX-fs: mounting file system with errors, running fsck is recommended [ 575.313248][ T5955] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 575.590520][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1557'. [ 578.043225][ T5955] usb 2-1: unable to get BOS descriptor or descriptor too short [ 578.043997][ T5955] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 578.044016][ T5955] usb 2-1: can't read configurations, error -71 [ 578.711659][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 578.846307][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 579.086718][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 579.128073][T10912] binder: 10911:10912 ioctl 4018620d 0 returned -22 [ 579.848285][T10897] ALSA: mixer_oss: invalid OSS volume 'u' [ 580.801309][ T5955] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 581.524658][T10933] loop0: detected capacity change from 0 to 64 [ 581.544820][T10933] MINIX-fs: mounting file system with errors, running fsck is recommended [ 582.231377][T10063] Flush: task=udevd[10063] dev=loop0 state=2 [ 582.341840][T10063] Teardown: task=udevd[10063] dev=loop0 state=2 [ 583.220502][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 583.678135][T10961] binder: 10960:10961 ioctl 4018620d 0 returned -22 [ 586.614234][ T5955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 586.615931][ T5955] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 586.615945][ T5955] usb 3-1: chopping to 0 config(s) [ 586.615958][ T5955] usb 3-1: can't read configurations, error -32 [ 586.753443][ T5955] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 586.893376][ T5955] usb 3-1: device descriptor read/64, error -32 [ 587.001818][ T5955] usb usb3-port1: attempt power cycle [ 587.180948][T10972] loop4: detected capacity change from 0 to 64 [ 587.183685][T10972] /dev/loop4: Can't open blockdev [ 587.205750][T10946] Flush: task=syz.2.1572[10946] dev=loop4 state=2 [ 587.316239][T10946] Teardown: task=syz.2.1572[10946] dev=loop4 state=2 [ 587.384893][ T5955] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 587.905642][ T5955] usb 3-1: device not accepting address 11, error -71 [ 589.274680][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 591.813368][T11007] loop1: detected capacity change from 0 to 128 [ 591.816292][T11007] ext4: Unknown parameter 'fsmagic' [ 591.984944][T10063] Flush: task=udevd[10063] dev=loop1 state=2 [ 592.051916][T11010] loop2: detected capacity change from 0 to 64 [ 592.059837][T11010] MINIX-fs: mounting file system with errors, running fsck is recommended [ 592.078006][T10063] Teardown: task=udevd[10063] dev=loop1 state=2 [ 592.291861][T11017] tmpfs: Unknown parameter 'grpquota2' [ 593.300646][ T5826] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 593.580759][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 593.731357][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 593.907614][T11029] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 593.907669][T11029] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 594.632308][T11038] blktrace: Concurrent blktraces are not allowed on loop0 [ 598.511573][ T5826] usb 1-1: unable to get BOS descriptor or descriptor too short [ 598.512525][ T5826] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 598.512548][ T5826] usb 1-1: chopping to 0 config(s) [ 598.512570][ T5826] usb 1-1: can't read configurations, error -32 [ 598.716521][ T5826] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 598.841387][ T5826] usb 1-1: device descriptor read/64, error -32 [ 598.860285][T11068] overlayfs: missing 'lowerdir' [ 598.865622][T11069] loop2: detected capacity change from 0 to 64 [ 598.877199][T11069] MINIX-fs: mounting file system with errors, running fsck is recommended [ 598.951763][ T5826] usb usb1-port1: attempt power cycle [ 599.401075][T11078] loop4: detected capacity change from 0 to 128 [ 599.415344][T11078] ext4: Unknown parameter 'fsmagic' [ 599.831156][T10063] Flush: task=udevd[10063] dev=loop4 state=2 [ 600.132176][T10063] Teardown: task=udevd[10063] dev=loop4 state=2 [ 600.185718][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 601.224308][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 605.355206][T11114] overlayfs: missing 'lowerdir' [ 606.291367][ T5737] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 606.955702][T11122] ALSA: mixer_oss: invalid OSS volume 'u' [ 607.434805][T11148] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 608.711119][T11156] overlayfs: missing 'lowerdir' [ 609.168121][ T5737] usb 3-1: unable to get BOS descriptor or descriptor too short [ 609.174798][ T5737] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 609.174831][ T5737] usb 3-1: can't read configurations, error -71 [ 609.347283][T11150] loop1: detected capacity change from 0 to 32768 [ 609.542392][T11165] loop2: detected capacity change from 0 to 128 [ 609.543900][T11165] ext4: Unknown parameter 'fsmagic' [ 609.544410][T11165] Flush: task=syz.2.1645[11165] dev=loop2 state=2 [ 609.776513][T11165] Teardown: task=syz.2.1645[11165] dev=loop2 state=2 [ 609.938626][T11150] JBD2: Ignoring recovery information on journal [ 610.836641][T11150] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 611.830591][T11186] overlayfs: missing 'workdir' [ 616.164168][ T5600] ocfs2: Unmounting device (7,1) on (node local) [ 616.243590][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 616.325249][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 616.718275][T11223] loop2: detected capacity change from 0 to 128 [ 616.939702][T11223] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 619.600713][T11224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.922784][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 620.096685][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 620.295921][T11242] overlayfs: missing 'workdir' [ 622.714183][T11268] loop2: detected capacity change from 0 to 128 [ 622.731627][T11268] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 623.820011][T11251] ALSA: mixer_oss: invalid OSS volume 'u' [ 624.366372][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.366452][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.485133][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 624.603694][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 626.145482][T11307] loop2: detected capacity change from 0 to 128 [ 626.275370][T11307] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 628.137354][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 628.223729][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 628.395525][T11323] syzkaller1: entered promiscuous mode [ 628.395549][T11323] syzkaller1: entered allmulticast mode [ 629.835774][T11319] ALSA: mixer_oss: invalid OSS volume 'u' [ 631.176085][ T37] audit: type=1326 audit(1783136007.201:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11345 comm="syz.0.1700" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0238f0de59 code=0x0 [ 634.118457][T11395] loop1: detected capacity change from 0 to 128 [ 634.130917][T11395] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 635.492348][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 635.602870][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 636.635259][T11410] ALSA: mixer_oss: invalid OSS volume 'u' [ 638.519309][T11437] loop1: detected capacity change from 0 to 128 [ 638.844676][T11437] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 640.676224][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.676533][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.698334][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 640.891548][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 643.280387][T11487] loop4: detected capacity change from 0 to 128 [ 643.302814][T11487] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 643.399023][ T37] audit: type=1326 audit(1783136019.421:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11491 comm="syz.3.1746" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e3ddde59 code=0x0 [ 644.141478][ T5944] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 644.294742][ T5944] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 644.294769][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.327962][ T5944] usb 3-1: config 0 descriptor?? [ 644.463990][ T5944] cp210x 3-1:0.0: cp210x converter detected [ 644.712900][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 644.900817][ T5944] usb 3-1: cp210x converter now attached to ttyUSB0 [ 645.003002][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 647.502280][ T5944] usb 3-1: USB disconnect, device number 15 [ 648.207449][ T5944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 648.471022][T11537] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 648.479023][ T5944] cp210x 3-1:0.0: device disconnected [ 652.074440][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.076402][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.796093][T11583] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 656.214824][T11631] fuse: fd is not a fuse device [ 659.990510][T11668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 663.081531][ T5826] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 663.294586][ T5826] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 663.294613][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.322922][T11695] loop2: detected capacity change from 0 to 4096 [ 663.494029][ T5826] usb 2-1: config 0 descriptor?? [ 663.573376][ T5826] cp210x 2-1:0.0: cp210x converter detected [ 664.199140][ T5826] usb 2-1: cp210x converter now attached to ttyUSB0 [ 664.258513][ T5826] usb 2-1: USB disconnect, device number 6 [ 664.293475][ T5826] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 664.603698][T11706] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 665.556844][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 665.656144][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 666.045805][ T5826] cp210x 2-1:0.0: device disconnected [ 670.120825][T11753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1826'. [ 670.370328][T11743] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 672.640996][T11765] loop1: detected capacity change from 0 to 32768 [ 672.658529][T11765] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1832 (11765) [ 675.774889][T11765] BTRFS error (device loop1): open_ctree failed: -4 [ 680.638581][T10063] Flush: task=udevd[10063] dev=loop1 state=2 [ 681.784632][T10063] Teardown: task=udevd[10063] dev=loop1 state=2 [ 685.795063][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.795146][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.085375][T11888] ALSA: mixer_oss: invalid OSS volume 'u' [ 692.296686][T11937] loop5: detected capacity change from 0 to 7 [ 692.480202][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'. [ 693.617074][T11937] Dev loop5: unable to read RDB block 7 [ 693.617120][T11937] loop5: AHDI p1 p2 p3 [ 693.617139][T11937] loop5: partition table partially beyond EOD, truncated [ 693.617371][T11937] loop5: p1 start 1601398130 is beyond EOD, truncated [ 693.617387][T11937] loop5: p2 start 1702059890 is beyond EOD, truncated [ 695.281273][ T5955] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 695.281546][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 695.543764][ T5955] usb 1-1: device descriptor read/64, error -32 [ 695.688875][T11962] loop1: detected capacity change from 0 to 128 [ 695.726641][T11962] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 695.781350][ T5955] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 696.045473][T11942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 696.141356][T11969] loop2: detected capacity change from 0 to 64 [ 696.190801][T11969] MINIX-fs: mounting file system with errors, running fsck is recommended [ 696.782647][T11945] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 696.852180][T11945] Flush: task=syz.0.1880[11945] dev=loop5 state=2 [ 696.853954][ T5955] usb 1-1: device descriptor read/all, error -71 [ 696.854326][ T5955] usb usb1-port1: attempt power cycle [ 696.979179][T11945] Teardown: task=syz.0.1880[11945] dev=loop5 state=2 [ 697.168710][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 697.411312][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 698.108617][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 698.253550][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 698.386575][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1893'. [ 701.967455][T12014] loop4: detected capacity change from 0 to 164 [ 702.665095][T12013] Unsupported NM flag settings (240) [ 702.786853][T12017] loop1: detected capacity change from 0 to 128 [ 702.852761][ T5605] do_umount: task=syz-executor[5605] propagate_mount_busy()!=0 [ 702.853100][ T5605] do_umount: task=syz-executor[5605] propagate_mount_busy()!=0 [ 702.859124][ T5605] Unsupported NM flag settings (240) [ 702.892023][T12017] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 702.917321][ T5605] Unsupported NM flag settings (240) [ 702.917558][ T5605] Unsupported NM flag settings (240) [ 703.155270][ T5605] Unsupported NM flag settings (240) [ 703.155611][ T5605] Unsupported NM flag settings (240) [ 703.155969][ T5605] Unsupported NM flag settings (240) [ 703.862506][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 704.075208][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 704.097489][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 704.272442][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 704.444943][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1907'. [ 704.529837][T12038] loop4: detected capacity change from 0 to 64 [ 704.539914][T12038] MINIX-fs: mounting file system with errors, running fsck is recommended [ 706.042738][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 706.068924][T12051] overlayfs: failed to clone lowerpath [ 706.126176][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 706.389812][T12061] loop2: detected capacity change from 0 to 128 [ 706.495791][T12061] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 707.644909][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1918'. [ 708.274486][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 708.513330][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 708.673188][T12086] overlayfs: failed to clone lowerpath [ 708.679242][T12084] loop1: detected capacity change from 0 to 64 [ 708.737000][T12084] MINIX-fs: mounting file system with errors, running fsck is recommended [ 709.432614][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 710.796354][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 712.272140][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'. [ 712.272161][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 712.591355][ T5608] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 712.899795][T12139] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1939'. [ 717.030608][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 717.030627][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'. [ 717.427965][T12187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1952'. [ 719.384345][T12200] loop4: detected capacity change from 0 to 64 [ 719.388809][T12200] MINIX-fs: mounting file system with errors, running fsck is recommended [ 720.764660][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 720.841225][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 723.229870][T12242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1969'. [ 723.480501][T12245] loop1: detected capacity change from 0 to 64 [ 723.547929][T12245] MINIX-fs: mounting file system with errors, running fsck is recommended [ 723.946077][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 724.527420][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 725.996084][T12299] loop0: detected capacity change from 0 to 64 [ 726.010193][T12299] MINIX-fs: mounting file system with errors, running fsck is recommended [ 728.718545][T12289] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1984'. [ 729.551926][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.719294][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.823894][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 730.973578][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 731.341311][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 731.415182][T12346] fuse: fd is not a fuse device [ 731.549730][ T32] usb 5-1: device descriptor read/64, error -71 [ 731.634713][T12344] loop1: detected capacity change from 0 to 64 [ 731.683325][T12344] MINIX-fs: mounting file system with errors, running fsck is recommended [ 731.791359][ T32] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 731.942585][T12362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2009'. [ 732.305371][ T32] usb 5-1: device descriptor read/64, error -71 [ 732.383152][T12344] syz.1.2003 (12344) used greatest stack depth: 17024 bytes left [ 732.413054][ T32] usb usb5-port1: attempt power cycle [ 732.454305][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 732.531487][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 732.761469][ T32] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 732.784267][ T32] usb 5-1: device descriptor read/8, error -71 [ 733.021261][ T32] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 733.043448][ T32] usb 5-1: device descriptor read/8, error -71 [ 733.155052][ T32] usb usb5-port1: unable to enumerate USB device [ 733.609237][T12395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2020'. [ 734.664105][T12405] loop0: detected capacity change from 0 to 64 [ 734.680427][T12405] MINIX-fs: mounting file system with errors, running fsck is recommended [ 736.185437][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 736.472322][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 738.241286][ T822] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 738.374666][ T822] usb 1-1: device descriptor read/64, error -71 [ 738.588925][T12450] fuse: fd is not a fuse device [ 738.691686][ T822] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 739.521987][ T822] usb 1-1: device descriptor read/64, error -71 [ 739.631689][ T822] usb usb1-port1: attempt power cycle [ 740.893997][ T822] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 740.912061][ T822] usb 1-1: device descriptor read/8, error -71 [ 742.550014][T12484] overlayfs: overlapping lowerdir path [ 745.452714][ T37] audit: type=1326 audit(1783136120.851:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12499 comm="syz.0.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0238f0de59 code=0x0 [ 745.493805][T12514] loop2: detected capacity change from 0 to 64 [ 745.544728][T12514] MINIX-fs: mounting file system with errors, running fsck is recommended [ 745.823774][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 745.823795][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 746.158925][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 746.321608][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 746.452214][T12530] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2063'. [ 747.260581][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.260650][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.345999][T12534] loop4: detected capacity change from 0 to 128 [ 747.348930][T12534] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 747.848808][T12544] overlayfs: overlapping lowerdir path [ 748.074962][ T37] audit: type=1326 audit(1783136124.091:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12543 comm="syz.3.2069" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e3ddde59 code=0x0 [ 749.170802][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'. [ 750.866117][T12575] overlayfs: failed to clone upperpath [ 750.931714][ T11] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 751.064475][ T11] usb 2-1: device descriptor read/64, error -71 [ 751.301363][ T11] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 751.509985][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 751.541708][ T11] usb 2-1: device descriptor read/64, error -71 [ 751.591505][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 751.652149][ T11] usb usb2-port1: attempt power cycle [ 752.102442][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 752.753510][ T11] usb 2-1: device descriptor read/8, error -71 [ 753.113017][ T11] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 753.131962][ T11] usb 2-1: device descriptor read/8, error -71 [ 753.218729][T12598] overlayfs: failed to clone lowerpath [ 753.231593][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 753.264437][ T11] usb usb2-port1: unable to enumerate USB device [ 754.562266][T12626] loop2: detected capacity change from 0 to 64 [ 754.658496][T12626] MINIX-fs: mounting file system with errors, running fsck is recommended [ 755.539040][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 755.642011][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 756.524184][T12651] team0: Device xfrm0 is of different type [ 756.687145][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2100'. [ 756.698704][T12652] tipc: Started in network mode [ 756.698743][T12652] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 756.706613][T12652] tipc: Enabled bearer , priority 0 [ 758.138891][ T37] audit: type=1326 audit(1783136134.141:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12665 comm="syz.1.2101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5629e5de59 code=0x0 [ 758.140218][ T32] tipc: Node number set to 11578026 [ 758.377208][T12678] loop0: detected capacity change from 0 to 64 [ 758.419143][T12678] MINIX-fs: mounting file system with errors, running fsck is recommended [ 758.677456][T12662] loop2: detected capacity change from 0 to 32768 [ 758.986101][T12692] loop4: detected capacity change from 0 to 128 [ 759.013071][T12692] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 759.095953][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 759.114302][T12662] JBD2: Ignoring recovery information on journal [ 759.162748][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 759.486194][T12662] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 759.556797][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 759.832986][ T32] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 759.861506][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 760.695533][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 760.902173][ T32] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 760.902199][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.910941][ T32] usb 1-1: config 0 descriptor?? [ 761.612603][ T32] cp210x 1-1:0.0: cp210x converter detected [ 761.852208][ T32] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 761.856490][ T32] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 761.856541][ T32] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 761.913027][ T32] usb 1-1: cp210x converter now attached to ttyUSB0 [ 761.924193][ T32] usb 1-1: USB disconnect, device number 25 [ 761.958718][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 761.960484][ T32] cp210x 1-1:0.0: device disconnected [ 762.244689][ T5602] ocfs2: Unmounting device (7,2) on (node local) [ 762.439797][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 762.470469][T12730] loop1: detected capacity change from 0 to 128 [ 762.493435][T12730] ext4: Unknown parameter 'fsmagic' [ 763.510592][T10063] Flush: task=udevd[10063] dev=loop1 state=2 [ 763.618179][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 763.683225][T12746] loop0: detected capacity change from 0 to 64 [ 763.729950][T12746] MINIX-fs: mounting file system with errors, running fsck is recommended [ 763.810497][T10063] Teardown: task=udevd[10063] dev=loop1 state=2 [ 764.307442][ T37] audit: type=1326 audit(1783136140.331:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12748 comm="syz.2.2118" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801749de59 code=0x0 [ 765.637868][ T5608] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 765.674069][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 765.717491][T12758] loop2: detected capacity change from 0 to 4096 [ 765.851924][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 766.001664][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 766.134786][T10063] Flush: task=udevd[10063] dev=loop2 state=2 [ 766.167091][T12765] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 766.255078][T12763] loop5: detected capacity change from 0 to 7 [ 766.270329][T10063] Teardown: task=udevd[10063] dev=loop2 state=2 [ 766.398111][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2132'. [ 766.462236][T12763] Dev loop5: unable to read RDB block 7 [ 766.462274][T12763] loop5: AHDI p1 p2 p3 [ 766.462292][T12763] loop5: partition table partially beyond EOD, truncated [ 766.462524][T12763] loop5: p1 start 1601398130 is beyond EOD, truncated [ 766.462541][T12763] loop5: p2 start 1702059890 is beyond EOD, truncated [ 767.148763][T12782] loop1: detected capacity change from 0 to 128 [ 767.158000][T12782] ext4: Unknown parameter 'fsmagic' [ 767.158386][T12782] Flush: task=syz.1.2138[12782] dev=loop1 state=2 [ 767.177529][T12771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 767.221365][ T822] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 767.333417][T12782] Teardown: task=syz.1.2138[12782] dev=loop1 state=2 [ 767.390099][ T822] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 767.390132][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.390143][ T822] usb 3-1: Product: syz [ 767.390149][ T822] usb 3-1: Manufacturer: syz [ 767.390156][ T822] usb 3-1: SerialNumber: syz [ 767.604735][ T822] usb 3-1: config 0 descriptor?? [ 768.051884][ T822] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 016 [ 768.470666][ T822] i2c i2c-1: failure reading functionality [ 768.525610][T12762] Flush: task=syz.2.2132[12762] dev=loop5 state=2 [ 768.552391][ T822] i2c i2c-1: connected i2c-tiny-usb device [ 768.561883][ T822] usb 3-1: USB disconnect, device number 16 [ 769.375844][T12762] Teardown: task=syz.2.2132[12762] dev=loop5 state=2 [ 769.537954][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2144'. [ 769.669459][T12806] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 771.867966][ T32] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 772.034707][ T32] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 772.034735][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.155135][ T32] usb 2-1: config 0 descriptor?? [ 772.233787][ T32] cp210x 2-1:0.0: cp210x converter detected [ 772.290340][T12832] loop0: detected capacity change from 0 to 128 [ 772.305953][T12832] ext4: Unknown parameter 'fsmagic' [ 772.343389][T10061] Flush: task=udevd[10061] dev=loop0 state=2 [ 773.453149][ T32] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 773.693565][ T32] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 773.693618][ T32] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 773.816630][T10061] Teardown: task=udevd[10061] dev=loop0 state=2 [ 773.978097][ T32] usb 2-1: cp210x converter now attached to ttyUSB0 [ 774.012884][ T32] usb 2-1: USB disconnect, device number 11 [ 774.135150][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 774.171497][ T32] cp210x 2-1:0.0: device disconnected [ 775.636148][ T37] audit: type=1326 audit(1783136151.641:18): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12854 comm="syz.4.2160" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63fcd7de59 code=0x0 [ 776.834819][T12826] syz.2.2151 (12826): drop_caches: 2 [ 777.353451][T12871] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 778.050132][T12879] loop0: detected capacity change from 0 to 128 [ 778.296059][T12879] ext4: Unknown parameter 'fsmagic' [ 778.443418][T10063] Flush: task=udevd[10063] dev=loop0 state=2 [ 779.251501][T10063] Teardown: task=udevd[10063] dev=loop0 state=2 [ 779.682856][T12893] overlayfs: failed to clone lowerpath [ 779.715419][ T5826] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 780.756185][T12897] binder: 12895:12897 ioctl c0306201 0 returned -14 [ 780.766150][ T5826] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 780.766179][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.759547][ T5826] usb 2-1: config 0 descriptor?? [ 783.125071][ T5826] cp210x 2-1:0.0: cp210x converter detected [ 784.361701][ T37] audit: type=1326 audit(1783136160.331:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12901 comm="syz.0.2174" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0238f0de59 code=0x0 [ 784.406952][ T5826] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 784.406978][ T5826] cp210x 2-1:0.0: querying part number failed [ 784.571163][ T5826] usb 2-1: cp210x converter now attached to ttyUSB0 [ 784.583392][ T5826] usb 2-1: USB disconnect, device number 12 [ 784.650644][ T5826] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 784.670455][ T5826] cp210x 2-1:0.0: device disconnected [ 785.305720][T12929] loop4: detected capacity change from 0 to 32768 [ 785.788175][T12929] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 785.865938][T12929] XFS (loop4): Ending clean mount [ 785.893568][T12929] XFS (loop4): Quotacheck needed: Please wait. [ 786.322811][T12944] loop0: detected capacity change from 0 to 128 [ 786.323918][T12944] ext4: Unknown parameter 'fsmagic' [ 786.340019][T12944] Flush: task=syz.0.2182[12944] dev=loop0 state=2 [ 786.523958][T12929] XFS (loop4): Quotacheck: Done. [ 786.552449][T12944] Teardown: task=syz.0.2182[12944] dev=loop0 state=2 [ 789.221299][ T822] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 789.473366][ T822] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 789.473394][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.506351][ T822] usb 1-1: config 0 descriptor?? [ 789.521828][ T822] cp210x 1-1:0.0: cp210x converter detected [ 789.617142][ T5605] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 789.756809][T12972] loop1: detected capacity change from 0 to 64 [ 789.786255][T12972] MINIX-fs: mounting file system with errors, running fsck is recommended [ 790.065924][ T822] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 790.264901][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 790.275962][ T822] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 790.276008][ T822] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 790.356185][ T822] usb 1-1: cp210x converter now attached to ttyUSB0 [ 790.380715][ T822] usb 1-1: USB disconnect, device number 26 [ 790.435721][ T822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 790.436933][ T822] cp210x 1-1:0.0: device disconnected [ 790.455227][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 790.665591][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 790.920893][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 791.405181][T12994] loop1: detected capacity change from 0 to 128 [ 791.406508][T12994] ext4: Unknown parameter 'fsmagic' [ 791.406916][T12994] Flush: task=syz.1.2196[12994] dev=loop1 state=2 [ 791.522016][T12994] Teardown: task=syz.1.2196[12994] dev=loop1 state=2 [ 793.082316][T13007] loop1: detected capacity change from 0 to 128 [ 793.104224][T13007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 793.131769][ T37] audit: type=1326 audit(1783136168.791:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12995 comm="syz.4.2189" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63fcd7de59 code=0x0 [ 794.116451][T13026] loop0: detected capacity change from 0 to 64 [ 794.136973][T13026] MINIX-fs: mounting file system with errors, running fsck is recommended [ 794.824028][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 794.872406][T13037] loop4: detected capacity change from 0 to 128 [ 794.873579][T13037] ext4: Unknown parameter 'fsmagic' [ 794.873956][T13037] Flush: task=syz.4.2209[13037] dev=loop4 state=2 [ 794.915586][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 794.922578][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 795.085450][T13037] Teardown: task=syz.4.2209[13037] dev=loop4 state=2 [ 795.177754][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 796.296925][T13047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2211'. [ 798.910714][T13074] loop1: detected capacity change from 0 to 128 [ 798.924841][T13074] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 799.049575][T13075] loop2: detected capacity change from 0 to 64 [ 799.063555][T13075] MINIX-fs: mounting file system with errors, running fsck is recommended [ 800.431925][T13090] loop4: detected capacity change from 0 to 1024 [ 800.436007][T13090] EXT4-fs: Invalid want_extra_isize 7 [ 800.488886][T10063] Flush: task=udevd[10063] dev=loop4 state=2 [ 800.763362][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 800.779441][T10063] Teardown: task=udevd[10063] dev=loop4 state=2 [ 800.841596][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 801.026867][T13101] loop2: detected capacity change from 0 to 128 [ 801.064627][T13101] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 801.220506][T13103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2228'. [ 801.597532][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.644289][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.119607][T10063] Flush: task=udevd[10063] dev=loop2 state=2 [ 802.236032][T10063] Teardown: task=udevd[10063] dev=loop2 state=2 [ 804.615547][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2233'. [ 806.548132][T13137] loop2: detected capacity change from 0 to 128 [ 806.552629][T13137] ext4: Unknown parameter 'fsmagic' [ 806.720189][T10063] Flush: task=udevd[10063] dev=loop2 state=2 [ 806.842355][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 807.717074][T10063] Teardown: task=udevd[10063] dev=loop2 state=2 [ 807.731573][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 808.759176][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.759262][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.922652][ T37] audit: type=1326 audit(1783136184.151:21): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13148 comm="syz.4.2241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63fcd7de59 code=0x0 [ 810.951387][T13178] loop2: detected capacity change from 0 to 128 [ 810.969866][T13178] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 812.558799][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 813.544832][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 813.893051][T13196] loop2: detected capacity change from 0 to 128 [ 813.896477][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2252'. [ 813.899241][T13196] ext4: Unknown parameter 'fsmagic' [ 813.899653][T13196] Flush: task=syz.2.2251[13196] dev=loop2 state=2 [ 814.001303][T13196] Teardown: task=syz.2.2251[13196] dev=loop2 state=2 [ 816.056688][ T37] audit: type=1326 audit(1783136191.461:22): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13205 comm="syz.2.2255" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801749de59 code=0x0 [ 816.215063][T13211] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2253'. [ 816.597196][T13213] loop2: detected capacity change from 0 to 128 [ 816.702549][T13213] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 819.322697][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 820.376514][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 821.119712][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2263'. [ 821.143563][T13244] loop0: detected capacity change from 0 to 128 [ 821.226174][T13244] ext4: Unknown parameter 'fsmagic' [ 821.226553][T13244] Flush: task=syz.0.2264[13244] dev=loop0 state=2 [ 821.312115][T13244] Teardown: task=syz.0.2264[13244] dev=loop0 state=2 [ 826.427543][ T9331] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 827.029257][ T9331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 827.029288][ T9331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 132, setting to 64 [ 827.059401][ T9331] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 827.059428][ T9331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.059445][ T9331] usb 1-1: Product: syz [ 827.059465][ T9331] usb 1-1: Manufacturer: syz [ 827.059478][ T9331] usb 1-1: SerialNumber: syz [ 827.110559][ T9331] usb 1-1: config 0 descriptor?? [ 827.121352][T13268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 828.577649][ T9331] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 828.920395][ T9331] usb 1-1: USB disconnect, device number 27 [ 835.867046][T13336] loop1: detected capacity change from 0 to 128 [ 835.882688][T13336] ext4: Unknown parameter 'fsmagic' [ 836.164083][ T37] audit: type=1326 audit(1783136212.171:23): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13333 comm="syz.0.2293" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0238f0de59 code=0x0 [ 837.897288][T13264] Flush: task=udevd[13264] dev=loop1 state=2 [ 839.655759][T13264] Teardown: task=udevd[13264] dev=loop1 state=2 [ 844.852277][ T37] audit: type=1326 audit(1783136220.861:24): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13385 comm="syz.3.2306" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e3ddde59 code=0x0 [ 845.038249][T13388] loop4: detected capacity change from 0 to 128 [ 845.131866][T13388] ext4: Unknown parameter 'fsmagic' [ 845.507653][T13264] Flush: task=udevd[13264] dev=loop4 state=2 [ 848.455512][T13264] Teardown: task=udevd[13264] dev=loop4 state=2 [ 851.251303][ T11] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 851.406716][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.406750][ T11] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 851.406782][ T11] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 851.406802][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.419137][ T11] usb 1-1: config 0 descriptor?? [ 853.716440][ T822] usb 1-1: USB disconnect, device number 28 [ 853.800898][T13438] loop2: detected capacity change from 0 to 128 [ 853.808545][T13438] ext4: Unknown parameter 'fsmagic' [ 853.808796][T13438] Flush: task=syz.2.2317[13438] dev=loop2 state=2 [ 854.057653][ T37] audit: type=1326 audit(1783136230.071:25): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13439 comm="syz.0.2318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0238f0de59 code=0x0 [ 854.861253][T13438] Teardown: task=syz.2.2317[13438] dev=loop2 state=2 [ 855.047054][T13446] loop4: detected capacity change from 0 to 128 [ 855.051266][T13446] ext4: Unknown parameter 'fsmagic' [ 855.051909][T13446] Flush: task=syz.4.2319[13446] dev=loop4 state=2 [ 855.160938][ T9331] IPVS: starting estimator thread 0... [ 855.724563][T13449] IPVS: using max 8 ests per chain, 19200 per kthread [ 855.733061][T13446] Teardown: task=syz.4.2319[13446] dev=loop4 state=2 [ 858.441238][ T822] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 859.658664][ T822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.658691][ T822] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 859.658717][ T822] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 859.658729][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.810799][ T822] usb 5-1: config 0 descriptor?? [ 861.737150][ T822] usb 5-1: USB disconnect, device number 10 [ 867.277057][T13547] loop5: detected capacity change from 0 to 7 [ 867.296866][T13547] Dev loop5: unable to read RDB block 7 [ 867.296898][T13547] loop5: AHDI p1 p2 p3 [ 867.296914][T13547] loop5: partition table partially beyond EOD, truncated [ 867.297133][T13547] loop5: p1 start 1601398130 is beyond EOD, truncated [ 867.297149][T13547] loop5: p2 start 1702059890 is beyond EOD, truncated [ 867.299380][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2348'. [ 867.686721][T13547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 867.937010][ T5730] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 868.266490][ T5730] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 868.266519][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.266535][ T5730] usb 1-1: Product: syz [ 868.266547][ T5730] usb 1-1: Manufacturer: syz [ 868.266560][ T5730] usb 1-1: SerialNumber: syz [ 868.325466][ T5730] usb 1-1: config 0 descriptor?? [ 868.363316][ T5730] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 029 [ 868.775633][ T5730] (null): failure reading functionality [ 868.829392][ T5730] i2c i2c-1: connected i2c-tiny-usb device [ 869.624972][ T5730] usb 1-1: USB disconnect, device number 29 [ 869.696083][T13546] Flush: task=syz.0.2348[13546] dev=loop5 state=2 [ 869.926103][T13546] Teardown: task=syz.0.2348[13546] dev=loop5 state=2 [ 870.365037][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.365117][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.417999][T13582] loop4: detected capacity change from 0 to 128 [ 870.419129][T13582] ext4: Unknown parameter 'fsmagic' [ 870.446622][T13582] Flush: task=syz.4.2359[13582] dev=loop4 state=2 [ 870.523811][T13582] Teardown: task=syz.4.2359[13582] dev=loop4 state=2 [ 872.363827][T13592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2362'. [ 876.193683][T13630] loop1: detected capacity change from 0 to 128 [ 876.197883][T13630] ext4: Unknown parameter 'fsmagic' [ 876.530106][T13264] Flush: task=udevd[13264] dev=loop1 state=2 [ 877.610298][T13264] Teardown: task=udevd[13264] dev=loop1 state=2 [ 879.422326][ T11] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 880.056552][ T11] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 880.056593][ T11] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 880.056615][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.090109][ T11] usb 3-1: config 0 descriptor?? [ 881.925720][T13669] loop4: detected capacity change from 0 to 256 [ 881.969853][ T5955] usb 3-1: USB disconnect, device number 17 [ 882.322214][T13676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2389'. [ 882.505816][T13669] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 883.632957][T13669] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 884.126802][T13697] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2393'. [ 884.126837][T13697] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2393'. [ 884.126850][T13697] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2393'. [ 884.701112][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 884.801774][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 886.942500][T13714] loop0: detected capacity change from 0 to 128 [ 886.943423][T13714] ext4: Unknown parameter 'fsmagic' [ 886.943909][T13714] Flush: task=syz.0.2388[13714] dev=loop0 state=2 [ 887.402401][T13714] Teardown: task=syz.0.2388[13714] dev=loop0 state=2 [ 888.541526][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2402'. [ 891.972086][T13746] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2408'. [ 891.972111][T13746] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2408'. [ 891.972125][T13746] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2408'. [ 893.119483][T13710] syz.1.2398 (13710): drop_caches: 2 [ 893.336526][T13756] loop2: detected capacity change from 0 to 128 [ 893.338141][T13756] ext4: Unknown parameter 'fsmagic' [ 893.339093][T13756] Flush: task=syz.2.2412[13756] dev=loop2 state=2 [ 894.298217][T13756] Teardown: task=syz.2.2412[13756] dev=loop2 state=2 [ 895.188336][T13759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.356740][T13773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2416'. [ 896.996681][T13788] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2421'. [ 896.996707][T13788] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2421'. [ 896.996720][T13788] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2421'. [ 899.074860][T13793] loop4: detected capacity change from 0 to 40427 [ 899.121811][T13793] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 899.121836][T13793] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 899.122731][T13793] F2FS-fs (loop4): build fault injection rate: 17008 [ 899.122749][T13793] F2FS-fs (loop4): build fault injection type: 0x1f8 [ 899.135818][T13793] F2FS-fs (loop4): invalid crc value [ 900.199216][T13797] syz.1.2424 (13797): drop_caches: 2 [ 900.207487][T13793] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 900.546229][T13809] loop1: detected capacity change from 0 to 128 [ 900.547348][T13809] ext4: Unknown parameter 'fsmagic' [ 900.566116][T13809] Flush: task=syz.1.2428[13809] dev=loop1 state=2 [ 900.651579][T13809] Teardown: task=syz.1.2428[13809] dev=loop1 state=2 [ 901.408925][T13818] NILFS (nullb0): couldn't find nilfs on the device [ 902.874567][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 902.902160][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 903.623114][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 903.649557][T13831] loop1: detected capacity change from 0 to 64 [ 903.653305][T13831] MINIX-fs: mounting file system with errors, running fsck is recommended [ 904.740799][T13832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.891704][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 904.972018][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 908.193583][T13854] loop2: detected capacity change from 0 to 128 [ 908.195990][T13854] ext4: Unknown parameter 'fsmagic' [ 909.032790][T13855] mmap: syz.4.2433 (13855) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 909.272346][T13264] Flush: task=udevd[13264] dev=loop2 state=2 [ 909.374494][T13264] Teardown: task=udevd[13264] dev=loop2 state=2 [ 910.323543][T13863] ALSA: mixer_oss: invalid OSS volume 'u' [ 911.110147][T13838] syz.0.2437 (13838): drop_caches: 2 [ 911.223252][T13871] loop2: detected capacity change from 0 to 128 [ 911.223938][T13871] ext4: Unknown parameter 'fsmagic' [ 911.396289][T13264] Flush: task=udevd[13264] dev=loop2 state=2 [ 912.325422][T13264] Teardown: task=udevd[13264] dev=loop2 state=2 [ 912.506211][T13882] loop2: detected capacity change from 0 to 64 [ 912.549707][T13876] loop4: detected capacity change from 0 to 256 [ 912.570255][T13882] MINIX-fs: mounting file system with errors, running fsck is recommended [ 912.685489][T13876] FAT-fs (loop4): data area starts beyond volume (32 > 0) [ 912.685512][T13876] FAT-fs (loop4): Can't find a valid FAT filesystem [ 912.768796][T13415] Flush: task=udevd[13415] dev=loop4 state=2 [ 912.881972][T13415] Teardown: task=udevd[13415] dev=loop4 state=2 [ 914.102538][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 914.940159][T13909] loop4: detected capacity change from 0 to 128 [ 914.940889][T13909] ext4: Unknown parameter 'fsmagic' [ 914.958852][T13909] Flush: task=syz.4.2458[13909] dev=loop4 state=2 [ 914.965917][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 915.047930][T13914] loop2: detected capacity change from 0 to 128 [ 915.048946][T13914] ext4: Unknown parameter 'fsmagic' [ 915.049379][T13914] Flush: task=syz.2.2452[13914] dev=loop2 state=2 [ 915.051594][T13909] Teardown: task=syz.4.2458[13909] dev=loop4 state=2 [ 915.365514][T13914] Teardown: task=syz.2.2452[13914] dev=loop2 state=2 [ 917.362734][T13938] loop4: detected capacity change from 0 to 64 [ 917.367953][T13938] MINIX-fs: mounting file system with errors, running fsck is recommended [ 917.500121][T13941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.686261][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 917.771897][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 919.258761][T13962] loop4: detected capacity change from 0 to 128 [ 919.268064][T13962] ext4: Unknown parameter 'fsmagic' [ 921.035355][T13264] Flush: task=udevd[13264] dev=loop4 state=2 [ 921.263540][T13264] Teardown: task=udevd[13264] dev=loop4 state=2 [ 921.450287][T13982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.459887][T13987] loop4: detected capacity change from 0 to 64 [ 921.469530][T13987] MINIX-fs: mounting file system with errors, running fsck is recommended [ 922.344143][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 923.045642][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 923.132715][T14019] loop2: detected capacity change from 0 to 128 [ 923.139605][T14019] ext4: Unknown parameter 'fsmagic' [ 924.373348][T13264] Flush: task=udevd[13264] dev=loop2 state=2 [ 925.747871][T13264] Teardown: task=udevd[13264] dev=loop2 state=2 [ 926.582296][T14043] loop1: detected capacity change from 0 to 64 [ 926.590109][T14038] kvm: pic: level sensitive irq not supported [ 926.590368][T14038] kvm: pic: non byte read [ 926.590537][T14038] kvm: pic: level sensitive irq not supported [ 926.590590][T14038] kvm: pic: non byte read [ 926.650889][T14043] MINIX-fs: mounting file system with errors, running fsck is recommended [ 927.680687][T14061] loop2: detected capacity change from 0 to 128 [ 927.698284][T14061] ext4: Unknown parameter 'fsmagic' [ 928.658601][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 929.110440][T13264] Flush: task=udevd[13264] dev=loop2 state=2 [ 929.625938][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 929.688319][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'. [ 929.711798][T13264] Teardown: task=udevd[13264] dev=loop2 state=2 [ 930.979051][ T11] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 931.473558][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 931.495657][ T11] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 931.495685][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.536629][ T11] usb 1-1: config 0 descriptor?? [ 931.554511][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.554595][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.391774][T14095] syz.2.2513 (14095): drop_caches: 2 [ 932.404864][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 932.488585][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 932.490625][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 932.490825][ T11] usb 1-1: media controller created [ 932.630993][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 933.129118][ T11] az6027: usb out operation failed. (-71) [ 933.145248][ T11] az6027: usb out operation failed. (-71) [ 933.145269][ T11] stb0899_attach: Driver disabled by Kconfig [ 933.145310][ T11] az6027: no front-end attached [ 933.145310][ T11] [ 933.145758][ T11] az6027: usb out operation failed. (-71) [ 933.145771][ T11] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 933.224484][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 934.532498][ T11] dvb-usb: schedule remote query interval to 400 msecs. [ 934.532515][ T11] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 934.536292][ T11] usb 1-1: USB disconnect, device number 30 [ 936.904907][T14127] 9pnet_fd: p9_fd_create_tcp (14127): problem connecting socket to 127.0.0.1 [ 940.030626][ T11] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 940.077988][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 940.539324][T14171] syz_tun: entered promiscuous mode [ 940.581520][T14171] macvtap1: entered promiscuous mode [ 940.611235][T14171] macvtap1: entered allmulticast mode [ 940.611255][T14171] syz_tun: entered allmulticast mode [ 946.716224][T14240] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 950.499517][T14284] loop1: detected capacity change from 0 to 4096 [ 953.003880][T14284] ntfs3(loop1): Failed to read $AttrDef (-4). [ 953.293067][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2572'. [ 953.334542][T13264] Flush: task=udevd[13264] dev=loop1 state=2 [ 953.531327][T13264] Teardown: task=udevd[13264] dev=loop1 state=2 [ 954.173138][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 956.121258][T14340] loop4: detected capacity change from 0 to 4096 [ 960.438120][T13264] Flush: task=udevd[13264] dev=loop4 state=2 [ 961.218534][T13264] Teardown: task=udevd[13264] dev=loop4 state=2 [ 961.880773][T14368] loop4: detected capacity change from 0 to 64 [ 961.918397][T14368] MINIX-fs: mounting file system with errors, running fsck is recommended [ 963.370910][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 963.471727][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 964.345976][T14387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2598'. [ 966.175073][T14405] loop1: detected capacity change from 0 to 64 [ 966.189874][T14405] MINIX-fs: mounting file system with errors, running fsck is recommended [ 968.773599][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 969.016973][T14428] loop0: detected capacity change from 0 to 4096 [ 969.374646][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 970.475050][T14433] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2612'. [ 973.948228][ T5603] Flush: task=syz-executor[5603] dev=loop0 state=2 [ 974.162346][ T5603] Teardown: task=syz-executor[5603] dev=loop0 state=2 [ 974.933281][T14465] loop1: detected capacity change from 0 to 64 [ 974.954623][T14465] MINIX-fs: mounting file system with errors, running fsck is recommended [ 975.538273][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 975.622766][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 975.953925][T14478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2623'. [ 978.183844][T14481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.215134][T14489] loop1: detected capacity change from 0 to 4096 [ 980.114349][T14489] ntfs3(loop1): Failed to read $UpCase (-4). [ 980.439394][T13264] Flush: task=udevd[13264] dev=loop1 state=2 [ 981.613396][T13264] Teardown: task=udevd[13264] dev=loop1 state=2 [ 984.256832][T14537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2636'. [ 984.412169][T14538] overlayfs: failed to clone upperpath [ 984.440681][T14532] overlayfs: failed to clone upperpath [ 987.840762][T14560] loop0: detected capacity change from 0 to 4096 [ 988.027637][T14566] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 988.635512][T14560] ntfs3(loop0): Failed to read $AttrDef (-4). [ 988.649923][T14567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.839592][T14580] binder: 14579:14580 ioctl 4018620d 0 returned -22 [ 990.100566][T14083] Flush: task=udevd[14083] dev=loop0 state=2 [ 990.491446][T14083] Teardown: task=udevd[14083] dev=loop0 state=2 [ 990.998761][T14587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2652'. [ 992.432086][T14604] loop4: detected capacity change from 0 to 64 [ 992.448145][T14604] MINIX-fs: mounting file system with errors, running fsck is recommended [ 992.874848][T14610] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 992.980443][T14596] loop2: detected capacity change from 0 to 1024 [ 993.000232][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.000323][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.937784][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 994.083625][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 994.163820][T14622] binder: 14621:14622 ioctl 4018620d 0 returned -22 [ 994.381740][T14596] hfsplus: failed to load root directory [ 995.291198][ T5602] Flush: task=syz-executor[5602] dev=loop2 state=2 [ 995.476820][ T5602] Teardown: task=syz-executor[5602] dev=loop2 state=2 [ 996.584344][T14646] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 997.370011][T14651] binder: 14647:14651 ioctl 402c5828 0 returned -22 [ 997.370957][ T37] audit: type=1804 audit(1783136373.301:26): pid=14651 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.1.2674" name="bus" dev="ramfs" ino=40142 res=1 errno=0 [ 997.371205][ T37] audit: type=1804 audit(1783136373.391:27): pid=14651 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=ToMToU comm="syz.1.2674" name="bus" dev="ramfs" ino=40142 res=1 errno=0 [ 999.265915][T14663] binder: 14662:14663 ioctl 4018620d 0 returned -22 [ 1001.609441][T14691] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1006.317012][T14737] NILFS (nullb0): couldn't find nilfs on the device [ 1006.532938][T14740] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1006.730547][T14742] syzkaller0: entered promiscuous mode [ 1006.730572][T14742] syzkaller0: entered allmulticast mode [ 1007.284658][ T5608] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 1008.052779][T14757] binder: BINDER_SET_CONTEXT_MGR already set [ 1008.052795][T14757] binder: 14755:14757 ioctl 4018620d 200000004a80 returned -16 [ 1009.058701][T14770] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2709'. [ 1011.110546][T14807] binder: BINDER_SET_CONTEXT_MGR already set [ 1011.110561][T14807] binder: 14804:14807 ioctl 4018620d 200000004a80 returned -16 [ 1011.151522][ T5730] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1011.463988][ T5730] usb 2-1: config index 0 descriptor too short (expected 34039, got 27) [ 1011.464141][ T5730] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.464160][ T5730] usb 2-1: config 0 has no interfaces? [ 1011.467026][ T5730] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1011.467055][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.467073][ T5730] usb 2-1: Product: syz [ 1011.467085][ T5730] usb 2-1: Manufacturer: syz [ 1011.467097][ T5730] usb 2-1: SerialNumber: syz [ 1011.555985][ T5730] usb 2-1: config 0 descriptor?? [ 1011.855453][ T5611] usb 2-1: USB disconnect, device number 13 [ 1015.232671][T14846] NILFS (nullb0): couldn't find nilfs on the device [ 1015.882116][T14853] binder: 14848:14853 ioctl c0306201 0 returned -14 [ 1015.997698][T14856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1016.160724][T14856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1016.190304][T14856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1016.227803][T14856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1016.232658][T14856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1016.849078][T13392] syz_tun (unregistering): left allmulticast mode [ 1018.715251][ T5608] Bluetooth: hci5: command tx timeout [ 1020.696499][T14899] NILFS (nullb0): couldn't find nilfs on the device [ 1020.751126][ T5608] Bluetooth: hci5: command tx timeout [ 1022.831533][ T5608] Bluetooth: hci5: command tx timeout [ 1024.985781][ T5608] Bluetooth: hci5: command tx timeout [ 1025.483355][T14939] binder: 14938:14939 ioctl c0306201 0 returned -14 [ 1025.573575][T14942] NILFS (nullb0): couldn't find nilfs on the device [ 1026.761217][ T11] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1026.926445][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.926483][ T11] usb 2-1: too many endpoints for config 0 interface 0 altsetting 247: 132, using maximum allowed: 30 [ 1026.926526][ T11] usb 2-1: config 0 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 132 [ 1026.926549][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1026.931720][ T11] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1026.931748][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.931766][ T11] usb 2-1: Product: syz [ 1026.931778][ T11] usb 2-1: Manufacturer: syz [ 1026.931790][ T11] usb 2-1: SerialNumber: syz [ 1026.950350][ T11] usb 2-1: config 0 descriptor?? [ 1027.114962][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2766'. [ 1027.175538][ T5611] usb 2-1: USB disconnect, device number 14 [ 1027.332552][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2768'. [ 1027.452362][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2766'. [ 1027.453326][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 1027.453344][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2768'. [ 1027.641723][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2766'. [ 1027.655442][T14972] veth3: entered allmulticast mode [ 1027.700403][T14972] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1027.952103][T14976] bond3 (unregistering): (slave veth3): Releasing backup interface [ 1028.156815][T14976] bond3 (unregistering): Released all slaves [ 1028.660650][T14835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.661413][T14835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.661776][T14835] bridge_slave_0: entered allmulticast mode [ 1028.664730][T14835] bridge_slave_0: entered promiscuous mode [ 1028.668167][T14835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.668520][T14835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.668755][T14835] bridge_slave_1: entered allmulticast mode [ 1028.672698][T14835] bridge_slave_1: entered promiscuous mode [ 1029.344812][T14835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.357037][T14835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.626500][T14835] team0: Port device team_slave_0 added [ 1029.675630][T14835] team0: Port device team_slave_1 added [ 1029.749748][T14835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.749763][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.749784][T14835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.753325][T14835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.753340][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.753362][T14835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.332241][T14835] hsr_slave_0: entered promiscuous mode [ 1030.333568][T14835] hsr_slave_1: entered promiscuous mode [ 1030.335293][T14835] debugfs: 'hsr0' already exists in 'hsr' [ 1030.335316][T14835] Cannot create hsr debugfs directory [ 1032.565049][T15045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2788'. [ 1033.479027][T15059] loop4: detected capacity change from 0 to 256 [ 1033.514639][ T5608] Bluetooth: hci2: unexpected event for opcode 0x200c [ 1033.540178][T15059] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 1033.540524][T15059] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1033.546281][T15059] exFAT-fs (loop4): failed to load alloc-bitmap [ 1033.546296][T15059] exFAT-fs (loop4): failed to recognize exfat type [ 1033.651818][T13264] Flush: task=udevd[13264] dev=loop4 state=2 [ 1033.833031][T13264] Teardown: task=udevd[13264] dev=loop4 state=2 [ 1033.871529][ T5826] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1034.023343][ T5826] usb 2-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 1034.023395][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1034.056887][ T5826] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1034.056915][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.056933][ T5826] usb 2-1: Product: syz [ 1034.056945][ T5826] usb 2-1: Manufacturer: syz [ 1034.056962][ T5826] usb 2-1: SerialNumber: syz [ 1034.109881][ T5826] usb 2-1: config 0 descriptor?? [ 1034.443005][T14835] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.949829][ T5826] usb 2-1: USB disconnect, device number 15 [ 1038.091721][ T5608] Bluetooth: hci4: unexpected event for opcode 0x200c [ 1038.386616][T14835] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.758256][ T5600] do_umount: task=syz-executor[5600] propagate_mount_busy()!=0 [ 1040.298410][T15116] loop1: detected capacity change from 0 to 32768 [ 1040.916809][T15116] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1041.075181][T15116] XFS (loop1): Ending clean mount [ 1041.110133][T15116] XFS (loop1): Quotacheck needed: Please wait. [ 1042.182434][T15116] XFS (loop1): Quotacheck: Done. [ 1042.186313][T14835] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.955994][ T5600] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1043.014831][ T5605] do_umount: task=syz-executor[5605] propagate_mount_busy()!=0 [ 1043.685688][ T5600] Flush: task=syz-executor[5600] dev=loop1 state=2 [ 1043.868536][ T5600] Teardown: task=syz-executor[5600] dev=loop1 state=2 [ 1044.226452][ T5608] Bluetooth: hci0: unexpected event for opcode 0x200c [ 1044.316372][T14835] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.728358][T15164] loop4: detected capacity change from 0 to 1024 [ 1044.844700][T15164] EXT4-fs: Ignoring removed oldalloc option [ 1045.234183][T15164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.234311][T15164] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.981237][ T5955] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1046.265255][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1046.794897][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 1047.095525][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 1047.111851][ T5955] usb 2-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 1047.111900][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1047.114228][ T5955] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1047.114258][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.114277][ T5955] usb 2-1: Product: syz [ 1047.114291][ T5955] usb 2-1: Manufacturer: syz [ 1047.114303][ T5955] usb 2-1: SerialNumber: syz [ 1047.202051][ T5955] usb 2-1: config 0 descriptor?? [ 1047.414932][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1047.415225][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1048.370725][ T5955] usb 2-1: USB disconnect, device number 16 [ 1048.929109][ T5608] Bluetooth: hci4: unexpected event for opcode 0x200c [ 1049.864065][T14835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1051.512232][ T5608] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 1053.680161][T14835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1053.696447][T14835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1053.841243][T14835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.865384][T14835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1053.917675][T14835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.919110][T14835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1054.244336][T14835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1055.296856][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.296938][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.547401][T14835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.644856][T14835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.709702][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.709954][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.175809][T13969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.175940][T13969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.273841][ T5608] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 1062.383615][ T5608] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 1064.492052][T15322] loop5: detected capacity change from 0 to 7 [ 1065.339384][T15322] Dev loop5: unable to read RDB block 7 [ 1065.339403][T15322] loop5: AHDI p1 p2 p3 [ 1065.339413][T15322] loop5: partition table partially beyond EOD, truncated [ 1065.447528][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2864'. [ 1065.662845][ T5955] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1065.663111][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1065.774307][ T5826] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1065.775393][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 1065.791145][ T5955] usb 1-1: device descriptor read/64, error -32 [ 1065.911207][ T5826] usb 5-1: device descriptor read/64, error -32 [ 1066.033724][ T5955] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1066.033995][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1066.067745][T15322] loop5: p1 start 1601398130 is beyond EOD, truncated [ 1066.067770][T15322] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1066.104698][T15303] input: syz0 as /devices/virtual/input/input7 [ 1066.161126][ T5826] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1066.191168][ T5955] usb 1-1: device descriptor read/64, error -32 [ 1066.218527][T14835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.389361][ T5955] usb usb1-port1: attempt power cycle [ 1066.398135][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'. [ 1066.424732][ T5826] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1066.424760][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.424777][ T5826] usb 5-1: Product: syz [ 1066.424790][ T5826] usb 5-1: Manufacturer: syz [ 1066.424802][ T5826] usb 5-1: SerialNumber: syz [ 1066.503353][ T5826] usb 5-1: config 0 descriptor?? [ 1066.556141][ T5826] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 012 [ 1066.732687][ T5955] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1066.762878][ C0] raw-gadget.0 gadget.0: failed to queue control event [ 1066.762985][ T5955] usb 1-1: device descriptor read/8, error -32 [ 1066.882818][ T5955] raw-gadget.0 gadget.0: failed to queue suspend event [ 1066.905208][ T5955] raw-gadget.0 gadget.0: failed to queue reset event [ 1066.919460][ T5826] (null): failure reading functionality [ 1066.977922][ T5955] raw-gadget.0 gadget.0: failed to queue resume event [ 1067.031140][ T5955] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1067.054847][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1067.054938][ T5955] usb 1-1: device descriptor read/8, error -32 [ 1067.161811][ T5955] raw-gadget.0 gadget.0: failed to queue suspend event [ 1067.162605][ T5955] usb usb1-port1: unable to enumerate USB device [ 1067.607342][ T5608] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 1068.616396][T14835] veth0_vlan: entered promiscuous mode [ 1069.884359][ T5826] i2c i2c-1: connected i2c-tiny-usb device [ 1069.889998][T15320] Flush: task=syz.4.2864[15320] dev=loop5 state=2 [ 1070.012440][ T5826] usb 5-1: USB disconnect, device number 12 [ 1070.072059][T15320] Teardown: task=syz.4.2864[15320] dev=loop5 state=2 [ 1070.112551][T14835] veth1_vlan: entered promiscuous mode [ 1070.502424][T14835] veth0_macvtap: entered promiscuous mode [ 1070.550398][T14835] veth1_macvtap: entered promiscuous mode [ 1070.733601][T14835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.288938][T14835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.550165][ T1325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.575497][ T1325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.618739][ T1325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.629078][ T1325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.047058][T15362] tipc: Enabling of bearer rejected, failed to enable media [ 1073.558506][T15378] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1075.138399][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'. [ 1075.871184][T15396] Set syz1 is full, maxelem 6117 reached [ 1075.906134][T14856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1076.020627][T14856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1076.098391][T14856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1076.128939][T14856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1076.132310][T14856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1078.478092][ T5608] Bluetooth: hci1: command tx timeout [ 1080.280172][T15427] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1080.395313][T14856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1080.513420][T14856] Bluetooth: hci1: command tx timeout [ 1080.568317][T14856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1080.595713][T14856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1080.725054][T14856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1080.727627][T14856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1081.973674][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2891'. [ 1082.592561][T14856] Bluetooth: hci1: command tx timeout [ 1082.871257][T14856] Bluetooth: hci6: command tx timeout [ 1083.053503][T15301] raw-gadget.0 gadget.0: failed to queue disconnect event [ 1084.671249][T14856] Bluetooth: hci1: command tx timeout [ 1084.949942][T14856] Bluetooth: hci6: command tx timeout [ 1086.991101][T14856] Bluetooth: hci6: command tx timeout [ 1089.071096][T14856] Bluetooth: hci6: command tx timeout [ 1089.185084][ T1325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.296761][ T1325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.662956][T15515] syzkaller0: entered promiscuous mode [ 1093.662981][T15515] syzkaller0: entered allmulticast mode [ 1093.695631][T15525] tipc: Started in network mode [ 1093.695658][T15525] tipc: Node identity c6569f85e098, cluster identity 4711 [ 1093.696032][T15525] tipc: Enabled bearer , priority 0 [ 1093.722238][T15513] tipc: Resetting bearer [ 1093.954212][T15513] tipc: Disabling bearer [ 1094.815535][ T1325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.387705][ T1325] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.748645][ T1325] bridge_slave_1: left allmulticast mode [ 1099.748871][ T1325] bridge_slave_1: left promiscuous mode [ 1099.831519][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.076973][ T1325] bridge_slave_0: left allmulticast mode [ 1101.076999][ T1325] bridge_slave_0: left promiscuous mode [ 1101.077166][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.982027][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.064950][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.103739][ T1325] bond0 (unregistering): Released all slaves [ 1102.380518][T15397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.380692][T15397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.380879][T15397] bridge_slave_0: entered allmulticast mode [ 1102.400836][T15397] bridge_slave_0: entered promiscuous mode [ 1102.605503][T15419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.605797][T15419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.606064][T15419] bridge_slave_0: entered allmulticast mode [ 1102.610091][T15419] bridge_slave_0: entered promiscuous mode [ 1102.726893][T15397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.727127][T15397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.727387][T15397] bridge_slave_1: entered allmulticast mode [ 1102.733855][T15397] bridge_slave_1: entered promiscuous mode [ 1102.736532][T15419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.737021][T15419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.737265][T15419] bridge_slave_1: entered allmulticast mode [ 1102.740368][T15419] bridge_slave_1: entered promiscuous mode [ 1102.871169][ T822] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1103.041237][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 1103.043303][ T822] usb 5-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 1103.043327][ T822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 1103.043438][ T822] usb 5-1: config 0 has no interface number 0 [ 1103.043487][ T822] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.043508][ T822] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.043546][ T822] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 1103.043565][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.097468][T15397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.195622][ T822] usb 5-1: config 0 descriptor?? [ 1103.210857][T15419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.267231][T15397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.281580][T15419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.652858][T15397] team0: Port device team_slave_0 added [ 1103.690086][ T822] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0 [ 1103.690127][ T822] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0 [ 1103.847037][ T822] corsair 0003:1B1C:1B34.0001: failed to start in urb: -90 [ 1103.979385][ T822] corsair 0003:1B1C:1B34.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.4-1/input1 [ 1104.018561][ T822] usb 5-1: USB disconnect, device number 13 [ 1104.052110][T15633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2944'. [ 1104.132608][T15419] team0: Port device team_slave_0 added [ 1104.168621][T15397] team0: Port device team_slave_1 added [ 1104.295527][T15632] fido_id[15632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1104.862625][T15185] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1105.287734][T15419] team0: Port device team_slave_1 added [ 1105.585480][T15655] fuse: Bad value for 'fd' [ 1105.686119][T15185] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1105.686147][T15185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.900452][T15397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.900468][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.900497][T15397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.924573][T15419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.924589][T15419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.924611][T15419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.935278][T15397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.935293][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.935316][T15397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.938892][T15419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.938905][T15419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.938927][T15419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.191984][T15185] usb 5-1: config 0 descriptor?? [ 1106.199586][T15185] cp210x 5-1:0.0: cp210x converter detected [ 1106.289459][T15664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2955'. [ 1106.916922][T15185] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1107.850084][ T9331] usb 5-1: USB disconnect, device number 14 [ 1107.880058][ T9331] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1108.089794][T15694] fuse: Bad value for 'fd' [ 1108.874191][ T9331] cp210x 5-1:0.0: device disconnected [ 1109.221413][T15397] hsr_slave_0: entered promiscuous mode [ 1109.223405][T15397] hsr_slave_1: entered promiscuous mode [ 1109.225475][T15397] debugfs: 'hsr0' already exists in 'hsr' [ 1109.225499][T15397] Cannot create hsr debugfs directory [ 1109.277045][T15419] hsr_slave_0: entered promiscuous mode [ 1109.294310][T15419] hsr_slave_1: entered promiscuous mode [ 1109.308503][T15419] debugfs: 'hsr0' already exists in 'hsr' [ 1109.308519][T15419] Cannot create hsr debugfs directory [ 1109.373683][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1111.381224][ T1325] hsr_slave_0: left promiscuous mode [ 1111.401168][ T1325] hsr_slave_1: left promiscuous mode [ 1111.402111][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.402211][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.443363][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.443381][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.503157][ T1325] veth1_macvtap: left promiscuous mode [ 1111.503411][ T1325] veth0_macvtap: left promiscuous mode [ 1111.503608][ T1325] veth1_vlan: left promiscuous mode [ 1111.503869][ T1325] veth0_vlan: left promiscuous mode [ 1111.947677][T15727] loop4: detected capacity change from 0 to 128 [ 1112.071606][T15727] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1112.097338][T15727] ext4 filesystem being mounted at /580/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.212827][T15727] [ 1112.212838][T15727] ====================================================== [ 1112.212866][T15727] WARNING: possible circular locking dependency detected [ 1112.212940][T15727] syzkaller #0 Tainted: G L [ 1112.212952][T15727] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1112.212990][T15727] syz.4.2971/15727 is trying to acquire lock: [ 1112.213028][T15727] ffff88803a9ae800 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0 [ 1112.213173][T15727] [ 1112.213173][T15727] but task is already holding lock: [ 1112.213179][T15727] ffff8880618f0cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1112.213247][T15727] [ 1112.213247][T15727] which lock already depends on the new lock. [ 1112.213247][T15727] [ 1112.213253][T15727] [ 1112.213253][T15727] the existing dependency chain (in reverse order) is: [ 1112.213260][T15727] [ 1112.213260][T15727] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1112.213347][T15727] percpu_down_read_internal+0x48/0x1d0 [ 1112.213374][T15727] ext4_writepages+0x205/0x3b0 [ 1112.213390][T15727] do_writepages+0x338/0x560 [ 1112.213436][T15727] __writeback_single_inode+0x12e/0xf90 [ 1112.213487][T15727] writeback_single_inode+0x4dd/0xe10 [ 1112.213534][T15727] write_inode_now+0x1c2/0x290 [ 1112.213556][T15727] iput+0x98b/0xf00 [ 1112.213598][T15727] ext4_xattr_block_set+0x22e4/0x2a80 [ 1112.213675][T15727] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 1112.213700][T15727] __ext4_expand_extra_isize+0x30d/0x400 [ 1112.213724][T15727] __ext4_mark_inode_dirty+0x455/0x700 [ 1112.213743][T15727] ext4_evict_inode+0x976/0x10c0 [ 1112.213756][T15727] evict+0x624/0xb50 [ 1112.213774][T15727] ext4_orphan_cleanup+0xc7a/0x14c0 [ 1112.213790][T15727] ext4_fill_super+0x5cc5/0x65d0 [ 1112.213804][T15727] get_tree_bdev_flags+0x430/0x4f0 [ 1112.213821][T15727] vfs_get_tree+0x92/0x2a0 [ 1112.213838][T15727] do_new_mount+0x319/0xdc0 [ 1112.213851][T15727] __se_sys_mount+0x31d/0x420 [ 1112.213863][T15727] do_syscall_64+0x174/0x580 [ 1112.213881][T15727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.213897][T15727] [ 1112.213897][T15727] -> #0 (sb_internal){.+.+}-{0:0}: [ 1112.213920][T15727] __lock_acquire+0x15ff/0x2e40 [ 1112.213984][T15727] lock_acquire+0x115/0x350 [ 1112.214001][T15727] percpu_down_read_internal+0x48/0x1d0 [ 1112.214024][T15727] ext4_evict_inode+0x426/0x10c0 [ 1112.214039][T15727] evict+0x624/0xb50 [ 1112.214053][T15727] ext4_ext_migrate+0xddf/0x10e0 [ 1112.214067][T15727] ext4_ioctl+0x234f/0x4b80 [ 1112.214081][T15727] __se_sys_ioctl+0xff/0x170 [ 1112.214099][T15727] do_syscall_64+0x174/0x580 [ 1112.214118][T15727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.214133][T15727] [ 1112.214133][T15727] other info that might help us debug this: [ 1112.214133][T15727] [ 1112.214139][T15727] Possible unsafe locking scenario: [ 1112.214139][T15727] [ 1112.214178][T15727] CPU0 CPU1 [ 1112.214183][T15727] ---- ---- [ 1112.214196][T15727] lock(&sbi->s_writepages_rwsem); [ 1112.214209][T15727] lock(sb_internal); [ 1112.214221][T15727] lock(&sbi->s_writepages_rwsem); [ 1112.214233][T15727] rlock(sb_internal); [ 1112.214249][T15727] [ 1112.214249][T15727] *** DEADLOCK *** [ 1112.214249][T15727] [ 1112.214253][T15727] 3 locks held by syz.4.2971/15727: [ 1112.214262][T15727] #0: ffff88803a9ae510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210 [ 1112.214310][T15727] #1: ffff88805f6b0428 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x2347/0x4b80 [ 1112.214354][T15727] #2: ffff8880618f0cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1112.214394][T15727] [ 1112.214394][T15727] stack backtrace: [ 1112.214412][T15727] CPU: 1 UID: 0 PID: 15727 Comm: syz.4.2971 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1112.214436][T15727] Tainted: [L]=SOFTLOCKUP [ 1112.214443][T15727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1112.214460][T15727] Call Trace: [ 1112.214495][T15727] [ 1112.214555][T15727] dump_stack_lvl+0xe8/0x150 [ 1112.214612][T15727] print_circular_bug+0x2e2/0x300 [ 1112.214669][T15727] check_noncircular+0x12f/0x150 [ 1112.214694][T15727] __lock_acquire+0x15ff/0x2e40 [ 1112.214718][T15727] ? __lock_acquire+0x6df/0x2e40 [ 1112.214766][T15727] ? __asan_memset+0x22/0x50 [ 1112.214822][T15727] lock_acquire+0x115/0x350 [ 1112.214840][T15727] ? ext4_evict_inode+0x426/0x10c0 [ 1112.214865][T15727] percpu_down_read_internal+0x48/0x1d0 [ 1112.214889][T15727] ? ext4_evict_inode+0x426/0x10c0 [ 1112.214908][T15727] ext4_evict_inode+0x426/0x10c0 [ 1112.214924][T15727] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1112.214973][T15727] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1112.214992][T15727] ? rt_spin_unlock+0x157/0x200 [ 1112.215011][T15727] ? rt_spin_unlock+0x163/0x200 [ 1112.215025][T15727] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1112.215043][T15727] evict+0x624/0xb50 [ 1112.215063][T15727] ? __pfx_evict+0x10/0x10 [ 1112.215081][T15727] ? rt_spin_unlock+0x163/0x200 [ 1112.215097][T15727] ? iput+0xb84/0xf00 [ 1112.215113][T15727] ext4_ext_migrate+0xddf/0x10e0 [ 1112.215132][T15727] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1112.215148][T15727] ? rwbase_write_lock+0x550/0x720 [ 1112.215182][T15727] ext4_ioctl+0x234f/0x4b80 [ 1112.215203][T15727] ? __pfx_ext4_ioctl+0x10/0x10 [ 1112.215221][T15727] ? is_bpf_text_address+0x292/0x2b0 [ 1112.215248][T15727] ? is_bpf_text_address+0x26/0x2b0 [ 1112.215271][T15727] ? kernel_text_address+0xa5/0xe0 [ 1112.215291][T15727] ? __kernel_text_address+0xd/0x30 [ 1112.215309][T15727] ? unwind_get_return_address+0x4d/0x90 [ 1112.215368][T15727] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1112.215413][T15727] ? arch_stack_walk+0xfb/0x150 [ 1112.215471][T15727] ? stack_trace_save+0xa9/0x100 [ 1112.215489][T15727] ? __pfx_stack_trace_save+0x10/0x10 [ 1112.215506][T15727] ? kasan_save_track+0x4f/0x80 [ 1112.215557][T15727] ? stack_depot_save_flags+0x33/0x800 [ 1112.215635][T15727] ? __lock_acquire+0x6df/0x2e40 [ 1112.215663][T15727] ? kasan_save_track+0x4f/0x80 [ 1112.215686][T15727] ? kasan_save_track+0x3e/0x80 [ 1112.215708][T15727] ? kasan_save_free_info+0x40/0x50 [ 1112.215729][T15727] ? __kasan_slab_free+0x5c/0x80 [ 1112.215744][T15727] ? kfree+0x1c5/0x6c0 [ 1112.215816][T15727] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1112.215871][T15727] ? security_file_ioctl+0xb9/0x260 [ 1112.215912][T15727] ? __se_sys_ioctl+0x47/0x170 [ 1112.215933][T15727] ? do_syscall_64+0x174/0x580 [ 1112.215955][T15727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.215981][T15727] ? file_ioctl+0x259/0x7e0 [ 1112.216003][T15727] ? __pfx_file_ioctl+0x10/0x10 [ 1112.216029][T15727] ? kasan_quarantine_put+0xbb/0x1f0 [ 1112.216056][T15727] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1112.216076][T15727] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1112.216096][T15727] ? do_vfs_ioctl+0x1184/0x1550 [ 1112.216118][T15727] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1112.216144][T15727] ? do_futex+0x458/0x4e0 [ 1112.216205][T15727] ? __fget_files+0x2a/0x420 [ 1112.216224][T15727] ? __fget_files+0x2a/0x420 [ 1112.216240][T15727] ? __fget_files+0x3a8/0x420 [ 1112.216257][T15727] ? __fget_files+0x2a/0x420 [ 1112.216276][T15727] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1112.216323][T15727] ? __pfx_ext4_ioctl+0x10/0x10 [ 1112.216342][T15727] __se_sys_ioctl+0xff/0x170 [ 1112.216364][T15727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.216381][T15727] do_syscall_64+0x174/0x580 [ 1112.216403][T15727] ? trace_irq_disable+0x3b/0x140 [ 1112.216474][T15727] ? clear_bhb_loop+0x40/0x90 [ 1112.216494][T15727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.216518][T15727] RIP: 0033:0x7f63fcd7de59 [ 1112.216571][T15727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.216588][T15727] RSP: 002b:00007f63fafd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1112.216634][T15727] RAX: ffffffffffffffda RBX: 00007f63fd005fa0 RCX: 00007f63fcd7de59 [ 1112.216657][T15727] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000005 [ 1112.216669][T15727] RBP: 00007f63fce13e6f R08: 0000000000000000 R09: 0000000000000000 [ 1112.216680][T15727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.216691][T15727] R13: 00007f63fd006038 R14: 00007f63fd005fa0 R15: 00007ffd697e6b28 [ 1112.216712][T15727] [ 1112.295399][ T5605] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1112.304975][ T1325] team0 (unregistering): Port device team_slave_1 removed [ 1112.341463][ T1325] team0 (unregistering): Port device team_slave_0 removed [ 1112.398830][ T5605] Flush: task=syz-executor[5605] dev=loop4 state=2 [ 1112.471629][ T5605] Teardown: task=syz-executor[5605] dev=loop4 state=2 [ 1113.729993][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1114.081284][T15724] syz_tun (unregistering): left allmulticast mode [ 1115.872833][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.872891][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.088728][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1116.231971][ T1325] bridge_slave_1: left allmulticast mode [ 1116.231990][ T1325] bridge_slave_1: left promiscuous mode [ 1116.232119][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.411503][ T1325] bridge_slave_0: left allmulticast mode [ 1116.411523][ T1325] bridge_slave_0: left promiscuous mode [ 1116.411669][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.611175][ T1325] bridge_slave_1: left allmulticast mode [ 1116.611200][ T1325] bridge_slave_1: left promiscuous mode [ 1116.611411][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.711526][ T1325] bridge_slave_0: left allmulticast mode [ 1116.711544][ T1325] bridge_slave_0: left promiscuous mode [ 1116.711735][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.021532][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.121648][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.181968][ T1325] bond0 (unregistering): Released all slaves [ 1117.371496][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.451598][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.512092][ T1325] bond0 (unregistering): Released all slaves [ 1117.532644][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1118.111260][ T1325] hsr_slave_0: left promiscuous mode [ 1118.151169][ T1325] hsr_slave_1: left promiscuous mode [ 1118.152069][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.174079][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.271166][ T1325] hsr_slave_0: left promiscuous mode [ 1118.291128][ T1325] hsr_slave_1: left promiscuous mode [ 1118.291849][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.332220][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.592646][ T1325] team0 (unregistering): Port device team_slave_1 removed [ 1118.611470][ T1325] team0 (unregistering): Port device team_slave_0 removed [ 1118.741619][ T1325] team0 (unregistering): Port device team_slave_1 removed [ 1118.761424][ T1325] team0 (unregistering): Port device team_slave_0 removed