last executing test programs: 8m16.859299978s ago: executing program 1 (id=31): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x142, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 8m16.440129148s ago: executing program 1 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x8006}]}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 8m16.313533911s ago: executing program 1 (id=33): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@dax_never}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0x97) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x2000) 8m16.038310067s ago: executing program 1 (id=34): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000100)='./bus\x00', 0x3204cc2, &(0x7f00000000c0)={[{@sysvgroups}, {@jqfmt_vfsold}]}, 0x3, 0x4c5, &(0x7f0000000ac0)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 8m15.329580574s ago: executing program 1 (id=38): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008d000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100fffffff095000000000000001801000020786c2500000000002020207b"], 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast1, 0x48f}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x4000000) 8m13.882997038s ago: executing program 1 (id=49): r0 = memfd_create(&(0x7f00000002c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r1 = dup(r0) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x1, 0x800103a, r1, 0x0) ftruncate(r0, 0xdcb) pread64(r0, &(0x7f00000009c0)=""/239, 0xef, 0x1) 8m13.485153447s ago: executing program 32 (id=49): r0 = memfd_create(&(0x7f00000002c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r1 = dup(r0) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x1, 0x800103a, r1, 0x0) ftruncate(r0, 0xdcb) pread64(r0, &(0x7f00000009c0)=""/239, 0xef, 0x1) 8m12.035715872s ago: executing program 2 (id=65): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 8m11.943735594s ago: executing program 2 (id=66): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000180)) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 8m11.054355365s ago: executing program 2 (id=72): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x800000000000082, 0x20000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 8m10.529051798s ago: executing program 2 (id=76): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) syz_open_procfs$namespace(r0, 0x0) 8m8.987930124s ago: executing program 2 (id=85): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m8.649432062s ago: executing program 2 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2a, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) 7m53.406493512s ago: executing program 33 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2a, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) 7m0.524581893s ago: executing program 0 (id=441): ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000540)={0xffffffffffff3b8f, {0x25, 0x7, 0xc5, 0x80, 0xb}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x40, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}}}, 0xb8}}, 0x0) 7m0.398304846s ago: executing program 0 (id=443): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0xffff, @local}, 0x45) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 7m0.24568982s ago: executing program 0 (id=444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 7m0.007727636s ago: executing program 0 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x100) 6m59.731726572s ago: executing program 0 (id=449): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="0094bdb1487c", 0x6, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @broadcast}, 0x14) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) read(r0, &(0x7f0000000000)=""/149, 0xaa) 6m59.247049554s ago: executing program 0 (id=454): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m58.9767087s ago: executing program 34 (id=454): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.410677445s ago: executing program 5 (id=3050): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) 5.39008042s ago: executing program 5 (id=3074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbf9, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_macvtap\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000040)="1ae2", 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) 3.878336877s ago: executing program 3 (id=3083): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000000200)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0xe1, 0x8, 0x3, 0x3e, 0xfffffdf9, 0x1d8, 0x40, 0x2d9, 0xd33, 0x5, 0x38, 0x1, 0x78, 0x1f, 0x9}, [{0x70000000, 0x101, 0xb, 0xffff, 0x5, 0x8, 0x4a8a, 0x63b}]}, 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.639578222s ago: executing program 4 (id=3086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x800) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, 0x0, 0x0) 3.587173714s ago: executing program 3 (id=3087): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000034) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) unshare(0x20000400) fcntl$notify(r2, 0x402, 0x40000029) close_range(r0, 0xffffffffffffffff, 0x0) 3.439460507s ago: executing program 3 (id=3088): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) fallocate(r1, 0x0, 0x1, 0x2000404) 3.355340059s ago: executing program 5 (id=3089): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xe4b7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.067959956s ago: executing program 5 (id=3091): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000500)={0xc4, 0x7d, 0xa, {{0x0, 0xab, 0x3, 0x6, {0x0, 0x1, 0x5}, 0x100000, 0x8, 0x7, 0x2, 0x3, 'R\x90\x00', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x4, 'GPL\x00'}}, 0xc4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2.741854174s ago: executing program 5 (id=3093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, 0x0, 0x0, 0x2, 0x100e, &(0x7f0000001880)=""/4110, 0x40f00, 0x39}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090) 2.583012638s ago: executing program 4 (id=3094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.350431864s ago: executing program 4 (id=3096): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xe, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.306054325s ago: executing program 3 (id=3097): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x161242, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 1.988643092s ago: executing program 5 (id=3098): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000a00)={0x40, 0xc, 0x4, "be128742"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000180)={0x0, 0xd, 0x4, "6aa79e12"}, &(0x7f0000000a40)={0xa1, 0x1, 0x400, "d75ad875495626c9678dacc5451704d36250a1849bf383c4fd5e06126663b762a73ebf1f093148a6145e11e329ba522e1d800e9fa146bcdd7774f6fa04d708b7613ef886583a32cebf7fa41161e9f4bf0caecfca0d5eb47a2f7f4e45911aa1424e1d0d35bf6fcb7a487c349df2e56f749cd85ef3ac992d5c917597a28e5423f2cd9556f16e57181a3d5bf60c138be032607ccb9e36b03fd4146a1be0957e54391c35b997b5e59bf1e24ca761dbd6ce67ca9ced9dabc7dc180cb68e5e1a50d8f66d8f1e1cae067ecf34a181989afa12172f76521f5a559c55886046d72fd8029f140cbf4ca09c0847b06668d4679411a98893272b91e107fca69fb9a97e378a91c99419caac01fbfe6fb98cbd20a9c0af6fb8bc6f356a8ad88ee6d5bf57d1058175b163e4d1eddd4418ab44366ef51ee7f09e32d7006ec96a3146f135afafd1ac09f5b9aa54a54f76dc2bf0d051b2dc6f3f7930f6dbcc98be67420ca06eb0e9279bfcf97567e504e6e85133f327cb1b76e1708afaff1d25bd3360efd3d6d0f1e057255cda3940de81149862765c5b78f28a86691e1b76a369af739582a97a9d31f9bcc2645dead178a21e2406cbe199004650c6b2a106dd9ca615fb3345d469f6ca54baf9fd6a3f17791b0fe971901cc0189ceacef6d5bf55de678bce8bf441be527a86248e1d3a1e1ff2f41aeeec14d681b5892ef400f8cb3135006c2dec5089f69748fbf1bd6fecceaadc890f9f6bd5b32cb1f812f9945ab2a59b41790d736d023b7385ff39a10e088cf5743c9aabc4a8a2319fa6a4bc9caafeba07484960c686034456fd556828aa861772654c34e09f7b2a7716cb603f5e413563afd1a0b3c917ee794d0195004b140852b773844b773c819468eaaa0244ee649a56df2dc2b4a08f932b47c33a1b4444188d29ff0f6166c4fd20f51e56f50a93674d6512da30830cc1594e4463e85385f66b9e39a9e0c886d0c3126501f7f064b6206d23e81d538686226c802519dab2ed18b54905ce284766922bc6d18d11bd9d3d9583ea556f8e58260eeffdb0d5739f5a6c26a23b1e18bcd5cdf14e883bd38a984226310b3b4c3e148ff1db18d996db43fc531b26e335f3c3ced57ca25d09f6d9e795d865d2485fff90c8c9fb333d353c8b24a2e4545bcdda9b8f2a6f4e63244d3f3ac0d068efd13caeeb6c0212d3229c59f3e859ad2fd63704510ec8632f95aaefddfd74b946d67912c9d0f8ebfe560d70810f6b858624e4d7da23e621d35f23bcf4fafddb205281462fc2ad8924d29075c61e61e7789001f5b2f4800c79f3c85fd508041b1019a36f6bfa81e6dbe41a2ad45153617ae88df20caca6f5f3f4a754c5d4a6d93dedb5c7f94d522be48b813ce30559a84e85a34829b38508ad88be0a96a12b2a0380a771acda6aef871af9b6870d71be8ea9cfca779e7145571c19f79d20"}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000840)={0x40, 0x11, 0x92, "1b9333a18dfa3dffcaa0c2b939d1dd168c6707d2cd2da959eed754a0fd955ac23ce80e63357d41a8220ac019c5d6d90b0f75be61967302685f4290691ee55452eb8190939503bebafa315212a5661f3783c1e846e753b4c3e69bd96e000a6320292e310b41d2fe3205e03f57720947ea5311c9ee9dee4983e782ecc66dcc75e7c18037b0d3d8df44125de27498fc133f5c2f"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x3}, 0x0}) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) 1.985202712s ago: executing program 6 (id=3106): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x70, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r1, 0x0, &(0x7f0000002500)="c5", 0x1, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) 1.871892645s ago: executing program 4 (id=3099): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xe4b7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.65799203s ago: executing program 4 (id=3100): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 1.65674337s ago: executing program 6 (id=3109): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 1.503194904s ago: executing program 3 (id=3101): unshare(0x2040600) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @broadcast, @multicast1}, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000c40)=""/21, 0x15}, {&(0x7f0000000c80)=""/183, 0xb7}], 0x2}, 0x80d9}], 0x1, 0x40, 0x0) 1.403612196s ago: executing program 6 (id=3102): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket(0x1, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0xb, 0x4) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000002) shutdown(r1, 0x0) 1.228618261s ago: executing program 4 (id=3103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)="3874517c2edc", 0xfdef}, {0x0}], 0x2) 1.144662713s ago: executing program 3 (id=3104): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.124707463s ago: executing program 6 (id=3105): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "907bc3e43aa7d902", "d5a2ed852cd35a038ac4a3619ca8ea98", "9bea7b8c", "c552a5c440de2598"}, 0x28) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000001808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x40) 894.867278ms ago: executing program 6 (id=3107): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) 0s ago: executing program 6 (id=3108): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44010) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) kernel console output (not intermixed with test programs): o urb status, -71 [ 268.822226][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.829620][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.836997][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.844362][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.851673][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.859266][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.866617][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.873980][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.881298][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.888648][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.896057][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.903428][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.910769][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.918101][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.925460][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.932776][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.940118][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.947446][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.954850][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.962882][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.970369][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.977853][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.985285][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 268.992711][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.000234][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.007667][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.015108][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.022542][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.030001][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.037411][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.044820][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.052260][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.059842][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.067271][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.074682][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.082121][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.089540][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.096973][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.104409][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.111857][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.119280][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.126723][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.134157][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.141591][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.149042][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.156455][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.164045][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.171564][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.179001][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.186454][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.193894][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.201329][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.208747][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.216316][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.223730][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.231193][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.238696][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.246100][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.253504][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.261076][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.268529][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.275952][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.283396][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.290825][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.298621][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.306045][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.313463][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.320911][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.328337][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.335764][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.343196][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.350672][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.358129][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.365737][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.373183][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.380611][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.388061][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.395517][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.402951][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.410374][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.417874][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.425296][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.432721][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.440152][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.447588][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.455029][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.462726][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.470317][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.477793][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.485270][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.492718][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.500220][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.507752][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.515198][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.522667][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.530097][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.537540][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.544963][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.552424][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.560007][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.567629][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.575059][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.582534][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.591350][ C1] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 269.598672][ C1] usb 6-1: ti_interrupt_callback - resubmit interrupt urb failed, -1 [ 269.742972][ T5826] usb 6-1: USB disconnect, device number 9 [ 269.761100][ T5826] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 269.785971][ T7452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.893089][ T5826] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 269.993953][ T5826] ti_usb_3410_5052 6-1:2.0: device disconnected [ 273.290235][ T9089] loop4: detected capacity change from 0 to 764 [ 273.433559][ T8503] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.583562][ T9096] batadv_slave_1: entered promiscuous mode [ 273.611390][ T9095] batadv_slave_1: left promiscuous mode [ 273.987538][ T9101] loop5: detected capacity change from 0 to 2048 [ 273.996042][ T9103] fuse: Bad value for 'fd' [ 274.119281][ T9101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.297470][ T9101] syz.5.925 (pid 9101) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 274.373830][ T9112] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.927'. [ 274.516874][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.170915][ T28] audit: type=1326 audit(1787625329.422:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.5.936" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb95179e0d9 code=0x0 [ 276.464371][ T9160] netlink: 20 bytes leftover after parsing attributes in process `syz.6.946'. [ 276.521313][ T9160] netlink: 20 bytes leftover after parsing attributes in process `syz.6.946'. [ 276.876010][ T9171] warning: `syz.6.949' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 277.025749][ T9176] input: syz0 as /devices/virtual/input/input9 [ 277.743029][ T5834] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 277.989944][ T5834] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 278.036781][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.055229][ T5834] usb 7-1: Product: syz [ 278.064101][ T5834] usb 7-1: Manufacturer: syz [ 278.071809][ T5834] usb 7-1: SerialNumber: syz [ 278.125524][ T5834] usb 7-1: config 0 descriptor?? [ 278.158769][ T5834] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 278.493932][ T27] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 278.698952][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.730259][ T27] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 278.796949][ T27] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.837222][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.865220][ T27] usb 6-1: Product: syz [ 278.892786][ T27] usb 6-1: Manufacturer: syz [ 278.897753][ T27] usb 6-1: SerialNumber: syz [ 279.236780][ T5834] gspca_sunplus: reg_w_riv err -71 [ 279.270403][ T5834] sunplus: probe of 7-1:0.0 failed with error -71 [ 279.305761][ T5834] usb 7-1: USB disconnect, device number 5 [ 279.414218][ T9226] loop4: detected capacity change from 0 to 512 [ 279.545629][ T9226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 279.637872][ T9226] System zones: 1-12 [ 279.713823][ T9226] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.966: missing EA_INODE flag [ 279.763445][ T9226] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.966: error while reading EA inode 12 err=-117 [ 279.847911][ T9226] EXT4-fs (loop4): 1 orphan inode deleted [ 279.866335][ T9226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.022999][ T27] cdc_ncm 6-1:1.0: bind() failure [ 280.083674][ T27] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 280.123244][ T27] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 280.146819][ T27] usbtest: probe of 6-1:1.1 failed with error -71 [ 280.194564][ T27] usb 6-1: USB disconnect, device number 10 [ 280.454361][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.645875][ T9249] netlink: 'syz.4.971': attribute type 10 has an invalid length. [ 280.710754][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.718616][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.907013][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.914288][ T9249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.921874][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.929140][ T9249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.017182][ T9249] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 281.806879][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 282.493978][ T23] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 282.711031][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.728596][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.752904][ T5826] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 282.776617][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.798237][ T9302] fuse: Bad value for 'fd' [ 282.832971][ T23] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.878650][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.898260][ T23] usb 7-1: config 0 descriptor?? [ 282.955571][ T5826] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 282.974332][ T5826] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 283.013437][ T5826] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 283.042951][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.067213][ T5826] usb 6-1: Product: syz [ 283.091769][ T5826] usb 6-1: Manufacturer: syz [ 283.127809][ T5826] usb 6-1: SerialNumber: syz [ 283.164227][ T5826] usb 6-1: config 0 descriptor?? [ 283.197426][ T5826] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 283.360775][ T23] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 283.410230][ T23] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 283.446976][ T28] audit: type=1326 audit(1787625337.702:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4d5f9e0d9 code=0x0 [ 284.413490][ T5826] usb 6-1: USB disconnect, device number 11 [ 285.630335][ T5827] usb 7-1: USB disconnect, device number 6 [ 285.756006][ T9366] loop6: detected capacity change from 0 to 2048 [ 285.902084][ T9366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.218823][ T7452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.962681][ T28] audit: type=1326 audit(1787625341.212:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.6.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5b39e0d9 code=0x0 [ 287.045264][ T9402] loop4: detected capacity change from 0 to 64 [ 287.293474][ T9378] loop5: detected capacity change from 0 to 40427 [ 287.359627][ T9378] F2FS-fs (loop5): invalid crc value [ 287.414826][ T9378] F2FS-fs (loop5): Found nat_bits in checkpoint [ 287.646512][ T9378] F2FS-fs (loop5): Start checkpoint disabled! [ 287.714584][ T9378] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 287.764186][ T9414] ip_tables: iptables: counters copy to user failed while replacing table [ 288.165854][ T8578] kworker/u4:15: attempt to access beyond end of device [ 288.165854][ T8578] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 288.225234][ T9423] overlayfs: failed to clone upperpath [ 288.244952][ T8578] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 288.277499][ T8578] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 288.669394][ T9435] jffs2: notice: (9435) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 289.577495][ T9458] loop6: detected capacity change from 0 to 256 [ 289.779909][ T9460] overlayfs: failed to clone upperpath [ 290.310179][ T9470] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3232572832 (12930291328 ns) > initial count (691901412 ns). Using initial count to start timer. [ 290.703352][ T9478] typec_fusb302 0-0002: I2C/SMBus block functionality not supported! [ 290.746893][ T9478] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x02 [ 291.556019][ T9495] loop6: detected capacity change from 0 to 256 [ 291.593889][ T9495] exfat: Deprecated parameter 'utf8' [ 291.623344][ T9495] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfc1fe017, utbl_chksum : 0xe619d30d) [ 292.083276][ T9507] fuse: Bad value for 'fd' [ 292.111675][ T9508] ima: policy update failed [ 292.132879][ T28] audit: type=1802 audit(1787625346.382:47): pid=9508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1045" res=0 errno=0 [ 293.937204][ T9554] loop6: detected capacity change from 0 to 512 [ 293.966401][ T9554] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 293.985576][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 294.073011][ T9554] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.1063: bad orphan inode 131083 [ 294.124738][ T9554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.354091][ T9562] bridge2: entered promiscuous mode [ 294.359368][ T9562] bridge2: entered allmulticast mode [ 294.428348][ T7452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.922034][ T9536] loop5: detected capacity change from 0 to 65536 [ 296.092406][ T9536] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 296.184929][ T9536] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop5": -EINTR [ 296.204669][ T9536] XFS (loop5): log mount failed [ 296.928990][ T9613] netlink: 'syz.3.1078': attribute type 10 has an invalid length. [ 297.004955][ T9613] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.012765][ T9613] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.143382][ T9613] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.150674][ T9613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.158298][ T9613] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.165533][ T9613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.290156][ T9613] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 298.118806][ T9591] loop6: detected capacity change from 0 to 40427 [ 298.182414][ T9591] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 298.222884][ T9591] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 298.289835][ T9591] F2FS-fs (loop6): invalid crc value [ 298.353560][ T9591] F2FS-fs (loop6): Found nat_bits in checkpoint [ 298.682916][ T9591] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 298.712841][ T9591] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 299.217815][ T9617] loop4: detected capacity change from 0 to 32768 [ 299.406777][ T9617] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 299.618008][ T9617] XFS (loop4): Ending clean mount [ 299.653293][ T9617] XFS (loop4): Quotacheck needed: Please wait. [ 299.811602][ T9617] XFS (loop4): Quotacheck: Done. [ 300.328315][ T9666] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 300.380245][ T5991] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 300.741624][ T9668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.875875][ T9668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.967813][ T9668] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 301.040834][ T9668] bond0 (unregistering): Released all slaves [ 301.148215][ T9673] tipc: Started in network mode [ 301.189788][ T9673] tipc: Node identity 2007ff, cluster identity 4711 [ 301.245048][ T9673] tipc: Node number set to 2099199 [ 302.786816][ T9717] loop4: detected capacity change from 0 to 16 [ 302.834522][ T9717] erofs: (device loop4): mounted with root inode @ nid 36. [ 304.073254][ T5847] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 304.254527][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 304.280456][ T5847] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 304.307618][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.343085][ T5847] usb 5-1: Product: syz [ 304.353256][ T5847] usb 5-1: Manufacturer: syz [ 304.382967][ T5847] usb 5-1: SerialNumber: syz [ 304.414929][ T5847] usb 5-1: config 0 descriptor?? [ 304.431217][ T9739] jffs2: notice: (9739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 304.452480][ T5847] gspca_main: spca508-2.14.0 probing 041e:4018 [ 304.700239][ T5847] gspca_spca508: reg_read err -32 [ 304.707277][ T5847] gspca_spca508: reg_read err -32 [ 304.727046][ T5847] gspca_spca508: reg_read err -32 [ 304.742465][ T5847] gspca_spca508: reg_read err -32 [ 304.959118][ T5847] gspca_spca508: reg write: error -71 [ 304.974109][ T5847] spca508: probe of 5-1:0.0 failed with error -71 [ 305.009435][ T5847] usb 5-1: USB disconnect, device number 9 [ 305.897206][ T9764] "syz.6.1117" (9764) uses obsolete ecb(arc4) skcipher [ 307.344892][ T9782] loop4: detected capacity change from 0 to 32768 [ 307.444912][ T9782] JBD2: Ignoring recovery information on journal [ 307.536211][ T9782] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 307.818766][ T28] audit: type=1804 audit(1787625362.062:48): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1125" name="/newroot/280/file1/bus" dev="loop4" ino=17058 res=1 errno=0 [ 307.962300][ T8574] Bluetooth: hci4: Frame reassembly failed (-84) [ 307.971257][ T9802] Bluetooth: hci1: Opcode 0x080f failed: -22 [ 307.995891][ T28] audit: type=1800 audit(1787625362.072:49): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1125" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 308.157854][ T5991] ocfs2: Unmounting device (7,4) on (node local) [ 310.013283][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 310.020978][ T5792] Bluetooth: hci1: command tx timeout [ 310.021895][ T5784] Bluetooth: hci4: command 0x1003 tx timeout [ 310.771678][ T9833] batadv0: entered promiscuous mode [ 311.224285][ T9840] netlink: 'syz.5.1146': attribute type 1 has an invalid length. [ 311.583676][ T9840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.658184][ T9831] loop6: detected capacity change from 0 to 32768 [ 311.737528][ T9831] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.966740][ T9831] XFS (loop6): Ending clean mount [ 312.015161][ T9841] bond1: (slave gretap1): making interface the new active one [ 312.041280][ T9831] XFS (loop6): Quotacheck needed: Please wait. [ 312.128389][ T9841] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 312.206215][ T9831] XFS (loop6): Quotacheck: Done. [ 312.359211][ T9841] syz.5.1146 (9841) used greatest stack depth: 20056 bytes left [ 312.397644][ T7452] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 312.464919][ T9859] sock: sock_timestamping_bind_phc: sock not bind to device [ 313.531389][ T9874] loop5: detected capacity change from 0 to 128 [ 313.655330][ T9874] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 313.744310][ T9874] hpfs: filesystem error: improperly stopped [ 313.803998][ T9874] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 313.859148][ T9874] hpfs: You really don't want any checks? You are crazy... [ 313.885959][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1159'. [ 313.908415][ T9874] hpfs: Code page index out of array [ 313.940459][ T9878] IPv6: sit1: Disabled Multicast RS [ 313.946325][ T9874] hpfs: code page support is disabled [ 313.972589][ T9874] hpfs: hpfs_map_4sectors(): unaligned read [ 314.000294][ T9874] hpfs: hpfs_map_4sectors(): unaligned read [ 314.044345][ T9874] hpfs: filesystem error: unable to find root dir [ 314.273001][ T9882] bridge0: port 3(erspan0) entered blocking state [ 314.280649][ T9882] bridge0: port 3(erspan0) entered disabled state [ 314.325616][ T9882] erspan0: entered allmulticast mode [ 314.345719][ T9882] erspan0: entered promiscuous mode [ 314.352113][ T9882] bridge0: port 3(erspan0) entered blocking state [ 314.359103][ T9882] bridge0: port 3(erspan0) entered forwarding state [ 314.432029][ T9883] erspan0: left allmulticast mode [ 314.455519][ T9883] erspan0: left promiscuous mode [ 314.462657][ T9883] bridge0: port 3(erspan0) entered disabled state [ 315.288035][ T9897] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 315.550664][ T9903] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 315.771781][ T9904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.859721][ T9904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.917496][ T9904] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 315.946717][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.954081][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.017761][ T9904] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 316.069956][ T9904] bond0 (unregistering): Released all slaves [ 316.664699][ T9923] loop5: detected capacity change from 0 to 1024 [ 316.850847][ T9927] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 317.221473][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.228048][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.619537][ T9943] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 318.719691][ T9945] loop6: detected capacity change from 0 to 131072 [ 318.727454][ T9945] XFS: ikeep mount option is deprecated. [ 318.879881][ T9945] XFS (loop6): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 319.182071][ T9945] XFS (loop6): Starting recovery (logdev: internal) [ 319.190889][ T9948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.248842][ T9945] XFS (loop6): Ending recovery (logdev: internal) [ 319.322457][ T9948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.618999][ T9948] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 319.640416][ T9948] bond0 (unregistering): Released all slaves [ 320.727654][ T9991] overlayfs: failed to clone upperpath [ 320.911888][ T7452] XFS (loop6): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 321.314023][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 321.540199][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.583347][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 321.622976][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 321.671372][ T9] usb 6-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00 [ 321.702660][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.730513][ T9] usb 6-1: Product: syz [ 321.739532][ T9] usb 6-1: Manufacturer: syz [ 321.752932][ T9] usb 6-1: SerialNumber: syz [ 321.792754][ T9997] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 321.840821][ T9] af9005: boot packet bulk message failed: -22 (252/0) [ 321.854735][T10014] loop4: detected capacity change from 0 to 512 [ 321.871395][ T9] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware [ 321.888015][T10014] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 321.955873][T10014] EXT4-fs (loop4): 1 truncate cleaned up [ 321.970912][ T9] usb 6-1: Direct firmware load for af9005.fw failed with error -2 [ 322.010400][T10014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.056179][T10014] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.1211: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 322.090351][ T9] usb 6-1: Falling back to sysfs fallback for: af9005.fw [ 322.137453][T10014] EXT4-fs (loop4): Remounting filesystem read-only [ 322.252240][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.644677][T10025] overlayfs: failed to clone upperpath [ 323.637305][T10049] loop5: detected capacity change from 0 to 1024 [ 323.691611][T10049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.572191][T10071] loop6: detected capacity change from 0 to 128 [ 324.612461][T10071] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.693847][T10071] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 324.887834][ T7452] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.648782][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.351030][T10119] loop4: detected capacity change from 0 to 1024 [ 327.454924][T10119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.789461][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.345747][T10137] netlink: 'syz.6.1260': attribute type 1 has an invalid length. [ 329.462186][T10135] loop4: detected capacity change from 0 to 32768 [ 329.476267][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 329.518622][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 329.537498][T10135] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.699079][T10135] XFS (loop4): Ending clean mount [ 329.743449][T10135] XFS (loop4): Quotacheck needed: Please wait. [ 329.903309][T10135] XFS (loop4): Quotacheck: Done. [ 330.085329][ T5991] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.610736][T10182] loop4: detected capacity change from 0 to 2048 [ 330.658525][T10182] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 330.683601][T10182] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 330.701910][T10182] UDF-fs: Scanning with blocksize 512 failed [ 330.731320][T10182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.779177][T10182] UDF-fs: bad mount option "ý'*§vèŸz³çnt" or missing value [ 330.791100][ T28] audit: type=1800 audit(1787625385.042:50): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1273" name="file1" dev="loop4" ino=838 res=0 errno=0 [ 331.350508][T10193] gadgetfs: bound to dummy_udc driver [ 331.632953][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 331.661480][ C1] gadgetfs: connected [ 331.668468][T10193] gadgetfs: suspended from state 3 [ 331.674283][T10193] gadgetfs: disconnected [ 331.948211][T10204] overlayfs: failed to clone lowerpath [ 332.745327][T10223] netlink: 'syz.5.1289': attribute type 10 has an invalid length. [ 332.855003][T10223] syz_tun: entered promiscuous mode [ 335.443065][ T5827] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 335.698171][ T5827] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.732969][ T5827] usb 5-1: config 1 interface 0 has no altsetting 0 [ 335.773105][ T5827] usb 5-1: string descriptor 0 read error: -22 [ 335.780574][ T5827] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 335.849659][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.935941][T10260] loop5: detected capacity change from 0 to 1024 [ 335.960616][T10260] EXT4-fs: Ignoring removed bh option [ 336.121643][T10260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.217553][ T28] audit: type=1800 audit(1787625390.472:51): pid=10260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1304" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 336.442707][ T5827] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 336.530031][ T5827] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.0008/input/input10 [ 336.654624][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.781253][ T5827] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 336.933626][ T5827] usb 5-1: USB disconnect, device number 10 [ 337.210224][T10281] fido_id[10281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 337.447760][T10288] loop5: detected capacity change from 0 to 512 [ 337.526513][T10288] EXT4-fs (loop5): orphan cleanup on readonly fs [ 337.547565][T10288] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #4: comm syz.5.1311: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 337.585559][T10288] EXT4-fs error (device loop5): ext4_quota_enable:7147: comm syz.5.1311: Bad quota inode: 4, type: 1 [ 337.692353][T10288] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 337.747532][T10288] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 337.784448][T10288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.086075][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.943055][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 339.223813][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 339.251018][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.318914][ T5834] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 339.350732][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.387019][ T5834] usb 5-1: Product: syz [ 339.403355][ T5834] usb 5-1: Manufacturer: syz [ 339.408987][ T5834] usb 5-1: SerialNumber: syz [ 339.453198][ T5834] usb 5-1: config 0 descriptor?? [ 339.774557][T10306] netlink: 'syz.4.1317': attribute type 1 has an invalid length. [ 339.817722][ T5827] usb 5-1: USB disconnect, device number 11 [ 343.593039][T10400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1342'. [ 343.906833][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 346.283429][T10463] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 346.433367][T10463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.500425][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'. [ 346.587101][T10471] bond1: entered promiscuous mode [ 346.593366][T10471] bond1: entered allmulticast mode [ 347.198988][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1381'. [ 347.223807][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1381'. [ 347.751038][T10506] loop5: detected capacity change from 0 to 4096 [ 347.779830][T10506] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 347.922123][T10506] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 349.391440][T10544] TCP: TCP_TX_DELAY enabled [ 353.357733][T10582] loop4: detected capacity change from 0 to 1024 [ 353.399081][T10582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.461752][T10582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 353.647365][T10582] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 353.848810][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.107349][T10591] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 354.467252][T10596] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 355.183567][T10614] loop5: detected capacity change from 0 to 64 [ 357.184820][T10650] overlayfs: failed to clone lowerpath [ 357.331941][T10651] loop5: detected capacity change from 0 to 4096 [ 357.928227][T10662] netlink: 432 bytes leftover after parsing attributes in process `syz.4.1448'. [ 358.791760][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.159498][ T28] audit: type=1326 audit(1787625413.412:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 359.196508][ T28] audit: type=1326 audit(1787625413.442:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 359.226328][ T28] audit: type=1326 audit(1787625413.442:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 359.254807][ T28] audit: type=1326 audit(1787625413.442:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 359.303367][ T28] audit: type=1326 audit(1787625413.502:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 359.367534][ T28] audit: type=1326 audit(1787625413.572:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4d5f5e90e code=0x7ffc0000 [ 359.472882][ T28] audit: type=1326 audit(1787625413.592:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4d5f5e90e code=0x7ffc0000 [ 359.557978][ T28] audit: type=1326 audit(1787625413.592:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4d5f5e90e code=0x7ffc0000 [ 359.662740][ T28] audit: type=1326 audit(1787625413.592:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4d5f5e90e code=0x7ffc0000 [ 359.780163][ T28] audit: type=1326 audit(1787625413.592:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4d5f5e90e code=0x7ffc0000 [ 361.197608][T10720] overlayfs: failed to clone upperpath [ 362.876107][T10765] jffs2: notice: (10765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 363.231951][T10776] loop5: detected capacity change from 0 to 256 [ 363.270040][T10776] FAT-fs (loop5): Unrecognized mount option "0xffffffffffffffff" or missing value [ 363.592221][T10783] atomic_op ffff88805d7a5998 conn xmit_atomic 0000000000000000 [ 364.297961][T10805] loop4: detected capacity change from 0 to 128 [ 364.380706][T10805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 364.411135][T10805] System zones: 1-3, 19-19, 35-36 [ 364.438718][T10805] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 364.461503][T10805] ext4 filesystem being mounted at /378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.502640][T10805] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 1650720771 (only 1 groups) [ 364.580785][ T5991] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.211818][T10812] loop5: detected capacity change from 0 to 32768 [ 365.295455][T10812] loop5: p1 p3 < > [ 368.239642][T10853] loop4: detected capacity change from 0 to 32768 [ 368.354925][T10853] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 368.478155][T10853] XFS (loop4): Ending clean mount [ 368.806865][ T5991] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 368.835394][T10892] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1543'. [ 368.845824][T10892] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1543'. [ 369.972274][T10919] Bluetooth: MGMT ver 1.22 [ 371.104898][T10932] loop5: detected capacity change from 0 to 32768 [ 371.181040][T10932] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 371.248513][T10932] overlayfs: upper fs does not support tmpfile. [ 371.266281][T10932] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 371.290915][T10932] overlayfs: upper fs missing required features. [ 371.449520][ T6417] ocfs2: Unmounting device (7,5) on (node local) [ 372.881483][T10965] loop4: detected capacity change from 0 to 32768 [ 372.949019][T10965] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1575 (10965) [ 373.098532][T10965] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 373.128021][T10965] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 373.154731][T10965] BTRFS info (device loop4): using free space tree [ 373.168764][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1584'. [ 373.444001][T10965] BTRFS info (device loop4): enabling ssd optimizations [ 373.470792][T10965] BTRFS info (device loop4): auto enabling async discard [ 374.363043][ T5991] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 374.488140][T11031] vxcan3: entered promiscuous mode [ 377.862808][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 377.862931][ T28] audit: type=1800 audit(1787625432.112:118): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1625" name="dummy_udc" dev="gadgetfs" ino=6821 res=0 errno=0 [ 378.672233][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.678808][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.294461][T11141] loop5: detected capacity change from 0 to 32768 [ 380.355866][T11141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1638 (11141) [ 380.407042][T11141] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 380.441060][T11141] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 380.468540][T11141] BTRFS info (device loop5): setting nodatasum [ 380.523250][T11141] BTRFS info (device loop5): using free space tree [ 380.705911][T11141] BTRFS info (device loop5): enabling ssd optimizations [ 380.713352][T11141] BTRFS info (device loop5): auto enabling async discard [ 381.989407][T11178] loop4: detected capacity change from 0 to 131072 [ 381.997210][T11178] XFS: ikeep mount option is deprecated. [ 382.069340][T11178] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 382.083727][ T6417] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 382.149834][T11178] XFS (loop4): Starting recovery (logdev: internal) [ 382.266448][T11178] XFS (loop4): Ending recovery (logdev: internal) [ 383.631010][ T5991] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 383.803562][ T9] dvb-usb: did not find the firmware file 'af9005.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 383.855074][ T9] dvb_usb_af9005: probe of 6-1:1.0 failed with error -110 [ 383.953063][ T9] usb 6-1: USB disconnect, device number 12 [ 385.203492][T11232] netlink: 'syz.5.1662': attribute type 1 has an invalid length. [ 386.152315][T11258] netlink: 'syz.3.1676': attribute type 10 has an invalid length. [ 386.191336][T11258] syz_tun: entered promiscuous mode [ 386.255539][T11258] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 387.357028][T11286] loop4: detected capacity change from 0 to 4096 [ 387.437132][T11289] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.679251][T11267] loop5: detected capacity change from 0 to 32768 [ 387.697038][T11286] overlayfs: upper fs does not support tmpfile. [ 387.714371][T11267] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1679 (11267) [ 387.810718][T11286] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 387.822548][T11267] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 387.853051][T11286] overlayfs: failed to set xattr on upper [ 387.860221][T11267] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 387.913935][T11286] overlayfs: ...falling back to redirect_dir=nofollow. [ 387.922305][T11286] overlayfs: ...falling back to index=off. [ 387.952936][T11267] BTRFS info (device loop5): using free space tree [ 388.007095][T11286] overlayfs: ...falling back to uuid=null. [ 388.242580][T11267] BTRFS info (device loop5): enabling ssd optimizations [ 388.280618][T11267] BTRFS info (device loop5): auto enabling async discard [ 388.346083][T11314] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 388.428106][T11314] netlink: 'syz.6.1692': attribute type 10 has an invalid length. [ 388.462042][T11314] syz_tun: entered promiscuous mode [ 389.048457][ T6417] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 389.908371][T11286] syz.4.1687 (11286) used greatest stack depth: 19088 bytes left [ 393.265673][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1723'. [ 393.297937][T11387] netlink: 'syz.3.1723': attribute type 9 has an invalid length. [ 393.327933][T11387] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.338871][T11387] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.349131][T11387] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.359289][T11387] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.523361][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 393.753172][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 393.765659][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 393.783157][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.828090][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 393.855372][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.881734][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.932977][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 393.944252][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.193037][ T9] usb 6-1: usb_control_msg returned -32 [ 394.199826][ T9] usbtmc 6-1:16.0: can't read capabilities [ 394.653407][T11399] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 394.676485][ T5824] usb 6-1: USB disconnect, device number 13 [ 395.669085][T11406] loop4: detected capacity change from 0 to 32768 [ 395.767748][T11406] JBD2: Ignoring recovery information on journal [ 395.893264][T11406] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 396.031543][T11406] (syz.4.1730,11406,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 396.083646][T11406] (syz.4.1730,11406,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=255, inode=0, rec_len=0, name_len=0 [ 396.216070][ T5991] ocfs2: Unmounting device (7,4) on (node local) [ 399.409672][T11449] loop5: detected capacity change from 0 to 32768 [ 399.434952][T11449] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop5 scanned by syz.5.1747 (11449) [ 399.508034][T11449] BTRFS info (device loop5): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 399.567142][T11449] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 399.609742][T11449] BTRFS info (device loop5): using free space tree [ 399.675845][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 399.686527][T11477] netlink: 'syz.4.1751': attribute type 9 has an invalid length. [ 399.700505][T11477] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.709544][T11477] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.718459][T11477] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.727256][T11477] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.836458][T11449] BTRFS info (device loop5): enabling ssd optimizations [ 399.882973][T11449] BTRFS info (device loop5): auto enabling async discard [ 400.090630][ T28] audit: type=1800 audit(1787625454.342:119): pid=11449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1747" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 400.878041][ T6417] BTRFS info (device loop5): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 404.565567][T11603] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1788'. [ 404.582377][T11605] netlink: 'syz.6.1789': attribute type 1 has an invalid length. [ 404.626185][T11605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.668049][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1789'. [ 404.682301][T11605] bond1: entered promiscuous mode [ 404.688269][T11605] bond1: entered allmulticast mode [ 405.614139][T11628] input: syz1 as /devices/virtual/input/input11 [ 406.060133][T11637] netlink: 'syz.5.1800': attribute type 1 has an invalid length. [ 406.190259][T11637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.303680][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1800'. [ 406.347303][T11641] bond2: entered promiscuous mode [ 406.375014][T11641] bond2: entered allmulticast mode [ 408.453122][ T5826] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 408.667155][ T5826] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 408.703229][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.730219][ T5826] usb 5-1: Product: syz [ 408.747274][ T5826] usb 5-1: Manufacturer: syz [ 408.751926][ T5826] usb 5-1: SerialNumber: syz [ 409.199413][ T5826] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 409.214497][T11698] loop5: detected capacity change from 0 to 1024 [ 409.254318][T11698] EXT4-fs: Ignoring removed oldalloc option [ 409.324273][T11698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.478403][T11698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.828742][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.249563][ T5826] usb 5-1: USB disconnect, device number 12 [ 411.299257][ T5826] usblp0: removed [ 411.709415][ T5847] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 411.915745][ T5847] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 411.943209][ T5847] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 411.970198][ T5847] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 411.987644][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.998207][ T5847] usb 6-1: Product: syz [ 412.004961][ T5847] usb 6-1: Manufacturer: syz [ 412.024694][ T5847] usb 6-1: SerialNumber: syz [ 412.290091][ T5847] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 412.706633][ T8] usb 6-1: USB disconnect, device number 14 [ 412.737668][ T8] usblp0: removed [ 413.871584][T11791] loop5: detected capacity change from 0 to 512 [ 413.907194][T11791] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 413.951605][T11791] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 414.988773][T11821] loop5: detected capacity change from 0 to 2048 [ 415.022579][T11821] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 415.085431][T11821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.488222][T11832] overlayfs: failed to clone upperpath [ 416.876648][T11827] loop4: detected capacity change from 0 to 32768 [ 416.958991][T11827] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 416.994376][T11827] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 417.239405][T11827] XFS (loop4): Ending clean mount [ 417.288684][T11827] XFS (loop4): Quotacheck needed: Please wait. [ 417.408628][T11827] XFS (loop4): Quotacheck: Done. [ 417.556433][ T28] audit: type=1800 audit(1787625471.812:120): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1873" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 417.777298][ T5991] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.209448][T11904] overlayfs: failed to clone upperpath [ 419.745190][T11921] jffs2: notice: (11921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 420.483357][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 420.686660][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 420.722826][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 420.759145][ T8] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 420.800899][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.853025][ T8] usb 5-1: Product: syz [ 420.857918][ T8] usb 5-1: Manufacturer: syz [ 420.868106][ T8] usb 5-1: SerialNumber: syz [ 420.979655][T11948] jffs2: notice: (11948) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 421.174881][ T8] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 421.599346][ T5847] usb 5-1: USB disconnect, device number 13 [ 421.634260][ T5847] usblp0: removed [ 422.019968][T11974] overlayfs: failed to clone upperpath [ 422.499183][T11985] loop5: detected capacity change from 0 to 1024 [ 422.587532][T11985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 422.614494][T11985] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.643064][ T5847] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 422.816344][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 422.835280][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.874696][ T5847] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 422.895524][ T5847] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.942190][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 422.991939][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 423.019345][ T5847] usb 5-1: Product: syz [ 423.034510][ T5847] usb 5-1: Manufacturer: syz [ 423.060606][ T5847] usb 5-1: SerialNumber: syz [ 423.316751][ T5847] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 423.522555][ T5765] usb 5-1: USB disconnect, device number 14 [ 423.790608][T12012] overlayfs: failed to clone lowerpath [ 423.956105][T12014] atomic_op ffff88805d7a4998 conn xmit_atomic 0000000000000000 [ 425.382112][T11980] usblp0: removed [ 425.479032][T12032] loop5: detected capacity change from 0 to 512 [ 425.491882][T12032] EXT4-fs: Ignoring removed orlov option [ 425.511052][T12035] jffs2: notice: (12035) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 425.527920][T12032] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.581545][T12032] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 427.832236][T12084] loop4: detected capacity change from 0 to 4096 [ 427.853495][T12084] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 428.730390][T12108] overlayfs: failed to clone upperpath [ 428.880800][T12112] loop4: detected capacity change from 0 to 256 [ 428.928386][T12112] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value [ 428.982654][ T8503] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.359218][T12171] loop5: detected capacity change from 0 to 4096 [ 431.373316][T12171] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 431.564380][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 432.403554][T12190] overlayfs: failed to clone upperpath [ 433.301897][T12217] vxcan3: entered promiscuous mode [ 433.824004][T12227] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2022'. [ 434.507705][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2028'. [ 435.087184][T12257] loop4: detected capacity change from 0 to 2048 [ 435.166758][T12257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.051755][T12282] tipc: Enabled bearer , priority 10 [ 436.093108][ T5826] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 436.101710][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 436.157622][T12283] vxlan1: entered promiscuous mode [ 436.305379][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.329989][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.354305][ T5826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.371939][ T5826] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.404208][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.438011][ T5826] usb 6-1: config 0 descriptor?? [ 436.906377][ T5826] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 436.943195][ T5826] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 437.168599][ T5826] tipc: Node number set to 908213814 [ 437.763326][T12312] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2055'. [ 438.822644][T12332] tipc: Started in network mode [ 438.834690][T12332] tipc: Node identity ac1414aa, cluster identity 4711 [ 438.842189][T12332] tipc: Enabled bearer , priority 10 [ 439.273035][ T9] usb 6-1: reset high-speed USB device number 15 using dummy_hcd [ 439.287514][ T9] usb 6-1: device reset changed ep0 maxpacket size! [ 439.315146][ T5826] usb 6-1: USB disconnect, device number 15 [ 439.482978][ T5826] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 439.673179][ T5826] usb 6-1: Using ep0 maxpacket: 16 [ 439.685037][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.696268][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.706624][ T5826] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 439.716011][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.730947][ T5826] usb 6-1: config 0 descriptor?? [ 439.953068][ T5824] tipc: Node number set to 2886997162 [ 440.114978][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.121404][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.287159][T12353] 9pnet_fd: Insufficient options for proto=fd [ 440.386632][ T5826] usb 6-1: language id specifier not provided by device, defaulting to English [ 440.432562][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2074'. [ 440.587742][ T5826] letsketch 0003:6161:4D15.000A: Device info: ï“¿ [ 440.797114][ T5826] letsketch 0003:6161:4D15.000A: Device info: Ь [ 441.054175][ T5826] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 441.099987][ T5826] letsketch: probe of 0003:6161:4D15.000A failed with error -71 [ 441.132173][ T5826] usb 6-1: USB disconnect, device number 16 [ 442.207073][T12399] overlayfs: failed to clone upperpath [ 443.537606][ T28] audit: type=1326 audit(1787625497.792:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2099" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82bc99e0d9 code=0x0 [ 444.207621][T12441] IPVS: fo: FWM 3 0x00000003 - no destination available [ 444.229721][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 444.819734][T12459] jffs2: notice: (12459) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 445.144558][T12469] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2118'. [ 445.240836][ T28] audit: type=1326 audit(1787625499.492:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.6.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5b39e0d9 code=0x0 [ 447.255950][T12504] overlayfs: failed to clone upperpath [ 449.080382][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2147'. [ 449.121984][T12547] sctp: [Deprecated]: syz.3.2146 (pid 12547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.121984][T12547] Use struct sctp_sack_info instead [ 450.035630][ T23] IPVS: starting estimator thread 0... [ 450.046032][T12566] IPVS: fo: FWM 3 0x00000003 - no destination available [ 450.054670][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 450.142894][T12567] IPVS: using max 20 ests per chain, 48000 per kthread [ 451.018026][T12593] sctp: [Deprecated]: syz.4.2164 (pid 12593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.018026][T12593] Use struct sctp_sack_info instead [ 451.754548][T12603] input: syz1 as /devices/virtual/input/input12 [ 453.005909][T12638] sctp: [Deprecated]: syz.5.2183 (pid 12638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.005909][T12638] Use struct sctp_sack_info instead [ 454.004654][T12655] loop5: detected capacity change from 0 to 512 [ 454.133892][T12655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.153070][T12655] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.435994][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.608297][T12673] loop5: detected capacity change from 0 to 512 [ 454.656132][T12673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.677061][T12673] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 454.711839][ T28] audit: type=1800 audit(1787625508.962:123): pid=12673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2197" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 454.996011][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.901227][T12697] bridge1: entered promiscuous mode [ 456.693268][ T28] audit: type=1326 audit(1787625510.932:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.6.2208" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5b39e0d9 code=0x0 [ 459.192952][ T5824] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 459.385088][ T5824] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 459.403856][ T5824] usb 5-1: config 0 has no interface number 0 [ 459.420909][ T5824] usb 5-1: config 0 interface 41 has no altsetting 0 [ 459.443152][ T5824] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 459.460797][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.485706][ T5824] usb 5-1: Product: syz [ 459.513109][ T5824] usb 5-1: Manufacturer: syz [ 459.517759][ T5824] usb 5-1: SerialNumber: syz [ 459.535966][ T5824] usb 5-1: config 0 descriptor?? [ 460.869328][T12751] loop5: detected capacity change from 0 to 131072 [ 460.878921][T12751] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 460.887898][T12751] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 460.921764][ T5824] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 460.943546][T12751] F2FS-fs (loop5): Found nat_bits in checkpoint [ 461.019517][T12751] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 461.026767][T12751] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 461.062354][T12751] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 461.087312][T12751] F2FS-fs (loop5): lookup inode (7) has corrupted xattr [ 461.143273][ T5824] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 461.170573][ T5824] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 461.220278][ T5824] CoreChips: probe of 5-1:0.41 failed with error -71 [ 461.254122][ T5824] usb 5-1: USB disconnect, device number 15 [ 464.230197][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 464.260696][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'. [ 464.292121][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 464.317052][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'. [ 464.436537][T12824] overlayfs: failed to resolve './cgroup': -2 [ 466.010586][ T5834] 0000:00:01.0 (uninitialized): Cannot find proper PCI device base address, aborting [ 466.607066][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2274'. [ 466.635671][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2274'. [ 466.677469][T12871] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.687827][T12871] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.698117][T12871] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.708347][T12871] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.723093][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2274'. [ 466.733726][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2274'. [ 466.793083][ T5834] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 466.988133][ T5834] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 466.997088][ T5834] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 467.025377][ T5834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.046163][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 467.074207][ T5834] usb 5-1: SerialNumber: syz [ 467.096329][ T5834] usb 5-1: bad CDC descriptors [ 467.164438][T12885] overlayfs: failed to clone lowerpath [ 467.364115][ T23] usb 5-1: USB disconnect, device number 16 [ 467.577372][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2288'. [ 467.588072][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2288'. [ 467.620173][T12898] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.630523][T12898] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.640827][T12898] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.651055][T12898] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.751880][T12953] 9pnet_fd: Insufficient options for proto=fd [ 470.397505][T12972] loop5: detected capacity change from 0 to 128 [ 470.446741][T12972] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 470.548241][T12972] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 470.624501][ T28] audit: type=1804 audit(1787625524.872:125): pid=12972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2312" name="/newroot/452/file1/bus" dev="loop5" ino=1048634 res=1 errno=0 [ 471.006221][T12985] __nla_validate_parse: 2 callbacks suppressed [ 471.006286][T12985] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2317'. [ 471.063670][T12985] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2317'. [ 471.514610][ T8576] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 471.676080][T13000] loop5: detected capacity change from 0 to 128 [ 471.733074][T13000] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 471.833931][T13000] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 471.846746][T13000] FAT-fs (loop5): Filesystem has been set read-only [ 471.917523][ T6417] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 472.822146][T13022] loop4: detected capacity change from 0 to 128 [ 472.834066][T13022] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.878878][T13022] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.945718][T13026] netlink: 'syz.6.2342': attribute type 7 has an invalid length. [ 472.960370][T13026] netlink: 'syz.6.2342': attribute type 7 has an invalid length. [ 472.976106][ T28] audit: type=1804 audit(1787625527.232:126): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2333" name="/newroot/553/file1/bus" dev="loop4" ino=1048637 res=1 errno=0 [ 473.998419][ T34] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 474.250356][T13045] loop4: detected capacity change from 0 to 1024 [ 474.311862][T13045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.375302][T13045] EXT4-fs: Cannot specify journal on remount [ 474.477047][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.582975][T13101] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2365'. [ 477.378746][T13116] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2372'. [ 478.424829][T13150] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2384'. [ 478.435671][T13150] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2384'. [ 478.856883][T13159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2391'. [ 479.014839][T13165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2394'. [ 479.286267][T13165] team0 (unregistering): Port device team_slave_0 removed [ 479.329985][T13165] team0 (unregistering): Port device team_slave_1 removed [ 479.625539][T13185] loop4: detected capacity change from 0 to 128 [ 479.634817][T13185] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 479.680036][T13185] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 479.721000][ T28] audit: type=1804 audit(1787625533.962:127): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2403" name="/newroot/567/file1/bus" dev="loop4" ino=1048638 res=1 errno=0 [ 480.040833][T13191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2405'. [ 480.389367][T13195] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2408'. [ 481.010418][T10394] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 482.223078][ T5834] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 482.461769][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 482.497951][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.511209][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.526091][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 482.541641][ T5834] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 482.561588][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.584037][ T5834] usb 6-1: config 0 descriptor?? [ 483.158344][ T5834] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.000B/input/input13 [ 483.341424][ T5834] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.000B/input/input14 [ 483.559199][ T5834] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 483.655289][ T5834] usb 6-1: USB disconnect, device number 17 [ 483.825444][T13257] fido_id[13257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 488.840334][T13336] trusted_key: syz.3.2464 sent an empty control message without MSG_MORE. [ 489.774588][T13280] netlink: 'syz.5.2441': attribute type 15 has an invalid length. [ 489.786690][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2441'. [ 489.813714][T13280] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 489.822587][T13280] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 489.831491][T13280] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 489.840305][T13280] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 489.908358][T13280] netlink: 'syz.5.2441': attribute type 15 has an invalid length. [ 489.922318][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2441'. [ 490.367712][ T28] audit: type=1326 audit(1787625544.622:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 490.418260][ T28] audit: type=1326 audit(1787625544.622:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 490.494394][ T28] audit: type=1326 audit(1787625544.732:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 490.529481][ T28] audit: type=1326 audit(1787625544.732:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 490.616424][ T28] audit: type=1326 audit(1787625544.732:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 490.655846][ T28] audit: type=1326 audit(1787625544.732:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 490.693771][ T28] audit: type=1326 audit(1787625544.742:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 490.751831][ T28] audit: type=1326 audit(1787625544.742:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 490.873406][ T28] audit: type=1326 audit(1787625544.742:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 491.013747][ T28] audit: type=1326 audit(1787625544.742:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.5.2479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 491.165978][T13385] loop5: detected capacity change from 0 to 4096 [ 491.206532][T13385] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 491.865843][T13398] tls_set_device_offload_rx: netdev not found [ 492.376367][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2493'. [ 492.426322][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2493'. [ 492.494034][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2493'. [ 492.510223][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2493'. [ 493.301080][T13427] loop5: detected capacity change from 0 to 128 [ 493.318947][T13427] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ" or missing value [ 494.823139][T13459] loop5: detected capacity change from 0 to 8 [ 494.830223][T13459] squashfs: Unknown parameter '°A OTŠ}ú»àU' [ 494.889422][T13461] loop4: detected capacity change from 0 to 64 [ 495.143155][ T5991] hfs: node 4:3 still has 1 user(s)! [ 496.165004][T13483] loop5: detected capacity change from 0 to 1024 [ 496.212000][T13483] EXT4-fs (loop5): Test dummy encryption mode enabled [ 496.285123][T13483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.423872][T13483] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 496.466986][T13483] EXT4-fs (loop5): shut down requested (0) [ 496.735644][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.214724][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2527'. [ 499.515363][T13544] netlink: 'syz.6.2544': attribute type 15 has an invalid length. [ 499.527724][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2544'. [ 499.560683][T13544] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 499.569769][T13544] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 499.578649][T13544] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 499.587567][T13544] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 499.614141][T13544] netlink: 'syz.6.2544': attribute type 15 has an invalid length. [ 499.623238][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2544'. [ 500.594887][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 500.594943][ T28] audit: type=1326 audit(1787625554.842:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 500.688435][ T28] audit: type=1326 audit(1787625554.852:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 500.780669][ T28] audit: type=1326 audit(1787625554.852:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 500.884357][ T28] audit: type=1326 audit(1787625554.862:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 500.958399][ T28] audit: type=1326 audit(1787625554.862:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 500.987984][ T28] audit: type=1326 audit(1787625554.862:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 501.032814][ T28] audit: type=1326 audit(1787625554.882:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 501.076068][ T28] audit: type=1326 audit(1787625554.882:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 501.104284][ T28] audit: type=1326 audit(1787625554.882:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4d5f97e57 code=0x7ffc0000 [ 501.131972][ T28] audit: type=1326 audit(1787625554.882:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.3.2554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4d5f3f459 code=0x7ffc0000 [ 501.175193][T13573] loop4: detected capacity change from 0 to 4096 [ 501.207300][T13573] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 501.553348][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.565701][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.455091][T13603] netlink: 'syz.4.2567': attribute type 15 has an invalid length. [ 503.489434][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 503.613069][T13603] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 503.623587][T13603] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 503.633871][T13603] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 503.644074][T13603] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 503.657074][T13603] netlink: 'syz.4.2567': attribute type 15 has an invalid length. [ 503.667959][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 505.514417][T13639] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 506.363039][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 506.582924][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 506.596614][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.622804][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 506.652790][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.708885][ T9] usb 5-1: config 0 descriptor?? [ 506.989776][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 507.238217][ T23] usb 5-1: USB disconnect, device number 17 [ 508.223604][T13671] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2596'. [ 508.877575][T13694] loop5: detected capacity change from 0 to 512 [ 508.891454][T13694] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 508.914733][T13695] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2604'. [ 509.200192][ T28] kauditd_printk_skb: 469 callbacks suppressed [ 509.200208][ T28] audit: type=1800 audit(1787625563.452:621): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2605" name="dbroot" dev="configfs" ino=30586 res=0 errno=0 [ 509.272508][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'. [ 509.309406][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 509.417732][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'. [ 509.460508][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 511.263745][T13721] loop4: detected capacity change from 0 to 32768 [ 511.299041][T13721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2616 (13721) [ 511.338558][T13721] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 511.372999][T13721] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 511.432836][T13721] BTRFS info (device loop4): setting nodatasum [ 511.440240][T13721] BTRFS info (device loop4): force zlib compression, level 3 [ 511.479782][T13721] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 511.511971][T13721] BTRFS info (device loop4): use lzo compression, level 0 [ 511.542603][T13721] BTRFS info (device loop4): turning on flush-on-commit [ 511.557254][T13721] BTRFS info (device loop4): enabling auto defrag [ 511.594605][T13721] BTRFS info (device loop4): max_inline at 4096 [ 511.622871][T13721] BTRFS info (device loop4): using free space tree [ 511.781826][T13721] BTRFS info (device loop4): enabling ssd optimizations [ 512.349767][ T5991] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 512.465282][T13778] bridge0: entered allmulticast mode [ 513.481544][T13800] loop4: detected capacity change from 0 to 2048 [ 513.533420][T13800] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 513.577109][T13800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.584162][ T28] audit: type=1326 audit(1787625568.842:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 514.620956][ T28] audit: type=1326 audit(1787625568.842:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 514.702904][ T28] audit: type=1326 audit(1787625568.842:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 514.780378][ T28] audit: type=1326 audit(1787625568.842:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 514.821407][ T28] audit: type=1326 audit(1787625568.852:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 514.869957][ T28] audit: type=1326 audit(1787625568.852:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 514.921309][ T28] audit: type=1326 audit(1787625568.852:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 515.007735][ T28] audit: type=1326 audit(1787625568.852:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 515.047561][ T28] audit: type=1326 audit(1787625568.852:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 515.086325][ T28] audit: type=1326 audit(1787625568.872:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13826 comm="syz.5.2655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95179e0d9 code=0x7ffc0000 [ 515.384300][T13843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2661'. [ 515.411315][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 516.063070][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'. [ 516.093791][T13862] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2668'. [ 516.361974][T13868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2670'. [ 516.587891][T13874] netlink: 33 bytes leftover after parsing attributes in process `syz.6.2673'. [ 518.937785][T13907] loop4: detected capacity change from 0 to 32768 [ 518.997260][T13907] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 519.114266][T13907] XFS (loop4): Ending clean mount [ 519.216020][ T5991] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 519.546851][T13938] ip_tables: iptables: counters copy to user failed while replacing table [ 520.054799][T13947] kvm: apic: phys broadcast and lowest prio [ 520.457195][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801aad3800: rx timeout, send abort [ 520.957354][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801aad0000: rx timeout, send abort [ 520.968089][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801aad3800: abort rx timeout. Force session deactivation [ 521.465656][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801aad0000: abort rx timeout. Force session deactivation [ 521.542911][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 521.766897][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 521.792914][ T9] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 521.822927][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.867265][T13977] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.891120][ T9] opticon 5-1:1.0: opticon converter detected [ 521.928648][ T9] usb 5-1: opticon converter now attached to ttyUSB0 [ 522.996817][ T23] usb 5-1: USB disconnect, device number 18 [ 523.044119][ T23] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 523.066900][ T23] opticon 5-1:1.0: device disconnected [ 524.811291][T14046] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.872935][T14046] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 524.942889][T14046] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.004177][T14053] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2744'. [ 525.145645][T14046] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.192947][T14046] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 525.212908][T14046] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.326316][T14060] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 525.361946][T14060] bond2: (slave lo): Enslaving as an active interface with an up link [ 525.385671][T14060] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 525.486941][T14046] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.525638][T14046] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 525.552907][T14046] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.692358][T14046] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.709503][T14046] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 525.720743][T14046] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.302444][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803012ec00: rx timeout, send abort [ 526.311671][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803012ec00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 528.022334][T14128] netlink: 'syz.4.2769': attribute type 6 has an invalid length. [ 528.741198][ T28] kauditd_printk_skb: 1854 callbacks suppressed [ 528.741217][ T28] audit: type=1400 audit(1787625582.982:2486): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="test" pid=14142 comm="syz.5.2775" name="test" offset=36 [ 532.167486][T14200] loop4: detected capacity change from 0 to 32768 [ 532.229164][T14200] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 532.278230][T14200] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 532.735599][T14200] XFS (loop4): Ending clean mount [ 532.780667][T14200] XFS (loop4): Quotacheck needed: Please wait. [ 532.946658][T14200] XFS (loop4): Quotacheck: Done. [ 533.345333][ T5991] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 533.953282][ T5765] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 534.198660][ T5765] usb 6-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 534.233392][ T5765] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 534.252983][T14264] loop4: detected capacity change from 0 to 1024 [ 534.280541][ T5765] usb 6-1: config 1 has no interface number 0 [ 534.301075][T14264] EXT4-fs: Ignoring removed orlov option [ 534.313020][ T5765] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.374223][ T5765] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 534.400774][ T5765] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 534.440229][ T5765] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 56968, setting to 64 [ 534.459636][T14267] overlayfs: failed to clone upperpath [ 534.485721][ T5765] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.551099][T14264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.749010][T14264] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2800: Invalid inode bitmap blk 17555634438557414908 in block_group 0 [ 534.814217][ T5765] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.843523][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.890053][ T5765] usb 6-1: Product: syz [ 534.898279][ T5765] usb 6-1: Manufacturer: syz [ 534.908595][ T5765] usb 6-1: SerialNumber: syz [ 534.931779][T14255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 535.035160][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.263151][T14255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 535.500661][T14255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 535.833585][T14295] loop4: detected capacity change from 0 to 128 [ 535.920717][T14295] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 535.984242][T14295] ext4 filesystem being mounted at /653/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 536.018167][T14255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 536.055417][ T5765] cdc_ncm 6-1:1.1: bind() failure [ 536.318430][ T5991] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 536.331514][ T5847] usb 6-1: USB disconnect, device number 18 [ 537.402548][T14329] loop5: detected capacity change from 0 to 512 [ 537.650247][T14329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.317224][T14345] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.373426][T14345] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 538.431079][T14345] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.518552][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.714863][T14345] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.741403][T14345] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 538.810483][T14345] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.151526][T14345] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.233953][T14345] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 539.277925][T14345] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.967659][T14345] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.997452][T14345] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 540.038056][T14345] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.228163][T14381] 9pnet_fd: Insufficient options for proto=fd [ 541.636660][T14406] netlink: 'syz.5.2843': attribute type 8 has an invalid length. [ 541.664644][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2843'. [ 541.675951][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2843'. [ 542.073629][ T28] audit: type=1326 audit(1787625596.332:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.6.2852" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b5b39e0d9 code=0x0 [ 542.194694][T14416] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 542.240181][T14416] bond2: (slave lo): Enslaving as an active interface with an up link [ 542.267891][T14416] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 542.293500][ T5824] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 542.485485][ T5824] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.541433][ T5824] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.579055][ T5824] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.600155][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.888775][ T5824] usb 6-1: usb_control_msg returned -32 [ 542.904817][ T5824] usbtmc 6-1:16.0: can't read capabilities [ 543.252784][ T5824] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 543.305553][T14439] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -32 [ 543.331789][ T5826] usb 6-1: USB disconnect, device number 19 [ 543.475543][ T5824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.517256][ T5824] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 543.548574][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.026201][ T5824] wacom 0003:056A:033B.000C: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 544.087707][ T5824] wacom 0003:056A:033B.000C: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 544.129010][ T5824] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.000C/input/input15 [ 544.692221][T14459] loop5: detected capacity change from 0 to 1024 [ 544.730901][T14459] EXT4-fs: Ignoring removed mblk_io_submit option [ 544.768699][ T5824] usb 5-1: USB disconnect, device number 19 [ 544.933678][T14459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.165856][ T6417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.443849][T14476] loop5: detected capacity change from 0 to 128 [ 545.481047][T14476] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 545.577960][T14476] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.933340][ T787] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 546.150395][ T787] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 546.170028][ T787] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 546.199245][ T787] usb 5-1: Product: syz [ 546.214007][ T787] usb 5-1: Manufacturer: syz [ 546.218647][ T787] usb 5-1: SerialNumber: syz [ 546.258445][ T787] usb 5-1: config 0 descriptor?? [ 546.275665][ T787] ch341 5-1:0.0: ch341-uart converter detected [ 547.101441][ T6417] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 547.349316][ T787] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 547.650856][ T5826] usb 5-1: USB disconnect, device number 20 [ 547.694687][ T5826] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 547.729300][ T5826] ch341 5-1:0.0: device disconnected [ 548.416990][ T8] IPVS: starting estimator thread 0... [ 548.563069][T14527] IPVS: using max 20 ests per chain, 48000 per kthread [ 549.212950][ T8] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 549.249663][ T8576] IPVS: stop unused estimator thread 0... [ 549.430236][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.482949][ T8] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 549.522878][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.057503][ T8] wacom 0003:056A:033B.000D: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 550.113606][ T8] wacom 0003:056A:033B.000D: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 550.188678][ T8] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.000D/input/input18 [ 550.568798][ T787] usb 6-1: USB disconnect, device number 20 [ 550.673391][T14235] udevd[14235]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 550.729463][T14235] udevd[14235]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 551.772862][ T28] audit: type=1326 audit(1787625606.012:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 551.834011][ T28] audit: type=1326 audit(1787625606.012:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 551.956531][ T28] audit: type=1326 audit(1787625606.062:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 552.067476][ T28] audit: type=1326 audit(1787625606.062:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 552.164060][ T28] audit: type=1326 audit(1787625606.062:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 552.280179][ T28] audit: type=1326 audit(1787625606.062:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 552.392570][ T28] audit: type=1326 audit(1787625606.062:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 552.518291][ T28] audit: type=1326 audit(1787625606.062:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 552.657671][ T28] audit: type=1326 audit(1787625606.062:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 552.772898][ T28] audit: type=1326 audit(1787625606.062:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.3.2890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4d5f9e0d9 code=0x7ffc0000 [ 553.110461][ T5765] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 553.387785][ T5765] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.426450][ T5765] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 553.453949][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.976765][ T5765] wacom 0003:056A:033B.000E: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 554.053684][ T5765] wacom 0003:056A:033B.000E: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 554.102274][ T5765] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.000E/input/input21 [ 554.413142][ T5765] usb 5-1: USB disconnect, device number 21 [ 555.514165][ T5765] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 555.774222][ T5765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.812763][ T5765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.843267][ T5765] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 555.883113][ T5765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.930686][ T5765] usb 6-1: config 0 descriptor?? [ 556.460012][ T5765] cp2112 0003:10C4:EA90.000F: item fetching failed at offset 5/7 [ 556.489603][ T5765] cp2112 0003:10C4:EA90.000F: parse failed [ 556.507749][ T5765] cp2112: probe of 0003:10C4:EA90.000F failed with error -22 [ 556.730965][ T27] usb 6-1: USB disconnect, device number 21 [ 558.558951][T14748] ip6erspan0: entered allmulticast mode [ 559.122956][ T5824] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 559.338646][ T5824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.369708][ T5824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 559.423472][ T5824] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 559.466683][ T5824] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.508929][ T5824] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 559.553810][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.824262][ T5824] gud 5-1:1.0: DP-1: Failed to add properties (ret=-71) [ 560.862326][ T5824] gud 5-1:1.0: Failed to get connectors (error=-71) [ 560.910198][ T5824] gud: probe of 5-1:1.0 failed with error -71 [ 560.976345][ T5824] usb 5-1: USB disconnect, device number 22 [ 561.437260][T14802] jffs2: notice: (14802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 562.173658][ T5826] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 562.379229][ T5826] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 562.416605][ T5826] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 562.435717][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.736057][ T5826] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 562.809192][ T5826] wwan wwan0: port wwan0qmi0 attached [ 562.985273][ T5826] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, c6:d9:5d:d5:e3:6b [ 562.997453][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.005705][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.337415][ T5826] usb 6-1: USB disconnect, device number 22 [ 563.371077][ T5826] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 563.543879][ T5826] wwan wwan0: port wwan0qmi0 disconnected [ 564.369658][T14873] netlink: 'syz.6.2969': attribute type 4 has an invalid length. [ 564.635940][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'. [ 564.963740][ T5826] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 565.041078][T14877] team0 (unregistering): Port device team_slave_0 removed [ 565.125309][T14877] team0 (unregistering): Port device team_slave_1 removed [ 565.195503][ T5826] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 565.212646][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.231117][ T5826] usb 6-1: Product: syz [ 565.237348][ T5826] usb 6-1: Manufacturer: syz [ 565.242180][ T5826] usb 6-1: SerialNumber: syz [ 565.270476][ T5826] usb 6-1: config 0 descriptor?? [ 565.419804][T14894] netlink: 'syz.6.2976': attribute type 1 has an invalid length. [ 565.429605][T14894] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2976'. [ 565.552444][ T5826] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 566.563432][ T5826] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 566.603036][ T5826] usb 6-1: USB disconnect, device number 23 [ 568.200727][T14951] bridge_slave_0: left allmulticast mode [ 568.210777][T14951] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.264588][T14951] bridge_slave_1: left allmulticast mode [ 568.300041][T14951] bridge_slave_1: left promiscuous mode [ 568.311396][T14951] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.510454][T14951] team0: Port device team_slave_0 removed [ 568.579802][T14951] team0: Port device team_slave_1 removed [ 568.612235][T14951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.656656][T14951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.696138][T14951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.723046][T14951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.818667][T14951] bond1: (slave gretap1): Releasing active interface [ 568.927979][T14952] tipc: Enabled bearer , priority 10 [ 568.994909][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2999'. [ 569.335971][T14971] team0 (unregistering): Port device team_slave_0 removed [ 569.429538][T14971] team0 (unregistering): Port device team_slave_1 removed [ 571.255303][T15014] netlink: 'syz.3.3019': attribute type 1 has an invalid length. [ 571.458008][T15020] gretap1: entered allmulticast mode [ 571.501028][T15020] bond3: (slave gretap1): making interface the new active one [ 571.544428][T15020] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 571.556374][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3011'. [ 571.643489][ T5826] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 571.861959][ T5826] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 571.894707][ T5826] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 5 [ 571.940185][ T5826] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 571.998043][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.028504][T15024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 572.055525][T15024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 572.096342][ T5826] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 572.158444][ T5826] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 572.389699][ T5826] usb 6-1: USB disconnect, device number 24 [ 572.425192][ T5826] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 572.463664][ T5826] cyberjack 6-1:1.0: device disconnected [ 573.662914][ T5826] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 573.852875][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 573.860382][ T5826] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 573.872810][ T5826] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 573.882650][ T5826] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 573.894674][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.925689][ T5826] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 573.962564][ T5826] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 574.873157][ T5825] usb 6-1: USB disconnect, device number 25 [ 574.915297][ T5825] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 574.938989][ T5825] kobil_sct 6-1:1.0: device disconnected [ 575.417681][T15107] handle_userfault: 18 callbacks suppressed [ 575.417716][T15107] FAULT_FLAG_ALLOW_RETRY missing 801 [ 575.432394][T15107] CPU: 0 PID: 15107 Comm: syz.4.3031 Not tainted syzkaller #0 [ 575.439908][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.450000][T15107] Call Trace: [ 575.453406][T15107] [ 575.456394][T15107] dump_stack_lvl+0x18c/0x250 [ 575.461231][T15107] ? show_regs_print_info+0x20/0x20 [ 575.466491][T15107] ? load_image+0x420/0x420 [ 575.471207][T15107] ? assert_fault_locked+0x17f/0x3a0 [ 575.476619][T15107] handle_userfault+0x11e4/0x13b0 [ 575.481658][T15107] ? lockdep_hardirqs_on+0x98/0x150 [ 575.486916][T15107] ? userfaultfd_wp_unpopulated+0xa0/0xa0 [ 575.492687][T15107] ? do_raw_spin_unlock+0x121/0x230 [ 575.497971][T15107] ? free_unref_page+0x190/0x2e0 [ 575.502973][T15107] handle_mm_fault+0x3ce9/0x4a50 [ 575.507938][T15107] ? handle_mm_fault+0xe6/0x4a50 [ 575.512905][T15107] ? numa_migrate_prep+0x350/0x350 [ 575.518028][T15107] ? follow_page_pte+0x6dd/0x1ae0 [ 575.523081][T15107] ? pmd_lock+0x60/0x60 [ 575.527282][T15107] __get_user_pages+0x604/0x1580 [ 575.532255][T15107] ? populate_vma_page_range+0x380/0x380 [ 575.537939][T15107] populate_vma_page_range+0x2c1/0x380 [ 575.543419][T15107] ? fixup_user_fault+0x750/0x750 [ 575.548498][T15107] mprotect_fixup+0x9a3/0xcd0 [ 575.553229][T15107] ? change_protection+0x31e0/0x31e0 [ 575.558546][T15107] ? apparmor_file_mprotect+0xfe/0x120 [ 575.564055][T15107] ? bpf_lsm_file_mprotect+0x9/0x10 [ 575.569285][T15107] do_mprotect_pkey+0x7c3/0xcc0 [ 575.574167][T15107] ? prot_none_test+0x10/0x10 [ 575.578888][T15107] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 575.584900][T15107] __x64_sys_mprotect+0x80/0x90 [ 575.589801][T15107] do_syscall_64+0x55/0xb0 [ 575.594256][T15107] ? clear_bhb_loop+0x40/0x90 [ 575.599095][T15107] ? clear_bhb_loop+0x40/0x90 [ 575.603800][T15107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.609724][T15107] RIP: 0033:0x7f82bc99e0d9 [ 575.614215][T15107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.633957][T15107] RSP: 002b:00007f82babf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 575.642453][T15107] RAX: ffffffffffffffda RBX: 00007f82bcc26090 RCX: 00007f82bc99e0d9 [ 575.650452][T15107] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 575.658432][T15107] RBP: 00007f82bca35024 R08: 0000000000000000 R09: 0000000000000000 [ 575.666418][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.674410][T15107] R13: 00007f82bcc26128 R14: 00007f82bcc26090 R15: 00007ffe0e2df268 [ 575.682426][T15107] [ 576.645426][ T28] audit: type=1326 audit(1787625630.902:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15135 comm="syz.5.3041" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb951797e57 code=0x0 [ 577.317901][T15147] pimreg: entered allmulticast mode [ 577.386374][T15146] pimreg: left allmulticast mode [ 578.582880][T14780] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 578.784964][T14780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25441, setting to 1024 [ 578.839184][T14780] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 578.866015][T14780] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 578.893027][T14780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.907578][T14780] usb 5-1: Product: syz [ 578.936963][T14780] usb 5-1: Manufacturer: syz [ 578.958754][T14780] usb 5-1: SerialNumber: syz [ 578.989925][T15164] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 579.042569][T15173] overlayfs: failed to clone upperpath [ 579.253055][T14780] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 579.394977][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3058'. [ 579.428853][T15180] netlink: 'syz.6.3058': attribute type 12 has an invalid length. [ 579.468205][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3058'. [ 579.500909][ C1] usblp0: nonzero write bulk status received: -71 [ 579.513125][T15180] netlink: 'syz.6.3058': attribute type 12 has an invalid length. [ 579.533620][T14780] usb 5-1: USB disconnect, device number 23 [ 579.559586][T14780] usblp0: removed [ 580.392167][T15199] overlayfs: failed to clone upperpath [ 580.413863][T15200] netlink: 'syz.4.3065': attribute type 1 has an invalid length. [ 580.700851][T15202] gretap1: entered allmulticast mode [ 580.755050][T15202] bond0: (slave gretap1): making interface the new active one [ 580.787908][T15202] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 580.913175][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3069'. [ 584.362778][ T5847] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 584.565879][ T5847] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25441, setting to 1024 [ 584.603092][ T5847] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 584.636637][ T5847] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 584.650204][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.659674][ T5847] usb 6-1: Product: syz [ 584.664093][ T5847] usb 6-1: Manufacturer: syz [ 584.668718][ T5847] usb 6-1: SerialNumber: syz [ 584.692065][T15270] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 584.928070][ T5847] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 584.993533][T15288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3079'. [ 585.219536][ C0] usblp0: nonzero write bulk status received: -71 [ 585.258571][ T5834] usb 6-1: USB disconnect, device number 26 [ 585.296324][ T5834] usblp0: removed [ 587.057563][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 587.086432][T15344] netlink: 'syz.4.3096': attribute type 12 has an invalid length. [ 587.126735][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 587.154192][T15344] netlink: 'syz.4.3096': attribute type 12 has an invalid length. [ 587.662965][ T5847] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 587.872778][ T5847] usb 6-1: Using ep0 maxpacket: 32 [ 587.885617][ T5847] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 587.901359][ T5847] usb 6-1: config 0 has no interface number 0 [ 587.918063][ T5847] usb 6-1: config 0 interface 184 has no altsetting 0 [ 587.939090][ T5847] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 587.958670][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.982038][ T5847] usb 6-1: Product: syz [ 587.992777][ T5847] usb 6-1: Manufacturer: syz [ 587.997416][ T5847] usb 6-1: SerialNumber: syz [ 588.041399][ T5847] usb 6-1: config 0 descriptor?? [ 588.059368][ T5847] smsc75xx v1.0.0 [ 589.300637][ T5847] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 589.332581][ T5847] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 589.365176][ T5847] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 589.401847][ T5847] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 589.412299][ T1146] ------------[ cut here ]------------ [ 589.418571][ T1146] WARNING: CPU: 1 PID: 1146 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 589.428296][ T1146] Modules linked in: [ 589.432229][ T1146] CPU: 1 PID: 1146 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 589.439884][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.450036][ T1146] Workqueue: iou_exit io_ring_exit_work [ 589.455868][ T1146] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 589.461649][ T1146] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 00 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 71 00 f7 e9 b1 fd ff ff e8 f7 70 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 589.481630][ T1146] RSP: 0018:ffffc900045ffa40 EFLAGS: 00010293 [ 589.487924][ T1146] RAX: ffffffff8a870179 RBX: ffff88814132e000 RCX: ffff888024023c00 [ 589.495978][ T1146] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 589.504052][ T1146] RBP: ffffc900045ffbb0 R08: ffffc900045ff9c7 R09: 1ffff920008bff38 [ 589.512066][ T1146] R10: dffffc0000000000 R11: fffff520008bff39 R12: dffffc0000000000 [ 589.520098][ T1146] R13: 0000000100007052 R14: 0000000100007053 R15: ffff88814132e510 [ 589.528142][ T1146] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 589.537395][ T1146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.544034][ T1146] CR2: 0000200000029000 CR3: 0000000076291000 CR4: 00000000003506e0 [ 589.552039][ T1146] Call Trace: [ 589.555407][ T1146] [ 589.558389][ T1146] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 589.564293][ T1146] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.569634][ T1146] ? process_scheduled_works+0x975/0x1600 [ 589.575460][ T1146] ? process_scheduled_works+0x975/0x1600 [ 589.581212][ T1146] process_scheduled_works+0xa60/0x1600 [ 589.586870][ T1146] ? worker_attach_to_pool+0x370/0x370 [ 589.592378][ T1146] ? assign_work+0x3cc/0x5d0 [ 589.597081][ T1146] worker_thread+0xa5e/0xfe0 [ 589.601729][ T1146] ? _raw_spin_unlock+0x40/0x40 [ 589.606661][ T1146] ? __kthread_parkme+0x71/0x1c0 [ 589.611646][ T1146] kthread+0x2fa/0x390 [ 589.616255][ T1146] ? pr_cont_work+0x550/0x550 [ 589.620976][ T1146] ? kthread_blkcg+0xd0/0xd0 [ 589.625724][ T1146] ret_from_fork+0x48/0x80 [ 589.630207][ T1146] ? kthread_blkcg+0xd0/0xd0 [ 589.634863][ T1146] ret_from_fork_asm+0x11/0x20 [ 589.639691][ T1146] [ 589.642808][ T1146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 589.650120][ T1146] CPU: 1 PID: 1146 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 589.657687][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.667765][ T1146] Workqueue: iou_exit io_ring_exit_work [ 589.673364][ T1146] Call Trace: [ 589.676662][ T1146] [ 589.679615][ T1146] dump_stack_lvl+0x18c/0x250 [ 589.684323][ T1146] ? show_regs_print_info+0x20/0x20 [ 589.689554][ T1146] ? load_image+0x420/0x420 [ 589.694093][ T1146] panic+0x2ca/0x720 [ 589.698020][ T1146] ? bpf_jit_dump+0xd0/0xd0 [ 589.702576][ T1146] ? ret_from_fork_asm+0x11/0x20 [ 589.707553][ T1146] __warn+0x2e0/0x470 [ 589.711572][ T1146] ? io_ring_exit_work+0x3b9/0x830 [ 589.716725][ T1146] ? io_ring_exit_work+0x3b9/0x830 [ 589.721871][ T1146] report_bug+0x2be/0x4f0 [ 589.726316][ T1146] ? io_ring_exit_work+0x3b9/0x830 [ 589.731463][ T1146] ? io_ring_exit_work+0x3b9/0x830 [ 589.736622][ T1146] ? io_ring_exit_work+0x3bb/0x830 [ 589.741770][ T1146] handle_bug+0xcf/0x120 [ 589.746047][ T1146] exc_invalid_op+0x1a/0x50 [ 589.750589][ T1146] asm_exc_invalid_op+0x1a/0x20 [ 589.755467][ T1146] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 589.761224][ T1146] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 00 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 71 00 f7 e9 b1 fd ff ff e8 f7 70 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 589.780871][ T1146] RSP: 0018:ffffc900045ffa40 EFLAGS: 00010293 [ 589.786972][ T1146] RAX: ffffffff8a870179 RBX: ffff88814132e000 RCX: ffff888024023c00 [ 589.794973][ T1146] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 589.802979][ T1146] RBP: ffffc900045ffbb0 R08: ffffc900045ff9c7 R09: 1ffff920008bff38 [ 589.810973][ T1146] R10: dffffc0000000000 R11: fffff520008bff39 R12: dffffc0000000000 [ 589.818985][ T1146] R13: 0000000100007052 R14: 0000000100007053 R15: ffff88814132e510 [ 589.827041][ T1146] ? io_ring_exit_work+0x3b9/0x830 [ 589.832238][ T1146] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 589.838102][ T1146] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.843323][ T1146] ? process_scheduled_works+0x975/0x1600 [ 589.849066][ T1146] ? process_scheduled_works+0x975/0x1600 [ 589.854828][ T1146] process_scheduled_works+0xa60/0x1600 [ 589.860455][ T1146] ? worker_attach_to_pool+0x370/0x370 [ 589.865957][ T1146] ? assign_work+0x3cc/0x5d0 [ 589.870581][ T1146] worker_thread+0xa5e/0xfe0 [ 589.875235][ T1146] ? _raw_spin_unlock+0x40/0x40 [ 589.880123][ T1146] ? __kthread_parkme+0x71/0x1c0 [ 589.885097][ T1146] kthread+0x2fa/0x390 [ 589.889197][ T1146] ? pr_cont_work+0x550/0x550 [ 589.893910][ T1146] ? kthread_blkcg+0xd0/0xd0 [ 589.898533][ T1146] ret_from_fork+0x48/0x80 [ 589.902973][ T1146] ? kthread_blkcg+0xd0/0xd0 [ 589.907598][ T1146] ret_from_fork_asm+0x11/0x20 [ 589.912427][ T1146] [ 589.916054][ T1146] Kernel Offset: disabled [ 589.920505][ T1146] Rebooting in 86400 seconds..