last executing test programs: 3m10.05400221s ago: executing program 2 (id=1211): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000740)='./dm0\x00', 0x6180, r3) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000780)='./dm0\x00', 0x2, 0x0) ioctl$DM_DEV_REMOVE(r2, 0xc138fd04, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) close_range(r0, 0xffffffffffffffff, 0x0) 3m9.677491858s ago: executing program 2 (id=1214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='27', 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x42082, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) 3m9.344940912s ago: executing program 2 (id=1217): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 3m8.993479298s ago: executing program 2 (id=1220): openat(0xffffffffffffff9c, 0x0, 0x222a03, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x101c08a, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000000f40)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") open(&(0x7f0000001240)='./bus\x00', 0x1c927f, 0x148) mount(&(0x7f0000001300)=@loop={'/dev/loop', 0x0}, &(0x7f0000001340)='./bus\x00', 0x0, 0x1000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = open(&(0x7f0000001380)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x1, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) 3m8.801219798s ago: executing program 2 (id=1221): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x10) mount(0x0, 0x0, &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='27', 0x2) readlinkat(r0, 0x0, &(0x7f0000000540)=""/170, 0xaa) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x161) mount$9p_fd(0x0, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', &(0x7f0000000440), 0x12, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m8.365513072s ago: executing program 2 (id=1223): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) write(r0, 0x0, 0x0) 3m8.025984067s ago: executing program 32 (id=1223): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) write(r0, 0x0, 0x0) 1m19.813370287s ago: executing program 4 (id=2132): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x40004100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 1m17.607469882s ago: executing program 4 (id=2140): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m17.327774191s ago: executing program 4 (id=2143): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0xffb) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000000c0)={{0x1088, 0x6, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x1, 0x20, 0x1, r2, 0x0, 0x4, 'syz1\x00', 0x0}) close_range(r0, r1, 0x0) 1m17.048128019s ago: executing program 4 (id=2145): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x186, &(0x7f0000002b00)="$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") mount$bind(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0/../file0\x00', &(0x7f0000000840)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000940)='.\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 1m16.707965584s ago: executing program 4 (id=2148): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x808400, &(0x7f0000000080)={[{@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@acl}]}, 0x1, 0x45f, &(0x7f0000000880)="$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") r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x40000, 0xd8) lseek(r1, 0x5, 0x0) getdents64(r1, 0x0, 0x22) 1m15.806380286s ago: executing program 4 (id=2151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) symlink(&(0x7f0000000000)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000240)={r2, 0x1, 0x10001}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)={0x74, 0x0, 0x100}) mount$cgroup(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044084) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000540)=""/15, &(0x7f0000000580)=0xf) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) 1m15.27791737s ago: executing program 33 (id=2151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) symlink(&(0x7f0000000000)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000240)={r2, 0x1, 0x10001}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)={0x74, 0x0, 0x100}) mount$cgroup(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044084) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000540)=""/15, &(0x7f0000000580)=0xf) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) 56.695143476s ago: executing program 0 (id=2229): syz_clone3(&(0x7f0000000140)={0x1801480, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x149000, 0x19a) r1 = pidfd_getfd(r0, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0xc000, &(0x7f00000003c0), 0x1, 0x4bc, &(0x7f0000000400)="$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") llistxattr(0x0, 0x0, 0x0) setns(r1, 0x6c020000) 56.0620752s ago: executing program 0 (id=2233): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000900)='mnt\x00', 0x4, &(0x7f0000000940), 0x0, 0x236, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000c40)=@v2={0x2, @aes256, 0x7cb41d07c919c7b9, '\x00', @d}) 55.634945864s ago: executing program 0 (id=2235): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x4002, &(0x7f0000000180)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00'], 0x2, 0xc30, &(0x7f0000000280)="$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") 55.149518063s ago: executing program 0 (id=2237): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x200000, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYBLOB="7974a2c7c2a8fd7928bfa67e29b7258a159fb7427438229d084602e1c7264a51f9be1182ede25fb4f5f811fe17ec65ddc4e6961fd64bae63943bdafcc9c16529e0c29077688549851afadb85c1a81abb9a5bf8eae5684aa90fa133a049f004a0f6e17df59acdbc5e7651a94aa46cbcf35aabc44c23a31a36b964", @ANYRESDEC=r0], 0x1, 0x3a0, &(0x7f0000000000)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./mnt_trace\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) 54.854498173s ago: executing program 0 (id=2239): r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = dup(r0) r2 = fanotify_init(0x52, 0x101001) fanotify_mark(r2, 0x1, 0x800001b, r1, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000680), 0x0, 0x0, 0x1) 54.334424906s ago: executing program 0 (id=2241): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000940)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000e40)=0x3, 0x4) 53.969934524s ago: executing program 34 (id=2241): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000940)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000e40)=0x3, 0x4) 40.120498287s ago: executing program 6 (id=2309): openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x24281, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',root', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000000b40), 0x2000, 0x0) mount(0x0, &(0x7f0000002c40)='./proc\x00', &(0x7f0000002c80)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x12a) write$cgroup_int(r1, &(0x7f0000002cc0)=0x7ff, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = inotify_init() r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x5e21, @remote}, 0x10) r5 = socket(0x8, 0x2, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x400261f3, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002d00)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002d40)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, 0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000002dc0)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 39.167916894s ago: executing program 6 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000400)=0xe8) syz_mount_image$ext4(&(0x7f0000002400)='ext4\x00', &(0x7f0000002440)='./mnt\x00', 0x0, &(0x7f0000000440)={[], [{@fowner_gt={'fowner>', r1}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!!'}}, {@uid_eq={'uid', 0x3d, r1}}]}, 0x0, 0x23df, &(0x7f00000049c0)="$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") r2 = fsopen$ext4(&(0x7f00000048c0)='ext4\x00', 0x0) fsconfig$ext4_source(r2, 0x1, &(0x7f0000004900), &(0x7f0000004940)={'/dev/loop', 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 36.377916768s ago: executing program 6 (id=2322): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x802) write$evdev(r0, &(0x7f0000000040), 0x100000008) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x80044584, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0xffffe000) 35.220630017s ago: executing program 6 (id=2325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f00000021c0)='ext3\x00', &(0x7f0000002200)='./file0\x00', 0x0, &(0x7f0000002240)={[{@bh}, {@minixdf}, {@bh}, {@noload}, {@jqfmt_vfsv0}, {@usrjquota}]}, 0xff, 0x461, &(0x7f00000022c0)="$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") 33.877547364s ago: executing program 6 (id=2330): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x18e0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/profiling', 0x80, 0x1cf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0x15, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) close(0x3) 32.741421829s ago: executing program 6 (id=2337): utimes(0x0, &(0x7f0000000000)={{}, {0x0, 0x80000000}}) 31.66207245s ago: executing program 35 (id=2337): utimes(0x0, &(0x7f0000000000)={{}, {0x0, 0x80000000}}) 5.129493827s ago: executing program 1 (id=2441): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b80)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200003, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000200000002"], 0x0) 4.969356683s ago: executing program 1 (id=2445): prlimit64(0x0, 0xe, &(0x7f0000000e00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e40)=0x7) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000fc0)='children\x00') syz_clone3(&(0x7f0000001bc0)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000001c40)=""/4092, 0xffc, 0x4) 4.708630169s ago: executing program 1 (id=2447): r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f9, 0x0, 0x0) shutdown(r0, 0x1) recvmsg(r0, 0x0, 0x100) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000013c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000014c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001580), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) socket$inet6(0xa, 0x2, 0x3a) r5 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000180)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 3.744621388s ago: executing program 1 (id=2451): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000034c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000003500)=ANY=[@ANYBLOB="38010000fe0000a666"], 0x138) mount$9p_fd(0x0, &(0x7f0000003540)='./file0\x00', &(0x7f0000003580), 0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.653288357s ago: executing program 5 (id=2453): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x7, 0x9, 0x4, 0x0, 0x0, [{{r1}, 0x9}, {{r0}, 0x4d}, {{r0}, 0x2198}, {{r0}, 0x7f}]}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001380)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '129'}}]}) 3.549380638s ago: executing program 1 (id=2455): ioperm(0x0, 0x8, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000001380)={{}, {0x77359400}}) 3.457512117s ago: executing program 5 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000500)={0x0, &(0x7f0000000540)}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r4, &(0x7f0000000840)={0x2, 0xffff, @rand_addr=0x64010100}, 0x10) connect$inet(r4, &(0x7f0000000880)={0x2, 0x4e23, @multicast2}, 0x10) syslog(0x9, &(0x7f00000008c0)=""/22, 0x16) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) setsockopt(r0, 0x5, 0x6, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) 3.435451519s ago: executing program 1 (id=2457): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x841e, &(0x7f00000006c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000001140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x181042, 0x65) pwrite64(r1, &(0x7f00000015c0)='2', 0x1, 0x84fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write(0xffffffffffffffff, &(0x7f0000001700)='0', 0x1) write(0xffffffffffffffff, 0x0, 0x0) llistxattr(0x0, &(0x7f0000001000), 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) unshare(0x24020400) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) memfd_secret(0x80000) 2.461231099s ago: executing program 5 (id=2458): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100}, 0x0) r0 = getpid() getcwd(0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffff8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x704}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9, 0x700}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x2, @rand_addr=0x64010101}}]}, 0x50}}, 0x20004010) socket$inet6_udp(0xa, 0x2, 0x0) 1.993327146s ago: executing program 3 (id=2461): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f0000000200)={0x2000, 0x24800, 0x1}}) 1.937509162s ago: executing program 7 (id=2462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x478, 0x2c, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xe, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x10000000, 0x67f7, 0x3, 0x8005, {0x6, 0x0, 0x3, 0xa4, 0xcf0d, 0x7e50e135}, {0x1, 0x2, 0x3, 0x3, 0x6, 0x2}, 0x2, 0x1, 0x80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x5, 0xac000000, 0x9, 0x1, 0x9, 0x10000, 0x6, 0x103, 0x7e22, 0x400, 0x8000000, 0x1, 0x80000000, 0x401, 0x10, 0x2, 0x271e2391, 0x80000000, 0x7583, 0x200, 0x0, 0x9, 0x2, 0x4, 0xfe9, 0x2, 0xe83f, 0x1, 0x62f, 0x7, 0x200, 0x800, 0x1, 0xfffffff7, 0x1, 0x409a, 0x3, 0x10001, 0x101, 0xa2, 0x4, 0x2, 0x8, 0x40, 0x3, 0x0, 0x8, 0xe, 0x0, 0x7, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x3, 0x200, 0xec3, 0xfffffd01, 0x9, 0xd, 0x9, 0xf911, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1, 0x5, 0x80000000, 0x4, 0x9, 0x7, 0x1, 0x0, 0x6, 0x100, 0xf, 0x2, 0x5, 0x34cf, 0xa, 0x4, 0x7, 0x4, 0x88, 0xd9, 0x1000, 0xffff0a0c, 0x7, 0x3, 0x3e8, 0x9, 0x80, 0x3, 0x6, 0xcb0a, 0xe, 0x3, 0x9, 0x4, 0x7, 0x5, 0xfffffff8, 0x1, 0x0, 0x6, 0xc, 0x9, 0xfffffffd, 0x4, 0x3, 0x7, 0x1, 0x5, 0xedf, 0x81, 0x401, 0x7ff, 0x0, 0x8, 0x0, 0x6, 0xa29f, 0x101, 0x2, 0x7, 0x3, 0x200, 0x3, 0xffffffff, 0x3, 0x5, 0x8001, 0x9, 0x7ff, 0x9, 0x1, 0x2, 0xfffffff9, 0x3, 0x79cb, 0x7, 0xff, 0x501, 0x9, 0x3, 0x1, 0x6441, 0xfffffffe, 0x0, 0x4, 0x5, 0x87c, 0x5, 0x1, 0xfffffffd, 0x6, 0x4, 0x43a, 0x3ff, 0x2, 0xfffffffb, 0x400, 0x6, 0x10000, 0x5, 0x7, 0x10000, 0x0, 0xff, 0x80000001, 0x599, 0x7, 0xfffff001, 0x3, 0x1, 0x1, 0x1, 0x7, 0x7, 0x1c, 0x3, 0x1, 0x15, 0xa, 0xc, 0x6, 0x9, 0x6, 0x47c, 0x8, 0xa09, 0x0, 0x0, 0x3, 0xd, 0xa655, 0xd, 0xdb8, 0x9, 0x0, 0x5b6, 0xfffffffc, 0x2, 0x7, 0xdf3, 0x5, 0xd09, 0x7272, 0x5b, 0x3, 0x6, 0x7, 0x734, 0x2, 0x10000, 0x20000000, 0x6, 0x0, 0x0, 0x3, 0x4, 0x7, 0x7, 0x3, 0x8000, 0x4, 0x9, 0x10000, 0x40, 0x4, 0x7fff, 0x7ff, 0xd, 0x6, 0xe0fc, 0x2, 0x9, 0x9, 0x80000001, 0xbf, 0xfffffff8, 0x1000, 0x8, 0x634, 0x4775, 0x0, 0x8, 0x4, 0x5, 0x4, 0x8000, 0x6]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x890}, 0x0) write$tun(r0, &(0x7f00000032c0)={@val={0x0, 0x86dd}, @val={0x1, 0x80, 0x4, 0x5, 0x8000, 0x1}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @remote, @mcast2, @remote, @local}}, 0x42) 1.786954778s ago: executing program 3 (id=2463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000e40)=""/262, 0x106}, {&(0x7f0000000f80)=""/4110, 0x100e}, {&(0x7f0000001fc0)=""/237, 0xed}, {&(0x7f0000002180)=""/173, 0xad}, {&(0x7f0000002280)=""/101, 0x65}, {&(0x7f0000002300)=""/165, 0xa5}, {&(0x7f00000023c0)=""/274, 0x112}], 0x7}, 0x3}], 0x1, 0x20140, 0x0) 1.630968443s ago: executing program 7 (id=2464): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1, r0}, 0xc) 1.56952607s ago: executing program 3 (id=2465): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) shutdown(r0, 0x1) 1.46830162s ago: executing program 5 (id=2466): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x80000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, {0x8, @core='@stats_delete 0'}}) 1.436081943s ago: executing program 7 (id=2467): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40008000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_pid(r0, 0x0, 0x0) 1.393915178s ago: executing program 3 (id=2468): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000280)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}}) 1.261551751s ago: executing program 5 (id=2469): sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x651, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/packet\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) preadv(r0, &(0x7f00000029c0)=[{&(0x7f0000002a00)=""/24, 0x18}], 0x1, 0x5, 0xfffffffc) 1.261462901s ago: executing program 3 (id=2470): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 1.246625053s ago: executing program 7 (id=2471): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000d40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x804) 1.199840907s ago: executing program 5 (id=2472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x478, 0x2c, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xe, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x10000000, 0x67f7, 0x3, 0x8005, {0x6, 0x0, 0x3, 0xa4, 0xcf0d, 0x7e50e135}, {0x1, 0x2, 0x3, 0x3, 0x6, 0x2}, 0x2, 0x1, 0x80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x5, 0xac000000, 0x9, 0x1, 0x9, 0x10000, 0x6, 0x103, 0x7e22, 0x400, 0x8000000, 0x1, 0x80000000, 0x401, 0x10, 0x2, 0x271e2391, 0x80000000, 0x7583, 0x200, 0x0, 0x9, 0x2, 0x4, 0xfe9, 0x2, 0xe83f, 0x1, 0x62f, 0x7, 0x200, 0x800, 0x1, 0xfffffff7, 0x1, 0x409a, 0x3, 0x10001, 0x101, 0xa2, 0x4, 0x2, 0x8, 0x40, 0x3, 0x0, 0x8, 0xe, 0x0, 0x7, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x3, 0x200, 0xec3, 0xfffffd01, 0x9, 0xd, 0x9, 0xf911, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1, 0x5, 0x80000000, 0x4, 0x9, 0x7, 0x1, 0x0, 0x6, 0x100, 0xf, 0x2, 0x5, 0x34cf, 0xa, 0x4, 0x7, 0x4, 0x88, 0xd9, 0x1000, 0xffff0a0c, 0x7, 0x3, 0x3e8, 0x9, 0x80, 0x3, 0x6, 0xcb0a, 0xe, 0x3, 0x9, 0x4, 0x7, 0x5, 0xfffffff8, 0x1, 0x0, 0x6, 0xc, 0x9, 0xfffffffd, 0x4, 0x3, 0x7, 0x1, 0x5, 0xedf, 0x81, 0x401, 0x7ff, 0x0, 0x8, 0x0, 0x6, 0xa29f, 0x101, 0x2, 0x7, 0x3, 0x200, 0x3, 0xffffffff, 0x3, 0x5, 0x8001, 0x9, 0x7ff, 0x9, 0x1, 0x2, 0xfffffff9, 0x3, 0x79cb, 0x7, 0xff, 0x501, 0x9, 0x3, 0x1, 0x6441, 0xfffffffe, 0x0, 0x4, 0x5, 0x87c, 0x5, 0x1, 0xfffffffd, 0x6, 0x4, 0x43a, 0x3ff, 0x2, 0xfffffffb, 0x400, 0x6, 0x10000, 0x5, 0x7, 0x10000, 0x0, 0xff, 0x80000001, 0x599, 0x7, 0xfffff001, 0x3, 0x1, 0x1, 0x1, 0x7, 0x7, 0x1c, 0x3, 0x1, 0x15, 0xa, 0xc, 0x6, 0x9, 0x6, 0x47c, 0x8, 0xa09, 0x0, 0x0, 0x3, 0xd, 0xa655, 0xd, 0xdb8, 0x9, 0x0, 0x5b6, 0xfffffffc, 0x2, 0x7, 0xdf3, 0x5, 0xd09, 0x7272, 0x5b, 0x3, 0x6, 0x7, 0x734, 0x2, 0x10000, 0x20000000, 0x6, 0x0, 0x0, 0x3, 0x4, 0x7, 0x7, 0x3, 0x8000, 0x4, 0x9, 0x10000, 0x40, 0x4, 0x7fff, 0x7ff, 0xd, 0x6, 0xe0fc, 0x2, 0x9, 0x9, 0x80000001, 0xbf, 0xfffffff8, 0x1000, 0x8, 0x634, 0x4775, 0x0, 0x8, 0x4, 0x5, 0x4, 0x8000, 0x6]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x890}, 0x0) write$tun(r0, &(0x7f00000032c0)={@val={0x0, 0x86dd}, @val={0x1, 0x80, 0x4, 0x5, 0x8000, 0x1}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @remote, @mcast2, @remote, @local}}, 0x42) 1.08152279s ago: executing program 7 (id=2473): r0 = open(&(0x7f0000000580)='./file1\x00', 0x125142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f0000000740)=""/102368, 0x18fe0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2007ffc) 1.081368759s ago: executing program 3 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100}, 0x0) r0 = getpid() getcwd(0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffff8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x704}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9, 0x700}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x2, @rand_addr=0x64010101}}]}, 0x50}}, 0x20004010) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 7 (id=2475): bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xd, 0x4, &(0x7f0000001240)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27}]}, &(0x7f0000001280)='syzkaller\x00', 0x4, 0x99, &(0x7f00000012c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) kernel console output (not intermixed with test programs): my0: left promiscuous mode [ 249.793568][T11187] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.812949][T11200] macvtap0: left promiscuous mode [ 249.843007][T11200] macvtap0: left allmulticast mode [ 250.026326][T11187] XFS (loop4): Ending clean mount [ 250.083901][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.112036][ T27] audit: type=1804 audit(2000000016.400:216): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1617" name="/newroot/105/file1/bus" dev="loop4" ino=6153 res=1 errno=0 [ 250.218097][T11213] loop0: detected capacity change from 0 to 32768 [ 250.274907][ T9715] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.324719][T11213] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.502589][T11213] XFS (loop0): Ending clean mount [ 250.645056][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.655794][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.665733][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.688255][ T5780] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.006305][T11248] erspan0: entered promiscuous mode [ 251.039032][T11248] erspan0: left promiscuous mode [ 251.374011][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.452311][ T5447] dummy0: entered promiscuous mode [ 251.684128][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.044784][ T27] audit: type=1326 audit(2000000018.340:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.1639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2109a8fd9 code=0x7ffc0000 [ 252.112185][T11262] loop1: detected capacity change from 0 to 32768 [ 252.122492][ T27] audit: type=1326 audit(2000000018.370:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.1639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2109a8fd9 code=0x7ffc0000 [ 252.208478][ T27] audit: type=1326 audit(2000000018.370:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.1639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2109a8fd9 code=0x7ffc0000 [ 252.254612][ T27] audit: type=1326 audit(2000000018.370:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.1639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2109a8fd9 code=0x7ffc0000 [ 252.294860][T11262] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 252.320808][ T27] audit: type=1326 audit(2000000018.370:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.1639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ff2109a8fd9 code=0x7ffc0000 [ 252.404887][ T27] audit: type=1326 audit(2000000018.370:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.1639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2109a8fd9 code=0x7ffc0000 [ 252.431326][T11262] XFS (loop1): Ending clean mount [ 252.473465][T11262] overlayfs: failed to resolve './bus': -2 [ 252.521483][ T27] audit: type=1326 audit(2000000018.370:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.1639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2109a8fd9 code=0x7ffc0000 [ 252.569965][ T27] audit: type=1326 audit(2000000018.380:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.1639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff2109a8fd9 code=0x7ffc0000 [ 252.595515][ T27] audit: type=1326 audit(2000000018.380:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.1639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2109a8fd9 code=0x7ffc0000 [ 252.643157][ T5782] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 252.725885][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.348257][T11346] loop0: detected capacity change from 0 to 256 [ 253.539437][T11199] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.564593][T11199] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.596955][T11199] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 253.764190][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.844204][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.963833][T11369] loop0: detected capacity change from 0 to 512 [ 253.971235][T11369] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 254.040117][T10057] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.067721][T11378] : renamed from bond0 (while UP) [ 254.186874][T11199] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.236470][T11199] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.274101][T11199] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 254.411273][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.683134][T11397] loop1: detected capacity change from 0 to 2048 [ 254.691086][T11398] loop4: detected capacity change from 0 to 16 [ 254.711347][T11398] erofs: (device loop4): mounted with root inode @ nid 36. [ 254.742566][T11397] loop1: p1 < > p4 [ 254.742566][T11397] p4: [ 254.759408][T11397] loop1: p4 size 722688 extends beyond EOD, truncated [ 254.804196][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.031395][T11403] overlayfs: missing 'lowerdir' [ 255.169675][T11413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1680'. [ 255.191959][T11413] vlan0: entered promiscuous mode [ 255.202278][T11413] ifb0: entered promiscuous mode [ 255.371527][T11422] fuse: Unknown parameter '00000000000000000000' [ 255.769783][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776267][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.785032][ T2954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.796116][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.806340][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.738833][T11475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.757803][T11475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.776298][T11475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.777306][T11479] loop4: detected capacity change from 0 to 16 [ 256.839888][T11479] erofs: (device loop4): mounted with root inode @ nid 36. [ 256.865314][T11479] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 256.900114][T11479] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 257.161537][T11492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1704'. [ 257.238627][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 257.238642][ T27] audit: type=1326 audit(2000000023.530:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 257.277321][ T27] audit: type=1326 audit(2000000023.530:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 257.335922][ T27] audit: type=1326 audit(2000000023.560:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 257.360568][ T27] audit: type=1326 audit(2000000023.560:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 257.393388][ T27] audit: type=1326 audit(2000000023.560:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 257.417983][ T27] audit: type=1326 audit(2000000023.560:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 257.455634][ T27] audit: type=1326 audit(2000000023.560:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 257.480308][ T27] audit: type=1326 audit(2000000023.560:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 257.504915][ T27] audit: type=1326 audit(2000000023.560:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.3.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 258.019948][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1715'. [ 258.047912][T11517] 8021q: VLANs not supported on ip6_vti0 [ 258.374797][T11535] process 'syz.3.1722' launched '/dev/fd/3/./proc' with NULL argv: empty string added [ 258.535617][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1726'. [ 258.564047][T11547] 8021q: VLANs not supported on ip6_vti0 [ 258.653056][T11550] 9pnet_fd: Insufficient options for proto=fd [ 258.964837][ T5872] net_ratelimit: 7 callbacks suppressed [ 258.964852][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.992313][ T27] audit: type=1326 audit(2000000025.280:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11561 comm="syz.3.1735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b5ba8fd9 code=0x7ffc0000 [ 259.115453][T11552] loop0: detected capacity change from 0 to 32768 [ 259.207592][T11552] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 259.341963][T11578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1738'. [ 259.366751][T11552] XFS (loop0): Ending clean mount [ 259.386586][T11578] 8021q: VLANs not supported on ip6_vti0 [ 259.506491][ T5780] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 259.574840][T11556] loop4: detected capacity change from 0 to 32768 [ 259.606056][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1743'. [ 259.657031][T11556] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 259.839156][T11597] 9pnet_fd: Insufficient options for proto=fd [ 259.889650][T11556] XFS (loop4): Ending clean mount [ 260.004059][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.039742][ T9715] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 260.162544][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 260.193009][T11613] macvtap1: entered promiscuous mode [ 260.201109][T11613] macvtap1: entered allmulticast mode [ 260.207413][T11613] dummy0: entered allmulticast mode [ 260.484015][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.058098][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.315803][T11638] rxe_eth0 speed is unknown, defaulting to 1000 [ 261.677282][T11650] 9pnet_fd: Insufficient options for proto=fd [ 261.707738][T11652] ip_tables: iptables: counters copy to user failed while replacing table [ 262.019204][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 262.042142][T11667] macvtap2: entered promiscuous mode [ 262.048606][T11667] macvtap2: entered allmulticast mode [ 262.084265][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.345235][T11678] 9pnet_fd: Insufficient options for proto=fd [ 262.663412][T11665] loop4: detected capacity change from 0 to 32768 [ 262.750934][T11665] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 263.004848][T11665] XFS (loop4): Ending clean mount [ 263.057274][T11706] overlayfs: failed to clone upperpath [ 263.105119][T11706] overlayfs: failed to clone upperpath [ 263.125796][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.195800][ T9715] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 263.307243][T11712] netlink: 'syz.0.1775': attribute type 16 has an invalid length. [ 263.377431][T11712] netlink: 'syz.0.1775': attribute type 17 has an invalid length. [ 263.455039][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.480884][T11715] loop0: detected capacity change from 0 to 512 [ 263.524186][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.568850][T11718] 9pnet_fd: Insufficient options for proto=fd [ 263.575977][T11712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.042417][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 264.102939][T11735] macvtap3: entered promiscuous mode [ 264.118453][T11735] macvtap3: entered allmulticast mode [ 264.146603][T11739] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1783'. [ 264.158961][T11739] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1783'. [ 264.168388][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.175326][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 264.175339][ T27] audit: type=1326 audit(2000000030.460:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 264.211474][ T27] audit: type=1326 audit(2000000030.480:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 264.213866][T11739] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1783'. [ 264.242335][ T27] audit: type=1326 audit(2000000030.530:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 264.290261][ T27] audit: type=1326 audit(2000000030.530:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 264.354185][ T27] audit: type=1326 audit(2000000030.530:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 264.432999][ T27] audit: type=1326 audit(2000000030.570:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 264.465875][ T27] audit: type=1326 audit(2000000030.570:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 264.551029][ T27] audit: type=1326 audit(2000000030.570:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 264.643567][ T27] audit: type=1326 audit(2000000030.570:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 264.671196][ T27] audit: type=1326 audit(2000000030.570:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.1.1784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda71da8fd9 code=0x7ffc0000 [ 265.118158][T11781] "syz.3.1794" (11781) uses obsolete ecb(arc4) skcipher [ 265.203964][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.150964][T11842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1814'. [ 266.190389][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 266.234139][T11842] sit1: entered allmulticast mode [ 266.263898][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.600456][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.224146][T11881] 9pnet_fd: Insufficient options for proto=fd [ 267.298166][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.116392][T11909] device-mapper: ioctl: Unable to rename non-existent device, syzb0 to CRP-syzb1 [ 268.324221][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.627798][T11914] 9pnet: Could not find request transport: 0x0000000000000003 [ 268.899681][T11925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 268.907939][T11925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 268.915888][T11925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 268.923794][T11925] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.364355][ T5848] net_ratelimit: 50 callbacks suppressed [ 269.364370][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.604968][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.753890][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 269.814615][T11947] macvtap4: entered promiscuous mode [ 269.820138][T11947] macvtap4: entered allmulticast mode [ 270.411629][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.443988][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.483468][T11997] loop1: detected capacity change from 0 to 32768 [ 271.515183][T11997] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 271.701662][T11997] XFS (loop1): Ending clean mount [ 271.815937][ T5782] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 272.324686][T12056] loop0: detected capacity change from 0 to 16 [ 272.367330][T12056] erofs: (device loop0): mounted with root inode @ nid 36. [ 272.480219][T11199] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.492330][T12058] fuse: root generation should be zero [ 272.499782][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.525429][T11199] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 272.560501][T11199] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 272.622011][T12076] FAULT_INJECTION: forcing a failure. [ 272.622011][T12076] name failslab, interval 1, probability 0, space 0, times 0 [ 272.644190][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.646141][T12076] CPU: 1 PID: 12076 Comm: syz.4.1873 Not tainted syzkaller #0 [ 272.659747][T12076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 272.669823][T12076] Call Trace: [ 272.673122][T12076] [ 272.676071][T12076] dump_stack_lvl+0x18c/0x250 [ 272.680779][T12076] ? show_regs_print_info+0x20/0x20 [ 272.686010][T12076] ? load_image+0x420/0x420 [ 272.690549][T12076] ? __lock_acquire+0x7eb0/0x7eb0 [ 272.695607][T12076] should_fail_ex+0x394/0x4c0 [ 272.700317][T12076] should_failslab+0x9/0x20 [ 272.704838][T12076] slab_pre_alloc_hook+0x59/0x300 [ 272.709878][T12076] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 272.715864][T12076] kmem_cache_alloc_lru+0x4d/0x2c0 [ 272.720970][T12076] ? new_inode_pseudo+0x82/0x1d0 [ 272.725903][T12076] new_inode_pseudo+0x82/0x1d0 [ 272.730662][T12076] alloc_anon_inode+0x1e/0x2f0 [ 272.735426][T12076] aio_setup_ring+0x104/0xf30 [ 272.740102][T12076] ? pcpu_alloc+0x11e7/0x1880 [ 272.744773][T12076] ? ioctx_alloc+0x2e2/0x770 [ 272.749360][T12076] ? free_ioctx_reqs+0x190/0x190 [ 272.754300][T12076] ioctx_alloc+0x316/0x770 [ 272.758721][T12076] __se_sys_io_setup+0x7b/0x190 [ 272.763569][T12076] do_syscall_64+0x55/0xb0 [ 272.767985][T12076] ? clear_bhb_loop+0x40/0x90 [ 272.772656][T12076] ? clear_bhb_loop+0x40/0x90 [ 272.777333][T12076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.783233][T12076] RIP: 0033:0x7fd35efa8fd9 [ 272.787640][T12076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.807246][T12076] RSP: 002b:00007fd35fdee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 272.815740][T12076] RAX: ffffffffffffffda RBX: 00007fd35f225fa0 RCX: 00007fd35efa8fd9 [ 272.823704][T12076] RDX: 0000000000000000 RSI: 0000200000000e00 RDI: 000000000000ce24 [ 272.831670][T12076] RBP: 00007fd35f037fed R08: 0000000000000000 R09: 0000000000000000 [ 272.839631][T12076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.847597][T12076] R13: 00007fd35f226038 R14: 00007fd35f225fa0 R15: 00007ffecdd6e938 [ 272.855572][T12076] [ 273.055662][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.528894][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.564390][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.622902][T12112] loop1: detected capacity change from 0 to 32768 [ 274.658697][T12112] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 274.753400][T12112] XFS (loop1): Ending clean mount [ 274.978809][ T5782] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 275.609258][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.692167][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.903690][T12144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1895'. [ 276.651300][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.768570][T12180] warning: `syz.4.1905' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 276.829393][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1906'. [ 276.991366][T12153] loop0: detected capacity change from 0 to 32768 [ 277.080288][T12153] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 277.308858][T12153] XFS (loop0): Ending clean mount [ 277.327210][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 277.344564][T12210] macvtap5: entered promiscuous mode [ 277.355115][T12210] macvtap5: entered allmulticast mode [ 277.473292][ T5780] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 277.663430][T12220] tap0: tun_chr_ioctl cmd 1074025684 [ 277.676327][T12215] rxe_eth0 speed is unknown, defaulting to 1000 [ 277.684066][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.741362][T12223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1917'. [ 277.939381][T11199] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.970765][T11199] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.995587][T11199] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 278.110130][T12232] sg_read: process 1074 (syz.1.1921) changed security contexts after opening file descriptor, this is not allowed. [ 278.724215][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.735239][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.901184][T12229] loop0: detected capacity change from 0 to 32768 [ 278.978623][T12229] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 279.176228][T12229] XFS (loop0): Ending clean mount [ 279.391637][T12247] loop1: detected capacity change from 0 to 32768 [ 279.396100][ T5780] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 279.442864][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'. [ 279.503556][T12247] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 279.570068][T12277] macvtap6: entered promiscuous mode [ 279.593114][T12277] macvtap6: entered allmulticast mode [ 279.708717][T12247] XFS (loop1): Ending clean mount [ 279.766768][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.865278][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 280.804659][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.767573][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.844080][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.653965][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.885045][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.924070][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.503224][T12429] loop4: detected capacity change from 0 to 2048 [ 284.542654][T12429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.813885][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.852401][T12435] rxe_eth0 speed is unknown, defaulting to 1000 [ 284.964287][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.605100][T12447] loop4: detected capacity change from 0 to 32768 [ 285.664012][T12447] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 285.751516][T12482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.760196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.873734][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 285.876191][T12447] XFS (loop4): Ending clean mount [ 285.899947][T12485] macvtap7: entered promiscuous mode [ 285.912922][T12485] macvtap7: entered allmulticast mode [ 286.006522][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.089142][ T9715] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 286.411181][T12502] loop0: detected capacity change from 0 to 8 [ 286.528554][T12502] SQUASHFS error: Failed to read block 0x8f: -5 [ 286.551689][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 286.551701][ T27] audit: type=1800 audit(2000000052.840:277): pid=12502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1995" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 287.049362][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.260098][ T5848] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 287.432318][T12537] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 287.450149][T12537] bridge0: port 3(batadv0) entered blocking state [ 287.457088][T12537] bridge0: port 3(batadv0) entered disabled state [ 287.466052][T12537] batadv0: entered allmulticast mode [ 287.480242][T12537] batadv0: entered promiscuous mode [ 287.488360][T12537] bridge0: port 3(batadv0) entered blocking state [ 287.494914][T12537] bridge0: port 3(batadv0) entered forwarding state [ 287.856610][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.929950][ T2946] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 287.939885][ T2946] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 288.095406][ T5167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.214062][ T5848] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 288.230928][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.241829][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2006'. [ 288.278609][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 288.361642][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 288.417661][T12549] macvtap8: entered promiscuous mode [ 288.444299][T12549] macvtap8: entered allmulticast mode [ 288.548329][ T5848] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, fa:a1:cf:65:ef:9c [ 288.723052][ T5848] usb 1-1: USB disconnect, device number 2 [ 288.754306][ T5848] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 289.125412][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.484434][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2016'. [ 289.747377][T12609] loop0: detected capacity change from 0 to 34816 [ 289.779256][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 289.829238][T12612] macvtap9: entered promiscuous mode [ 289.844011][T12612] macvtap9: entered allmulticast mode [ 289.875131][T12609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.946306][T12609] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 290.011403][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.165907][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.177332][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.206508][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.232091][T12617] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 290.304225][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 290.515364][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 290.557140][ T8] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 290.583346][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.606468][ T8] usb 5-1: Product: syz [ 290.625420][ T8] usb 5-1: Manufacturer: syz [ 290.630062][ T8] usb 5-1: SerialNumber: syz [ 290.669885][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2027'. [ 290.688869][ T8] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 290.738933][ T8] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 290.790622][ T8] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 290.829184][ T8] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 290.859348][ T8] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 290.862590][T12643] 9pnet: Could not find request transport: fd0x00000000000000070x0000000000000008 [ 290.891119][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.131846][ T1195] usb 5-1: USB disconnect, device number 2 [ 291.176355][ T1195] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 291.205953][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.211607][ T1195] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 291.254599][ T1195] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 291.283294][ T1195] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 291.318839][ T1195] keyspan 5-1:1.0: device disconnected [ 291.927067][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 291.977208][T12682] macvtap10: entered promiscuous mode [ 292.010688][T12682] macvtap10: entered allmulticast mode [ 292.109387][T12686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2038'. [ 292.246519][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.257357][ T5167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.469687][T12693] 9pnet: Could not find request transport: fd0x00000000000000070x0000000000000008 [ 292.756521][T12709] loop1: detected capacity change from 0 to 2048 [ 292.870531][T12709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.934469][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2047'. [ 293.177022][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2048'. [ 293.294130][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.360217][T12727] 9pnet: Could not find request transport: fd0x00000000000000070x0000000000000008 [ 293.438225][T12707] loop4: detected capacity change from 0 to 32768 [ 293.536378][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 293.546598][T12707] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 293.584714][T12743] macvtap11: entered promiscuous mode [ 293.592226][T12743] macvtap11: entered allmulticast mode [ 294.056355][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.104333][T12707] XFS (loop4): Ending clean mount [ 294.349793][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.375347][T12707] overlayfs: missing 'lowerdir' [ 294.494026][ T9715] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 294.539017][T12760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 294.551251][T12761] loop1: detected capacity change from 0 to 1024 [ 294.765475][T12766] loop0: detected capacity change from 0 to 128 [ 294.825663][T12766] FAT-fs (loop0): Directory bread(block 32) failed [ 294.843666][T12766] FAT-fs (loop0): Directory bread(block 33) failed [ 294.850316][T12766] FAT-fs (loop0): Directory bread(block 34) failed [ 294.878436][T12766] FAT-fs (loop0): Directory bread(block 35) failed [ 294.902971][T12766] FAT-fs (loop0): Directory bread(block 36) failed [ 294.923721][T12766] FAT-fs (loop0): Directory bread(block 37) failed [ 294.953393][T12766] FAT-fs (loop0): Directory bread(block 38) failed [ 295.005269][T12766] FAT-fs (loop0): Directory bread(block 39) failed [ 295.024063][T12766] FAT-fs (loop0): Directory bread(block 40) failed [ 295.030691][T12766] FAT-fs (loop0): Directory bread(block 41) failed [ 295.049912][T12773] 9pnet_fd: Insufficient options for proto=fd [ 295.955612][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.096121][T12766] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 296.119923][T12766] FAT-fs (loop0): Filesystem has been set read-only [ 296.180860][T12790] loop4: detected capacity change from 0 to 512 [ 296.261902][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 296.348175][T12793] macvtap12: entered promiscuous mode [ 296.395217][T12793] macvtap12: entered allmulticast mode [ 296.894488][T12816] 9pnet_fd: Insufficient options for proto=fd [ 296.964229][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.124346][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.299637][T12800] loop1: detected capacity change from 0 to 32768 [ 297.351667][T12800] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 297.460476][T12800] XFS (loop1): Ending clean mount [ 297.533373][T12800] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.577642][T12800] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 297.631914][ T5782] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 297.745534][T12862] loop0: detected capacity change from 0 to 33280 [ 297.770895][T12862] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 297.843979][T12862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 297.886474][T12862] EXT4-fs (loop0): 1 truncate cleaned up [ 297.896158][T12862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.005076][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.078389][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.539886][T12888] TC_ACT_REPEAT abuse ? [ 299.045903][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.050808][T12911] loop1: detected capacity change from 0 to 33280 [ 299.153010][T12911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.217691][T12916] loop0: detected capacity change from 0 to 33792 [ 299.243911][T12911] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.282127][T12916] EXT4-fs: Ignoring removed orlov option [ 299.321572][T12916] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 299.400504][T12916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.554367][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.564314][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.572120][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.580302][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.604825][T12929] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 299.625673][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 299.634455][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.678135][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.780613][T12926] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.942035][T12934] loop1: detected capacity change from 0 to 34816 [ 300.007224][T12934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.075546][T12934] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.147385][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.180323][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.185623][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.452815][ T1138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.577141][ T1138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.688852][ T1138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.777162][ T1138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.809797][T12947] TC_ACT_REPEAT abuse ? [ 300.963966][T12926] chnl_net:caif_netlink_parms(): no params data found [ 301.204500][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.299774][T12964] loop0: detected capacity change from 0 to 33280 [ 301.330021][T12964] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 301.399189][T12964] EXT4-fs (loop0): 1 truncate cleaned up [ 301.431204][T12964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.499786][T12964] EXT4-fs (loop0): shut down requested (2) [ 301.694046][ T5789] Bluetooth: hci4: command tx timeout [ 301.715803][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.734323][T12926] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.757965][T12926] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.791517][T12926] bridge_slave_0: entered allmulticast mode [ 301.835727][T12926] bridge_slave_0: entered promiscuous mode [ 301.856351][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.863972][T12926] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.871548][T12926] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.934552][T12926] bridge_slave_1: entered allmulticast mode [ 301.974218][T12926] bridge_slave_1: entered promiscuous mode [ 302.061843][T12980] loop4: detected capacity change from 0 to 2048 [ 302.125837][T12980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.141166][T12926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.192382][T12926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.247454][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.348360][T12926] team0: Port device team_slave_0 added [ 302.498549][T12926] team0: Port device team_slave_1 added [ 302.739428][T12926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.754064][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.800617][T12926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.827582][T12926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.836320][T12926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.864098][T12926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.870517][ T27] audit: type=1800 audit(2000000069.160:278): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2093" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 302.876564][T13001] 9pnet_fd: Insufficient options for proto=fd [ 302.921016][T12995] rxe_eth0 speed is unknown, defaulting to 1000 [ 303.034674][T12926] hsr_slave_0: entered promiscuous mode [ 303.041392][T12926] hsr_slave_1: entered promiscuous mode [ 303.057418][T12926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.069536][T12926] Cannot create hsr debugfs directory [ 303.213943][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.285170][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.433370][T13006] loop0: detected capacity change from 0 to 1024 [ 303.594415][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.763688][ T5789] Bluetooth: hci4: command tx timeout [ 304.182948][T13014] loop1: detected capacity change from 0 to 256 [ 304.306433][T13014] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 304.328028][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.388690][T13008] loop0: detected capacity change from 0 to 32768 [ 304.492524][ T1138] hsr_slave_0: left promiscuous mode [ 304.516315][T13008] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 304.547801][ T1138] hsr_slave_1: left promiscuous mode [ 304.593840][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.609932][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.632408][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.652750][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.662733][ T1138] bridge_slave_1: left allmulticast mode [ 304.669482][ T1138] bridge_slave_1: left promiscuous mode [ 304.669586][T13008] XFS (loop0): Ending clean mount [ 304.681598][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.703488][T13008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 304.712473][T13008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 304.724433][ T1138] bridge_slave_0: left allmulticast mode [ 304.730104][ T1138] bridge_slave_0: left promiscuous mode [ 304.761306][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.831664][ T1138] veth1_macvtap: left promiscuous mode [ 304.837434][ T1138] veth0_macvtap: left promiscuous mode [ 304.854095][ T1138] veth1_vlan: left promiscuous mode [ 304.875437][ T5780] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 305.182278][T13027] loop1: detected capacity change from 0 to 49152 [ 305.209120][T13027] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 305.303006][T13027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 305.355556][T13027] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.367518][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.722376][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.115613][T13040] loop0: detected capacity change from 0 to 128 [ 306.162431][T13040] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 306.341890][ T5789] Bluetooth: hci4: command tx timeout [ 306.382950][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.409307][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.992519][ T1138] team_slave_1 (unregistering): left promiscuous mode [ 307.007994][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 307.055730][ T1138] team_slave_0 (unregistering): left promiscuous mode [ 307.074407][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 307.128262][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.137205][ T1138] bond_slave_1 (unregistering): left promiscuous mode [ 307.177985][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.188930][ T1138] bond_slave_0 (unregistering): left promiscuous mode [ 307.446578][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.542803][ T1138] bond0 (unregistering): Released all slaves [ 307.788630][T13058] loop0: detected capacity change from 0 to 8 [ 307.811199][T12926] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.821575][T13058] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 307.864496][T12926] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.906714][T12926] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.917295][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.938327][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.952045][T12926] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.962461][T12617] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 308.227091][T12926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.260043][T12926] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.287851][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.295046][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.331821][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.338976][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.414323][ T5789] Bluetooth: hci4: command tx timeout [ 308.484164][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.843268][T12926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.938874][T12926] veth0_vlan: entered promiscuous mode [ 308.963300][T12926] veth1_vlan: entered promiscuous mode [ 309.040688][T13088] loop1: detected capacity change from 0 to 32896 [ 309.049153][T12926] veth0_macvtap: entered promiscuous mode [ 309.065750][T12926] veth1_macvtap: entered promiscuous mode [ 309.072123][T13088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a002c018, mo2=0002] [ 309.088285][T13088] System zones: 1-3, 19-19, 35-36 [ 309.098536][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.109150][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.119708][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.131214][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.141470][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.153032][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.165273][T12926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.178928][T13088] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.216507][T13086] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.248925][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.264139][T13088] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.275976][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.290334][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.313365][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.333386][T12926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.339785][ T5854] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 309.367861][T12926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.390460][T12926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.407683][ T5854] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 309.410608][T13093] loop0: detected capacity change from 0 to 34816 [ 309.433561][T12926] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.457472][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.460612][T12926] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.482377][T13093] EXT4-fs (loop0): Unsupported encryption level 2 [ 309.516054][T12926] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.535568][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.555412][T12926] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.855161][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.863041][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.888626][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.914476][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.941403][T12617] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 309.961146][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.011033][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.223817][ T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 310.270688][T13101] FAULT_INJECTION: forcing a failure. [ 310.270688][T13101] name failslab, interval 1, probability 0, space 0, times 0 [ 310.309241][T13101] CPU: 1 PID: 13101 Comm: syz.3.2092 Not tainted syzkaller #0 [ 310.316752][T13101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 310.326824][T13101] Call Trace: [ 310.330124][T13101] [ 310.333079][T13101] dump_stack_lvl+0x18c/0x250 [ 310.337792][T13101] ? show_regs_print_info+0x20/0x20 [ 310.343030][T13101] ? load_image+0x420/0x420 [ 310.347567][T13101] ? __might_sleep+0xe0/0xe0 [ 310.352184][T13101] ? __lock_acquire+0x7eb0/0x7eb0 [ 310.357237][T13101] should_fail_ex+0x394/0x4c0 [ 310.361949][T13101] should_failslab+0x9/0x20 [ 310.366472][T13101] slab_pre_alloc_hook+0x59/0x300 [ 310.371521][T13101] ? futex_lock_pi+0x840/0xa00 [ 310.376309][T13101] __kmem_cache_alloc_node+0x53/0x260 [ 310.381709][T13101] ? futex_lock_pi+0x840/0xa00 [ 310.386495][T13101] kmalloc_trace+0x2a/0xe0 [ 310.390945][T13101] futex_lock_pi+0x840/0xa00 [ 310.395567][T13101] ? futex_wait_queue+0x138/0x1b0 [ 310.400614][T13101] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 310.406049][T13101] do_futex+0x2c8/0x3e0 [ 310.410228][T13101] ? __lock_acquire+0x7eb0/0x7eb0 [ 310.415282][T13101] ? __ia32_sys_get_robust_list+0x110/0x110 [ 310.421202][T13101] ? __might_fault+0xaa/0x120 [ 310.425905][T13101] ? __might_fault+0xc6/0x120 [ 310.430606][T13101] __se_sys_futex+0x3a9/0x440 [ 310.435306][T13101] ? __x64_sys_futex+0xf0/0xf0 [ 310.440095][T13101] ? __x64_sys_futex+0x21/0xf0 [ 310.444880][T13101] do_syscall_64+0x55/0xb0 [ 310.449318][T13101] ? clear_bhb_loop+0x40/0x90 [ 310.454023][T13101] ? clear_bhb_loop+0x40/0x90 [ 310.458728][T13101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.464640][T13101] RIP: 0033:0x7f5ed47a8fd9 [ 310.469043][T13101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.488644][T13101] RSP: 002b:00007f5ed559d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 310.497062][T13101] RAX: ffffffffffffffda RBX: 00007f5ed4a25fa0 RCX: 00007f5ed47a8fd9 [ 310.505073][T13101] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 310.513056][T13101] RBP: 00007f5ed4837fed R08: 0000000000000000 R09: 0000000000000000 [ 310.516903][ T8] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.521009][T13101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.521024][T13101] R13: 00007f5ed4a26038 R14: 00007f5ed4a25fa0 R15: 00007ffed1209728 [ 310.521055][T13101] [ 310.532217][ T8] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.564403][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.564748][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 310.648766][ T5782] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.658480][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 310.667597][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.692549][ T8] usb 1-1: config 0 descriptor?? [ 310.898253][T13104] loop1: detected capacity change from 0 to 1024 [ 311.111960][T13113] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2140'. [ 311.181275][ T8] wacom 0003:056A:4004.0002: reserved main item tag 0xd [ 311.233755][ T8] wacom 0003:056A:4004.0002: unknown main item tag 0x3 [ 311.278394][ T8] wacom 0003:056A:4004.0002: hidraw0: USB HID v0.04 Device [HID 056a:4004] on usb-dummy_hcd.0-1/input0 [ 311.325846][T13120] loop1: detected capacity change from 0 to 33280 [ 311.359775][T13120] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 311.394430][T13120] syz.1.2141: attempt to access beyond end of device [ 311.394430][T13120] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 311.417905][ T5848] usb 1-1: USB disconnect, device number 3 [ 311.456636][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.478312][T13120] EXT4-fs (loop1): couldn't read superblock of external journal [ 311.521132][T13123] fido_id[13123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 311.551310][T13128] loop3: detected capacity change from 0 to 16 [ 311.565327][T13128] erofs: (device loop3): mounted with root inode @ nid 36. [ 311.604550][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.722599][T13132] loop4: detected capacity change from 0 to 16 [ 311.758513][T13132] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xd39b6dc3, 0x7bbbea8c expected [ 311.830307][T12616] udevd[12616]: incorrect erofs checksum on /dev/loop4 [ 312.053843][ T5848] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 312.320455][ T5848] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.482010][ T5848] usb 4-1: config 0 interface 0 has no altsetting 0 [ 312.583513][ T5848] usb 4-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 312.674828][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.705960][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.714781][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.734294][ T5848] usb 4-1: config 0 descriptor?? [ 313.084572][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.200100][ T5848] input: HID 046d:c101 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C101.0003/input/input9 [ 313.273770][ T5167] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 313.294361][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.386709][ T5848] logitech 0003:046D:C101.0003: input,hidraw0: USB HID v36.2c Joystick [HID 046d:c101] on usb-dummy_hcd.3-1/input0 [ 313.456275][ T5848] usb 4-1: USB disconnect, device number 2 [ 313.472599][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.501119][ T5167] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.528865][ T5167] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 313.557441][ T5167] usb 2-1: New USB device found, idVendor=0499, idProduct=1029, bcdDevice= 0.40 [ 313.579246][ T5167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.604452][ T5167] usb 2-1: Product: syz [ 313.608665][ T5167] usb 2-1: Manufacturer: syz [ 313.613277][ T5167] usb 2-1: SerialNumber: syz [ 313.656066][T13151] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 313.670713][T13162] fido_id[13162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 313.746526][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.765575][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.942215][ T5167] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 313.985286][ T5167] usb 2-1: invalid MIDI out EP 0 [ 314.340704][ T5167] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 314.379100][T13176] loop3: detected capacity change from 0 to 33280 [ 314.379384][ T5167] usb 2-1: USB disconnect, device number 2 [ 314.406901][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.417761][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.426984][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.446007][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.449873][T13176] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 314.474532][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 314.481950][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.506942][T12436] udevd[12436]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.616180][T13167] loop0: detected capacity change from 0 to 32768 [ 314.669975][T13167] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 314.761838][T13192] loop3: detected capacity change from 0 to 33280 [ 314.814096][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.823234][T13192] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 314.826253][T13167] XFS (loop0): Ending clean mount [ 314.860947][T13177] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.944388][T13192] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.2158: corrupted in-inode xattr: e_value size too large [ 315.034703][ T5780] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 315.062965][T13192] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2158: couldn't read orphan inode 15 (err -117) [ 315.129418][T13192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.229335][ T5167] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 315.304168][ T5167] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.467111][T12926] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.692566][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.704042][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.731570][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.761473][T12617] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 315.803285][T13207] loop3: detected capacity change from 0 to 1024 [ 315.844335][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.930964][T13207] hfsplus: b-tree write err: -5, ino 17 [ 316.127083][ T1138] hfsplus: b-tree write err: -5, ino 4 [ 316.133431][ T1138] hfsplus: b-tree write err: -5, ino 17 [ 316.334447][T13213] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2163'. [ 316.565406][ T5789] Bluetooth: hci2: command tx timeout [ 316.638322][T13177] chnl_net:caif_netlink_parms(): no params data found [ 316.896957][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.236211][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.242561][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.264813][T13229] loop3: detected capacity change from 0 to 32768 [ 317.285167][ T66] hsr_slave_0: left promiscuous mode [ 317.346649][T13229] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 317.361292][ T66] hsr_slave_1: left promiscuous mode [ 317.403859][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.436598][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.471428][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.509651][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.541999][ T66] batadv0: left allmulticast mode [ 317.553229][T13229] XFS (loop3): Ending clean mount [ 317.565752][ T66] batadv0: left promiscuous mode [ 317.570919][ T66] bridge0: port 3(batadv0) entered disabled state [ 317.614791][ T66] bridge_slave_1: left allmulticast mode [ 317.623374][T13229] overlayfs: missing 'workdir' [ 317.630807][ T66] bridge_slave_1: left promiscuous mode [ 317.664007][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.705526][ T66] bridge_slave_0: left allmulticast mode [ 317.711217][ T66] bridge_slave_0: left promiscuous mode [ 317.733809][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.771748][T13225] loop1: detected capacity change from 0 to 32768 [ 317.779480][T13257] loop0: detected capacity change from 0 to 8192 [ 317.824041][T13225] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 317.860605][ T66] veth1_macvtap: left promiscuous mode [ 317.872051][ T66] veth0_macvtap: left promiscuous mode [ 317.878185][ T66] veth1_vlan: left promiscuous mode [ 317.883574][ T66] veth0_vlan: left promiscuous mode [ 317.926793][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.947277][T12926] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 317.960476][T13269] device-mapper: table: 248:4: thin: Error opening pool device (-ENOENT) [ 318.039097][T13269] device-mapper: ioctl: error adding target to table [ 318.058966][T13225] XFS (loop1): Ending clean mount [ 318.248809][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 318.549751][T13279] loop3: detected capacity change from 0 to 33280 [ 318.574442][T13279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.631779][T13279] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 318.651540][ T5789] Bluetooth: hci2: command tx timeout [ 318.657378][T13279] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.2173: corrupted in-inode xattr: e_value size too large [ 318.673986][T13279] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2173: couldn't read orphan inode 15 (err -117) [ 318.703769][ T5854] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 318.712710][T13279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.735316][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.782584][T13279] EXT4-fs error (device loop3): ext4_check_dx_root:2268: inode #2: comm syz.3.2173: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 318.852682][T12926] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.929675][ T5854] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.956150][ T5854] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.966398][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.968878][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.993017][ T5854] usb 2-1: Product: syz [ 318.997464][ T5854] usb 2-1: Manufacturer: syz [ 319.002080][ T5854] usb 2-1: SerialNumber: syz [ 319.358871][T13287] loop3: detected capacity change from 0 to 33280 [ 319.374116][T13287] EXT4-fs: inline encryption not supported [ 319.404184][T13287] EXT4-fs (loop3): Test dummy encryption mode enabled [ 319.417660][T13287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 319.469607][T13287] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.2176: bad orphan inode 131083 [ 319.484813][T13287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.501028][ T66] team0 (unregistering): Port device team_slave_1 removed [ 319.558230][ T66] team0 (unregistering): Port device team_slave_0 removed [ 319.616870][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.670048][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.671852][T13287] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 319.750493][T12926] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.981030][T13298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 320.129433][ T5854] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 320.157814][ T5854] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 320.203882][ T5854] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 320.559155][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.701207][ T66] bond0 (unregistering): Released all slaves [ 320.733887][ T5789] Bluetooth: hci2: command tx timeout [ 320.811857][T13177] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.820591][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.829507][T13177] bridge_slave_0: entered allmulticast mode [ 320.837265][T13177] bridge_slave_0: entered promiscuous mode [ 320.847430][T13177] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.856447][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.863758][T13177] bridge_slave_1: entered allmulticast mode [ 320.871535][T13177] bridge_slave_1: entered promiscuous mode [ 320.881526][ T5854] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 320.962604][ T5854] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 320.978432][T13177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.009795][T13177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.015769][ T5854] usb 2-1: USB disconnect, device number 3 [ 321.042600][ T5854] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 321.063980][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 321.082014][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.159869][T13177] team0: Port device team_slave_0 added [ 321.237068][T13177] team0: Port device team_slave_1 added [ 321.299507][ T5850] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.313305][T13177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.323771][ T5850] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.347088][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.367071][ T5850] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.380352][T13177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.404417][ T5850] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 321.417411][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.426109][T13177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.438369][ T5850] usb 4-1: config 0 descriptor?? [ 321.461640][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.508448][T13177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.603942][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.649602][T13177] hsr_slave_0: entered promiscuous mode [ 321.675212][T13177] hsr_slave_1: entered promiscuous mode [ 321.689608][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 321.754076][T13317] macvtap13: entered promiscuous mode [ 321.759738][T13317] macvtap13: entered allmulticast mode [ 321.779878][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.867957][ T5850] wacom 0003:056A:003F.0005: ignoring exceeding usage max [ 321.905150][ T5850] wacom 0003:056A:003F.0005: unbalanced collection at end of report description [ 321.921969][ T5850] wacom 0003:056A:003F.0005: parse failed [ 321.938296][ T5850] wacom: probe of 0003:056A:003F.0005 failed with error -22 [ 322.087130][T13310] loop0: detected capacity change from 0 to 32768 [ 322.134798][T13310] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 322.205936][ T28] usb 4-1: USB disconnect, device number 3 [ 322.229623][T13310] XFS (loop0): Ending clean mount [ 322.341618][ T5780] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 322.364913][T13177] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.387539][T13177] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.440942][T13177] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.488780][T13177] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.655149][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.823554][ T5789] Bluetooth: hci2: command tx timeout [ 322.875170][T13177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.921420][T13349] loop1: detected capacity change from 0 to 2048 [ 322.997068][T13177] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.008138][T13349] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.057860][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.065061][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.068896][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.146785][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.167821][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.175018][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.177246][T12617] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 323.244711][T13355] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 323.534292][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 323.597706][T13351] loop3: detected capacity change from 0 to 32768 [ 323.612821][T13177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.677652][T13351] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 323.684245][ T5848] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 323.723996][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 323.735189][ T5167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.749525][ T28] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 323.768150][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.784241][ T28] usb 1-1: config 0 has no interface number 0 [ 323.791282][ T28] usb 1-1: config 0 interface 98 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 323.814251][ T28] usb 1-1: config 0 interface 98 has no altsetting 0 [ 323.849295][ T28] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 323.874191][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.882221][ T28] usb 1-1: Product: syz [ 323.897014][ T28] usb 1-1: Manufacturer: syz [ 323.901643][ T28] usb 1-1: SerialNumber: syz [ 323.912964][T13351] XFS (loop3): Ending clean mount [ 323.926269][ T28] usb 1-1: config 0 descriptor?? [ 323.949981][ T5848] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 323.971208][ T28] asix: probe of 1-1:0.98 failed with error -22 [ 323.984143][ T5848] usb 2-1: config 1 has no interface number 0 [ 323.992431][ T5848] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 324.010275][ T5848] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 324.048082][ T5848] usb 2-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice= 0.40 [ 324.068268][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.078656][ T5848] usb 2-1: Product: syz [ 324.082845][ T5848] usb 2-1: Manufacturer: syz [ 324.093311][ T5848] usb 2-1: SerialNumber: syz [ 324.123551][T13351] overlay: filesystem on ./file0 not supported as upperdir [ 324.200555][T13355] netlink: 'syz.0.2187': attribute type 4 has an invalid length. [ 324.293215][T12926] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 324.319480][T13355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.356613][T13355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.366953][T13177] veth0_vlan: entered promiscuous mode [ 324.368741][ T5848] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 324.388986][T13177] veth1_vlan: entered promiscuous mode [ 324.394451][ T5167] usb 1-1: USB disconnect, device number 4 [ 324.426112][T13177] veth0_macvtap: entered promiscuous mode [ 324.439389][T13177] veth1_macvtap: entered promiscuous mode [ 324.470918][ T5848] usb 2-1: USB disconnect, device number 4 [ 324.481256][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.511138][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.525952][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.536629][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.551900][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.562685][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.576410][T13177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.590790][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.601927][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.612450][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.623068][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.633290][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.644511][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.658158][T13177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.671751][T13177] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.680889][T13177] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.689681][T13177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.698556][T13177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.830456][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.848453][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.881906][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.898292][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.095787][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 325.136254][T13404] macvtap14: entered promiscuous mode [ 325.142222][T13404] macvtap14: entered allmulticast mode [ 325.334915][ T5167] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 325.553832][ T5167] usb 6-1: Using ep0 maxpacket: 32 [ 325.572181][ T5167] usb 6-1: config 2 has too many interfaces: 98, using maximum allowed: 32 [ 325.595205][ T5167] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 325.629547][T13398] loop1: detected capacity change from 0 to 32768 [ 325.639659][ T5167] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 98 [ 325.656943][ T5167] usb 6-1: config 2 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 325.670324][ T5167] usb 6-1: config 2 interface 1 has no altsetting 0 [ 325.680276][ T5167] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 325.693415][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.719516][T13398] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 325.736762][ T5167] usb 6-1: Product: syz [ 325.745671][ T5167] usb 6-1: Manufacturer: syz [ 325.762921][ T5167] usb 6-1: SerialNumber: syz [ 325.821324][ T5167] usb 6-1: selecting invalid altsetting 0 [ 325.852503][T13398] XFS (loop1): Ending clean mount [ 325.994875][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 326.020048][ T5167] usb 6-1: 1:1: cannot get freq (v2/v3): err -32 [ 326.258838][ T5167] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 326.275596][T13437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2195'. [ 326.395782][ T5167] usb 6-1: USB disconnect, device number 2 [ 326.979828][T13435] loop3: detected capacity change from 0 to 32768 [ 327.063119][T13435] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 327.300745][T13435] XFS (loop3): Ending clean mount [ 327.391691][T13435] overlay: filesystem on ./file0 not supported as upperdir [ 327.638548][T12926] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 327.770776][T13491] loop1: detected capacity change from 0 to 34816 [ 327.841468][T13491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.155212][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.300279][T13504] loop5: detected capacity change from 0 to 256 [ 328.307871][T13501] Bluetooth: MGMT ver 1.22 [ 328.312859][T13501] Bluetooth: hci0: unsupported parameter 255 [ 328.370452][T13501] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 328.435617][T12620] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.908146][T13525] loop5: detected capacity change from 0 to 32896 [ 328.953418][T13525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a002c018, mo2=0002] [ 328.988817][T13525] System zones: 1-3, 19-19, 35-36 [ 329.030526][T13525] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 329.122870][T13525] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.168205][ T5167] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 329.204580][ T5167] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 329.271040][T13514] loop3: detected capacity change from 0 to 32768 [ 329.361678][T13514] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 329.638824][T13514] XFS (loop3): Ending clean mount [ 329.648572][T13550] loop1: detected capacity change from 0 to 256 [ 329.851497][T13514] overlay: filesystem on ./file0 not supported as upperdir [ 329.875380][T13550] FAT-fs (loop1): Directory bread(block 64) failed [ 329.888823][T13550] FAT-fs (loop1): Directory bread(block 65) failed [ 329.917301][T13550] FAT-fs (loop1): Directory bread(block 66) failed [ 329.938814][T13550] FAT-fs (loop1): Directory bread(block 67) failed [ 329.971454][T13550] FAT-fs (loop1): Directory bread(block 68) failed [ 330.007038][T13550] FAT-fs (loop1): Directory bread(block 69) failed [ 330.016522][T12926] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 330.048279][T13550] FAT-fs (loop1): Directory bread(block 70) failed [ 330.060087][T13550] FAT-fs (loop1): Directory bread(block 71) failed [ 330.087167][T13550] FAT-fs (loop1): Directory bread(block 72) failed [ 330.097807][T13550] FAT-fs (loop1): Directory bread(block 73) failed [ 330.104317][T13560] loop0: detected capacity change from 0 to 1024 [ 330.626914][T13177] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.073789][ T5850] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 331.240096][T13593] loop0: detected capacity change from 0 to 2048 [ 331.282048][ T5850] usb 2-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 331.302550][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.312786][ T5850] usb 2-1: Product: syz [ 331.318805][ T5850] usb 2-1: Manufacturer: syz [ 331.323699][ T5850] usb 2-1: SerialNumber: syz [ 331.363878][T13593] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 331.555402][ T5850] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 331.615927][ T5850] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 331.640489][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.665684][ T5850] usb 2-1: USB disconnect, device number 5 [ 331.690471][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.713248][T12620] udevd[12620]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.743684][T12617] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 332.144141][T13615] loop0: detected capacity change from 0 to 33280 [ 332.215397][T13615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.246545][T13598] loop3: detected capacity change from 0 to 32768 [ 332.273481][T13615] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.366115][T13598] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 332.572926][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.611952][T13598] XFS (loop3): Ending clean mount [ 332.674568][ T27] audit: type=1326 audit(2000000098.920:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 332.814446][ T27] audit: type=1326 audit(2000000098.920:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 332.849933][T12926] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 332.937886][ T27] audit: type=1326 audit(2000000098.920:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 333.005954][ T27] audit: type=1326 audit(2000000098.920:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 333.016460][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 333.083703][ T27] audit: type=1326 audit(2000000098.920:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 333.118043][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.137161][T13653] loop0: detected capacity change from 0 to 2048 [ 333.148142][T12617] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 333.173839][ T27] audit: type=1326 audit(2000000098.920:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 333.174628][T13653] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.247657][ T27] audit: type=1326 audit(2000000098.920:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 333.305064][ T27] audit: type=1326 audit(2000000098.920:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 333.367032][ T27] audit: type=1326 audit(2000000098.920:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 333.430236][ T27] audit: type=1326 audit(2000000098.920:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13637 comm="syz.5.2231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fab3a8fd9 code=0x7fc00000 [ 333.483831][ T5848] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 333.527164][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 333.564819][T12617] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.578713][T12617] Buffer I/O error on dev loop0p4, logical block 1008, async page read [ 333.592780][T13662] loop0: detected capacity change from 0 to 512 [ 333.702513][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 333.731280][ T5848] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.755512][ T5780] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 333.766175][ T5848] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.783355][ T5780] FAT-fs (loop0): Filesystem has been set read-only [ 333.791967][ T5848] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 333.809032][ T5780] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 333.820156][ T5848] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 333.849980][ T5848] usb 2-1: Product: syz [ 333.858699][ T5848] usb 2-1: Manufacturer: syz [ 333.891647][ T5848] hub 2-1:4.0: USB hub found [ 334.110945][ T5848] hub 2-1:4.0: 2 ports detected [ 334.315039][ T5848] hub 2-1:4.0: hub_hub_status failed (err = 0) [ 334.321737][ T5848] hub 2-1:4.0: config failed, can't get hub status (err -5) [ 334.559493][ T2946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.655721][ T5848] usb 2-1: USB disconnect, device number 6 [ 334.750984][ T2946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.926089][ T2946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.102840][ T2946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.199101][T13687] loop3: detected capacity change from 0 to 49152 [ 335.275831][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.289785][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.290071][T13687] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 335.311827][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.349978][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.360356][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.368945][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.783124][T13687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 336.051928][T13697] rxe_eth0 speed is unknown, defaulting to 1000 [ 336.133783][T13687] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.462456][T12926] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.804631][T13731] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 337.271090][ T2946] bridge0: port 3(erspan0) entered disabled state [ 337.288928][ T2946] erspan0 (unregistering): left allmulticast mode [ 337.295494][ T2946] erspan0 (unregistering): left promiscuous mode [ 337.301923][ T2946] bridge0: port 3(erspan0) entered disabled state [ 337.328298][T13745] rxe_eth0 speed is unknown, defaulting to 1000 [ 337.444673][ T5785] Bluetooth: hci0: command tx timeout [ 337.570109][T13697] chnl_net:caif_netlink_parms(): no params data found [ 338.132351][T13697] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.149997][T13697] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.171367][T13697] bridge_slave_0: entered allmulticast mode [ 338.210094][T13697] bridge_slave_0: entered promiscuous mode [ 338.231887][T13697] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.263883][T13697] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.285962][T13697] bridge_slave_1: entered allmulticast mode [ 338.303923][T13697] bridge_slave_1: entered promiscuous mode [ 338.394624][T13773] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2261'. [ 338.415455][T13773] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2261'. [ 338.520194][T13697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.599057][T13697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.787096][T13697] team0: Port device team_slave_0 added [ 338.883956][ T2946] hsr_slave_0: left promiscuous mode [ 338.906176][ T2946] hsr_slave_1: left promiscuous mode [ 338.950546][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.967704][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.982200][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.014100][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.034758][ T2946] bridge_slave_1: left allmulticast mode [ 339.040439][ T2946] bridge_slave_1: left promiscuous mode [ 339.064023][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.093869][ T2946] bridge_slave_0: left allmulticast mode [ 339.099546][ T2946] bridge_slave_0: left promiscuous mode [ 339.114313][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.159556][ T2946] veth1_macvtap: left promiscuous mode [ 339.166838][ T2946] veth0_macvtap: left promiscuous mode [ 339.174087][ T2946] veth1_vlan: left promiscuous mode [ 339.179579][ T2946] veth0_vlan: left promiscuous mode [ 339.427395][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 339.528157][ T5785] Bluetooth: hci0: command tx timeout [ 339.646141][ T8] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.657244][ T8] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.684560][ T8] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.698552][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 339.707584][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 339.716854][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.734564][ T8] usb 4-1: config 0 descriptor?? [ 340.103013][ T2946] team0 (unregistering): Port device team_slave_1 removed [ 340.157298][ T2946] team0 (unregistering): Port device team_slave_0 removed [ 340.212258][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.215992][ T8] input: HID 17ef:6047 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6047.0007/input/input10 [ 340.287631][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.399094][ T8] lenovo 0003:17EF:6047.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 340.755464][ T2946] bond0 (unregistering): Released all slaves [ 340.819144][T13697] team0: Port device team_slave_1 added [ 341.021051][T13697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.033635][T13697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.099359][T13697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.133069][T13697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.180387][T13697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.225962][T13697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.430170][T13697] hsr_slave_0: entered promiscuous mode [ 341.445379][T13697] hsr_slave_1: entered promiscuous mode [ 341.452664][T13697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.464027][T13697] Cannot create hsr debugfs directory [ 341.610770][ T5785] Bluetooth: hci0: command tx timeout [ 341.861209][T13841] binder: 13840:13841 ioctl c0306201 0 returned -14 [ 341.913299][T13697] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 341.953411][T13697] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 341.978885][T13697] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.010561][T13697] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.172192][T13697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.230587][T13697] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.254051][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 342.275572][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.282859][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.319649][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.326837][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.371300][ T8] usb 4-1: reset full-speed USB device number 4 using dummy_hcd [ 342.422405][ T8] usb 4-1: device reset changed ep0 maxpacket size! [ 342.453044][ T28] usb 4-1: USB disconnect, device number 4 [ 342.458964][T13697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.476893][ T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.490462][ T9] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.515758][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 342.536739][ T9] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 342.564077][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.580853][ T9] usb 6-1: config 0 descriptor?? [ 342.713871][ T28] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 342.820882][T13697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.906150][ T28] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 342.927998][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 158, changing to 4 [ 342.956846][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 19180, setting to 1023 [ 342.988625][ T28] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 343.002463][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.019033][ T28] usb 4-1: Product: syz [ 343.023427][ T28] usb 4-1: Manufacturer: syz [ 343.031064][ T28] usb 4-1: SerialNumber: syz [ 343.034957][ T9] input: HID 0002:0000 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0002:0000.0008/input/input11 [ 343.072503][ T28] usb 4-1: config 0 descriptor?? [ 343.089050][ T28] hub 4-1:0.0: bad descriptor, ignoring hub [ 343.107777][ T28] hub: probe of 4-1:0.0 failed with error -5 [ 343.138005][ T28] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 343.163932][ T9] hid-generic 0003:0002:0000.0008: input,hidraw0: USB HID v36.2c Joystick [HID 0002:0000] on usb-dummy_hcd.5-1/input0 [ 343.190766][ T28] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 343.231820][ T9] usb 6-1: USB disconnect, device number 3 [ 343.252169][ T28] usbtouchscreen: probe of 4-1:0.0 failed with error -22 [ 343.343190][ T28] usb 4-1: USB disconnect, device number 5 [ 343.378602][T13882] fido_id[13882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 343.537427][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2280'. [ 343.577980][T13890] macvtap15: entered promiscuous mode [ 343.589962][T13890] macvtap15: entered allmulticast mode [ 343.656897][T13697] veth0_vlan: entered promiscuous mode [ 343.679575][T13697] veth1_vlan: entered promiscuous mode [ 343.685868][ T5785] Bluetooth: hci0: command tx timeout [ 343.762371][T13697] veth0_macvtap: entered promiscuous mode [ 343.791935][T13697] veth1_macvtap: entered promiscuous mode [ 343.823350][T13697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.839205][T13697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.849907][T13697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.865253][T13697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.878630][T13697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.898784][T13697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.912914][T13697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.940800][T13697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.957163][T13697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.969994][T13697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.992356][T13697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.034207][T13697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.058117][T13697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.089360][T13697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.145259][T13697] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.164998][T13697] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.183781][T13697] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.193054][T13697] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.354594][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.362511][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.450393][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.482197][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.781818][T13936] loop5: detected capacity change from 0 to 33280 [ 344.882827][T13939] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 344.996694][T13936] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 345.413485][T13936] EXT4-fs (loop5): 1 truncate cleaned up [ 345.526939][T13936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.672669][T13936] EXT4-fs error (device loop5): ext4_find_dest_de:2117: inode #2: block 13: comm syz.5.2291: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1 [ 345.722881][T13936] EXT4-fs (loop5): Remounting filesystem read-only [ 345.746998][T13946] loop3: detected capacity change from 0 to 1024 [ 345.864985][T13177] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.900254][ T27] kauditd_printk_skb: 139 callbacks suppressed [ 345.900268][ T27] audit: type=1800 audit(2000000112.190:428): pid=13946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2292" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 346.064244][ T42] hfsplus: b-tree write err: -5, ino 25 [ 346.070039][ T42] hfsplus: b-tree write err: -5, ino 4 [ 346.100264][ T42] hfsplus: b-tree write err: -5, ino 2 [ 346.140528][ T42] hfsplus: b-tree write err: -5, ino 20 [ 346.185117][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 346.243453][T13958] macvtap16: entered promiscuous mode [ 346.256498][T13933] loop6: detected capacity change from 0 to 32768 [ 346.263578][T13958] macvtap16: entered allmulticast mode [ 346.331407][T13933] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 346.443851][T13933] XFS (loop6): Ending clean mount [ 346.553744][ T5872] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 346.668177][T13697] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 346.759350][ T5872] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 346.769202][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.797857][ T5872] usb 4-1: Product: syz [ 346.813562][ T5872] usb 4-1: Manufacturer: syz [ 346.829011][ T5872] usb 4-1: SerialNumber: syz [ 346.859407][ T5872] usb 4-1: config 0 descriptor?? [ 346.881565][ T5872] ch341 4-1:0.0: ch341-uart converter detected [ 347.308735][ T5872] usb 4-1: failed to send control message: -71 [ 347.411976][ T5872] ch341-uart: probe of ttyUSB0 failed with error -71 [ 347.675906][ T5872] usb 4-1: USB disconnect, device number 6 [ 347.867261][ T5872] ch341 4-1:0.0: device disconnected [ 347.957873][T14004] loop5: detected capacity change from 0 to 164 [ 348.072534][T13996] loop1: detected capacity change from 0 to 49152 [ 348.088639][T13996] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 348.187007][T13996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 348.245455][T14013] xt_hashlimit: max too large, truncated to 1048576 [ 348.252266][T13996] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.393677][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 348.486051][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.585875][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.604241][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.624248][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.653876][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.673104][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.716043][ T9] usb 6-1: config 0 descriptor?? [ 349.152093][ T9] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 349.184545][ T9] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 349.205622][ T5848] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 349.223234][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 349.423854][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 349.452966][ T5848] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 349.474112][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.482180][ T5848] usb 2-1: Product: syz [ 349.496688][ T5848] usb 2-1: Manufacturer: syz [ 349.501334][ T5848] usb 2-1: SerialNumber: syz [ 350.251107][ T5848] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 350.258926][ T5848] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 350.275038][ T5871] usb 6-1: USB disconnect, device number 4 [ 350.294396][ T5848] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 350.377695][ T5848] usb 2-1: USB disconnect, device number 7 [ 350.498935][T12617] udevd[12617]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.060753][T14043] loop6: detected capacity change from 0 to 49152 [ 351.202137][T14043] ext4: Unknown parameter 'fowner>00000000000000000000' [ 351.578859][T14049] loop5: detected capacity change from 0 to 49152 [ 351.586279][T14043] EXT4-fs error (device loop6): ext4_init_orphan_info:629: comm syz.6.2311: orphan file block 12: bad checksum [ 351.602039][T14049] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 351.666253][T14043] EXT4-fs (loop6): mount failed [ 351.711616][T14049] [EXT4 FS bs=1024, gc=4, bpg=2048, ipg=64, mo=a882c818, mo2=0008] [ 351.794494][T14049] System zones: 1-74, 88-99, 101-356, 359-614, 616-871, 873-1116, 2049-2050, 6145-6145 [ 351.947719][T14049] EXT4-fs (loop5): mounted filesystem 104feaea-39f8-49fa-9fe9-3052f307e139 r/w with ordered data mode. Quota mode: journalled. [ 352.182672][T14074] loop1: detected capacity change from 0 to 8 [ 352.222546][T14074] squashfs image failed sanity check [ 352.229581][T13177] EXT4-fs (loop5): unmounting filesystem 104feaea-39f8-49fa-9fe9-3052f307e139. [ 352.287718][T12617] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 353.471563][T14087] loop6: detected capacity change from 0 to 33280 [ 353.517925][T14087] EXT4-fs: Ignoring removed bh option [ 353.543240][T14087] EXT4-fs: Ignoring removed bh option [ 353.579527][T14087] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 353.613253][T14087] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.2325: iget: bad i_size value: -9223372036854775798 [ 353.670334][T14087] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.2325: couldn't read orphan inode 15 (err -117) [ 353.887241][T14087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.736972][T13697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.788901][T14100] loop5: detected capacity change from 0 to 128 [ 354.815929][T14100] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 354.867124][T14100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.948579][T14117] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 356.199987][ T66] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.622111][ T66] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.785226][ T66] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.898488][T14111] loop5: detected capacity change from 0 to 32768 [ 356.953199][T14111] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 357.002296][T14127] loop1: detected capacity change from 0 to 33280 [ 357.010125][T14127] EXT4-fs: Ignoring removed orlov option [ 357.011227][ T66] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.051672][T14127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 357.160794][T14127] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 357.212162][T14111] XFS (loop5): Ending clean mount [ 357.608838][T13177] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 357.941601][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.962394][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.971097][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.979824][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.988595][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 357.996346][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.261617][T14145] rxe_eth0 speed is unknown, defaulting to 1000 [ 358.287107][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2348'. [ 358.304199][T14158] bpq5: entered promiscuous mode [ 358.334914][T14158] bpq5: entered allmulticast mode [ 359.367975][T14179] loop1: detected capacity change from 0 to 32768 [ 360.219061][ T5789] Bluetooth: hci0: command tx timeout [ 360.300745][T14179] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 360.330510][T14145] chnl_net:caif_netlink_parms(): no params data found [ 360.571152][T14179] XFS (loop1): Ending clean mount [ 360.618597][ T66] hsr_slave_0: left promiscuous mode [ 360.652103][ T66] hsr_slave_1: left promiscuous mode [ 360.669113][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.677898][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.707825][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.716366][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.736865][ T66] bridge_slave_1: left allmulticast mode [ 360.742537][ T66] bridge_slave_1: left promiscuous mode [ 360.761730][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.773097][ T66] bridge_slave_0: left allmulticast mode [ 360.780176][ T66] bridge_slave_0: left promiscuous mode [ 360.788731][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.888231][ T66] veth1_macvtap: left promiscuous mode [ 360.894856][ T5782] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 360.903882][ T66] veth0_macvtap: left promiscuous mode [ 360.904134][ T66] veth1_vlan: left promiscuous mode [ 360.904252][ T66] veth0_vlan: left promiscuous mode [ 361.433834][ T5850] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 361.635910][ T5850] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.652858][ T5850] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.668202][ T5850] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.681198][ T5850] usb 6-1: config 0 interface 0 has no altsetting 0 [ 361.687903][ T5850] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 361.704089][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.715585][ T5850] usb 6-1: config 0 descriptor?? [ 361.737412][ T66] team0 (unregistering): Port device team_slave_1 removed [ 361.798324][ T66] team0 (unregistering): Port device team_slave_0 removed [ 361.845891][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.895524][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.156636][ T5850] input: HID 17ef:6047 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:17EF:6047.000A/input/input14 [ 362.243848][ T5789] Bluetooth: hci0: command tx timeout [ 362.310170][ T5850] lenovo 0003:17EF:6047.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 362.591819][ T66] bond0 (unregistering): Released all slaves [ 362.678318][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2361'. [ 362.689473][T14220] bpq26: entered promiscuous mode [ 362.696902][T14220] bpq26: entered allmulticast mode [ 362.801208][T14231] syzkaller0: entered promiscuous mode [ 362.807422][T14231] syzkaller0: entered allmulticast mode [ 364.227745][ T5167] usb 6-1: USB disconnect, device number 5 [ 364.357956][ T5789] Bluetooth: hci0: command tx timeout [ 364.794706][T14253] ptrace attach of ""[14255] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14253] [ 364.977652][T14249] loop5: detected capacity change from 0 to 32768 [ 365.079888][T14249] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 365.143120][T14249] XFS (loop5): Ending clean mount [ 365.258907][T14249] overlayfs: missing 'lowerdir' [ 365.319272][T13177] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 366.103737][T14011] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 366.340575][T14011] usb 6-1: unable to get BOS descriptor or descriptor too short [ 366.398171][T14011] usb 6-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice= 0.40 [ 366.416218][T14011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.434708][T14011] usb 6-1: Product: syz [ 366.438909][T14011] usb 6-1: Manufacturer: syz [ 366.454079][T14011] usb 6-1: SerialNumber: syz [ 366.483750][ T5789] Bluetooth: hci0: command tx timeout [ 367.307048][T14145] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.336860][T14145] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.347304][T14145] bridge_slave_0: entered allmulticast mode [ 367.356700][T14011] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 367.364612][T14145] bridge_slave_0: entered promiscuous mode [ 367.372103][T14011] usb 6-1: MIDIStreaming interface descriptor not found [ 367.385392][T14145] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.393241][T14145] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.401639][T14145] bridge_slave_1: entered allmulticast mode [ 367.414634][T14145] bridge_slave_1: entered promiscuous mode [ 367.466463][T14145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.480977][T14145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.657777][T14145] team0: Port device team_slave_0 added [ 367.670646][ T5850] usb 6-1: USB disconnect, device number 6 [ 367.690699][T14145] team0: Port device team_slave_1 added [ 367.696824][T14290] rxe_eth0 speed is unknown, defaulting to 1000 [ 367.785155][T14145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.802391][T14145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.855581][T14145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.878315][T14145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.895290][T14145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.921313][T14145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.048228][T14145] hsr_slave_0: entered promiscuous mode [ 368.068412][T14145] hsr_slave_1: entered promiscuous mode [ 368.080250][T14145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.090145][T14145] Cannot create hsr debugfs directory [ 368.672636][T14145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.711587][T14145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.742331][T14145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.773449][T14145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.031428][T14145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.057203][T14309] loop5: detected capacity change from 0 to 32768 [ 369.090331][T14145] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.157694][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.164902][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.180366][T14309] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 369.231787][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.238989][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.359544][T14309] XFS (loop5): Ending clean mount [ 369.449441][T14309] overlayfs: missing 'lowerdir' [ 369.580700][T13177] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 369.947648][T14145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.219826][T14363] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2394'. [ 370.239084][T14363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2394'. [ 370.267094][T14363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2394'. [ 370.610914][T14145] veth0_vlan: entered promiscuous mode [ 370.648234][T14145] veth1_vlan: entered promiscuous mode [ 370.746196][T14145] veth0_macvtap: entered promiscuous mode [ 370.809678][T14145] veth1_macvtap: entered promiscuous mode [ 370.837037][T14145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.848128][T14145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.859630][T14145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.870388][T14145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.880884][T14145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.942411][T14145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.974624][T14145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.006498][T14145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.033760][T14145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.059187][T14145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.080437][T14145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.110756][T14145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.134422][T14145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.167312][T14145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.229059][T14145] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.248883][T14145] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.268508][T14145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.284192][T14145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.593394][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.610273][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.324579][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.363883][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.498571][T14421] syzkaller0: entered promiscuous mode [ 373.508434][T14421] syzkaller0: entered allmulticast mode [ 373.640263][T14429] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.799005][T14431] loop7: detected capacity change from 0 to 32896 [ 373.832414][T14431] EXT4-fs: Ignoring removed oldalloc option [ 373.904668][T14431] ext4: Unknown parameter 'permit_directio' [ 374.199722][T14444] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 375.303800][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 376.435405][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 376.475182][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.494519][ T9] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 376.512643][ T9] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 376.533653][ T9] usb 6-1: Product: syz [ 376.537858][ T9] usb 6-1: Manufacturer: syz [ 376.609375][ T9] usb 6-1: Found UVC 1.00 device syz (225a:e1d4) [ 376.623721][ T9] usb 6-1: No streaming interface found for terminal 2. [ 376.833447][ T8] usb 6-1: USB disconnect, device number 7 [ 378.656104][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.662470][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.750236][T14492] netlink: 'syz.7.2426': attribute type 8 has an invalid length. [ 380.042607][T14496] loop5: detected capacity change from 0 to 1024 [ 380.573608][ C0] sched: RT throttling activated [ 383.956741][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2446'. [ 384.048360][ T5789] Bluetooth: hci4: unexpected cc 0x041a length: 8 > 1 [ 384.115370][T14590] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 385.179784][T14609] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 388.014130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 388.423671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 388.615373][ T992] ------------[ cut here ]------------ [ 388.621321][ T992] WARNING: CPU: 0 PID: 992 at io_uring/io_uring.c:3292 io_ring_exit_work+0x3c1/0x860 [ 388.631431][ T992] Modules linked in: [ 388.635491][ T992] CPU: 0 PID: 992 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 388.642971][ T992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 388.653101][ T992] Workqueue: iou_exit io_ring_exit_work [ 388.658715][ T992] RIP: 0010:io_ring_exit_work+0x3c1/0x860 [ 388.664570][ T992] Code: 89 e5 48 8b 7c 24 28 48 8b 34 24 e8 19 2a 11 00 48 85 c0 41 bc 00 20 00 00 75 1c e8 69 ab f8 f6 e9 b3 fd ff ff e8 5f ab f8 f6 <0f> 0b b8 70 17 00 00 48 89 04 24 eb c3 c7 84 24 90 00 00 00 00 00 [ 388.684272][ T992] RSP: 0018:ffffc900042dfa40 EFLAGS: 00010293 [ 388.690373][ T992] RAX: ffffffff8a8f3341 RBX: ffff888059c02000 RCX: ffff888023c61e00 [ 388.698619][ T992] RDX: 0000000000000000 RSI: ffffffffffffffef RDI: 0000000000000000 [ 388.706693][ T992] RBP: ffffc900042dfbb0 R08: ffffc900042df9c7 R09: 1ffff9200085bf38 [ 388.714822][ T992] R10: dffffc0000000000 R11: fffff5200085bf39 R12: ffff888059c02510 [ 388.722822][ T992] R13: 00000001000021d4 R14: 00000001000021e5 R15: dffffc0000000000 [ 388.731363][ T992] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 388.740481][ T992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.747377][ T992] CR2: 00007f4dc154e4a5 CR3: 000000007464e000 CR4: 00000000003506f0 [ 388.755405][ T992] Call Trace: [ 388.758698][ T992] [ 388.761652][ T992] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 388.767731][ T992] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.772953][ T992] ? process_scheduled_works+0x975/0x1600 [ 388.778763][ T992] ? process_scheduled_works+0x975/0x1600 [ 388.784584][ T992] process_scheduled_works+0xa60/0x1600 [ 388.790190][ T992] ? worker_attach_to_pool+0x370/0x370 [ 388.795711][ T992] ? assign_work+0x3cc/0x5d0 [ 388.800328][ T992] worker_thread+0xa5e/0xfe0 [ 388.805000][ T992] ? _raw_spin_unlock+0x40/0x40 [ 388.809865][ T992] ? __kthread_parkme+0x71/0x1c0 [ 388.814864][ T992] kthread+0x2fa/0x390 [ 388.818950][ T992] ? pr_cont_work+0x550/0x550 [ 388.823696][ T992] ? kthread_blkcg+0xd0/0xd0 [ 388.828307][ T992] ret_from_fork+0x48/0x80 [ 388.833277][ T992] ? kthread_blkcg+0xd0/0xd0 [ 388.838063][ T992] ret_from_fork_asm+0x11/0x20 [ 388.842875][ T992] [ 388.845979][ T992] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.853264][ T992] CPU: 0 PID: 992 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 388.860760][ T992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 388.870831][ T992] Workqueue: iou_exit io_ring_exit_work [ 388.876397][ T992] Call Trace: [ 388.879685][ T992] [ 388.882641][ T992] dump_stack_lvl+0x18c/0x250 [ 388.887344][ T992] ? show_regs_print_info+0x20/0x20 [ 388.892570][ T992] ? load_image+0x420/0x420 [ 388.897105][ T992] panic+0x2ca/0x720 [ 388.901026][ T992] ? bpf_jit_dump+0xd0/0xd0 [ 388.905556][ T992] ? ret_from_fork_asm+0x11/0x20 [ 388.910520][ T992] __warn+0x2e0/0x470 [ 388.914520][ T992] ? io_ring_exit_work+0x3c1/0x860 [ 388.919650][ T992] ? io_ring_exit_work+0x3c1/0x860 [ 388.924768][ T992] report_bug+0x2be/0x4f0 [ 388.929096][ T992] ? io_ring_exit_work+0x3c1/0x860 [ 388.934201][ T992] ? io_ring_exit_work+0x3c1/0x860 [ 388.939305][ T992] ? io_ring_exit_work+0x3c3/0x860 [ 388.944412][ T992] handle_bug+0xcf/0x120 [ 388.948652][ T992] exc_invalid_op+0x1a/0x50 [ 388.953153][ T992] asm_exc_invalid_op+0x1a/0x20 [ 388.958000][ T992] RIP: 0010:io_ring_exit_work+0x3c1/0x860 [ 388.963719][ T992] Code: 89 e5 48 8b 7c 24 28 48 8b 34 24 e8 19 2a 11 00 48 85 c0 41 bc 00 20 00 00 75 1c e8 69 ab f8 f6 e9 b3 fd ff ff e8 5f ab f8 f6 <0f> 0b b8 70 17 00 00 48 89 04 24 eb c3 c7 84 24 90 00 00 00 00 00 [ 388.983324][ T992] RSP: 0018:ffffc900042dfa40 EFLAGS: 00010293 [ 388.989385][ T992] RAX: ffffffff8a8f3341 RBX: ffff888059c02000 RCX: ffff888023c61e00 [ 388.997348][ T992] RDX: 0000000000000000 RSI: ffffffffffffffef RDI: 0000000000000000 [ 389.005396][ T992] RBP: ffffc900042dfbb0 R08: ffffc900042df9c7 R09: 1ffff9200085bf38 [ 389.013356][ T992] R10: dffffc0000000000 R11: fffff5200085bf39 R12: ffff888059c02510 [ 389.021314][ T992] R13: 00000001000021d4 R14: 00000001000021e5 R15: dffffc0000000000 [ 389.029282][ T992] ? io_ring_exit_work+0x3c1/0x860 [ 389.034401][ T992] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 389.040207][ T992] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.045398][ T992] ? process_scheduled_works+0x975/0x1600 [ 389.051111][ T992] ? process_scheduled_works+0x975/0x1600 [ 389.056823][ T992] process_scheduled_works+0xa60/0x1600 [ 389.062385][ T992] ? worker_attach_to_pool+0x370/0x370 [ 389.067843][ T992] ? assign_work+0x3cc/0x5d0 [ 389.072428][ T992] worker_thread+0xa5e/0xfe0 [ 389.077016][ T992] ? _raw_spin_unlock+0x40/0x40 [ 389.081855][ T992] ? __kthread_parkme+0x71/0x1c0 [ 389.086787][ T992] kthread+0x2fa/0x390 [ 389.090848][ T992] ? pr_cont_work+0x550/0x550 [ 389.095515][ T992] ? kthread_blkcg+0xd0/0xd0 [ 389.100093][ T992] ret_from_fork+0x48/0x80 [ 389.104501][ T992] ? kthread_blkcg+0xd0/0xd0 [ 389.109082][ T992] ret_from_fork_asm+0x11/0x20 [ 389.113855][ T992] [ 389.117119][ T992] Kernel Offset: disabled [ 389.121512][ T992] Rebooting in 86400 seconds..