last executing test programs: 13.671183869s ago: executing program 4 (id=2183): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 10.540391638s ago: executing program 3 (id=2194): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x51, 0xc8}}}, 0x8) syz_open_dev$MSR(0x0, 0x800000000002, 0x0) ioprio_get$pid(0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) read(r0, 0x0, 0x0) 10.289314776s ago: executing program 4 (id=2195): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001a80)=[{&(0x7f0000000a80)="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", 0x61c}], 0x1) 10.289035186s ago: executing program 4 (id=2196): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000500)=""/204, 0xcc}], 0x2, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, 0xfffffffffffffffe, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x80800) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newtaction={0x5c, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x5c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = socket$pppoe(0x18, 0x1, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) 10.288327026s ago: executing program 3 (id=2197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000040000000400000021020000c1"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r1}, 0x38) 10.277124407s ago: executing program 0 (id=2198): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7}}, 0xe4) bind$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) 9.092811914s ago: executing program 1 (id=2200): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) 9.091164114s ago: executing program 4 (id=2201): syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c0002"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a00"], 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01b, 0x1}) 8.967119948s ago: executing program 3 (id=2202): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r0, &(0x7f0000001c00), 0x40000000000017a, 0x40840) 8.615788749s ago: executing program 0 (id=2203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 8.194693682s ago: executing program 0 (id=2205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @loopback, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 8.193908052s ago: executing program 4 (id=2206): syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.570534223s ago: executing program 0 (id=2208): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) shmat(r1, &(0x7f00001bd000/0x2000)=nil, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) fallocate(r4, 0x0, 0x2dc3, 0xfffb) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f00000001c0)={0x2, 0x0, [0x3, 0x0, 0x8, 0x1, 0x7, 0x8, 0x2, 0x9f]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, r5, 0x0) getdents64(r5, &(0x7f0000000100)=""/156, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") socket$nl_generic(0x10, 0x3, 0x10) 6.500052755s ago: executing program 3 (id=2209): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000820) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.425236958s ago: executing program 2 (id=2210): syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x2001) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) io_setup(0x43, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x7d) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) read$usbfs(0xffffffffffffffff, &(0x7f0000000440)=""/201, 0xc9) request_key(&(0x7f0000000340)='user\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff32, &(0x7f0000000840)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 5.979274482s ago: executing program 1 (id=2211): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x13, @string={0x13, 0x3, "0dde277bc6c04b7fbb1dc24e4970b84466"}}}, 0x0) 5.481307878s ago: executing program 2 (id=2212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fchmod(r3, 0x29) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "eba828", 0x14, 0x6, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x0, 0x4e8, &(0x7f0000000f40)="$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") 5.465496519s ago: executing program 3 (id=2213): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7}}, 0xe4) bind$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) 4.353198474s ago: executing program 1 (id=2214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xb, &(0x7f0000000040)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) syz_clone(0x48e8000, 0x0, 0x11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, &(0x7f0000000580)=""/245, 0xf5) socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) 4.341213504s ago: executing program 2 (id=2215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.972204605s ago: executing program 0 (id=2216): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x7e) 3.781321541s ago: executing program 0 (id=2217): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_enter(r3, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x1, r6, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.628491396s ago: executing program 1 (id=2218): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x390587b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 3.166337791s ago: executing program 2 (id=2219): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r0, &(0x7f0000001c00), 0x40000000000017a, 0x40840) 2.345206377s ago: executing program 1 (id=2220): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x6, 0x2, 0x1, 0x7, 0x0, 0x3, {0x3, 0xfffffffffffffffc, 0xa, 0x8000, 0x8, 0xcca1, 0xffffffff, 0x200, 0x8, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x7f}}, {0x0, 0x3}}}, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x600], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 1.375531467s ago: executing program 4 (id=2221): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) 1.354669778s ago: executing program 1 (id=2222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x488, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x458, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcb, 0xf, 0x4, 0x7ff, 0x1, 0x8000, 0xa5, 0x7ff, 0x3676, 0x8de, 0x2, 0x0, 0xc8, 0x7, 0xe14e, 0x2, 0xffff086b, 0x6372, 0x0, 0x200, 0x200, 0x4, 0x3, 0xbf, 0xfffffff9, 0x4, 0x180, 0x94, 0x4, 0x80000000, 0xf0, 0x6, 0x4, 0x7ff, 0x204, 0x6cc7, 0x7, 0x9, 0x16f, 0x5, 0xfffffffa, 0x2, 0x80000001, 0x401, 0x3, 0x832d, 0x0, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x1f12, 0x2, 0x2, 0x6, 0x7, 0x2, 0x56e23768, 0x4, 0x0, 0xfef, 0x2, 0x3ff, 0x2, 0xfffffff8, 0x7fff, 0x85, 0x693b, 0x8, 0xffffffff, 0x6, 0x0, 0x9, 0x2, 0x5, 0x2, 0x3, 0x6, 0x8, 0x80000001, 0x8b1, 0x7, 0xafd6, 0x80, 0x9, 0x5, 0xa225, 0x477, 0x7, 0x357, 0x800, 0x4, 0x4, 0x4df, 0xfffffffe, 0x7, 0xfffffba5, 0x6, 0x100, 0x400, 0x93ad, 0x2, 0x2, 0xfffffff9, 0x2, 0x7f, 0xff, 0xffffff7f, 0xa1e9, 0x5, 0xffff7fff, 0x6, 0x4, 0x61, 0x1, 0x1382, 0xc, 0x2, 0x5, 0x8, 0x9, 0x1, 0x2, 0x5, 0x74, 0x2, 0x4, 0x24000000, 0xd87, 0xb, 0x4, 0x5, 0x2, 0x1ff, 0x1ff, 0x3, 0xa, 0x4, 0x1ff, 0x0, 0x81, 0x33d0, 0x2, 0x4, 0xfffffffc, 0x1f8, 0xc, 0x0, 0x8, 0xca8, 0x10, 0x4, 0x7, 0x7, 0x10001, 0x5, 0x2, 0x6, 0x6, 0xa2987dbc, 0x9, 0xc, 0x6717, 0x47bf, 0x9, 0x6000000, 0x1f0f, 0x5e8, 0x9, 0x7, 0x17, 0x8, 0x4da0, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x5, 0xd, 0x3, 0x5, 0x2, 0x6, 0xf, 0xc00, 0x4, 0x10, 0x6a, 0x1, 0x401, 0xec, 0x4, 0xfffffffd, 0xf8f63b5, 0xeb, 0x204000, 0x8, 0x3, 0x967, 0xfffffffd, 0x6fdd5f04, 0x7, 0xc69c, 0x0, 0x6, 0x5, 0x6, 0x4, 0x4, 0x1000, 0x401, 0x7, 0x5, 0x3, 0xfffffff9, 0xb617, 0x0, 0x8, 0x3, 0x2, 0x8, 0x4, 0x40, 0x4c4, 0x7, 0xffff8274, 0x0, 0x2, 0x7f, 0x5, 0x2, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0x5, 0x1, 0x5, 0x5, 0x1, 0xffffff38, 0x1, 0xdd9, 0x0, 0x4, 0x9, 0x1, 0x5, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xaa5, 0x80000001, 0x7, {0x7, 0x1, 0x688, 0x5, 0x4, 0xfffffff8}, {0x6, 0x1, 0x2000, 0x0, 0x2}, 0x101, 0x7fff, 0xf}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x4008814}, 0x2) 1.354371068s ago: executing program 2 (id=2223): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44180) 397.237658ms ago: executing program 2 (id=2224): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 3 (id=2225): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109026e000301d8100c080b"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): 7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.501336][ T6526] loop0: detected capacity change from 0 to 1024 [ 327.505092][ T5267] usb 3-1: config 0 descriptor?? [ 327.740605][ T6526] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.036174][ T5267] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 328.125504][ T6536] Cannot find del_set index 14804 as target [ 329.129523][ T6545] loop3: detected capacity change from 0 to 512 [ 330.058329][ T5267] hdpvr 3-1:0.0: max device number reached, device register failed [ 330.239707][ T5267] usb 3-1: USB disconnect, device number 15 [ 330.309199][ T6554] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 334.351143][ T6575] loop3: detected capacity change from 0 to 8192 [ 334.491797][ T6575] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 334.521291][ T6575] REISERFS (device loop3): using ordered data mode [ 334.528455][ T6575] reiserfs: using flush barriers [ 334.538775][ T6575] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 334.656513][ T6575] REISERFS (device loop3): checking transaction log (loop3) [ 334.748839][ T6575] REISERFS (device loop3): Using r5 hash to sort names [ 334.772115][ T6575] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 335.535463][ T4681] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 336.392478][ T6595] loop2: detected capacity change from 0 to 256 [ 337.390001][ T6595] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 337.522839][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.531906][ T6595] FAT-fs (loop2): Filesystem has been set read-only [ 337.538672][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.547374][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.555989][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.564591][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.574194][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.582920][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.591659][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.600271][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.608918][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.617590][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.630224][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.638891][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.647589][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.656364][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.664954][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.674738][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.683396][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.692024][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.700727][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.709928][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.718556][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.727270][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.735876][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.745248][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.753957][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.762657][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.771300][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.780850][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.789741][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.798410][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.807133][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.816093][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.824865][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.833604][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.842429][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.851099][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.859827][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.868507][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.877295][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.886918][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.895570][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.904201][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.913468][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.922308][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.930923][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.939627][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.948389][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.957123][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.965964][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.974969][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.984637][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 337.993328][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.002017][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.010768][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.019454][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.028201][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.036838][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.045498][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.054088][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.063078][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.071804][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.080449][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.089965][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.098673][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.107364][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.116014][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.124679][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.133405][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.142063][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.150733][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.159342][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.168055][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.176732][ T6595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 338.196200][ T26] audit: type=1800 audit(1779220262.396:5): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.621" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 338.326794][ T6595] syz.2.621 (6595) used greatest stack depth: 20760 bytes left [ 338.445449][ T4681] usb 1-1: device descriptor read/all, error -71 [ 339.547613][ T6621] loop2: detected capacity change from 0 to 8192 [ 339.664822][ T6621] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 339.686648][ T6621] REISERFS (device loop2): using ordered data mode [ 339.714044][ T6621] reiserfs: using flush barriers [ 339.739185][ T6623] loop0: detected capacity change from 0 to 2048 [ 339.757425][ T6621] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 339.806022][ T6621] REISERFS (device loop2): checking transaction log (loop2) [ 339.817270][ T6623] loop0: p2 p3 < > p4 < p5 > [ 339.825238][ T6623] loop0: partition table partially beyond EOD, truncated [ 339.840379][ T6621] REISERFS (device loop2): Using r5 hash to sort names [ 339.864269][ T6623] loop0: p2 start 53543428 is beyond EOD, truncated [ 339.876465][ T6621] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 339.900207][ T6623] loop0: p3 start 4284289 is beyond EOD, truncated [ 340.104253][ T6623] loop0: p5 start 53543428 is beyond EOD, truncated [ 341.081468][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 342.091716][ T6642] loop2: detected capacity change from 0 to 1024 [ 342.278750][ T6642] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.896555][ T5266] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 343.415551][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 343.694453][ T5266] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 343.827507][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 343.898403][ T5266] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 343.988120][ T5266] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 344.076474][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.167714][ T5266] usb 1-1: config 0 descriptor?? [ 344.477259][ T5266] hdpvr 1-1:0.0: firmware version 0x8 dated 5 [ 346.016933][ T6664] loop2: detected capacity change from 0 to 8192 [ 346.173970][ T6664] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 346.235667][ T6664] REISERFS (device loop2): using ordered data mode [ 346.242209][ T6664] reiserfs: using flush barriers [ 346.249457][ T5266] hdpvr 1-1:0.0: max device number reached, device register failed [ 346.290168][ T6664] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 346.310071][ T6664] REISERFS (device loop2): checking transaction log (loop2) [ 346.356064][ T6664] REISERFS (device loop2): Using r5 hash to sort names [ 346.364991][ T6664] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 346.426056][ T5266] usb 1-1: USB disconnect, device number 14 [ 348.401235][ T6692] loop1: detected capacity change from 0 to 1024 [ 348.597672][ T6692] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.875690][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 353.336334][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 353.500815][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 353.517540][ T6727] loop1: detected capacity change from 0 to 8192 [ 353.544436][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 353.630669][ T6727] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 353.651512][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 353.697199][ T6727] REISERFS (device loop1): using ordered data mode [ 353.735625][ T6727] reiserfs: using flush barriers [ 353.747259][ T6727] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 353.832811][ T6727] REISERFS (device loop1): checking transaction log (loop1) [ 353.877407][ T6727] REISERFS (device loop1): Using r5 hash to sort names [ 353.906763][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 353.916440][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.937935][ T6727] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 353.949037][ T23] usb 4-1: config 0 descriptor?? [ 354.505673][ T23] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 356.225845][ T23] hdpvr 4-1:0.0: device init failed [ 356.231150][ T23] hdpvr: probe of 4-1:0.0 failed with error -12 [ 356.315751][ T23] usb 4-1: USB disconnect, device number 10 [ 360.079308][ T6783] loop0: detected capacity change from 0 to 4096 [ 360.375609][ T4239] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 360.744967][ T6789] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.800471][ T4239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 360.822187][ T4239] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 360.856676][ T4239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 360.891044][ T4239] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 360.925825][ T4239] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 360.955373][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.972845][ T4239] usb 4-1: config 0 descriptor?? [ 361.099671][ T6783] syz.0.674 (6783) used greatest stack depth: 20112 bytes left [ 361.475874][ T4239] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 362.316319][ T4239] hdpvr 4-1:0.0: max device number reached, device register failed [ 362.772463][ T4239] usb 4-1: USB disconnect, device number 11 [ 364.829995][ T6825] loop1: detected capacity change from 0 to 8192 [ 364.958334][ T6825] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 365.007305][ T6825] REISERFS (device loop1): using ordered data mode [ 365.061587][ T6825] reiserfs: using flush barriers [ 365.101092][ T6825] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 365.195330][ T6825] REISERFS (device loop1): checking transaction log (loop1) [ 365.265496][ T6825] REISERFS (device loop1): Using r5 hash to sort names [ 365.272797][ T6825] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 365.308426][ T6831] loop2: detected capacity change from 0 to 128 [ 367.033934][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 367.723366][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 367.798375][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 370.054402][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 370.064982][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 370.075614][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 370.175300][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.194080][ T23] usb 1-1: config 0 descriptor?? [ 370.218555][ T23] usb 1-1: can't set config #0, error -71 [ 370.242322][ T23] usb 1-1: USB disconnect, device number 15 [ 375.459149][ T6889] loop0: detected capacity change from 0 to 32768 [ 375.515096][ T6889] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.707 (6889) [ 375.608156][ T6891] loop2: detected capacity change from 0 to 8192 [ 375.926178][ T4490] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 376.222095][ T6891] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 376.235111][ T6889] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 376.244089][ T6889] BTRFS info (device loop0): enabling disk space caching [ 376.251267][ T6889] BTRFS info (device loop0): force clearing of disk cache [ 376.258692][ T6889] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 376.268308][ T6889] BTRFS info (device loop0): use zstd compression, level 3 [ 376.275619][ T6889] BTRFS info (device loop0): disk space caching is enabled [ 376.282915][ T6889] BTRFS info (device loop0): has skinny extents [ 376.308790][ T6891] REISERFS (device loop2): using ordered data mode [ 376.337766][ T6891] reiserfs: using flush barriers [ 376.343291][ T4490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 376.373821][ T4490] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 376.394707][ T6891] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 376.439497][ T4490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 376.515389][ T6891] REISERFS (device loop2): checking transaction log (loop2) [ 376.537096][ T4490] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 376.565038][ T4490] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 376.574320][ T4490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.617145][ T6891] REISERFS (device loop2): Using r5 hash to sort names [ 376.638872][ T4490] usb 2-1: config 0 descriptor?? [ 376.871328][ T6891] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 377.550087][ T4490] hdpvr 2-1:0.0: firmware version 0x8 dated 5 [ 377.600397][ T6889] BTRFS info (device loop0): enabling ssd optimizations [ 377.610365][ T6889] BTRFS info (device loop0): clearing free space tree [ 377.617477][ T6889] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 377.627966][ T6889] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 379.970549][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.976893][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.111233][ T6948] loop1: detected capacity change from 0 to 4096 [ 380.126171][ T4490] hdpvr 2-1:0.0: max device number reached, device register failed [ 380.246348][ T4490] usb 2-1: USB disconnect, device number 7 [ 380.267699][ T6950] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.647679][ T6949] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 381.491252][ T6949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 381.507934][ T6949] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 381.556663][ T6949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 381.614883][ T6949] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 381.646954][ T6949] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 381.678092][ T6949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.714726][ T6949] usb 1-1: config 0 descriptor?? [ 381.996594][ T6949] hdpvr 1-1:0.0: firmware version 0x8 dated 5 [ 382.267941][ T6968] loop2: detected capacity change from 0 to 32768 [ 382.399927][ T6968] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.723 (6968) [ 382.543960][ T6968] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 382.552939][ T6968] BTRFS info (device loop2): enabling disk space caching [ 382.560064][ T6968] BTRFS info (device loop2): force clearing of disk cache [ 382.567217][ T6968] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 382.576671][ T6968] BTRFS info (device loop2): use zstd compression, level 3 [ 382.583969][ T6968] BTRFS info (device loop2): disk space caching is enabled [ 382.591856][ T6968] BTRFS info (device loop2): has skinny extents [ 382.602011][ T4234] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 382.936231][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 383.110670][ T4234] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 383.179010][ T6949] hdpvr 1-1:0.0: max device number reached, device register failed [ 383.508619][ T4234] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 383.523977][ T4234] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 383.533418][ T6949] usb 1-1: USB disconnect, device number 16 [ 383.541365][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 383.736386][ T4234] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 383.746161][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.755956][ T4234] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 383.776897][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.275424][ T4234] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 384.360879][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.407112][ T4234] usb 4-1: config 0 descriptor?? [ 384.546436][ T6968] BTRFS info (device loop2): enabling ssd optimizations [ 384.561525][ T6968] BTRFS info (device loop2): clearing free space tree [ 384.568477][ T6968] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 384.578322][ T6968] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 384.879993][ T4234] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 385.419496][ T4234] usb 4-1: USB disconnect, device number 12 [ 385.510798][ T4234] usblp0: removed [ 391.523188][ T7056] loop1: detected capacity change from 0 to 8192 [ 391.639840][ T7056] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 391.677795][ T7058] loop3: detected capacity change from 0 to 32768 [ 391.688643][ T7056] REISERFS (device loop1): using ordered data mode [ 391.695203][ T7056] reiserfs: using flush barriers [ 391.701655][ T7056] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 391.757263][ T7058] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.742 (7058) [ 391.776827][ T7056] REISERFS (device loop1): checking transaction log (loop1) [ 391.820401][ T7056] REISERFS (device loop1): Using r5 hash to sort names [ 391.842136][ T7058] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 391.847834][ T7056] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 391.852614][ T7058] BTRFS info (device loop3): enabling disk space caching [ 391.867088][ T7058] BTRFS info (device loop3): force clearing of disk cache [ 391.874936][ T7058] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 391.884410][ T7058] BTRFS info (device loop3): use zstd compression, level 3 [ 391.891718][ T7058] BTRFS info (device loop3): disk space caching is enabled [ 391.899044][ T7058] BTRFS info (device loop3): has skinny extents [ 392.491207][ T7058] BTRFS info (device loop3): enabling ssd optimizations [ 392.499366][ T7058] BTRFS info (device loop3): clearing free space tree [ 392.506363][ T7058] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 392.516158][ T7058] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 393.053307][ T7087] loop2: detected capacity change from 0 to 32768 [ 393.482273][ T7087] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.744 (7087) [ 394.228555][ T4415] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (4415) [ 395.111569][ T7091] loop0: detected capacity change from 0 to 40427 [ 395.169575][ T7091] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 395.253899][ T7091] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 395.370606][ T7091] F2FS-fs (loop0): Found nat_bits in checkpoint [ 395.627558][ T7091] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 395.653653][ T7091] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 396.198979][ T7130] loop3: detected capacity change from 0 to 8192 [ 396.493534][ T7130] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 396.675193][ T7130] REISERFS (device loop3): using ordered data mode [ 396.782830][ T7130] reiserfs: using flush barriers [ 396.826712][ T7130] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 396.893694][ T7130] REISERFS (device loop3): checking transaction log (loop3) [ 396.904810][ T7130] REISERFS (device loop3): Using r5 hash to sort names [ 396.912004][ T7130] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 397.116011][ T4239] Bluetooth: hci4: command 0x0405 tx timeout [ 398.145278][ T7146] loop3: detected capacity change from 0 to 32768 [ 398.270001][ T7146] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 398.278901][ T7146] BTRFS info (device loop3): enabling disk space caching [ 398.286581][ T7146] BTRFS info (device loop3): force clearing of disk cache [ 398.293802][ T7146] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 398.303253][ T7146] BTRFS info (device loop3): use zstd compression, level 3 [ 398.310523][ T7146] BTRFS info (device loop3): disk space caching is enabled [ 398.317740][ T7146] BTRFS info (device loop3): has skinny extents [ 398.627912][ T7146] BTRFS info (device loop3): enabling ssd optimizations [ 398.636211][ T7146] BTRFS info (device loop3): clearing free space tree [ 398.643359][ T7146] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 398.653123][ T7146] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 399.652682][ T4415] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (4415) [ 400.401876][ T7187] loop0: detected capacity change from 0 to 40427 [ 400.641034][ T7187] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 400.755003][ T7187] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 401.287549][ T7187] F2FS-fs (loop0): Found nat_bits in checkpoint [ 401.425708][ T7187] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 401.432846][ T7187] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 403.372968][ T7219] loop3: detected capacity change from 0 to 8192 [ 403.494414][ T7219] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 403.503919][ T7219] REISERFS (device loop3): using ordered data mode [ 403.510462][ T7219] reiserfs: using flush barriers [ 403.561042][ T7219] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 403.647118][ T7219] REISERFS (device loop3): checking transaction log (loop3) [ 403.672052][ T7219] REISERFS (device loop3): Using r5 hash to sort names [ 403.690684][ T7219] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 403.868302][ T7222] loop0: detected capacity change from 0 to 32768 [ 404.259485][ T7226] loop0: detected capacity change from 0 to 128 [ 404.539023][ T7226] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 404.550287][ T7226] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.939434][ T7232] loop1: detected capacity change from 0 to 8192 [ 405.068830][ T7232] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 405.105939][ T7232] REISERFS (device loop1): using ordered data mode [ 405.189143][ T7232] reiserfs: using flush barriers [ 405.221825][ T7232] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 405.558415][ T7232] REISERFS (device loop1): checking transaction log (loop1) [ 405.673453][ T7232] REISERFS (device loop1): Using r5 hash to sort names [ 405.787586][ T7232] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 406.861679][ T7249] loop0: detected capacity change from 0 to 8192 [ 407.062063][ T7249] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 407.082736][ T7249] REISERFS (device loop0): using ordered data mode [ 407.104425][ T7249] reiserfs: using flush barriers [ 407.113857][ T7252] loop2: detected capacity change from 0 to 32768 [ 407.146426][ T7249] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 407.163216][ T7249] REISERFS (device loop0): checking transaction log (loop0) [ 407.178822][ T7249] REISERFS (device loop0): Using r5 hash to sort names [ 407.186097][ T7249] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 408.319508][ T7263] loop2: detected capacity change from 0 to 32768 [ 409.301508][ T7268] loop1: detected capacity change from 0 to 40427 [ 409.351806][ T7268] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 409.406062][ T7268] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 409.671721][ T7268] F2FS-fs (loop1): Found nat_bits in checkpoint [ 409.828935][ T7268] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 409.838028][ T7283] loop2: detected capacity change from 0 to 8192 [ 409.844856][ T7268] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 410.048858][ T7295] loop3: detected capacity change from 0 to 8192 [ 410.183787][ T7295] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 410.226326][ T7295] REISERFS (device loop3): using ordered data mode [ 410.257787][ T7295] reiserfs: using flush barriers [ 410.282255][ T7295] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 410.314652][ T7295] REISERFS (device loop3): checking transaction log (loop3) [ 410.366684][ T7295] REISERFS (device loop3): Using r5 hash to sort names [ 410.405702][ T7295] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 411.645838][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.805'. [ 411.670142][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.805'. [ 411.684114][ T7312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.805'. [ 411.963635][ T7317] loop1: detected capacity change from 0 to 32768 [ 412.148861][ T7320] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by ""[7320] [ 414.809824][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 417.632693][ T7349] loop0: detected capacity change from 0 to 8192 [ 417.688367][ T7349] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 417.738208][ T7349] REISERFS (device loop0): using ordered data mode [ 417.744778][ T7349] reiserfs: using flush barriers [ 417.832902][ T7349] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 417.958335][ T7349] REISERFS (device loop0): checking transaction log (loop0) [ 417.967135][ T7361] loop2: detected capacity change from 0 to 8192 [ 418.448582][ T7361] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 418.459031][ T7361] REISERFS (device loop2): using ordered data mode [ 418.466279][ T7361] reiserfs: using flush barriers [ 418.484232][ T7361] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 418.561630][ T7349] REISERFS (device loop0): Using r5 hash to sort names [ 418.568840][ T7349] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 418.598760][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 418.602800][ T7361] REISERFS (device loop2): checking transaction log (loop2) [ 418.634955][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 418.644500][ T7366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.730398][ T7361] REISERFS (device loop2): Using r5 hash to sort names [ 418.748239][ T7361] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 418.760935][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 418.842965][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 418.886497][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 418.956164][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 419.024844][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 419.132782][ T7373] loop1: detected capacity change from 0 to 128 [ 419.382511][ T7373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 419.446782][ T7373] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.029931][ T7383] process 'syz.1.822' launched './file1' with NULL argv: empty string added [ 422.848635][ T4495] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 424.204606][ T4495] usb 4-1: device descriptor read/all, error -71 [ 424.359792][ T7409] loop3: detected capacity change from 0 to 512 [ 424.469572][ T7409] EXT4-fs (loop3): Mount option "journal_dev=0x00000000000000fd" incompatible with ext2 [ 424.809993][ T7414] loop3: detected capacity change from 0 to 8192 [ 424.847495][ T7414] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 424.875598][ T7414] REISERFS (device loop3): using ordered data mode [ 424.884127][ T7414] reiserfs: using flush barriers [ 424.900847][ T7414] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 424.932193][ T7414] REISERFS (device loop3): checking transaction log (loop3) [ 424.991499][ T7414] REISERFS (device loop3): Using r5 hash to sort names [ 424.998811][ T7414] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 426.785748][ T7424] loop1: detected capacity change from 0 to 32768 [ 427.759057][ T7442] loop1: detected capacity change from 0 to 32768 [ 428.286787][ T7446] loop1: detected capacity change from 0 to 128 [ 428.499625][ T7446] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 428.510883][ T7446] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 429.115170][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 431.068863][ T7469] loop1: detected capacity change from 0 to 32768 [ 431.490169][ T7480] loop3: detected capacity change from 0 to 32768 [ 431.514738][ T7469] JBD2: Ignoring recovery information on journal [ 431.636077][ T7480] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 431.645035][ T7480] BTRFS info (device loop3): enabling disk space caching [ 431.652104][ T7480] BTRFS info (device loop3): force clearing of disk cache [ 431.659316][ T7480] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 431.668767][ T7480] BTRFS info (device loop3): use zstd compression, level 3 [ 431.676740][ T7480] BTRFS info (device loop3): disk space caching is enabled [ 431.683979][ T7480] BTRFS info (device loop3): has skinny extents [ 431.702177][ T7469] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 431.781889][ T7482] loop2: detected capacity change from 0 to 8192 [ 431.914808][ T7482] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 431.961350][ T7482] REISERFS (device loop2): using ordered data mode [ 431.990954][ T7482] reiserfs: using flush barriers [ 432.035623][ T7480] BTRFS info (device loop3): enabling ssd optimizations [ 432.044927][ T7480] BTRFS info (device loop3): clearing free space tree [ 432.051931][ T7480] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 432.061728][ T7480] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 432.107845][ T7482] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 432.146649][ T7482] REISERFS (device loop2): checking transaction log (loop2) [ 432.225331][ T7482] REISERFS (device loop2): Using r5 hash to sort names [ 432.243267][ T7482] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 432.773476][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 435.070706][ T7533] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by ""[7533] [ 435.218697][ T2308] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 435.356197][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 435.961818][ T2308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 435.982842][ T2308] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 436.004671][ T2308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 436.185841][ T2308] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 436.196420][ T2308] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 436.206461][ T2308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.236274][ T2308] usb 4-1: config 0 descriptor?? [ 436.603605][ T2308] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 437.511490][ T2308] hdpvr 4-1:0.0: max device number reached, device register failed [ 437.588131][ T2308] usb 4-1: USB disconnect, device number 16 [ 437.804228][ T7556] loop3: detected capacity change from 0 to 8192 [ 437.867053][ T7556] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 437.890972][ T7556] REISERFS (device loop3): using ordered data mode [ 437.949738][ T7556] reiserfs: using flush barriers [ 438.000759][ T7556] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 438.084661][ T7556] REISERFS (device loop3): checking transaction log (loop3) [ 438.107748][ T7556] REISERFS (device loop3): Using r5 hash to sort names [ 438.145182][ T7556] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 438.827855][ T7564] loop1: detected capacity change from 0 to 32768 [ 438.916215][ T7564] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.867 (7564) [ 438.990228][ T7564] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 438.999190][ T7564] BTRFS info (device loop1): enabling disk space caching [ 439.006329][ T7564] BTRFS info (device loop1): force clearing of disk cache [ 439.013541][ T7564] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 439.023071][ T7564] BTRFS info (device loop1): use zstd compression, level 3 [ 439.032078][ T7564] BTRFS info (device loop1): disk space caching is enabled [ 439.039316][ T7564] BTRFS info (device loop1): has skinny extents [ 439.399338][ T7564] BTRFS info (device loop1): enabling ssd optimizations [ 439.409611][ T7564] BTRFS info (device loop1): clearing free space tree [ 439.416487][ T7564] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 439.426251][ T7564] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 440.345702][ T4415] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop1 scanned by udevd (4415) [ 443.933303][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.939654][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.670134][ T7619] loop2: detected capacity change from 0 to 2048 [ 444.967740][ T7619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.061047][ T7627] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by ""[7627] [ 448.239359][ T7646] loop3: detected capacity change from 0 to 8192 [ 448.300287][ T7646] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 448.323163][ T7646] REISERFS (device loop3): using ordered data mode [ 448.329731][ T7646] reiserfs: using flush barriers [ 448.398901][ T7646] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 448.455450][ T7646] REISERFS (device loop3): checking transaction log (loop3) [ 448.483365][ T7646] REISERFS (device loop3): Using r5 hash to sort names [ 448.501801][ T7646] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 448.826025][ T4207] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 448.836094][ T4207] CPU: 1 PID: 4207 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 448.843677][ T4207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.853764][ T4207] Workqueue: hci2 hci_rx_work [ 448.858661][ T4207] Call Trace: [ 448.862012][ T4207] [ 448.865064][ T4207] dump_stack_lvl+0x188/0x250 [ 448.869987][ T4207] ? show_regs_print_info+0x20/0x20 [ 448.875238][ T4207] ? load_image+0x400/0x400 [ 448.879812][ T4207] sysfs_create_dir_ns+0x26a/0x290 [ 448.885089][ T4207] ? sysfs_warn_dup+0xa0/0xa0 [ 448.889793][ T4207] ? process_one_work+0x85f/0x1010 [ 448.895091][ T4207] ? do_raw_spin_unlock+0x11d/0x230 [ 448.900357][ T4207] kobject_add_internal+0x6e0/0xd90 [ 448.905677][ T4207] kobject_add+0x160/0x230 [ 448.910124][ T4207] ? kobject_init+0x1d0/0x1d0 [ 448.914837][ T4207] ? klist_children_get+0x50/0x50 [ 448.919999][ T4207] ? get_device_parent+0x121/0x3f0 [ 448.925147][ T4207] device_add+0x483/0xfb0 [ 448.929516][ T4207] hci_conn_add_sysfs+0xd1/0x1e0 [ 448.934570][ T4207] le_conn_complete_evt+0xc48/0x15c0 [ 448.939895][ T4207] ? cs_le_create_conn+0x5e0/0x5e0 [ 448.945137][ T4207] ? __mutex_trylock_common+0x155/0x260 [ 448.950861][ T4207] hci_le_meta_evt+0x285/0x3c90 [ 448.955748][ T4207] ? hci_event_packet+0x37b/0x1370 [ 448.960895][ T4207] ? __lock_acquire+0x7d10/0x7d10 [ 448.965972][ T4207] ? hci_remote_host_features_evt+0x280/0x280 [ 448.972075][ T4207] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 448.977834][ T4207] ? mark_lock+0x94/0x320 [ 448.982189][ T4207] ? mutex_unlock+0x10/0x10 [ 448.986724][ T4207] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 448.992743][ T4207] ? lock_chain_count+0x20/0x20 [ 448.997629][ T4207] ? __rwlock_init+0x140/0x140 [ 449.002432][ T4207] hci_event_packet+0xe48/0x1370 [ 449.007406][ T4207] ? lockdep_hardirqs_on+0x94/0x140 [ 449.012732][ T4207] ? rcu_lock_release+0x20/0x20 [ 449.017616][ T4207] ? hci_send_to_monitor+0x9c/0x4a0 [ 449.022847][ T4207] hci_rx_work+0x255/0xa10 [ 449.027310][ T4207] process_one_work+0x85f/0x1010 [ 449.032300][ T4207] ? worker_detach_from_pool+0x240/0x240 [ 449.037961][ T4207] ? lockdep_hardirqs_off+0x70/0x100 [ 449.043280][ T4207] ? _raw_spin_lock_irq+0xb7/0xf0 [ 449.048332][ T4207] ? _raw_spin_lock_irqsave+0x100/0x100 [ 449.053906][ T4207] ? wq_worker_running+0x97/0x170 [ 449.058960][ T4207] worker_thread+0xaa6/0x1290 [ 449.063683][ T4207] ? lockdep_hardirqs_on+0x94/0x140 [ 449.068917][ T4207] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 449.074849][ T4207] kthread+0x436/0x520 [ 449.078941][ T4207] ? rcu_lock_release+0x20/0x20 [ 449.083819][ T4207] ? kthread_blkcg+0xd0/0xd0 [ 449.088444][ T4207] ret_from_fork+0x1f/0x30 [ 449.092998][ T4207] [ 449.119474][ T4207] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 449.134092][ T4207] Bluetooth: hci2: failed to register connection device [ 449.147349][ T4207] Bluetooth: Frame is too long (len 10, expected len 4) [ 449.389542][ T7663] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 449.398610][ T7663] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 449.477328][ T7669] syz.4.895 uses obsolete (PF_INET,SOCK_PACKET) [ 452.757784][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.765687][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.773652][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.781244][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.790111][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.797614][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.805513][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.811071][ T7692] loop2: detected capacity change from 0 to 8192 [ 452.813268][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.826767][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.834330][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.841864][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.849431][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.856998][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.864599][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.872153][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.879692][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.887943][ T4496] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 452.905167][ T4496] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 452.918032][ T7692] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 453.051663][ T7694] fido_id[7694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 453.067658][ T7692] REISERFS (device loop2): using ordered data mode [ 453.084071][ T7692] reiserfs: using flush barriers [ 453.135669][ T7692] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 453.176059][ T7692] REISERFS (device loop2): checking transaction log (loop2) [ 453.189149][ T7692] REISERFS (device loop2): Using r5 hash to sort names [ 453.208151][ T7692] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 454.123705][ T7707] loop3: detected capacity change from 0 to 8192 [ 454.197825][ T7707] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 454.244289][ T7707] REISERFS (device loop3): using ordered data mode [ 454.309838][ T7707] reiserfs: using flush barriers [ 454.324286][ T7707] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 454.528640][ T7707] REISERFS (device loop3): checking transaction log (loop3) [ 454.645071][ T7707] REISERFS (device loop3): Using r5 hash to sort names [ 454.742852][ T7707] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 457.935856][ T7742] loop1: detected capacity change from 0 to 256 [ 459.628347][ T7759] loop3: detected capacity change from 0 to 8192 [ 459.792517][ T7759] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 459.866039][ T26] audit: type=1326 audit(1779220380.581:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c59a2be59 code=0x7ffc0000 [ 459.894830][ T7759] REISERFS (device loop3): using ordered data mode [ 460.604264][ T7759] reiserfs: using flush barriers [ 460.793745][ T7759] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 460.870566][ T7759] REISERFS (device loop3): checking transaction log (loop3) [ 460.950561][ T26] audit: type=1326 audit(1779220380.581:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c59a2be59 code=0x7ffc0000 [ 461.254738][ T7759] REISERFS (device loop3): Using r5 hash to sort names [ 461.313078][ T26] audit: type=1326 audit(1779220380.591:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c599ec68e code=0x7ffc0000 [ 461.334417][ T7759] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 461.456087][ T26] audit: type=1326 audit(1779220380.591:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c599ec68e code=0x7ffc0000 [ 461.529922][ T7779] loop1: detected capacity change from 0 to 8192 [ 461.649360][ T26] audit: type=1326 audit(1779220380.591:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c59a2be59 code=0x7ffc0000 [ 461.753627][ T26] audit: type=1326 audit(1779220380.591:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c59a2be59 code=0x7ffc0000 [ 461.783728][ T26] audit: type=1326 audit(1779220380.601:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6c59a2be59 code=0x7ffc0000 [ 461.840819][ T26] audit: type=1326 audit(1779220380.601:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c59a2be59 code=0x7ffc0000 [ 461.865449][ T26] audit: type=1326 audit(1779220380.601:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c59a2be59 code=0x7ffc0000 [ 461.890520][ T26] audit: type=1326 audit(1779220380.601:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.923" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c59a2be59 code=0x7ffc0000 [ 461.895333][ T7779] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 461.975263][ T7779] REISERFS (device loop1): using ordered data mode [ 461.986188][ T7779] reiserfs: using flush barriers [ 461.999586][ T7779] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 462.027253][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'. [ 462.043537][ T7779] REISERFS (device loop1): checking transaction log (loop1) [ 462.071928][ T7779] REISERFS (device loop1): Using r5 hash to sort names [ 462.085931][ T7779] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 462.397577][ T7802] loop3: detected capacity change from 0 to 128 [ 462.478753][ T7802] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 462.552290][ T7802] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 464.823533][ T7597] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 464.861978][ T7837] loop1: detected capacity change from 0 to 8192 [ 464.930394][ T7837] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 464.956080][ T7842] loop2: detected capacity change from 0 to 1024 [ 464.966652][ T7837] REISERFS (device loop1): using ordered data mode [ 464.973327][ T7837] reiserfs: using flush barriers [ 464.985736][ T7837] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 465.070140][ T7842] hfsplus: unable to change nls mapping [ 465.097896][ T7842] hfsplus: unable to parse mount options [ 465.133640][ T7837] REISERFS (device loop1): checking transaction log (loop1) [ 465.158144][ T7837] REISERFS (device loop1): Using r5 hash to sort names [ 465.183080][ T7837] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 465.222503][ T7597] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 465.250053][ T7597] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 465.266879][ T7597] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 465.290160][ T7597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.343389][ T7826] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 465.586699][ T7826] udc-core: couldn't find an available UDC or it's busy [ 465.595310][ T7826] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 465.893989][ T7826] udc-core: couldn't find an available UDC or it's busy [ 465.911274][ T7826] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 468.483351][ T7873] netlink: 456 bytes leftover after parsing attributes in process `syz.2.956'. [ 469.568900][ T7598] usb 4-1: USB disconnect, device number 17 [ 469.682022][ T7883] loop3: detected capacity change from 0 to 2048 [ 470.170189][ T7883] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.302029][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 472.302631][ T26] audit: type=1326 audit(1779220393.024:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb52ce59 code=0x7ffc0000 [ 472.915485][ T26] audit: type=1326 audit(1779220393.024:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb52ce59 code=0x7ffc0000 [ 472.952185][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.970'. [ 472.971253][ T26] audit: type=1326 audit(1779220393.055:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ddb4ed68e code=0x7ffc0000 [ 473.098606][ T26] audit: type=1326 audit(1779220393.066:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ddb4ed68e code=0x7ffc0000 [ 473.172651][ T26] audit: type=1326 audit(1779220393.066:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb52ce59 code=0x7ffc0000 [ 473.213944][ T7915] loop3: detected capacity change from 0 to 8192 [ 473.244088][ T26] audit: type=1326 audit(1779220393.066:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb52ce59 code=0x7ffc0000 [ 473.283372][ T7915] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 473.302363][ T26] audit: type=1326 audit(1779220393.076:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4ddb52ce59 code=0x7ffc0000 [ 473.322515][ T7915] REISERFS (device loop3): using ordered data mode [ 473.354790][ T7922] loop2: detected capacity change from 0 to 512 [ 473.362205][ T7915] reiserfs: using flush barriers [ 473.386395][ T7915] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 473.433389][ T7922] EXT4-fs (loop2): Ignoring removed nobh option [ 473.442587][ T7922] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 473.450178][ T26] audit: type=1326 audit(1779220393.076:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb52ce59 code=0x7ffc0000 [ 473.469748][ T7922] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 473.491404][ T7915] REISERFS (device loop3): checking transaction log (loop3) [ 473.530799][ T7915] REISERFS (device loop3): Using r5 hash to sort names [ 473.541303][ T26] audit: type=1326 audit(1779220393.076:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb52ce59 code=0x7ffc0000 [ 473.565927][ T7915] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 473.595713][ T26] audit: type=1326 audit(1779220393.076:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.968" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4ddb52ce59 code=0x7ffc0000 [ 473.617620][ T7922] EXT4-fs (loop2): 1 truncate cleaned up [ 473.761599][ T7922] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 474.413552][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.974'. [ 477.775689][ T7961] loop1: detected capacity change from 0 to 256 [ 477.820076][ T7961] FAT-fs (loop1): Directory bread(block 64) failed [ 477.826855][ T7961] FAT-fs (loop1): Directory bread(block 65) failed [ 477.833465][ T7961] FAT-fs (loop1): Directory bread(block 66) failed [ 477.840083][ T7961] FAT-fs (loop1): Directory bread(block 67) failed [ 477.846689][ T7961] FAT-fs (loop1): Directory bread(block 68) failed [ 477.853346][ T7961] FAT-fs (loop1): Directory bread(block 69) failed [ 477.859985][ T7961] FAT-fs (loop1): Directory bread(block 70) failed [ 477.866542][ T7961] FAT-fs (loop1): Directory bread(block 71) failed [ 477.873212][ T7961] FAT-fs (loop1): Directory bread(block 72) failed [ 477.879800][ T7961] FAT-fs (loop1): Directory bread(block 73) failed [ 479.777182][ T7964] fuse: Unknown parameter '0xffffffffffffffff' [ 485.255795][ T4496] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 485.716821][ T8005] loop3: detected capacity change from 0 to 8192 [ 485.822713][ T8005] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 485.853675][ T8005] REISERFS (device loop3): using ordered data mode [ 485.887669][ T8005] reiserfs: using flush barriers [ 485.918077][ T8005] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 485.987778][ T8005] REISERFS (device loop3): checking transaction log (loop3) [ 485.997732][ T8005] REISERFS (device loop3): Using r5 hash to sort names [ 486.017132][ T4496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 486.027312][ T8005] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 486.050091][ T4496] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 486.240065][ T4496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 486.250056][ T4496] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 486.260225][ T4496] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 486.269424][ T4496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.286983][ T4496] usb 3-1: config 0 descriptor?? [ 487.240423][ T8018] device bridge1 entered promiscuous mode [ 487.254881][ T8018] team0: Port device bridge1 added [ 487.338793][ T8024] device bridge2 entered promiscuous mode [ 487.350439][ T8024] team0: Port device bridge2 added [ 487.376001][ T8024] bridge0: port 3(team0) entered blocking state [ 487.391245][ T8024] bridge0: port 3(team0) entered disabled state [ 487.397952][ T4496] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 487.412734][ T8024] device team0 entered promiscuous mode [ 487.419800][ T8024] device team_slave_0 entered promiscuous mode [ 487.432327][ T8024] device team_slave_1 entered promiscuous mode [ 487.442968][ T8024] bridge0: port 3(team0) entered blocking state [ 487.449559][ T8024] bridge0: port 3(team0) entered forwarding state [ 488.927811][ T4496] hdpvr 3-1:0.0: max device number reached, device register failed [ 488.971960][ T4496] usb 3-1: USB disconnect, device number 16 [ 489.390190][ T8059] loop2: detected capacity change from 0 to 2048 [ 489.441416][ T8059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.460874][ T8057] loop3: detected capacity change from 0 to 4096 [ 489.505660][ T8057] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 491.817445][ T8084] loop3: detected capacity change from 0 to 8192 [ 492.068746][ T8084] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 492.078384][ T8084] REISERFS (device loop3): using ordered data mode [ 492.084952][ T8084] reiserfs: using flush barriers [ 492.094069][ T8084] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 492.111833][ T8084] REISERFS (device loop3): checking transaction log (loop3) [ 492.141033][ T7595] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 492.276249][ T8084] REISERFS (device loop3): Using r5 hash to sort names [ 492.513711][ T8084] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 493.250410][ T7595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 493.283488][ T7595] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 493.299399][ T7595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 493.309304][ T7595] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 493.321165][ T7595] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 493.332115][ T7595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.359465][ T7595] usb 3-1: config 0 descriptor?? [ 493.695308][ T8115] overlayfs: failed to clone upperpath [ 493.796528][ T8118] capability: warning: `syz.0.1030' uses deprecated v2 capabilities in a way that may be insecure [ 493.819691][ T7595] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 494.859915][ T7595] hdpvr 3-1:0.0: max device number reached, device register failed [ 494.950262][ T7595] usb 3-1: USB disconnect, device number 17 [ 496.919018][ T8154] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1041'. [ 500.135664][ T8155] loop1: detected capacity change from 0 to 32768 [ 500.541904][ T8159] loop2: detected capacity change from 0 to 40427 [ 500.612528][ T8159] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 500.621417][ T4415] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4415) [ 500.628438][ T8159] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 501.000915][ T8159] F2FS-fs (loop2): Found nat_bits in checkpoint [ 501.866272][ T8193] loop3: detected capacity change from 0 to 256 [ 501.884794][ T8195] overlayfs: failed to clone upperpath [ 502.015060][ T8193] FAT-fs (loop3): Directory bread(block 64) failed [ 502.025364][ T8193] FAT-fs (loop3): Directory bread(block 65) failed [ 502.049352][ T8193] FAT-fs (loop3): Directory bread(block 66) failed [ 502.066361][ T8193] FAT-fs (loop3): Directory bread(block 67) failed [ 502.093158][ T8193] FAT-fs (loop3): Directory bread(block 68) failed [ 502.168354][ T8193] FAT-fs (loop3): Directory bread(block 69) failed [ 502.194148][ T8193] FAT-fs (loop3): Directory bread(block 70) failed [ 502.240967][ T8193] FAT-fs (loop3): Directory bread(block 71) failed [ 502.259058][ T8193] FAT-fs (loop3): Directory bread(block 72) failed [ 502.265646][ T8193] FAT-fs (loop3): Directory bread(block 73) failed [ 504.064110][ T8222] device bridge1 entered promiscuous mode [ 504.074801][ T8222] team0: Port device bridge1 added [ 504.238004][ T4496] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 504.680648][ T8226] device bridge2 entered promiscuous mode [ 504.848614][ T8226] team0: Port device bridge2 added [ 504.854316][ T8228] bridge0: port 3(team0) entered blocking state [ 504.876929][ T4496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 505.521867][ T8228] bridge0: port 3(team0) entered disabled state [ 505.530718][ T4496] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 505.536550][ T8228] device team0 entered promiscuous mode [ 505.552030][ T8228] device team_slave_0 entered promiscuous mode [ 505.559954][ T8228] device team_slave_1 entered promiscuous mode [ 505.568622][ T8228] bridge0: port 3(team0) entered blocking state [ 505.574985][ T8228] bridge0: port 3(team0) entered forwarding state [ 505.580851][ T4496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 505.637310][ T4496] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 505.681156][ T4496] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 505.733210][ T4496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.797351][ T8242] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 505.806311][ T8242] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 505.832909][ T4496] usb 3-1: config 0 descriptor?? [ 506.113077][ T4496] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 506.171884][ T8250] loop3: detected capacity change from 0 to 2048 [ 506.300974][ T8250] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.321558][ T8250] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.449880][ T8250] fs-verity: sha512 using implementation "sha512-avx2" [ 507.013093][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.019547][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.919288][ T8274] device bridge1 entered promiscuous mode [ 507.937905][ T8274] team0: Port device bridge1 added [ 508.391232][ T8277] device bridge2 entered promiscuous mode [ 508.530953][ T8277] team0: Port device bridge2 added [ 508.551553][ T4496] hdpvr 3-1:0.0: max device number reached, device register failed [ 508.560696][ T8277] bridge0: port 3(team0) entered blocking state [ 508.577272][ T8277] bridge0: port 3(team0) entered disabled state [ 508.593168][ T4496] usb 3-1: USB disconnect, device number 18 [ 508.662813][ T8277] device team0 entered promiscuous mode [ 508.694797][ T8277] device team_slave_0 entered promiscuous mode [ 510.137561][ T8277] device team_slave_1 entered promiscuous mode [ 510.151539][ T8293] loop3: detected capacity change from 0 to 512 [ 510.183779][ T8277] bridge0: port 3(team0) entered blocking state [ 510.190177][ T8277] bridge0: port 3(team0) entered forwarding state [ 510.241041][ T8293] EXT4-fs (loop3): Ignoring removed nobh option [ 510.287209][ T8293] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 510.376113][ T8293] EXT4-fs (loop3): 1 truncate cleaned up [ 510.411867][ T8293] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 511.846365][ T7595] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 512.253494][ T7595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 512.292851][ T7595] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 512.307663][ T7595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 512.317739][ T7595] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 512.329587][ T7595] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 512.338907][ T7595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.369121][ T8320] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 512.378236][ T8320] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 512.472150][ T7595] usb 4-1: config 0 descriptor?? [ 512.816816][ T7595] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 514.193256][ T7595] hdpvr 4-1:0.0: max device number reached, device register failed [ 515.259204][ T7595] usb 4-1: USB disconnect, device number 18 [ 519.411864][ T8371] loop2: detected capacity change from 0 to 32768 [ 519.668512][ T8371] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1106 (8371) [ 520.659378][ T8371] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 520.668277][ T8371] BTRFS info (device loop2): enabling disk space caching [ 520.675356][ T8371] BTRFS info (device loop2): force clearing of disk cache [ 520.682500][ T8371] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 520.691912][ T8371] BTRFS info (device loop2): use zstd compression, level 3 [ 520.699138][ T8371] BTRFS info (device loop2): disk space caching is enabled [ 520.706414][ T8371] BTRFS info (device loop2): has skinny extents [ 522.359469][ T8371] BTRFS info (device loop2): enabling ssd optimizations [ 522.367502][ T8371] BTRFS info (device loop2): clearing free space tree [ 522.375856][ T8371] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 522.385632][ T8371] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 523.021106][ T8401] loop3: detected capacity change from 0 to 4096 [ 523.239957][ T8401] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 523.315467][ T4415] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop2 scanned by udevd (4415) [ 523.467993][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 523.468009][ T26] audit: type=1800 audit(1779220440.867:30): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1111" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 525.093029][ T8443] loop3: detected capacity change from 0 to 128 [ 525.141947][ T8443] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 525.167942][ T8443] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 526.863048][ T8459] loop3: detected capacity change from 0 to 32768 [ 527.049189][ T8465] loop2: detected capacity change from 0 to 64 [ 528.215744][ T4190] hfs: node 4:3 still has 1 user(s)! [ 528.643925][ T8481] loop2: detected capacity change from 0 to 32768 [ 528.798905][ T8481] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 528.808641][ T8481] BTRFS info (device loop2): enabling disk space caching [ 528.815827][ T8481] BTRFS info (device loop2): force clearing of disk cache [ 528.822975][ T8481] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 528.832537][ T8481] BTRFS info (device loop2): use zstd compression, level 3 [ 528.839830][ T8481] BTRFS info (device loop2): disk space caching is enabled [ 528.847073][ T8481] BTRFS info (device loop2): has skinny extents [ 531.102118][ T8517] loop3: detected capacity change from 0 to 128 [ 531.122795][ T8481] BTRFS info (device loop2): enabling ssd optimizations [ 531.215131][ T8481] BTRFS info (device loop2): clearing free space tree [ 531.222188][ T8481] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 531.231987][ T8481] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 531.921808][ T8517] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 531.978545][ T8517] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 534.000119][ T8542] loop3: detected capacity change from 0 to 32768 [ 534.054738][ T8542] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1140 (8542) [ 534.120063][ T8542] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 534.129951][ T8542] BTRFS info (device loop3): enabling disk space caching [ 534.137678][ T8542] BTRFS info (device loop3): force clearing of disk cache [ 534.144932][ T8542] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 534.154339][ T8542] BTRFS info (device loop3): use zstd compression, level 3 [ 534.161603][ T8542] BTRFS info (device loop3): disk space caching is enabled [ 534.168853][ T8542] BTRFS info (device loop3): has skinny extents [ 534.342633][ T8548] loop1: detected capacity change from 0 to 8192 [ 534.427380][ T8548] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 534.448111][ T8548] REISERFS (device loop1): using ordered data mode [ 534.454742][ T8548] reiserfs: using flush barriers [ 534.478029][ T8548] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 534.494738][ T8548] REISERFS (device loop1): checking transaction log (loop1) [ 534.503728][ T8548] REISERFS (device loop1): Using r5 hash to sort names [ 534.511216][ T8548] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 534.893561][ T8542] BTRFS info (device loop3): enabling ssd optimizations [ 534.901650][ T8542] BTRFS info (device loop3): clearing free space tree [ 534.909171][ T8542] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 534.919122][ T8542] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 536.349521][ T8593] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 536.358570][ T8593] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 537.441026][ T8589] sctp: failed to load transform for md5: -2 [ 540.794977][ T8614] loop3: detected capacity change from 0 to 32768 [ 540.886519][ T8614] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1151 (8614) [ 540.945030][ T8614] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 540.954617][ T8614] BTRFS info (device loop3): enabling disk space caching [ 540.961763][ T8614] BTRFS info (device loop3): force clearing of disk cache [ 540.968966][ T8614] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 540.978367][ T8614] BTRFS info (device loop3): use zstd compression, level 3 [ 540.985745][ T8614] BTRFS info (device loop3): disk space caching is enabled [ 540.993021][ T8614] BTRFS info (device loop3): has skinny extents [ 541.927002][ T8614] BTRFS info (device loop3): enabling ssd optimizations [ 541.944056][ T8614] BTRFS info (device loop3): clearing free space tree [ 541.951048][ T8614] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 541.960895][ T8614] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 542.197117][ T8641] loop2: detected capacity change from 0 to 8192 [ 542.488876][ T8641] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 542.531034][ T8641] REISERFS (device loop2): using ordered data mode [ 542.576418][ T8641] reiserfs: using flush barriers [ 542.617506][ T8641] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 542.896915][ T8641] REISERFS (device loop2): checking transaction log (loop2) [ 542.946321][ T8641] REISERFS (device loop2): Using r5 hash to sort names [ 543.461678][ T8641] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 546.163911][ T8675] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 546.173002][ T8675] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 546.500062][ T8687] loop1: detected capacity change from 0 to 8192 [ 546.520875][ T8687] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 546.531016][ T8687] REISERFS (device loop1): using ordered data mode [ 546.537725][ T8687] reiserfs: using flush barriers [ 546.543938][ T8687] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 546.564148][ T8687] REISERFS (device loop1): checking transaction log (loop1) [ 546.572895][ T8687] REISERFS (device loop1): Using r5 hash to sort names [ 546.583419][ T8687] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 547.093909][ T8683] overlayfs: statfs failed on './file0' [ 548.617175][ T8716] loop2: detected capacity change from 0 to 32768 [ 548.824278][ T8716] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1183 (8716) [ 549.202471][ T8716] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 549.211281][ T8716] BTRFS info (device loop2): enabling disk space caching [ 549.219992][ T8716] BTRFS info (device loop2): force clearing of disk cache [ 549.227229][ T8716] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 549.236744][ T8716] BTRFS info (device loop2): use zstd compression, level 3 [ 549.244083][ T8716] BTRFS info (device loop2): disk space caching is enabled [ 549.251316][ T8716] BTRFS info (device loop2): has skinny extents [ 549.572674][ T8740] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 549.581924][ T8740] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 550.930517][ T8716] BTRFS info (device loop2): enabling ssd optimizations [ 550.944870][ T8716] BTRFS info (device loop2): clearing free space tree [ 550.953161][ T8716] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 550.962874][ T8716] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 558.448104][ T8806] loop1: detected capacity change from 0 to 32768 [ 558.688719][ T8806] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1204 (8806) [ 558.891153][ T8806] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 558.900062][ T8806] BTRFS info (device loop1): enabling disk space caching [ 558.907215][ T8806] BTRFS info (device loop1): force clearing of disk cache [ 558.914357][ T8806] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 558.923867][ T8806] BTRFS info (device loop1): use zstd compression, level 3 [ 558.931139][ T8806] BTRFS info (device loop1): disk space caching is enabled [ 558.938374][ T8806] BTRFS info (device loop1): has skinny extents [ 559.277015][ T8806] BTRFS info (device loop1): enabling ssd optimizations [ 559.308240][ T8806] BTRFS info (device loop1): clearing free space tree [ 559.315110][ T8806] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 559.324906][ T8806] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 559.744887][ T8839] loop2: detected capacity change from 0 to 8192 [ 559.869446][ T8839] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 559.894797][ T8839] REISERFS (device loop2): using ordered data mode [ 559.940968][ T8839] reiserfs: using flush barriers [ 559.997014][ T8839] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 560.060915][ T8839] REISERFS (device loop2): checking transaction log (loop2) [ 560.093136][ T8839] REISERFS (device loop2): Using r5 hash to sort names [ 560.104045][ T8839] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 562.087343][ T8861] loop3: detected capacity change from 0 to 40427 [ 562.158100][ T8861] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 562.173404][ T8861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 562.298437][ T8861] F2FS-fs (loop3): Found nat_bits in checkpoint [ 562.935378][ T8861] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 562.998429][ T8861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 563.231390][ T8885] loop1: detected capacity change from 0 to 32768 [ 563.340887][ T8885] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1220 (8885) [ 563.384143][ T8885] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 563.393264][ T8885] BTRFS info (device loop1): enabling disk space caching [ 563.400499][ T8885] BTRFS info (device loop1): force clearing of disk cache [ 563.407808][ T8885] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 563.417987][ T8885] BTRFS info (device loop1): use zstd compression, level 3 [ 563.425300][ T8885] BTRFS info (device loop1): disk space caching is enabled [ 563.432531][ T8885] BTRFS info (device loop1): has skinny extents [ 563.541883][ T8885] BTRFS info (device loop1): enabling ssd optimizations [ 563.549881][ T8885] BTRFS info (device loop1): clearing free space tree [ 563.556822][ T8885] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 563.566648][ T8885] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 565.120019][ T21] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 565.497728][ T8940] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 565.545599][ T8940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.587241][ T8943] bond2: (slave geneve2): making interface the new active one [ 565.599086][ T8943] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 565.608074][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 565.811733][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 565.828818][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 565.840998][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 565.851621][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 565.862085][ T21] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 565.871659][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.881521][ T21] usb 3-1: config 0 descriptor?? [ 566.250359][ T21] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 566.457587][ T8952] loop3: detected capacity change from 0 to 40427 [ 566.507377][ T8952] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 566.516979][ T8952] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 566.598165][ T8952] F2FS-fs (loop3): Found nat_bits in checkpoint [ 566.817144][ T8952] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 566.853989][ T8952] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 566.869086][ T8963] IPVS: Scheduler module ip_vs_ not found [ 568.050899][ T21] hdpvr 3-1:0.0: max device number reached, device register failed [ 568.097921][ T8975] loop1: detected capacity change from 0 to 8192 [ 568.126886][ T21] usb 3-1: USB disconnect, device number 19 [ 568.177132][ T8975] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 568.194115][ T8975] REISERFS (device loop1): using ordered data mode [ 568.203022][ T8975] reiserfs: using flush barriers [ 568.210482][ T8975] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 568.232003][ T8975] REISERFS (device loop1): checking transaction log (loop1) [ 568.254413][ T8975] REISERFS (device loop1): Using r5 hash to sort names [ 568.275924][ T8975] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 568.764812][ T8979] loop3: detected capacity change from 0 to 32768 [ 569.147347][ T8979] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1238 (8979) [ 569.166527][ T8979] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 569.175452][ T8979] BTRFS info (device loop3): enabling disk space caching [ 569.183174][ T8979] BTRFS info (device loop3): force clearing of disk cache [ 569.190381][ T8979] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 569.199882][ T8979] BTRFS info (device loop3): use zstd compression, level 3 [ 569.207148][ T8979] BTRFS info (device loop3): disk space caching is enabled [ 569.214522][ T8979] BTRFS info (device loop3): has skinny extents [ 570.321915][ T4197] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 571.880734][ T8979] BTRFS error (device loop3): open_ctree failed: -12 [ 572.153619][ T4197] usb 2-1: Using ep0 maxpacket: 32 [ 572.310714][ T4197] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 572.330442][ T4197] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 572.376174][ T4197] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 572.409017][ T4197] usb 2-1: config 1 has no interface number 0 [ 572.433271][ T4197] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.482835][ T4197] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 572.565388][ T4197] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 572.607483][ T4197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.701966][ T4197] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 572.939978][ T4197] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 573.198996][ T26] audit: type=1326 audit(1779220486.778:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.3.1253" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce49bc1e59 code=0x0 [ 573.727895][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.734243][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.612878][ T4490] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 574.626887][ T4235] usb 2-1: USB disconnect, device number 8 [ 574.704635][ T4235] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 575.080279][ T9051] loop1: detected capacity change from 0 to 32768 [ 575.465274][ T9051] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1259 (9051) [ 576.047873][ T9051] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 576.057397][ T9051] BTRFS info (device loop1): enabling disk space caching [ 576.064527][ T9051] BTRFS info (device loop1): force clearing of disk cache [ 576.071672][ T9051] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 576.081181][ T9051] BTRFS info (device loop1): use zstd compression, level 3 [ 576.088534][ T9051] BTRFS info (device loop1): disk space caching is enabled [ 576.095778][ T9051] BTRFS info (device loop1): has skinny extents [ 577.109031][ T4207] Bluetooth: hci4: hcon ffff888079066000 sent 1 < count 10 [ 577.116993][ T4207] Bluetooth: hci4: hcon ffff888079066000 sent 0 < count 5 [ 577.124292][ T4207] Bluetooth: hci4: hcon ffff888076e4e000 sent 1 < count 16 [ 577.159083][ T9051] BTRFS info (device loop1): enabling ssd optimizations [ 577.190964][ T9051] BTRFS info (device loop1): clearing free space tree [ 577.197864][ T9051] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 577.207584][ T9051] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 577.402854][ T9054] loop2: detected capacity change from 0 to 40427 [ 577.587993][ T4207] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 577.809728][ T9054] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 577.966661][ T9054] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 578.215186][ T9054] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 578.454918][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'. [ 578.526876][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'. [ 578.572066][ T9109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1270'. [ 578.590671][ T9109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1270'. [ 578.935254][ T9117] loop2: detected capacity change from 0 to 32768 [ 579.186803][ T9117] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1274 (9117) [ 581.169524][ T9117] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 581.178429][ T9117] BTRFS info (device loop2): enabling disk space caching [ 581.185486][ T9117] BTRFS info (device loop2): force clearing of disk cache [ 581.192679][ T9117] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 581.202115][ T9117] BTRFS info (device loop2): use zstd compression, level 3 [ 581.209356][ T9117] BTRFS info (device loop2): disk space caching is enabled [ 581.216573][ T9117] BTRFS info (device loop2): has skinny extents [ 582.582025][ T9117] BTRFS error (device loop2): open_ctree failed: -12 [ 582.754437][ T9173] loop2: detected capacity change from 0 to 64 [ 582.873332][ T9173] mmap: syz.2.1284 (9173) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 582.892654][ T9173] bridge0: port 4(erspan0) entered blocking state [ 582.899202][ T9173] bridge0: port 4(erspan0) entered disabled state [ 582.906734][ T9173] device erspan0 entered promiscuous mode [ 582.913983][ T9173] bridge0: port 4(erspan0) entered blocking state [ 582.920486][ T9173] bridge0: port 4(erspan0) entered forwarding state [ 584.155501][ T9153] loop1: detected capacity change from 0 to 40427 [ 586.731388][ T26] audit: type=1326 audit(1779220499.269:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.1.1300" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52afde4e59 code=0x0 [ 587.523001][ T9208] Illegal XDP return value 508896956, expect packet loss! [ 592.052140][ T9242] loop2: detected capacity change from 0 to 8192 [ 592.124807][ T9242] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 592.159967][ T9242] REISERFS (device loop2): using ordered data mode [ 592.188463][ T9242] reiserfs: using flush barriers [ 592.291138][ T9242] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 592.315164][ T9242] REISERFS (device loop2): checking transaction log (loop2) [ 592.328411][ T9242] REISERFS (device loop2): Using r5 hash to sort names [ 592.349488][ T9242] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 592.605556][ T9268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.416988][ T9276] loop1: detected capacity change from 0 to 128 [ 593.448251][ T9276] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 593.460062][ T9276] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 593.723906][ T9280] loop2: detected capacity change from 0 to 32768 [ 593.832350][ T9280] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1309 (9280) [ 593.965084][ T9280] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 593.974084][ T9280] BTRFS info (device loop2): enabling disk space caching [ 593.981334][ T9280] BTRFS info (device loop2): force clearing of disk cache [ 593.988486][ T9280] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 593.997947][ T9280] BTRFS info (device loop2): use zstd compression, level 3 [ 594.005250][ T9280] BTRFS info (device loop2): disk space caching is enabled [ 594.012500][ T9280] BTRFS info (device loop2): has skinny extents [ 594.183630][ T9280] BTRFS info (device loop2): enabling ssd optimizations [ 594.193388][ T9280] BTRFS info (device loop2): clearing free space tree [ 594.200346][ T9280] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 594.210079][ T9280] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 594.659066][ T9309] team0: No ports can be present during mode change [ 594.711705][ T4415] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop2 scanned by udevd (4415) [ 596.381499][ T9335] xt_recent: Unsupported userspace flags (000000de) [ 597.701536][ T9332] loop3: detected capacity change from 0 to 8192 [ 597.938542][ T9332] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 597.969949][ T9332] REISERFS (device loop3): using ordered data mode [ 598.074589][ T9332] reiserfs: using flush barriers [ 598.289081][ T9332] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 598.652708][ T9332] REISERFS (device loop3): checking transaction log (loop3) [ 598.753269][ T9332] REISERFS (device loop3): Using r5 hash to sort names [ 598.761802][ T9332] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 599.802828][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 600.749700][ T5265] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 601.027572][ T9373] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 601.036357][ T9373] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 601.270654][ T5265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 601.286839][ T5265] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 601.300892][ T5265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 601.316823][ T5265] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 601.329311][ T5265] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 601.345034][ T5265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.370496][ T5265] usb 3-1: config 0 descriptor?? [ 601.648914][ T5265] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 602.904795][ T9389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.928577][ T9389] loop1: detected capacity change from 0 to 2048 [ 603.014141][ T9389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.157903][ T5265] hdpvr 3-1:0.0: max device number reached, device register failed [ 603.841486][ T5265] usb 3-1: USB disconnect, device number 20 [ 604.219397][ T9399] loop2: detected capacity change from 0 to 32768 [ 604.838911][ T9399] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 604.847757][ T9399] BTRFS info (device loop2): enabling disk space caching [ 604.854844][ T9399] BTRFS info (device loop2): force clearing of disk cache [ 604.862276][ T9399] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 604.871739][ T9399] BTRFS info (device loop2): use zstd compression, level 3 [ 604.879003][ T9399] BTRFS info (device loop2): disk space caching is enabled [ 604.886225][ T9399] BTRFS info (device loop2): has skinny extents [ 605.097692][ T9411] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 605.106543][ T9411] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 605.194930][ T9416] loop1: detected capacity change from 0 to 128 [ 605.411105][ T9416] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 605.421853][ T9416] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 605.627351][ T9438] loop3: detected capacity change from 0 to 128 [ 605.633946][ T9399] BTRFS info (device loop2): enabling ssd optimizations [ 605.654732][ T9399] BTRFS info (device loop2): clearing free space tree [ 605.661696][ T9399] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 605.672042][ T9399] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 605.903256][ T9438] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 605.939013][ T9438] ext4 filesystem being mounted at /257/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 606.528294][ T9446] loop1: detected capacity change from 0 to 8192 [ 606.875832][ T9454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.197400][ T9446] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 607.307714][ T9446] REISERFS (device loop1): using ordered data mode [ 607.496033][ T9446] reiserfs: using flush barriers [ 607.522476][ T9446] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 607.590420][ T9446] REISERFS (device loop1): checking transaction log (loop1) [ 607.626362][ T9446] REISERFS (device loop1): Using r5 hash to sort names [ 607.633675][ T9446] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 607.696538][ T9460] xt_recent: Unsupported userspace flags (000000de) [ 608.536775][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 609.145378][ T9478] loop3: detected capacity change from 0 to 32768 [ 609.256460][ T9478] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1361 (9478) [ 609.691753][ T9478] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 609.700672][ T9478] BTRFS info (device loop3): enabling disk space caching [ 609.707882][ T9478] BTRFS info (device loop3): force clearing of disk cache [ 609.715037][ T9478] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 609.724506][ T9478] BTRFS info (device loop3): use zstd compression, level 3 [ 609.731764][ T9478] BTRFS info (device loop3): disk space caching is enabled [ 609.738982][ T9478] BTRFS info (device loop3): has skinny extents [ 609.902502][ T9501] loop1: detected capacity change from 0 to 128 [ 609.931440][ T9478] BTRFS info (device loop3): enabling ssd optimizations [ 609.945110][ T9478] BTRFS info (device loop3): clearing free space tree [ 609.952128][ T9478] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 609.961952][ T9478] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 610.319831][ T9501] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 610.374082][ T9501] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 611.765785][ T4486] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 612.220278][ T4486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 612.263496][ T4486] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 612.307291][ T4486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 612.349963][ T4486] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 612.426317][ T4486] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 612.457921][ T4486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.503034][ T4486] usb 4-1: config 0 descriptor?? [ 612.579855][ T9527] loop2: detected capacity change from 0 to 8192 [ 612.625348][ T9527] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 612.681543][ T9527] REISERFS (device loop2): using ordered data mode [ 612.694993][ T9527] reiserfs: using flush barriers [ 612.906013][ T9535] x_tables: ip_tables: osf match: only valid for protocol 6 [ 612.957580][ T4486] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 615.423012][ T9527] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 615.505091][ T9527] REISERFS (device loop2): checking transaction log (loop2) [ 615.523714][ T9527] REISERFS (device loop2): Using r5 hash to sort names [ 615.533726][ T9527] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 616.424322][ T4486] hdpvr 4-1:0.0: device init failed [ 616.430408][ T4486] hdpvr: probe of 4-1:0.0 failed with error -12 [ 616.448320][ T4486] usb 4-1: USB disconnect, device number 19 [ 616.710948][ T9549] loop3: detected capacity change from 0 to 32768 [ 616.751022][ T9549] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1377 (9549) [ 616.768541][ T9549] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 616.777891][ T9549] BTRFS info (device loop3): enabling disk space caching [ 616.785676][ T9549] BTRFS info (device loop3): force clearing of disk cache [ 616.792930][ T9549] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 616.802365][ T9549] BTRFS info (device loop3): use zstd compression, level 3 [ 616.809630][ T9549] BTRFS info (device loop3): disk space caching is enabled [ 616.816890][ T9549] BTRFS info (device loop3): has skinny extents [ 617.588957][ T9561] loop2: detected capacity change from 0 to 128 [ 617.962616][ T9561] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 618.036116][ T9561] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 618.185981][ T9549] BTRFS info (device loop3): enabling ssd optimizations [ 618.195365][ T9549] BTRFS info (device loop3): clearing free space tree [ 618.202448][ T9549] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 618.212922][ T9549] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 619.539616][ T9594] loop2: detected capacity change from 0 to 2048 [ 620.265117][ T9594] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.930906][ T9602] x_tables: ip_tables: osf match: only valid for protocol 6 [ 622.119792][ T4496] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 622.543813][ T4496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 622.574004][ T4496] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 622.637044][ T4496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 622.764774][ T4496] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 622.787582][ T4496] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 622.803002][ T4496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.829350][ T4496] usb 3-1: config 0 descriptor?? [ 622.993992][ T9621] loop3: detected capacity change from 0 to 4096 [ 623.106960][ T4496] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 623.153197][ T9621] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 624.119920][ T4496] hdpvr 3-1:0.0: max device number reached, device register failed [ 624.146256][ T4496] usb 3-1: USB disconnect, device number 21 [ 624.753836][ T9649] x_tables: ip_tables: osf match: only valid for protocol 6 [ 626.471258][ T9660] loop1: detected capacity change from 0 to 128 [ 626.571141][ T9660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 626.616541][ T9660] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 627.526596][ T9675] loop2: detected capacity change from 0 to 4096 [ 627.584941][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 627.616608][ T9680] device hsr0 entered promiscuous mode [ 627.749618][ T9675] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 630.836874][ T9735] loop1: detected capacity change from 0 to 4096 [ 631.414477][ T9735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 635.430028][ T9835] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 635.458436][ T9835] CIFS mount error: No usable UNC path provided in device string! [ 635.458436][ T9835] [ 635.469654][ T9835] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 635.512755][ T9838] CIFS mount error: No usable UNC path provided in device string! [ 635.512755][ T9838] [ 635.537645][ T9838] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 640.721588][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.727938][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.503456][ T9895] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 641.512360][ T9895] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 645.720704][ T9948] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 645.729493][ T9948] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 652.039420][ T26] audit: type=1326 audit(1779220559.563:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1535" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49bc1e59 code=0x7ffc0000 [ 652.095587][ T26] audit: type=1326 audit(1779220559.591:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1535" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49bc1e59 code=0x7ffc0000 [ 652.157792][ T26] audit: type=1326 audit(1779220559.591:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1535" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49bc1e59 code=0x7ffc0000 [ 652.267269][ T26] audit: type=1326 audit(1779220559.591:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1535" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fce49bc1e59 code=0x7ffc0000 [ 652.370227][ T26] audit: type=1326 audit(1779220559.591:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1535" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce49bc1e59 code=0x7ffc0000 [ 652.461134][ T26] audit: type=1326 audit(1779220559.591:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1535" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fce49bc1e59 code=0x7ffc0000 [ 652.588849][ T26] audit: type=1326 audit(1779220559.591:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz.3.1535" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fce49bc1e59 code=0x7ffc0000 [ 654.536469][T10062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1549'. [ 659.416087][T10112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1564'. [ 660.272970][T10134] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1582'. [ 662.671544][T10153] 9pnet: Insufficient options for proto=fd [ 665.290906][T10186] netlink: 'syz.2.1588': attribute type 6 has an invalid length. [ 665.481707][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1589'. [ 667.800323][T10206] overlayfs: failed to clone upperpath [ 669.446785][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1602'. [ 669.612285][T10229] netlink: 'syz.4.1603': attribute type 6 has an invalid length. [ 675.953153][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1620'. [ 679.925564][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1639'. [ 683.936878][T10368] fuse: Bad value for 'fd' [ 685.224781][T10382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 688.030327][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1677'. [ 688.252916][T10449] futex_wake_op: syz.4.1679 tries to shift op by 144; fix this program [ 693.364732][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 695.876277][T10532] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1711'. [ 696.165375][T10551] fuse: Bad value for 'fd' [ 696.244280][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 696.908989][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 696.931511][T10569] device bridge_slave_1 left promiscuous mode [ 696.972308][T10569] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.166778][T10569] device bridge_slave_0 left promiscuous mode [ 697.173572][T10569] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.413069][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 699.676095][T10612] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1744'. [ 699.710022][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 701.952974][T10635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.085997][T10648] fuse: Bad value for 'fd' [ 704.008259][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'. [ 706.708304][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 706.714904][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 708.519359][T10714] futex_wake_op: syz.4.1783 tries to shift op by 144; fix this program [ 718.551461][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'. [ 725.568360][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1839'. [ 726.468278][T10912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.274126][T10969] overlayfs: failed to clone upperpath [ 733.942857][T10988] futex_wake_op: syz.4.1865 tries to shift op by 144; fix this program [ 736.555453][T11042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1880'. [ 740.031318][T11083] sctp: failed to load transform for md5: -2 [ 740.979010][T11116] overlayfs: missing 'lowerdir' [ 742.348072][T11147] UBIFS error (pid: 11147): cannot open "(null)", error -22 [ 742.758184][T11161] netlink: 'syz.1.1926': attribute type 5 has an invalid length. [ 744.113533][ T4207] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 746.268153][T11204] netlink: 'syz.3.1942': attribute type 29 has an invalid length. [ 747.115180][T11210] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1944'. [ 747.976706][T11227] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 747.985797][T11227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 749.659533][T11257] 9pnet_virtio: no channels available for device syz [ 750.272016][T11246] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 751.033145][T11281] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 751.042210][T11281] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 753.151220][T11326] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 753.159998][T11326] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 754.410631][T11351] futex_wake_op: syz.0.1993 tries to shift op by 144; fix this program [ 757.396858][T11394] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 757.406254][T11394] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 761.033428][T11425] tc_dump_action: action bad kind [ 763.804789][T11475] overlayfs: failed to clone upperpath [ 767.953708][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2060'. [ 767.963003][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 773.439824][T11607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.453729][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 773.460144][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.654202][T11656] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 776.746375][ T26] audit: type=1326 audit(1779220674.686:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 776.792169][ T26] audit: type=1326 audit(1779220674.686:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 776.824170][ T26] audit: type=1326 audit(1779220674.686:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 776.858175][ T26] audit: type=1326 audit(1779220674.686:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 776.917243][ T26] audit: type=1326 audit(1779220674.686:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 777.016498][ T26] audit: type=1326 audit(1779220674.686:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 777.157150][ T26] audit: type=1326 audit(1779220674.686:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 777.940226][ T26] audit: type=1326 audit(1779220674.686:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 777.964442][ T26] audit: type=1326 audit(1779220674.686:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 778.017048][ T26] audit: type=1326 audit(1779220674.686:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.2.2101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdef1d8e59 code=0x7fc00000 [ 778.167525][T11677] overlayfs: failed to clone upperpath [ 780.028985][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2111'. [ 783.211719][T11746] overlayfs: failed to clone upperpath [ 789.963946][T11819] netlink: 'syz.0.2155': attribute type 5 has an invalid length. [ 789.999151][T11819] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.008630][T11819] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.017447][T11819] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.026220][T11819] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.108228][T11819] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.117290][T11819] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.126269][T11819] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.135490][T11819] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.326500][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 791.326520][ T26] audit: type=1326 audit(1779220688.156:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.0.2160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ddb52ce59 code=0x0 [ 792.603334][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 792.633480][T11839] device team0 left promiscuous mode [ 792.664086][T11839] device team_slave_0 left promiscuous mode [ 792.670797][T11839] device team_slave_1 left promiscuous mode [ 792.677211][T11839] bridge0: port 3(team0) entered disabled state [ 792.728062][T11839] batman_adv: batadv0: Interface deactivated: dummy0 [ 792.756401][T11839] batman_adv: batadv0: Removing interface: dummy0 [ 792.774255][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 792.797054][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 792.872026][T11839] device bridge_slave_0 left promiscuous mode [ 792.894364][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.915956][T11839] device bridge_slave_1 left promiscuous mode [ 792.926748][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.939136][T11839] bond0: (slave bond_slave_0): Releasing backup interface [ 792.970695][T11839] bond0: (slave bond_slave_1): Releasing backup interface [ 793.036016][T11839] team0: Port device team_slave_0 removed [ 793.068849][T11839] team0: Port device team_slave_1 removed [ 793.089481][T11839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.110366][T11839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.125407][T11839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.133103][T11839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.164838][T11839] team0: Port device bridge1 removed [ 793.186676][T11839] team0: Port device bridge2 removed [ 793.195989][T11841] device vlan0 entered promiscuous mode [ 793.244532][T11841] team0: Port device vlan0 added [ 793.256045][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2167'. [ 793.282476][T11847] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.291400][T11847] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.300172][T11847] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.308926][T11847] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.355620][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2167'. [ 793.438902][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2167'. [ 793.862488][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 794.576264][T11873] netlink: 'syz.1.2172': attribute type 5 has an invalid length. [ 794.590734][T11873] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.599593][T11873] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.608463][T11873] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.617191][T11873] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.687006][T11873] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.696075][T11873] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.705002][T11873] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.715503][T11873] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.475666][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 800.478663][T11929] netlink: 'syz.3.2192': attribute type 4 has an invalid length. [ 809.647812][T12017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2220'. [ 811.165087][ T4205] Bluetooth: hci4: Unknown advertising packet type: 0x112 [ 811.165373][ T4205] ================================================================== [ 811.181084][ T4205] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 811.188985][ T4205] Read of size 1 at addr ffff88807bb08407 by task kworker/u5:6/4205 [ 811.196968][ T4205] [ 811.199338][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 811.206879][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.216963][ T4205] Workqueue: hci4 hci_rx_work [ 811.221656][ T4205] Call Trace: [ 811.224942][ T4205] [ 811.227898][ T4205] dump_stack_lvl+0x188/0x250 [ 811.232613][ T4205] ? show_regs_print_info+0x20/0x20 [ 811.237850][ T4205] ? load_image+0x400/0x400 [ 811.242352][ T4205] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 811.247867][ T4205] print_address_description+0x60/0x2d0 [ 811.253414][ T4205] ? hci_le_meta_evt+0x133f/0x3c90 [ 811.258547][ T4205] kasan_report+0xdf/0x130 [ 811.263110][ T4205] ? hci_le_meta_evt+0x133f/0x3c90 [ 811.268244][ T4205] hci_le_meta_evt+0x133f/0x3c90 [ 811.273199][ T4205] ? hci_remote_host_features_evt+0x280/0x280 [ 811.279284][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 811.284958][ T4205] ? mark_lock+0x94/0x320 [ 811.289327][ T4205] ? mutex_unlock+0x10/0x10 [ 811.293831][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 811.299823][ T4205] ? lock_chain_count+0x20/0x20 [ 811.304690][ T4205] ? __rwlock_init+0x140/0x140 [ 811.309482][ T4205] hci_event_packet+0xe48/0x1370 [ 811.314423][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 811.319633][ T4205] ? rcu_lock_release+0x20/0x20 [ 811.324488][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 811.329690][ T4205] hci_rx_work+0x255/0xa10 [ 811.334141][ T4205] process_one_work+0x85f/0x1010 [ 811.339132][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 811.344795][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 811.350132][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 811.355189][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 811.360739][ T4205] ? wq_worker_running+0x97/0x170 [ 811.365772][ T4205] worker_thread+0xaa6/0x1290 [ 811.370475][ T4205] kthread+0x436/0x520 [ 811.374561][ T4205] ? rcu_lock_release+0x20/0x20 [ 811.379409][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 811.384015][ T4205] ret_from_fork+0x1f/0x30 [ 811.388451][ T4205] [ 811.391470][ T4205] [ 811.393792][ T4205] Allocated by task 12027: [ 811.398230][ T4205] __kasan_kmalloc+0xb5/0xf0 [ 811.402821][ T4205] __alloc_skb+0x22c/0x750 [ 811.407325][ T4205] vhci_write+0xbc/0x450 [ 811.411648][ T4205] vfs_write+0x745/0xd60 [ 811.415948][ T4205] ksys_write+0x152/0x260 [ 811.420278][ T4205] do_syscall_64+0x4c/0xa0 [ 811.424697][ T4205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 811.430614][ T4205] [ 811.432936][ T4205] Last potentially related work creation: [ 811.438642][ T4205] kasan_save_stack+0x35/0x60 [ 811.443330][ T4205] kasan_record_aux_stack+0xb8/0x100 [ 811.448640][ T4205] kvfree_call_rcu+0x105/0x7d0 [ 811.453459][ T4205] neigh_periodic_work+0x407/0xc70 [ 811.458606][ T4205] process_one_work+0x85f/0x1010 [ 811.463547][ T4205] worker_thread+0xaa6/0x1290 [ 811.468220][ T4205] kthread+0x436/0x520 [ 811.472300][ T4205] ret_from_fork+0x1f/0x30 [ 811.476748][ T4205] [ 811.479073][ T4205] Second to last potentially related work creation: [ 811.485685][ T4205] kasan_save_stack+0x35/0x60 [ 811.490378][ T4205] kasan_record_aux_stack+0xb8/0x100 [ 811.495666][ T4205] kvfree_call_rcu+0x105/0x7d0 [ 811.500425][ T4205] neigh_flush_dev+0x184/0x990 [ 811.505207][ T4205] __neigh_ifdown+0x39/0x3a0 [ 811.509815][ T4205] neigh_carrier_down+0x1e/0x30 [ 811.514656][ T4205] arp_netdev_event+0x141/0x170 [ 811.519548][ T4205] raw_notifier_call_chain+0xcb/0x160 [ 811.524966][ T4205] netdev_state_change+0xe0/0x160 [ 811.530018][ T4205] linkwatch_do_dev+0x10d/0x160 [ 811.534898][ T4205] __linkwatch_run_queue+0x4b1/0x7c0 [ 811.540259][ T4205] linkwatch_event+0x48/0x50 [ 811.544844][ T4205] process_one_work+0x85f/0x1010 [ 811.549780][ T4205] worker_thread+0xaa6/0x1290 [ 811.554482][ T4205] kthread+0x436/0x520 [ 811.558567][ T4205] ret_from_fork+0x1f/0x30 [ 811.562982][ T4205] [ 811.565299][ T4205] The buggy address belongs to the object at ffff88807bb08000 [ 811.565299][ T4205] which belongs to the cache kmalloc-1k of size 1024 [ 811.579451][ T4205] The buggy address is located 7 bytes to the right of [ 811.579451][ T4205] 1024-byte region [ffff88807bb08000, ffff88807bb08400) [ 811.593154][ T4205] The buggy address belongs to the page: [ 811.598832][ T4205] page:ffffea0001eec200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bb08 [ 811.608986][ T4205] head:ffffea0001eec200 order:3 compound_mapcount:0 compound_pincount:0 [ 811.617311][ T4205] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 811.625408][ T4205] raw: 00fff00000010200 ffffea00018bd400 0000000400000004 ffff888016c41dc0 [ 811.633996][ T4205] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 811.642572][ T4205] page dumped because: kasan: bad access detected [ 811.648989][ T4205] page_owner tracks the page as allocated [ 811.654701][ T4205] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1169, ts 70332464004, free_ts 70308472929 [ 811.671733][ T4205] get_page_from_freelist+0x1bbd/0x1ca0 [ 811.677380][ T4205] __alloc_pages+0x1ee/0x480 [ 811.681992][ T4205] new_slab+0xc0/0x4b0 [ 811.686058][ T4205] ___slab_alloc+0x80a/0xdd0 [ 811.690645][ T4205] __kmalloc+0x1cd/0x330 [ 811.694903][ T4205] ___neigh_create+0x6d2/0x2250 [ 811.699767][ T4205] ip_neigh_gw4+0x356/0x4d0 [ 811.704299][ T4205] ip_finish_output2+0x516/0x10a0 [ 811.709324][ T4205] ip_output+0x2c0/0x3e0 [ 811.713569][ T4205] igmp_ifc_timer_expire+0xb76/0xda0 [ 811.718903][ T4205] call_timer_fn+0x17b/0x540 [ 811.723612][ T4205] __run_timers+0x53e/0x800 [ 811.728144][ T4205] run_timer_softirq+0x63/0xf0 [ 811.732930][ T4205] handle_softirqs+0x339/0x830 [ 811.737780][ T4205] __irq_exit_rcu+0x13b/0x230 [ 811.742492][ T4205] irq_exit_rcu+0x5/0x20 [ 811.746758][ T4205] page last free stack trace: [ 811.751445][ T4205] free_unref_page_prepare+0x637/0x6c0 [ 811.756946][ T4205] free_unref_page+0x8f/0x2a0 [ 811.761656][ T4205] __unfreeze_partials+0x1a5/0x200 [ 811.766788][ T4205] put_cpu_partial+0x12d/0x190 [ 811.771577][ T4205] qlist_free_all+0x35/0x90 [ 811.776099][ T4205] kasan_quarantine_reduce+0x150/0x160 [ 811.781580][ T4205] __kasan_slab_alloc+0x2f/0xd0 [ 811.786458][ T4205] slab_post_alloc_hook+0x4c/0x380 [ 811.791599][ T4205] __kmalloc+0x127/0x330 [ 811.795867][ T4205] fib_create_info+0xabc/0x24f0 [ 811.800755][ T4205] fib_table_insert+0xe4/0x1bb0 [ 811.805648][ T4205] fib_magic+0x2e1/0x3c0 [ 811.809915][ T4205] fib_add_ifaddr+0x3f7/0x5e0 [ 811.814620][ T4205] fib_netdev_event+0x35c/0x480 [ 811.819496][ T4205] raw_notifier_call_chain+0xcb/0x160 [ 811.824892][ T4205] __dev_notify_flags+0x194/0x300 [ 811.829960][ T4205] [ 811.832300][ T4205] Memory state around the buggy address: [ 811.837965][ T4205] ffff88807bb08300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.846045][ T4205] ffff88807bb08380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.854140][ T4205] >ffff88807bb08400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 811.862218][ T4205] ^ [ 811.866303][ T4205] ffff88807bb08480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 811.874385][ T4205] ffff88807bb08500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 811.882462][ T4205] ================================================================== [ 811.890544][ T4205] Disabling lock debugging due to kernel taint [ 811.903696][ T4205] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 811.910955][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 811.919931][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.930020][ T4205] Workqueue: hci4 hci_rx_work [ 811.934825][ T4205] Call Trace: [ 811.938120][ T4205] [ 811.941077][ T4205] dump_stack_lvl+0x188/0x250 [ 811.945787][ T4205] ? show_regs_print_info+0x20/0x20 [ 811.951014][ T4205] ? load_image+0x400/0x400 [ 811.955558][ T4205] panic+0x2e5/0x810 [ 811.959562][ T4205] ? bpf_jit_dump+0xd0/0xd0 [ 811.964147][ T4205] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 811.970159][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 811.975033][ T4205] ? hci_le_meta_evt+0x133f/0x3c90 [ 811.980260][ T4205] check_panic_on_warn+0x80/0xa0 [ 811.985311][ T4205] ? hci_le_meta_evt+0x133f/0x3c90 [ 811.990448][ T4205] end_report+0x6d/0xf0 [ 811.994627][ T4205] kasan_report+0x102/0x130 [ 811.999156][ T4205] ? hci_le_meta_evt+0x133f/0x3c90 [ 812.004298][ T4205] hci_le_meta_evt+0x133f/0x3c90 [ 812.009272][ T4205] ? hci_remote_host_features_evt+0x280/0x280 [ 812.015369][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 812.021038][ T4205] ? mark_lock+0x94/0x320 [ 812.025459][ T4205] ? mutex_unlock+0x10/0x10 [ 812.029987][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 812.035998][ T4205] ? lock_chain_count+0x20/0x20 [ 812.040880][ T4205] ? __rwlock_init+0x140/0x140 [ 812.045687][ T4205] hci_event_packet+0xe48/0x1370 [ 812.050648][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 812.055877][ T4205] ? rcu_lock_release+0x20/0x20 [ 812.060761][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 812.065986][ T4205] hci_rx_work+0x255/0xa10 [ 812.070435][ T4205] process_one_work+0x85f/0x1010 [ 812.075490][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 812.081138][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 812.086463][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 812.091487][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 812.097035][ T4205] ? wq_worker_running+0x97/0x170 [ 812.102060][ T4205] worker_thread+0xaa6/0x1290 [ 812.106773][ T4205] kthread+0x436/0x520 [ 812.110840][ T4205] ? rcu_lock_release+0x20/0x20 [ 812.115693][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 812.120301][ T4205] ret_from_fork+0x1f/0x30 [ 812.124731][ T4205] [ 812.128081][ T4205] Kernel Offset: disabled [ 812.132506][ T4205] Rebooting in 86400 seconds..