last executing test programs: 3m18.429816443s ago: executing program 4 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$sndctrl(&(0x7f0000000000), 0x402, 0x101300) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$user(&(0x7f0000000240), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="49810185288b71f196312bff60b574b07cf666e700971a4205338f8e41ebcd8bff1bf5a57a2cce1757ba", 0x2a, 0xfffffffffffffff9) request_key(&(0x7f0000000440)='ceph\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='[\\%\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000034000107000000000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4864}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r6}, 0x10) syz_emit_ethernet(0x100f, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xbc, 0xfc, '1', "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"}}}}}}, 0x0) 3m18.301022926s ago: executing program 4 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffff40, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 3m17.38038219s ago: executing program 4 (id=131): socket(0xa, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) 3m16.11703518s ago: executing program 4 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3m13.874239424s ago: executing program 4 (id=137): syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80040) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x10000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0xb, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240080c4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x185) write$cgroup_int(r4, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 3m13.400988952s ago: executing program 4 (id=141): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x81, 0x50000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x4, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x7]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000001c0)=0xfffffffd) 3m12.727254262s ago: executing program 32 (id=141): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x81, 0x50000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x4, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x7]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000001c0)=0xfffffffd) 18.245867207s ago: executing program 3 (id=589): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 18.151030739s ago: executing program 3 (id=591): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) getdents(r0, &(0x7f00000000c0), 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x8, @local, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) socket$netlink(0x10, 0x3, 0x12) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000001c80)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="02030003110000002cbd7000ffdbdf25c851e8010009000000000005000600000000000a004e2000000000fc00000000000000000000000000000102000000000000000200010000000000040007090000000005000600000000000a0000000000000000000000000000000000ffff7f000001070000000000000002000800080000002f00000000000000"], 0x88}, 0x1, 0x7}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000040)="bb", 0x1}], 0x1) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x18, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000012c0)={0x3, &(0x7f0000001280)=[{0xe, 0x9, 0x4, 0xf1}, {0x0, 0x8, 0x80, 0x5}, {0xc, 0x0, 0xf7, 0x7fffffff}]}, 0x8) lseek(0xffffffffffffffff, 0xffffa28b, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 16.953173507s ago: executing program 0 (id=596): r0 = fsopen(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue0\x00'}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x5) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0xd7, 0xb, 0x8, @tick=0x4, {0x36, 0x40}, {0x3, 0x6}, @raw32={[0x7, 0x6d7177c5, 0xfffffffe]}}], 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x6, 0x40d) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) 14.332592878s ago: executing program 0 (id=600): syz_open_procfs(0x0, &(0x7f0000019180)='net/if_inet6\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 13.248377994s ago: executing program 0 (id=606): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x18eb, 0x20) 10.94097252s ago: executing program 3 (id=607): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) pwrite64(r0, 0x0, 0x0, 0x4100008000c61) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'veth1_macvtap\x00', 0x0}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) 10.595198476s ago: executing program 2 (id=608): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 10.535603377s ago: executing program 1 (id=610): r0 = fsopen(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue0\x00'}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x5) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0xd7, 0xb, 0x8, @tick=0x4, {0x36, 0x40}, {0x3, 0x6}, @raw32={[0x7, 0x6d7177c5, 0xfffffffe]}}], 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x6, 0x40d) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) 10.435544888s ago: executing program 0 (id=611): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0xd0, 0x208, 0x2d8, 0x3c8, 0xd0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@frag={{0x30}, {[0x0, 0x8], 0x6, 0xd, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x4], 0x9, 0x2, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000280)='./file1\x00', 0x2008412, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x553b, &(0x7f00000024c0)="$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") setxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000100)=@md5={0x1, "949ec48a5030138562af68761b7ef4f7"}, 0x1001, 0x2) 9.233125147s ago: executing program 2 (id=612): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x7, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 8.879665972s ago: executing program 5 (id=613): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 8.261711142s ago: executing program 3 (id=614): ftruncate(0xffffffffffffffff, 0x88801) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000c00)="1c0000001e005f0214bb7afffffffff807000000b800e6ff0d000000", 0x1c) 8.245417702s ago: executing program 1 (id=615): syz_open_dev$video(0x0, 0x7, 0x80040) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x10000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0xb, 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x185) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 8.168928133s ago: executing program 2 (id=616): syz_open_procfs(0x0, &(0x7f0000019180)='net/if_inet6\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.227695883s ago: executing program 2 (id=617): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) 6.198857164s ago: executing program 0 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') 5.282731728s ago: executing program 5 (id=619): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010103}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.198525609s ago: executing program 1 (id=620): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(0x0) syz_usbip_server_init(0x1) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7374615e74000000da0db4789b777a179b9df383357e9c0179c61fbbe7393e7fa3e48afd08000000a95320a768000000000000"], 0x8) syz_open_dev$vim2m(0x0, 0x8, 0x2) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) 5.14113113s ago: executing program 2 (id=621): socket$inet6(0xa, 0x3, 0x2f) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c50f80b000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001800)=@mangle={'mangle\x00', 0x64, 0x6, 0x55c, 0xc8, 0xc8, 0x2e4, 0x2e4, 0x2e4, 0x494, 0x494, 0x494, 0x494, 0x494, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'wg1\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x1, 0x7c}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x154, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5b8) r2 = socket(0xa, 0x1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6, 0xffff, 0x2, r6}) 4.133428346s ago: executing program 0 (id=622): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) 3.680492443s ago: executing program 5 (id=623): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r0, 0x0, r1, 0x0, 0x10000000000016, 0x0) 3.445043306s ago: executing program 1 (id=624): flock(0xffffffffffffffff, 0x8) socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x28102) dup(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) 2.680221818s ago: executing program 3 (id=625): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) pwrite64(r0, 0x0, 0x0, 0x4100008000c61) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'veth1_macvtap\x00', 0x0}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000001c0)=@generic={0x0, 0x610, 0x200}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2.391562802s ago: executing program 5 (id=626): r0 = semget$private(0x0, 0x6, 0x40d) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 2.205265756s ago: executing program 1 (id=627): syz_open_procfs(0x0, &(0x7f0000019180)='net/if_inet6\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.853258091s ago: executing program 5 (id=628): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, &(0x7f0000000500)={0x2, 0x29, 0x0, 0x8000, 0x287b, 0x0, 0x8000000000000000, 0x1ff}, 0x0, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0060, &(0x7f0000000e80)={[{@mode}]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1.067978973s ago: executing program 1 (id=629): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 965.105555ms ago: executing program 2 (id=630): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) 735.822188ms ago: executing program 5 (id=631): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 0s ago: executing program 3 (id=632): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) kernel console output (not intermixed with test programs): m0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.513834][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.522691][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.532060][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.549453][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.560775][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.571382][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.582301][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.592200][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.602969][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.614473][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.625146][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.640894][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.650563][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.662433][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.676788][ T4172] device veth1_macvtap entered promiscuous mode [ 71.722350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.732396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.762555][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.774390][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.791130][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.837219][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.849184][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.865627][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.875906][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.894976][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.913949][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.936135][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.945051][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.987359][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.995379][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.017220][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.030331][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.043046][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.062855][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.075447][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.092724][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.103107][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.119686][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.134162][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.162334][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.185851][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.199986][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.209196][ T4256] loop0: detected capacity change from 0 to 40427 [ 72.220138][ T4172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.229356][ T4172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.238579][ T4172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.248226][ T4172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.280824][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.298393][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.332048][ T4256] F2FS-fs (loop0): invalid crc value [ 72.357962][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.370013][ T4256] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.416460][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.478825][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.493640][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.528780][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.546715][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.598300][ T4256] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.626609][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.634984][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.642785][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.653370][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.660430][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.681453][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.739432][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.740827][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.808471][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.835900][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.850220][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.865078][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.899641][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.066193][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 73.075226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 73.270137][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.286191][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.301504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.310708][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.326223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.338473][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.349461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.358921][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.735631][ T4218] Bluetooth: hci2: command 0x0419 tx timeout [ 73.742095][ T4218] Bluetooth: hci0: command 0x0419 tx timeout [ 73.749482][ T4218] Bluetooth: hci4: command 0x0419 tx timeout [ 73.781637][ T4218] Bluetooth: hci3: command 0x0419 tx timeout [ 73.895929][ T4218] Bluetooth: hci1: command 0x0419 tx timeout [ 74.075128][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.599305][ T4264] loop1: detected capacity change from 0 to 32768 [ 74.677368][ T4264] ======================================================= [ 74.677368][ T4264] WARNING: The mand mount option has been deprecated and [ 74.677368][ T4264] and is ignored by this kernel. Remove the mand [ 74.677368][ T4264] option from the mount to silence this warning. [ 74.677368][ T4264] ======================================================= [ 75.128213][ T4264] JBD2: Ignoring recovery information on journal [ 75.149606][ T4299] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 75.182269][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.190688][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.253173][ T4264] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 75.293495][ T4302] usb usb1: usbfs: process 4302 (syz.0.13) did not claim interface 0 before use [ 75.353322][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.360464][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.368617][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.375694][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.450408][ T4299] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 75.533510][ T26] audit: type=1800 audit(1749961766.501:2): pid=4264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 75.602029][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028aac000: rx timeout, send abort [ 75.614933][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 75.628455][ T4304] device bridge_slave_1 left promiscuous mode [ 75.635547][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.661569][ T4304] device bridge_slave_0 left promiscuous mode [ 75.668936][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.724821][ T4304] bond0: (slave bridge0): Releasing backup interface [ 75.841843][ T4264] syz.1.2 (4264) used greatest stack depth: 20232 bytes left [ 75.853730][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10'. [ 75.897892][ T4303] device bridge_slave_1 left promiscuous mode [ 75.905320][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.925820][ T4303] device bridge_slave_0 left promiscuous mode [ 75.936549][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.957732][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 76.111160][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028aac000: abort rx timeout. Force session deactivation [ 76.376649][ T2238] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.576310][ T4215] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.656494][ T2238] usb 4-1: Using ep0 maxpacket: 8 [ 76.816304][ T4215] usb 2-1: Using ep0 maxpacket: 32 [ 76.938884][ T4215] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 76.951819][ T4215] usb 2-1: config 0 has no interface number 0 [ 76.996663][ T2238] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 77.007178][ T2238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.017116][ T2238] usb 4-1: Product: syz [ 77.021773][ T2238] usb 4-1: Manufacturer: syz [ 77.030985][ T2238] usb 4-1: SerialNumber: syz [ 77.054967][ T2238] usb 4-1: config 0 descriptor?? [ 77.101537][ T2238] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 77.112162][ T2238] usb 4-1: setting power ON [ 77.118886][ T2238] dvb-usb: bulk message failed: -22 (2/0) [ 77.130228][ T4215] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 77.137300][ T2238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.158045][ T4215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.167778][ T2238] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 77.177195][ T2238] usb 4-1: media controller created [ 77.192015][ T4215] usb 2-1: Product: syz [ 77.207491][ T4215] usb 2-1: Manufacturer: syz [ 77.212212][ T4215] usb 2-1: SerialNumber: syz [ 77.237421][ T2238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.239013][ T4215] usb 2-1: config 0 descriptor?? [ 77.308844][ T4215] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 77.320236][ T2238] usb 4-1: selecting invalid altsetting 6 [ 77.344107][ T2238] usb 4-1: digital interface selection failed (-22) [ 77.359868][ T2238] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 77.437128][ T2238] usb 4-1: setting power OFF [ 77.446370][ T2238] dvb-usb: bulk message failed: -22 (2/0) [ 77.471607][ T2238] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 77.490584][ T2238] (NULL device *): no alternate interface [ 77.534434][ T4215] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 77.585199][ T2238] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 77.587568][ T4215] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 77.616096][ T4340] usb usb1: usbfs: process 4340 (syz.0.25) did not claim interface 0 before use [ 77.644309][ T2238] usb 4-1: USB disconnect, device number 2 [ 77.976105][ T4215] usb 2-1: USB disconnect, device number 2 [ 77.986267][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 79.485334][ T4215] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 79.554104][ T4215] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 79.606084][ T4352] loop1: detected capacity change from 0 to 1024 [ 79.634763][ T4215] quatech2 2-1:0.51: device disconnected [ 79.673463][ T4354] loop4: detected capacity change from 0 to 1024 [ 79.761691][ T4354] EXT4-fs (loop4): Ignoring removed orlov option [ 79.784531][ T4354] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 79.857292][ T4352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.868920][ T4354] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,init_itable=0x0000000000000000,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 80.026849][ T4354] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 80.050978][ T4352] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.29: Allocating blocks 385-513 which overlap fs metadata [ 80.123975][ T4352] EXT4-fs (loop1): pa ffff8880239f22a0: logic 16, phys. 129, len 24 [ 80.132809][ T4352] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 81.652133][ T4384] loop3: detected capacity change from 0 to 8 [ 82.180510][ T4387] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 82.231438][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 82.317784][ T4396] netlink: 'syz.0.31': attribute type 10 has an invalid length. [ 82.363386][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.370915][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.408116][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.412364][ T4348] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.415304][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.430315][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.437454][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.454075][ T4396] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 82.496749][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 82.516499][ T4401] device bridge_slave_1 left promiscuous mode [ 82.546422][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.580291][ T4401] device bridge_slave_0 left promiscuous mode [ 82.586769][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.748080][ T4401] bond0: (slave bridge0): Releasing backup interface [ 82.786446][ T4348] usb 2-1: Using ep0 maxpacket: 32 [ 82.966949][ T4348] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 83.021993][ T4348] usb 2-1: config 0 has no interface number 0 [ 83.337329][ T4348] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 83.469625][ T4402] delete_channel: no stack [ 83.491047][ T4348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.529525][ T4348] usb 2-1: Product: syz [ 83.534040][ T4348] usb 2-1: Manufacturer: syz [ 83.539994][ T4348] usb 2-1: SerialNumber: syz [ 83.563135][ T4348] usb 2-1: config 0 descriptor?? [ 83.700676][ T4348] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 83.938987][ T4348] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 84.064806][ T4348] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 84.674541][ T4348] usb 2-1: USB disconnect, device number 3 [ 84.680636][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 84.867177][ T4430] loop2: detected capacity change from 0 to 64 [ 84.905012][ T4348] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 85.727072][ T4348] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 85.759810][ T4348] quatech2 2-1:0.51: device disconnected [ 85.907208][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 86.689856][ T1335] cfg80211: failed to load regulatory.db [ 87.101077][ T4453] misc userio: Invalid payload size [ 87.103216][ T4453] misc userio: No port type given on /dev/userio [ 87.105319][ T4453] misc userio: The device must be registered before sending interrupts [ 88.073062][ T4451] delete_channel: no stack [ 89.980348][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079bf0800: rx timeout, send abort [ 90.480448][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079bf2c00: rx timeout, send abort [ 90.489061][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079bf0800: abort rx timeout. Force session deactivation [ 90.566408][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.988976][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079bf2c00: abort rx timeout. Force session deactivation [ 91.026500][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.046820][ T4458] loop1: detected capacity change from 0 to 32768 [ 91.054829][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.103586][ T23] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 91.124914][ T26] audit: type=1800 audit(1749961782.091:3): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.60" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 91.156421][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.231720][ T23] usb 5-1: config 0 descriptor?? [ 91.554711][ T4490] loop3: detected capacity change from 0 to 32768 [ 91.778181][ T4489] loop2: detected capacity change from 0 to 40427 [ 91.804813][ T4490] XFS (loop3): Mounting V5 Filesystem [ 91.823328][ T4489] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 91.946378][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 92.041008][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 92.471763][ T23] usb 5-1: USB disconnect, device number 2 [ 92.786126][ T4490] XFS (loop3): Ending clean mount [ 93.431267][ T4169] XFS (loop3): Unmounting Filesystem [ 93.514278][ T4510] sp0: Synchronizing with TNC [ 93.792550][ T4515] tmpfs: Unknown parameter 'usrquota' [ 94.548602][ T4518] loop3: detected capacity change from 0 to 64 [ 94.589829][ T4513] overlayfs: missing 'lowerdir' [ 94.645858][ T4502] delete_channel: no stack [ 98.338370][ T4214] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.473422][ T4547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.493231][ T4545] tmpfs: Unknown parameter 'usrquota' [ 98.519989][ T4547] loop4: detected capacity change from 0 to 512 [ 98.659767][ T4547] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x000000000000002f,dioread_lock,,errors=continue. Quota mode: writeback. [ 98.714691][ T4214] usb 2-1: Using ep0 maxpacket: 32 [ 98.775588][ T4547] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.847966][ T4214] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 98.856113][ T4214] usb 2-1: config 0 has no interface number 0 [ 98.942440][ T4557] loop2: detected capacity change from 0 to 64 [ 99.109893][ T4214] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 99.588490][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.629911][ T4214] usb 2-1: Product: syz [ 99.634126][ T4214] usb 2-1: Manufacturer: syz [ 99.663239][ T4214] usb 2-1: SerialNumber: syz [ 99.675778][ T4214] usb 2-1: config 0 descriptor?? [ 99.747952][ T4214] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 99.886408][ T4214] usb 2-1: qt2_attach - failed to power on unit: -71 [ 99.893304][ T4214] quatech2: probe of 2-1:0.51 failed with error -71 [ 99.947222][ T4214] usb 2-1: USB disconnect, device number 4 [ 99.996809][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 100.030510][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.112812][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.124336][ T4559] loop4: detected capacity change from 0 to 32768 [ 100.193381][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.209506][ T4565] device bridge_slave_0 left promiscuous mode [ 100.215789][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.224858][ T4559] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.88 (4559) [ 101.021038][ T4559] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 101.045211][ T4559] BTRFS info (device loop4): using free space tree [ 101.086243][ T4559] BTRFS info (device loop4): has skinny extents [ 101.107246][ T4565] device bridge_slave_1 left promiscuous mode [ 101.140675][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.195495][ T4565] bond0: (slave bond_slave_0): Releasing backup interface [ 101.226121][ T4590] syz.2.94 uses obsolete (PF_INET,SOCK_PACKET) [ 101.236688][ T4565] bond0: (slave bond_slave_1): Releasing backup interface [ 101.337470][ T4559] BTRFS info (device loop4): enabling ssd optimizations [ 101.398468][ T4565] team0: Port device team_slave_0 removed [ 101.471783][ T4565] team0: Port device team_slave_1 removed [ 101.501971][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.521446][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.535570][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.543932][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.688532][ T4582] tipc: Started in network mode [ 101.693821][ T4582] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 101.707489][ T4582] tipc: Enabled bearer , priority 10 [ 101.736805][ T4590] tipc: Resetting bearer [ 101.933185][ T4590] tipc: Disabling bearer [ 102.757507][ T4218] tipc: Node number set to 43690 [ 102.900570][ T4603] loop0: detected capacity change from 0 to 32768 [ 102.956975][ T4603] XFS: attr2 mount option is deprecated. [ 103.093557][ T4603] XFS (loop0): Mounting V5 Filesystem [ 103.276527][ T4603] XFS (loop0): Ending clean mount [ 103.325106][ T4603] XFS (loop0): Quotacheck needed: Please wait. [ 103.543807][ T4603] XFS (loop0): Quotacheck: Done. [ 104.239468][ T4171] XFS (loop0): Unmounting Filesystem [ 104.506311][ T1335] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.632070][ T4665] loop1: detected capacity change from 0 to 64 [ 108.999956][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022651800: rx timeout, send abort [ 109.500051][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f358000: rx timeout, send abort [ 109.512541][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022651800: abort rx timeout. Force session deactivation [ 110.008348][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f358000: abort rx timeout. Force session deactivation [ 110.098136][ T1335] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.847962][ T1335] usb 1-1: Using ep0 maxpacket: 32 [ 112.426439][ T1335] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 112.434714][ T1335] usb 1-1: config 0 has no interface number 0 [ 112.526383][ T4626] Bluetooth: hci4: command 0x0405 tx timeout [ 113.226312][ T1335] usb 1-1: string descriptor 0 read error: -71 [ 113.234276][ T1335] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.245434][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 113.250918][ T1335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.252058][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.262191][ T1335] usb 1-1: config 0 descriptor?? [ 113.266508][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.277898][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.284358][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.290888][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.297407][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.303860][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.310394][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.316869][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.323346][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.330027][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.336524][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.343149][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.349654][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.356120][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 113.376942][ T1335] usb 1-1: can't set config #0, error -71 [ 113.422478][ T1335] usb 1-1: USB disconnect, device number 2 [ 113.466250][ T4716] fuse: Unknown parameter '0x0000000000000004' [ 114.112657][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880603b4c00: rx timeout, send abort [ 114.621008][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880603b4c00: abort rx timeout. Force session deactivation [ 117.726142][ C0] sched: RT throttling activated [ 118.754755][ T4762] loop3: detected capacity change from 0 to 2048 [ 118.826729][ T4764] loop0: detected capacity change from 0 to 1024 [ 118.857715][ T4762] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.890326][ T4769] fuse: Unknown parameter '0x0000000000000004' [ 118.956354][ T4214] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.996101][ T4175] syz-executor (4175) used greatest stack depth: 19784 bytes left [ 119.296427][ T4214] usb 2-1: Using ep0 maxpacket: 32 [ 119.436605][ T4214] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 119.482858][ T4214] usb 2-1: config 0 has no interface number 0 [ 119.545474][ T721] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.643922][ T721] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.736558][ T4214] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 119.764619][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.810010][ T4214] usb 2-1: Product: syz [ 119.834641][ T4214] usb 2-1: Manufacturer: syz [ 119.854892][ T4214] usb 2-1: SerialNumber: syz [ 119.884946][ T4214] usb 2-1: config 0 descriptor?? [ 119.928848][ T721] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.994410][ T4214] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.707196][ T4214] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 121.718482][ T4214] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 121.878870][ T721] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.904749][ T1335] usb 2-1: USB disconnect, device number 5 [ 121.910743][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 122.029734][ T1335] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 122.099304][ T1335] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 122.133138][ T1335] quatech2 2-1:0.51: device disconnected [ 122.287800][ T2238] Bluetooth: hci4: command 0x0409 tx timeout [ 122.528041][ T4809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 122.838287][ T4813] loop2: detected capacity change from 0 to 40427 [ 123.109200][ T4813] F2FS-fs (loop2): invalid crc value [ 123.142426][ T4813] F2FS-fs (loop2): Found nat_bits in checkpoint [ 123.195019][ T4813] F2FS-fs (loop2): Start checkpoint disabled! [ 123.333557][ T4825] loop6: detected capacity change from 0 to 7 [ 123.351130][ T26] audit: type=1326 audit(1749962070.197:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 123.421173][ T4825] Dev loop6: unable to read RDB block 7 [ 123.427614][ T4825] loop6: unable to read partition table [ 123.435228][ T4825] loop6: partition table beyond EOD, truncated [ 123.441698][ T4825] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 123.441698][ T4825] ) failed (rc=-5) [ 123.848831][ T4783] chnl_net:caif_netlink_parms(): no params data found [ 123.895017][ T26] audit: type=1326 audit(1749962070.207:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 123.936225][ T26] audit: type=1326 audit(1749962070.237:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 123.959460][ T4813] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 124.010317][ T4828] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.086981][ T26] audit: type=1326 audit(1749962070.237:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 124.366242][ T4214] Bluetooth: hci4: command 0x041b tx timeout [ 124.422889][ T26] audit: type=1326 audit(1749962070.237:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 124.466260][ T26] audit: type=1326 audit(1749962070.247:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 124.488563][ T26] audit: type=1326 audit(1749962070.257:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 124.510896][ T26] audit: type=1326 audit(1749962070.257:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 124.533880][ T26] audit: type=1326 audit(1749962070.277:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 124.556011][ T26] audit: type=1326 audit(1749962070.417:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 124.881852][ T4783] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.903460][ T4783] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.932622][ T1219] attempt to access beyond end of device [ 124.932622][ T1219] loop2: rw=2049, want=40984, limit=40427 [ 124.945721][ T4783] device bridge_slave_0 entered promiscuous mode [ 124.976566][ T4214] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.013087][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.027952][ T4783] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.035993][ T4783] device bridge_slave_1 entered promiscuous mode [ 125.175315][ T4783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.216243][ T4214] usb 1-1: Using ep0 maxpacket: 32 [ 125.275694][ T4783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.336705][ T4214] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 125.344905][ T4214] usb 1-1: config 0 has no interface number 0 [ 125.394337][ T4830] loop3: detected capacity change from 0 to 32768 [ 125.479103][ T4783] team0: Port device team_slave_0 added [ 125.536539][ T4214] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 125.546646][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.554680][ T4214] usb 1-1: Product: syz [ 125.559558][ T4214] usb 1-1: Manufacturer: syz [ 125.564188][ T4214] usb 1-1: SerialNumber: syz [ 125.587600][ T4214] usb 1-1: config 0 descriptor?? [ 125.603111][ T4830] XFS (loop3): Mounting V5 Filesystem [ 125.611791][ T4783] team0: Port device team_slave_1 added [ 125.632025][ T4214] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 125.892968][ T4783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.900212][ T4783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.903867][ T4214] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 125.929626][ T4783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.261561][ T4783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.279985][ T4783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.396551][ T4783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.426216][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 126.575858][ T4214] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 126.589548][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 126.598508][ T4214] usb 1-1: USB disconnect, device number 3 [ 126.606858][ T4830] XFS (loop3): Ending clean mount [ 126.667935][ T4214] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 126.689180][ T4214] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 126.701220][ T4214] quatech2 1-1:0.51: device disconnected [ 126.774986][ T4169] XFS (loop3): Unmounting Filesystem [ 126.782369][ T4783] device hsr_slave_0 entered promiscuous mode [ 127.003427][ T4783] device hsr_slave_1 entered promiscuous mode [ 127.075061][ T4783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.095609][ T4783] Cannot create hsr debugfs directory [ 127.106111][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 128.572695][ T4900] loop0: detected capacity change from 0 to 256 [ 128.712905][ T4900] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.723994][ T4900] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 128.824592][ T4900] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 129.726993][ T4214] Bluetooth: hci4: command 0x0419 tx timeout [ 131.502504][ T721] device hsr_slave_0 left promiscuous mode [ 131.520162][ T721] device hsr_slave_1 left promiscuous mode [ 131.535365][ T721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.563269][ T721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.584659][ T4895] delete_channel: no stack [ 131.596526][ T721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.603988][ T721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.656714][ T721] device veth1_macvtap left promiscuous mode [ 131.685965][ T721] device veth0_macvtap left promiscuous mode [ 131.706029][ T721] device veth1_vlan left promiscuous mode [ 131.722508][ T721] device veth0_vlan left promiscuous mode [ 132.259592][ T4917] fuse: Bad value for 'fd' [ 132.538712][ T721] bond1 (unregistering): Released all slaves [ 132.701809][ T4924] loop1: detected capacity change from 0 to 64 [ 132.771643][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778035][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.977578][ T721] team0 (unregistering): Port device team_slave_1 removed [ 132.995612][ T721] team0 (unregistering): Port device team_slave_0 removed [ 133.030492][ T721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.842389][ T721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.071110][ T721] bond0 (unregistering): Released all slaves [ 134.154825][ T4934] loop1: detected capacity change from 0 to 512 [ 135.773569][ T4920] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 135.792777][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 135.912497][ T4783] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.925585][ T4934] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.176: attempt to clear invalid blocks 1 len 1 [ 135.959868][ T4934] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.176: bg 0: block 343: padding at end of block bitmap is not set [ 135.982208][ T4934] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 135.994853][ T4934] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.176: invalid indirect mapped block 1819239214 (level 0) [ 135.996980][ T4783] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.017894][ T4934] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.176: invalid indirect mapped block 1819239214 (level 1) [ 136.035721][ T4934] EXT4-fs (loop1): 1 truncate cleaned up [ 136.042045][ T4934] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.063029][ T4933] process 'syz.1.176' launched '/dev/fd/-1' with NULL argv: empty string added [ 136.267795][ T4783] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.325959][ T4783] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.892513][ T4783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.952899][ T4783] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.996571][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.014430][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.046993][ T4215] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.052640][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.087487][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.116682][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.123884][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.166675][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.219400][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.258285][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.272196][ T4951] loop1: detected capacity change from 0 to 32768 [ 137.286775][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.293916][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.325493][ T4951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.180 (4951) [ 137.378226][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.393823][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.395412][ T4951] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 137.437311][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.446434][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.471736][ T4951] BTRFS info (device loop1): using free space tree [ 137.486427][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.498934][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.502725][ T4951] BTRFS info (device loop1): has skinny extents [ 137.526342][ T4215] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 137.536959][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.569719][ T4783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.581423][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.622817][ T4215] usb 1-1: config 0 descriptor?? [ 137.630260][ T4783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.678032][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.710936][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.740525][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.821735][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.845196][ T4951] BTRFS info (device loop1): enabling ssd optimizations [ 137.877620][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.932254][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.990101][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.486701][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.494279][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.572920][ T4783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.946225][ T4215] usbhid 1-1:0.0: can't add hid device: -71 [ 138.986513][ T4215] usbhid: probe of 1-1:0.0 failed with error -71 [ 138.995037][ T4215] usb 1-1: USB disconnect, device number 4 [ 139.921747][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.961467][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.053685][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.079766][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.273205][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.089606][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.122517][ T4783] device veth0_vlan entered promiscuous mode [ 141.183051][ T4783] device veth1_vlan entered promiscuous mode [ 141.285694][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.325464][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.340178][ T5047] loop0: detected capacity change from 0 to 512 [ 141.367323][ T4783] device veth0_macvtap entered promiscuous mode [ 141.418113][ T4783] device veth1_macvtap entered promiscuous mode [ 141.454901][ T5049] loop1: detected capacity change from 0 to 512 [ 141.473576][ T5047] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 141.511633][ T4783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.526819][ T5047] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.562952][ T4783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.595722][ T5047] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 141.611068][ T4783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.626752][ T5047] EXT4-fs (loop0): 1 truncate cleaned up [ 141.632441][ T5047] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 141.636332][ T5033] loop3: detected capacity change from 0 to 32768 [ 141.703983][ T4783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.734520][ T4783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.781961][ T4783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.960641][ T4783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.972561][ T4783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.983513][ T4783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.016167][ T4783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.382701][ T5033] XFS (loop3): Mounting V5 Filesystem [ 142.395519][ T5049] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 142.416245][ T4783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.534933][ T4783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.557123][ T5049] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.633086][ T4783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.656226][ T4783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.702305][ T5033] XFS (loop3): Ending clean mount [ 142.706517][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.730058][ T5033] XFS (loop3): Quotacheck needed: Please wait. [ 142.731034][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.769822][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.798166][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.827051][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.855428][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.049391][ T4783] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.206933][ T4783] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.325472][ T4783] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.379276][ T5033] XFS (loop3): Quotacheck: Done. [ 144.381781][ T4783] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.431399][ T4974] delete_channel: no stack [ 144.975682][ T5092] loop0: detected capacity change from 0 to 512 [ 145.526446][ T4169] XFS (loop3): Unmounting Filesystem [ 145.724794][ T5092] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.736907][ T5092] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 145.747083][ T5092] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.196: Corrupt directory, running e2fsck is recommended [ 145.765001][ T5092] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 145.774049][ T5092] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.196: corrupted in-inode xattr [ 145.788746][ T5092] EXT4-fs (loop0): Remounting filesystem read-only [ 145.795376][ T5092] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.196: couldn't read orphan inode 15 (err -117) [ 145.814639][ T5092] EXT4-fs (loop0): Remounting filesystem read-only [ 145.821584][ T5092] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,dax=inode,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 145.899540][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.016543][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.051321][ T5097] fuse: Unknown parameter 'group_i00000000000000000000' [ 146.078883][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.282162][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.559454][ T5105] loop1: detected capacity change from 0 to 8 [ 146.854716][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.217846][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.235337][ T5105] SQUASHFS error: xz decompression failed, data probably corrupt [ 147.243864][ T5105] SQUASHFS error: Failed to read block 0x108: -5 [ 147.294931][ T5105] SQUASHFS error: Unable to read metadata cache entry [106] [ 147.302476][ T5105] SQUASHFS error: Unable to read inode 0x11f [ 148.981364][ T5126] loop2: detected capacity change from 0 to 512 [ 149.116237][ T4348] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 152.407910][ T5126] EXT4-fs (loop2): 1 orphan inode deleted [ 152.413733][ T5126] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 152.620240][ T4348] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 152.624697][ T5126] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.639421][ T4348] usb 4-1: can't read configurations, error -71 [ 153.926809][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 153.926828][ T26] audit: type=1326 audit(1749962099.927:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 154.143053][ T26] audit: type=1326 audit(1749962099.927:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 154.168492][ T5154] loop0: detected capacity change from 0 to 8 [ 154.255437][ T5155] loop3: detected capacity change from 0 to 1024 [ 154.317290][ T26] audit: type=1326 audit(1749962099.937:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 154.394938][ T5157] SQUASHFS error: xz decompression failed, data probably corrupt [ 154.403502][ T5157] SQUASHFS error: Failed to read block 0xa8: -5 [ 154.414971][ T5157] SQUASHFS error: xz decompression failed, data probably corrupt [ 154.423140][ T5157] SQUASHFS error: Failed to read block 0xa8: -5 [ 155.030668][ T26] audit: type=1326 audit(1749962099.937:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 155.056393][ T26] audit: type=1326 audit(1749962099.937:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 155.079017][ T26] audit: type=1326 audit(1749962099.937:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f451fc3e197 code=0x7ffc0000 [ 155.101658][ T26] audit: type=1326 audit(1749962099.937:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f451fc410ca code=0x7ffc0000 [ 155.143886][ T26] audit: type=1326 audit(1749962099.937:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f451fc3e290 code=0x7ffc0000 [ 155.191536][ T26] audit: type=1800 audit(1749962101.407:23): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.209" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 155.416460][ T4215] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.536670][ T5172] fuse: Unknown parameter 'group_id00000000000000000000' [ 155.616751][ T5167] loop2: detected capacity change from 0 to 4096 [ 155.740420][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 155.798348][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 155.856542][ T4215] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.875270][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 155.895166][ T4215] usb 6-1: config 0 has no interface number 0 [ 155.931068][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 155.979846][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 156.015939][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 156.112477][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 156.160099][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 156.176442][ T4215] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 156.202781][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 156.216308][ T4215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.243856][ T5167] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 156.270207][ T4215] usb 6-1: Product: syz [ 156.274427][ T4215] usb 6-1: Manufacturer: syz [ 156.289996][ T4215] usb 6-1: SerialNumber: syz [ 156.298639][ T4215] usb 6-1: config 0 descriptor?? [ 156.469167][ T4214] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.576476][ T4215] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 156.742246][ T4215] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.756458][ T4215] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 157.542262][ T4215] usb 6-1: media controller created [ 157.561843][ T4215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.576717][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.603005][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.679428][ T4214] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 157.716234][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.746236][ T5202] usb usb1: usbfs: process 5202 (syz.3.219) did not claim interface 0 before use [ 157.757115][ T4214] usb 2-1: config 0 descriptor?? [ 157.826434][ T4215] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 157.929166][ T4215] usb 6-1: USB disconnect, device number 2 [ 159.869761][ T4214] usbhid 2-1:0.0: can't add hid device: -71 [ 159.875936][ T4214] usbhid: probe of 2-1:0.0 failed with error -71 [ 160.742575][ T4214] usb 2-1: USB disconnect, device number 6 [ 160.799767][ T5239] fuse: Unknown parameter 'group_id00000000000000000000' [ 160.991919][ T5243] loop3: detected capacity change from 0 to 1764 [ 162.383456][ T26] audit: type=1326 audit(1749962109.347:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 162.435914][ T5243] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 162.704942][ T26] audit: type=1326 audit(1749962109.377:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 162.791105][ T26] audit: type=1326 audit(1749962109.377:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 163.802097][ T26] audit: type=1326 audit(1749962109.387:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 163.826197][ T26] audit: type=1326 audit(1749962109.387:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 163.850697][ T26] audit: type=1326 audit(1749962109.387:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 163.873047][ T26] audit: type=1326 audit(1749962109.387:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 164.006309][ T26] audit: type=1326 audit(1749962109.387:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 166.603017][ T26] audit: type=1326 audit(1749962109.387:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 166.715894][ T26] audit: type=1326 audit(1749962109.387:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451fc3f929 code=0x7ffc0000 [ 168.721540][ T5296] loop5: detected capacity change from 0 to 8 [ 168.727868][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 168.843885][ T5307] fuse: Unknown parameter 'group_id00000000000000000000' [ 168.859412][ T5296] SQUASHFS error: zlib decompression failed, data probably corrupt [ 168.906355][ T5296] SQUASHFS error: Failed to read block 0x9b: -5 [ 168.921020][ T5296] SQUASHFS error: Unable to read metadata cache entry [99] [ 168.946739][ T5296] SQUASHFS error: Unable to read inode 0x127 [ 169.016274][ T4214] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.106398][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.135680][ T7] usb 2-1: config 0 has no interface number 0 [ 169.372688][ T7] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 169.416401][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.492105][ T5319] Zero length message leads to an empty skb [ 170.347858][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.366655][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.426180][ T7] usb 2-1: Product: syz [ 170.430524][ T4214] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 170.450827][ T7] usb 2-1: Manufacturer: syz [ 170.455482][ T7] usb 2-1: SerialNumber: syz [ 170.480385][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.530363][ T7] usb 2-1: config 0 descriptor?? [ 170.607445][ T4214] usb 4-1: config 0 descriptor?? [ 170.646404][ T7] usb 2-1: can't set config #0, error -71 [ 170.666441][ T7] usb 2-1: USB disconnect, device number 7 [ 174.596282][ T4214] usbhid 4-1:0.0: can't add hid device: -71 [ 174.602338][ T4214] usbhid: probe of 4-1:0.0 failed with error -71 [ 174.674230][ T4214] usb 4-1: USB disconnect, device number 5 [ 175.295113][ T5371] fuse: Bad value for 'user_id' [ 175.466291][ T4261] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.488657][ T5349] loop0: detected capacity change from 0 to 40427 [ 176.595061][ T5349] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 176.630038][ T5349] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 176.642131][ T5393] loop2: detected capacity change from 0 to 128 [ 176.682488][ T5349] F2FS-fs (loop0): invalid crc value [ 176.704886][ T5349] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 176.726444][ T4261] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.744904][ T4261] usb 6-1: config 0 has no interface number 0 [ 176.966983][ T4261] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 176.999475][ T4261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.070862][ T4261] usb 6-1: Product: syz [ 177.092200][ T4261] usb 6-1: Manufacturer: syz [ 177.101741][ T4261] usb 6-1: SerialNumber: syz [ 177.167589][ T4261] usb 6-1: config 0 descriptor?? [ 177.476363][ T4261] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 177.497013][ T4261] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 177.528122][ T4261] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 177.542744][ T4261] usb 6-1: media controller created [ 177.577362][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.631325][ T4214] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.747440][ T5408] loop1: detected capacity change from 0 to 16 [ 177.839058][ T5408] erofs: (device loop1): mounted with root inode @ nid 36. [ 178.016550][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.074472][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.881673][ T4214] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 178.884907][ T23] usb 6-1: USB disconnect, device number 3 [ 178.891222][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.919139][ T4214] usb 4-1: config 0 descriptor?? [ 180.306491][ T4214] usbhid 4-1:0.0: can't add hid device: -71 [ 180.970521][ T4214] usbhid: probe of 4-1:0.0 failed with error -71 [ 181.526198][ T4214] usb 4-1: USB disconnect, device number 6 [ 181.671305][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 181.689600][ T5452] netlink: 'syz.0.277': attribute type 7 has an invalid length. [ 181.950790][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 181.970695][ T5454] loop2: detected capacity change from 0 to 40427 [ 182.002127][ T5452] device ip6gretap0 entered promiscuous mode [ 182.061295][ T5452] device syz_tun entered promiscuous mode [ 182.075554][ T5454] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 182.083699][ T5454] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.098982][ T5454] F2FS-fs (loop2): invalid crc value [ 182.171431][ T5454] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.187331][ T5456] tipc: Started in network mode [ 182.192816][ T5456] tipc: Node identity 4, cluster identity 4711 [ 182.244756][ T5456] tipc: Node number set to 4 [ 182.322085][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 182.922748][ T5454] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.930011][ T5454] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 185.819089][ T5469] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 185.826161][ T5469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.835299][ T5469] vhci_hcd vhci_hcd.0: Device attached [ 186.004001][ T5475] vhci_hcd: connection closed [ 186.008309][ T4223] vhci_hcd: stop threads [ 186.116048][ T4223] vhci_hcd: release socket [ 186.176324][ T4608] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 186.256764][ T4223] vhci_hcd: disconnect device [ 186.540818][ T4172] attempt to access beyond end of device [ 186.540818][ T4172] loop2: rw=2049, want=40968, limit=40427 [ 186.916393][ T5491] loop5: detected capacity change from 0 to 164 [ 187.046395][ T5005] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.046402][ T5005] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.499681][ T5005] usb 2-1: config 0 has no interface number 0 [ 188.865258][ T5515] netlink: 'syz.0.290': attribute type 39 has an invalid length. [ 188.876670][ T5005] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.897070][ T5005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.924479][ T5005] usb 2-1: Product: syz [ 188.929236][ T5005] usb 2-1: Manufacturer: syz [ 188.933857][ T5005] usb 2-1: SerialNumber: syz [ 188.954969][ T5005] usb 2-1: config 0 descriptor?? [ 189.229384][ T5005] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 189.267233][ T5005] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 189.315020][ T5005] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 189.356305][ T5005] usb 2-1: media controller created [ 190.203194][ T5005] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.276567][ T5005] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 190.516269][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 190.595411][ T5005] usb 2-1: USB disconnect, device number 8 [ 191.169034][ T5005] Bluetooth: hci1: command 0x0406 tx timeout [ 191.210445][ T5005] Bluetooth: hci2: command 0x0406 tx timeout [ 191.359165][ T4215] Bluetooth: hci0: command 0x0406 tx timeout [ 191.365243][ T4215] Bluetooth: hci3: command 0x0406 tx timeout [ 191.513987][ T4608] vhci_hcd: vhci_device speed not set [ 191.606228][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 191.661365][ T5546] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 191.667942][ T5546] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.679980][ T5546] vhci_hcd vhci_hcd.0: Device attached [ 191.737070][ T7] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 191.780259][ T7] usb 1-1: config 0 has no interface number 0 [ 192.376606][ T4214] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 192.390288][ T7] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.414527][ T5547] vhci_hcd: connection closed [ 192.420670][ T4223] vhci_hcd: stop threads [ 192.501715][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.523140][ T4223] vhci_hcd: release socket [ 192.605661][ T4223] vhci_hcd: disconnect device [ 192.681711][ T7] usb 1-1: Product: syz [ 192.759695][ T7] usb 1-1: Manufacturer: syz [ 192.859294][ T7] usb 1-1: SerialNumber: syz [ 192.966950][ T7] usb 1-1: config 0 descriptor?? [ 193.038255][ T7] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 193.156372][ T7] usb 1-1: qt2_attach - failed to power on unit: -71 [ 193.183612][ T7] quatech2: probe of 1-1:0.51 failed with error -71 [ 193.252334][ T7] usb 1-1: USB disconnect, device number 5 [ 193.371745][ T5538] delete_channel: no stack [ 194.212252][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.218682][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.433174][ T5562] loop2: detected capacity change from 0 to 32768 [ 194.638186][ T5580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.304'. [ 195.519797][ T5562] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.299 (5562) [ 196.216687][ T5562] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 196.281375][ T5562] BTRFS info (device loop2): setting nodatacow, compression disabled [ 196.281484][ T5593] IPVS: Unknown mcast interface: pimreg1 [ 196.301312][ T5562] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 196.352686][ T5562] BTRFS info (device loop2): trying to use backup root at mount time [ 196.386367][ T4218] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 196.402205][ T5562] BTRFS info (device loop2): force zlib compression, level 3 [ 196.436939][ T5562] BTRFS info (device loop2): turning off barriers [ 196.477502][ T5562] BTRFS info (device loop2): enabling ssd optimizations [ 196.509970][ T5562] BTRFS info (device loop2): using spread ssd allocation scheme [ 196.564849][ T5562] BTRFS info (device loop2): doing ref verification [ 196.616401][ T5562] BTRFS info (device loop2): using free space tree [ 196.623030][ T5562] BTRFS info (device loop2): has skinny extents [ 196.977896][ T4218] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.985950][ T4218] usb 4-1: config 0 has no interface number 0 [ 197.018965][ T5562] BTRFS error (device loop2): open_ctree failed: -12 [ 197.054571][ T5630] fuse: Unknown parameter '0x0000000000000004' [ 197.148973][ T4218] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 197.231308][ T4218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.276201][ T4218] usb 4-1: Product: syz [ 197.285461][ T4218] usb 4-1: Manufacturer: syz [ 197.294766][ T4188] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4188) [ 197.306634][ T4218] usb 4-1: SerialNumber: syz [ 197.362020][ T4218] usb 4-1: config 0 descriptor?? [ 197.632046][ T4218] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 197.697993][ T5644] tipc: New replicast peer: 255.255.255.255 [ 197.706879][ T5644] tipc: Enabled bearer , priority 10 [ 197.773026][ T5644] loop2: detected capacity change from 0 to 256 [ 198.366173][ T4214] vhci_hcd: vhci_device speed not set [ 198.407128][ T5644] exfat: Deprecated parameter 'utf8' [ 198.412701][ T5644] exfat: Deprecated parameter 'namecase' [ 198.418406][ T5644] exfat: Bad value for 'namecase' [ 198.420051][ T4218] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.511134][ T4218] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 198.525083][ T4218] usb 4-1: media controller created [ 198.579071][ T4218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.889221][ T4218] usb 4-1: USB disconnect, device number 7 [ 202.199643][ T5680] hub 8-0:1.0: USB hub found [ 202.207322][ T5680] hub 8-0:1.0: 1 port detected [ 202.688326][ T5685] loop5: detected capacity change from 0 to 8 [ 202.737940][ T5647] delete_channel: no stack [ 202.975820][ T5685] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 203.017701][ T5685] overlayfs: missing 'lowerdir' [ 203.190132][ T5693] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 203.196797][ T5693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.206885][ T5693] vhci_hcd vhci_hcd.0: Device attached [ 203.486255][ T4214] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 204.188229][ T5694] vhci_hcd: connection reset by peer [ 204.204831][ T4407] vhci_hcd: stop threads [ 204.214469][ T4407] vhci_hcd: release socket [ 204.295850][ T4407] vhci_hcd: disconnect device [ 206.301268][ T5723] loop3: detected capacity change from 0 to 512 [ 207.404156][ T5723] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 207.416010][ T5723] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 207.426427][ T5723] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.332: Corrupt directory, running e2fsck is recommended [ 207.440219][ T5723] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 207.448480][ T5723] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.332: corrupted in-inode xattr [ 207.462081][ T5723] EXT4-fs (loop3): Remounting filesystem read-only [ 207.468788][ T5723] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.332: couldn't read orphan inode 15 (err -117) [ 207.481160][ T5723] EXT4-fs (loop3): Remounting filesystem read-only [ 207.487745][ T5723] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,dax=inode,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 207.565054][ T2238] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 208.216789][ T2238] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.272545][ T2238] usb 2-1: config 0 has no interface number 0 [ 208.645717][ T5746] loop3: detected capacity change from 0 to 2048 [ 208.776733][ T2238] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 208.785890][ T2238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.910808][ T2238] usb 2-1: Product: syz [ 209.000014][ T5746] attempt to access beyond end of device [ 209.000014][ T5746] loop3: rw=0, want=562949953421394, limit=2048 [ 209.013024][ T5746] NILFS (loop3): I/O error reading meta-data file (ino=4, block-offset=0) [ 209.026610][ T5746] NILFS (loop3): error -5 while loading last checkpoint (checkpoint number=2) [ 209.180106][ T2238] usb 2-1: Manufacturer: syz [ 209.192272][ T2238] usb 2-1: SerialNumber: syz [ 209.249485][ T4214] vhci_hcd: vhci_device speed not set [ 209.343161][ T2238] usb 2-1: config 0 descriptor?? [ 209.367416][ T2238] usb 2-1: can't set config #0, error -71 [ 209.692332][ T2238] usb 2-1: USB disconnect, device number 9 [ 209.902018][ T5755] fuse: Bad value for 'fd' [ 210.169156][ T5762] loop0: detected capacity change from 0 to 8 [ 210.337840][ T5731] delete_channel: no stack [ 210.509111][ T5771] SQUASHFS error: xz decompression failed, data probably corrupt [ 210.517559][ T5771] SQUASHFS error: Failed to read block 0xa8: -5 [ 210.530810][ T5771] SQUASHFS error: xz decompression failed, data probably corrupt [ 210.538812][ T5771] SQUASHFS error: Failed to read block 0xa8: -5 [ 210.547345][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 210.547390][ T26] audit: type=1800 audit(1749962157.507:39): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.341" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 211.588260][ T5783] loop0: detected capacity change from 0 to 64 [ 211.723821][ T5757] loop3: detected capacity change from 0 to 32768 [ 212.266261][ T5757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.340 (5757) [ 213.465592][ T5757] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 213.613466][ T5757] BTRFS info (device loop3): setting nodatacow, compression disabled [ 213.766592][ T5757] BTRFS info (device loop3): max_inline at 0 [ 213.887164][ T5757] BTRFS info (device loop3): enabling disk space caching [ 213.930463][ T5804] loop1: detected capacity change from 0 to 256 [ 213.998780][ T5757] BTRFS info (device loop3): turning off barriers [ 214.078204][ T5804] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.102090][ T5757] BTRFS info (device loop3): turning on flush-on-commit [ 214.216872][ T5757] BTRFS info (device loop3): doing ref verification [ 214.245426][ T5804] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 214.337000][ T5757] BTRFS info (device loop3): force clearing of disk cache [ 214.436195][ T2302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 214.458767][ T5757] BTRFS info (device loop3): enabling ssd optimizations [ 214.489201][ T5757] BTRFS info (device loop3): max_inline at 4096 [ 214.495522][ T5757] BTRFS info (device loop3): disk space caching is enabled [ 214.504205][ T5757] BTRFS info (device loop3): has skinny extents [ 214.558896][ T5757] BTRFS error (device loop3): open_ctree failed: -12 [ 214.576288][ T5804] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 214.936472][ T2302] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.947828][ T2302] usb 3-1: config 0 has no interface number 0 [ 215.196706][ T2302] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 215.230657][ T2302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.272817][ T2302] usb 3-1: Product: syz [ 215.294479][ T2302] usb 3-1: Manufacturer: syz [ 215.305615][ T2302] usb 3-1: SerialNumber: syz [ 215.332809][ T2302] usb 3-1: config 0 descriptor?? [ 215.593612][ T5856] fuse: Bad value for 'fd' [ 215.598181][ T2302] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 215.808930][ T2302] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.551282][ T2302] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 216.561605][ T2302] usb 3-1: media controller created [ 216.581448][ T2302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.936598][ T2302] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 216.976593][ T2302] usb 3-1: USB disconnect, device number 3 [ 217.184810][ T5873] loop3: detected capacity change from 0 to 40427 [ 217.425395][ T5873] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 217.433587][ T5873] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 217.517965][ T5873] F2FS-fs (loop3): invalid crc value [ 217.920145][ T5873] F2FS-fs (loop3): Found nat_bits in checkpoint [ 217.969570][ T5878] loop1: detected capacity change from 0 to 512 [ 217.979086][ T5873] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 217.986567][ T5873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 218.012655][ T5858] delete_channel: no stack [ 219.436930][ T5878] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 219.455199][ T5878] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 219.466293][ T5878] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.360: Corrupt directory, running e2fsck is recommended [ 219.622529][ T5891] loop2: detected capacity change from 0 to 2048 [ 219.637640][ T5878] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 219.646021][ T5878] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.360: corrupted in-inode xattr [ 219.676773][ T5878] EXT4-fs (loop1): Remounting filesystem read-only [ 219.709755][ T5878] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.360: couldn't read orphan inode 15 (err -117) [ 219.751409][ T5891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.771522][ T5878] EXT4-fs (loop1): Remounting filesystem read-only [ 219.818726][ T5878] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,dax=inode,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 220.003238][ T5899] loop5: detected capacity change from 0 to 64 [ 224.059164][ T5926] sg_write: data in/out 80278626/24 bytes for SCSI command 0xc7-- guessing data in; [ 224.059164][ T5926] program syz.0.373 not setting count and/or reply_len properly [ 224.242505][ T5911] fuse: Bad value for 'fd' [ 224.254991][ T5923] libceph: resolve '+ælc' (ret=-3): failed [ 225.525944][ T5937] loop3: detected capacity change from 0 to 4096 [ 226.863780][ T5938] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.899100][ T26] audit: type=1800 audit(1749962173.867:40): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.375" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 227.315776][ T5946] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 227.322351][ T5946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.341000][ T5946] vhci_hcd vhci_hcd.0: Device attached [ 227.478003][ T5945] fuse: Bad value for 'fd' [ 228.300419][ T5836] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 228.311828][ T5947] vhci_hcd: connection closed [ 228.313561][ T4223] vhci_hcd: stop threads [ 228.400904][ T5953] loop5: detected capacity change from 0 to 512 [ 228.430070][ T4223] vhci_hcd: release socket [ 228.504282][ T4223] vhci_hcd: disconnect device [ 228.717451][ T5953] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 228.729220][ T5953] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 228.740121][ T5953] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.381: Corrupt directory, running e2fsck is recommended [ 228.757729][ T5953] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 229.065664][ T5953] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.381: corrupted in-inode xattr [ 229.079517][ T5953] EXT4-fs (loop5): Remounting filesystem read-only [ 229.086419][ T5953] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.381: couldn't read orphan inode 15 (err -117) [ 229.867686][ T5953] EXT4-fs (loop5): Remounting filesystem read-only [ 229.874306][ T5953] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,dax=inode,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 231.080716][ T5976] loop1: detected capacity change from 0 to 64 [ 232.691615][ T5992] fuse: Invalid rootmode [ 233.002934][ T5996] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 233.016372][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.023853][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.048239][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.055405][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.062882][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.070018][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.188606][ T5996] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 233.221160][ T5980] loop5: detected capacity change from 0 to 32768 [ 233.311815][ T5980] XFS (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 233.361925][ T5980] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 233.380111][ T5980] XFS (loop5): DAX and reflink cannot be used together! [ 233.486422][ T5836] vhci_hcd: vhci_device speed not set [ 233.518895][ T5994] loop2: detected capacity change from 0 to 32768 [ 233.672267][ T6012] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 233.678836][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.686916][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 233.976513][ T2302] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 233.997955][ T5994] jfs_strtoUCS: char2uni returned -22. [ 234.075749][ T5994] charset = cp932, char = 0xfc [ 234.377095][ T6013] vhci_hcd: connection reset by peer [ 234.383258][ T4344] vhci_hcd: stop threads [ 234.389506][ T4344] vhci_hcd: release socket [ 234.460458][ T4344] vhci_hcd: disconnect device [ 236.578876][ T6043] fuse: Invalid rootmode [ 236.722967][ T6029] loop5: detected capacity change from 0 to 32768 [ 236.726305][ T6048] netlink: 'syz.3.405': attribute type 10 has an invalid length. [ 236.780182][ T6048] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 236.845515][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 236.866683][ T5005] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 236.876377][ T6029] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 236.921567][ T6029] BTRFS info (device loop5): setting nodatacow, compression disabled [ 236.956394][ T6029] BTRFS info (device loop5): turning on sync discard [ 236.968987][ T6049] bond0: (slave bridge0): Releasing backup interface [ 236.990065][ T6029] BTRFS info (device loop5): setting datacow [ 237.036447][ T6029] BTRFS info (device loop5): doing ref verification [ 237.078130][ T6029] BTRFS info (device loop5): turning off barriers [ 237.139697][ T6029] BTRFS info (device loop5): enabling ssd optimizations [ 237.164533][ T6029] BTRFS info (device loop5): using spread ssd allocation scheme [ 237.188832][ T6054] loop0: detected capacity change from 0 to 16 [ 237.199189][ T6029] BTRFS info (device loop5): setting datasum [ 237.222960][ T6029] BTRFS info (device loop5): turning on barriers [ 237.242949][ T6029] BTRFS info (device loop5): not using ssd optimizations [ 237.252339][ T5005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.267065][ T6054] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 237.285304][ T5005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.320768][ T6029] BTRFS info (device loop5): not using spread ssd allocation scheme [ 237.396264][ T6029] BTRFS info (device loop5): using free space tree [ 237.569971][ T6029] BTRFS info (device loop5): has skinny extents [ 238.097115][ T5005] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 238.106559][ T5005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.117350][ T5005] usb 2-1: config 0 descriptor?? [ 238.528800][ T6066] loop3: detected capacity change from 0 to 40427 [ 238.697824][ T4608] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 238.735738][ T6029] BTRFS error (device loop5): open_ctree failed: -12 [ 238.747369][ T4188] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (4188) [ 238.853609][ T6066] F2FS-fs (loop3): invalid crc value [ 238.860305][ T5005] usbhid 2-1:0.0: can't add hid device: -71 [ 238.870523][ T6066] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.904961][ T5005] usbhid: probe of 2-1:0.0 failed with error -71 [ 238.918627][ T5005] usb 2-1: USB disconnect, device number 10 [ 238.955299][ T6066] F2FS-fs (loop3): Start checkpoint disabled! [ 238.962025][ T4608] usb 1-1: Using ep0 maxpacket: 16 [ 238.987147][ T6066] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 239.087223][ T4608] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.166470][ T2302] vhci_hcd: vhci_device speed not set [ 239.271607][ T4608] usb 1-1: config 0 has no interface number 0 [ 239.456379][ T4608] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 239.466024][ T4608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.478693][ T1219] attempt to access beyond end of device [ 239.478693][ T1219] loop3: rw=2049, want=40984, limit=40427 [ 239.561603][ T4608] usb 1-1: Product: syz [ 239.565817][ T4608] usb 1-1: Manufacturer: syz [ 239.614301][ T4608] usb 1-1: SerialNumber: syz [ 239.635169][ T4608] usb 1-1: config 0 descriptor?? [ 239.708283][ T4608] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 239.821706][ T6103] netlink: 'syz.5.418': attribute type 10 has an invalid length. [ 239.834057][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.841583][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.922546][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.929736][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.938268][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.945379][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.956525][ T5005] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 239.997721][ T6103] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 240.025012][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.418'. [ 240.064855][ T6105] device bridge_slave_1 left promiscuous mode [ 240.082107][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.114040][ T6105] device bridge_slave_0 left promiscuous mode [ 240.125006][ T6101] loop2: detected capacity change from 0 to 40427 [ 240.142124][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.174675][ T6105] bond0: (slave bridge0): Releasing backup interface [ 240.227803][ T6101] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 240.386372][ T5005] usb 2-1: Using ep0 maxpacket: 32 [ 240.567028][ T5005] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 240.847305][ T4608] gspca_spca1528: reg_w err -71 [ 240.852766][ T5005] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 240.896586][ T4608] spca1528: probe of 1-1:0.1 failed with error -71 [ 240.924662][ T5005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.102854][ T4608] usb 1-1: USB disconnect, device number 6 [ 241.116841][ T5005] usb 2-1: Product: syz [ 241.180213][ T5005] usb 2-1: Manufacturer: syz [ 241.223136][ T5005] usb 2-1: SerialNumber: syz [ 241.229049][ T6115] fuse: Invalid rootmode [ 241.240237][ T5005] usb 2-1: config 0 descriptor?? [ 241.286487][ T6097] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 241.439206][ T5005] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 241.847008][ T2302] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 241.884947][ T6124] loop0: detected capacity change from 0 to 40427 [ 241.909038][ T4608] usb 2-1: USB disconnect, device number 11 [ 241.917215][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 241.989468][ T6124] F2FS-fs (loop0): invalid crc value [ 242.008993][ T6124] F2FS-fs (loop0): Found nat_bits in checkpoint [ 242.054660][ T6124] F2FS-fs (loop0): Start checkpoint disabled! [ 242.106992][ T6124] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 242.136660][ T2302] usb 6-1: Using ep0 maxpacket: 8 [ 242.286436][ T2302] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 242.338008][ T2302] usb 6-1: config 179 has no interface number 0 [ 242.444851][ T2302] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 242.547917][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 242.599689][ T2302] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 242.650754][ T6120] loop3: detected capacity change from 0 to 32768 [ 242.674468][ T2302] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.687720][ T6134] loop2: detected capacity change from 0 to 16 [ 242.736875][ T2302] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 242.763448][ T721] attempt to access beyond end of device [ 242.763448][ T721] loop0: rw=2049, want=40984, limit=40427 [ 242.774879][ T2302] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 242.774911][ T2302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.796480][ T6122] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 242.820480][ T6134] erofs: (device loop2): mounted with root inode @ nid 36. [ 242.856374][ T1108] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 242.966643][ T6136] loop2: detected capacity change from 0 to 256 [ 243.009698][ T6136] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x111aa6d0) [ 243.020631][ T6136] exFAT-fs (loop2): invalid boot region [ 243.026621][ T6136] exFAT-fs (loop2): failed to recognize exfat type [ 243.089122][ T2302] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input7 [ 243.106129][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 243.236018][ T1108] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 243.244282][ T1108] usb 2-1: config 0 has no interface number 0 [ 243.260296][ T6139] netlink: 'syz.2.431': attribute type 10 has an invalid length. [ 243.279945][ T5005] usb 6-1: USB disconnect, device number 4 [ 243.296132][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 243.304483][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 243.317022][ T5005] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 243.330425][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 243.476289][ T1108] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 243.540921][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.591109][ T1108] usb 2-1: Product: syz [ 243.698602][ T1108] usb 2-1: Manufacturer: syz [ 243.761300][ T1108] usb 2-1: SerialNumber: syz [ 244.040616][ T1108] usb 2-1: config 0 descriptor?? [ 244.157495][ T1108] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 244.468709][ T1108] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 244.535974][ T1108] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 245.177150][ T1108] usb 2-1: USB disconnect, device number 12 [ 245.186120][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 245.241019][ T1108] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 245.325646][ T1108] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 245.350293][ T1108] quatech2 2-1:0.51: device disconnected [ 245.439152][ T6160] fuse: Bad value for 'rootmode' [ 245.449072][ T6147] loop0: detected capacity change from 0 to 32768 [ 245.693324][ T6147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.433 (6147) [ 245.728910][ T6147] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 245.748872][ T6147] BTRFS info (device loop0): force clearing of disk cache [ 245.844662][ T6147] BTRFS info (device loop0): setting nodatacow, compression disabled [ 245.892614][ T6147] BTRFS info (device loop0): turning off barriers [ 245.908923][ T6147] BTRFS info (device loop0): enabling auto defrag [ 245.915796][ T6147] BTRFS info (device loop0): turning on sync discard [ 245.928919][ T6147] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 245.943145][ T6147] BTRFS info (device loop0): trying to use backup root at mount time [ 245.954376][ T6147] BTRFS info (device loop0): enabling ssd optimizations [ 245.963558][ T6147] BTRFS info (device loop0): using spread ssd allocation scheme [ 246.016289][ T6147] BTRFS info (device loop0): using free space tree [ 246.116288][ T6147] BTRFS info (device loop0): has skinny extents [ 246.779254][ T6173] loop2: detected capacity change from 0 to 40427 [ 246.905474][ T6173] F2FS-fs (loop2): invalid crc value [ 246.934691][ T6173] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.973845][ T6173] F2FS-fs (loop2): Start checkpoint disabled! [ 247.009449][ T6173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 247.081931][ T6195] netlink: 'syz.1.442': attribute type 10 has an invalid length. [ 247.098199][ T721] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 247.112233][ T6147] BTRFS warning (device loop0): couldn't read tree root [ 247.176647][ T4344] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 247.221925][ T6147] BTRFS warning (device loop0): couldn't read tree root [ 247.350736][ T6147] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 247.475748][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.483640][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.491363][ T6147] BTRFS warning (device loop0): couldn't read tree root [ 247.518407][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 247.612727][ T6204] device bridge_slave_1 left promiscuous mode [ 247.640459][ T4407] attempt to access beyond end of device [ 247.640459][ T4407] loop2: rw=2049, want=40984, limit=40427 [ 247.654127][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.926514][ T6204] device bridge_slave_0 left promiscuous mode [ 247.975750][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.144391][ T6200] loop3: detected capacity change from 0 to 40427 [ 248.170234][ T6200] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 248.181880][ T6147] BTRFS error (device loop0): open_ctree failed: -22 [ 248.193022][ T4188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4188) [ 248.216858][ T6200] F2FS-fs (loop3): invalid crc value [ 248.223850][ T6204] bond0: (slave bridge0): Releasing backup interface [ 248.556270][ T6200] F2FS-fs (loop3): Found nat_bits in checkpoint [ 249.007830][ T6200] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.245225][ T6226] netlink: 'syz.0.449': attribute type 10 has an invalid length. [ 249.256809][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 249.308277][ T4169] attempt to access beyond end of device [ 249.308277][ T4169] loop3: rw=2049, want=45104, limit=40427 [ 249.751434][ T6237] loop1: detected capacity change from 0 to 8 [ 250.074657][ T6229] loop5: detected capacity change from 0 to 32768 [ 251.012325][ T6237] SQUASHFS error: xz decompression failed, data probably corrupt [ 251.020199][ T6237] SQUASHFS error: Failed to read block 0xa8: -5 [ 251.026934][ T6237] SQUASHFS error: xz decompression failed, data probably corrupt [ 251.034684][ T6237] SQUASHFS error: Failed to read block 0xa8: -5 [ 251.041484][ T26] audit: type=1800 audit(1749962198.007:41): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.453" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 251.121748][ T6249] fuse: Bad value for 'rootmode' [ 253.651628][ T6273] netlink: 'syz.3.464': attribute type 10 has an invalid length. [ 253.691592][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 253.827071][ T26] audit: type=1326 audit(1749962200.797:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaf203929 code=0x7ffc0000 [ 253.927215][ T26] audit: type=1326 audit(1749962200.817:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaf203929 code=0x7ffc0000 [ 253.978575][ T6282] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 254.088927][ T26] audit: type=1326 audit(1749962200.827:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f7aaf203929 code=0x7ffc0000 [ 254.185816][ T26] audit: type=1326 audit(1749962200.827:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaf203929 code=0x7ffc0000 [ 254.213870][ T26] audit: type=1326 audit(1749962200.827:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaf203929 code=0x7ffc0000 [ 254.291079][ T6295] loop0: detected capacity change from 0 to 256 [ 255.037516][ T6295] exfat: Deprecated parameter 'namecase' [ 255.058183][ T6295] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 255.340737][ T6299] loop3: detected capacity change from 0 to 40427 [ 255.524694][ T6299] F2FS-fs (loop3): invalid crc value [ 255.606209][ T1108] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 255.617630][ T6299] F2FS-fs (loop3): Found nat_bits in checkpoint [ 255.716910][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.723983][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.845798][ T6299] F2FS-fs (loop3): Start checkpoint disabled! [ 255.999453][ T6299] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 256.671373][ T1108] usb 2-1: config 0 has no interfaces? [ 256.678072][ T1108] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.717800][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.747185][ T4223] attempt to access beyond end of device [ 256.747185][ T4223] loop3: rw=2049, want=40984, limit=40427 [ 256.769838][ T1108] usb 2-1: config 0 descriptor?? [ 256.789854][ T6306] loop0: detected capacity change from 0 to 32768 [ 256.862135][ T6306] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 256.902435][ T6306] BTRFS info (device loop0): setting nodatasum [ 256.904592][ T6313] loop2: detected capacity change from 0 to 32768 [ 256.920977][ T6306] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 256.936722][ T6313] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.477 (6313) [ 256.964228][ T6306] BTRFS info (device loop0): force lzo compression, level 0 [ 256.994675][ T6306] BTRFS info (device loop0): enabling all of the rescue options [ 257.014508][ T6306] BTRFS info (device loop0): ignoring data csums [ 257.016327][ T4348] usb 2-1: USB disconnect, device number 13 [ 257.032986][ T6306] BTRFS info (device loop0): ignoring bad roots [ 257.043420][ T4188] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4188) [ 257.049700][ T6306] BTRFS info (device loop0): disabling log replay at mount time [ 257.113331][ T6306] BTRFS info (device loop0): force clearing of disk cache [ 257.133651][ T6306] BTRFS info (device loop0): unrecognized rescue option 'imetacsums' [ 257.146329][ T6306] BTRFS error (device loop0): unrecognized rescue value imetacsums [ 257.166911][ T6306] BTRFS error (device loop0): open_ctree failed: -22 [ 259.480133][ T6357] loop5: detected capacity change from 0 to 512 [ 259.643704][ T6357] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 259.666375][ T1108] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 259.817368][ T6357] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.136192][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 261.181823][ T4217] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 261.366127][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.374250][ T4217] Bluetooth: hci3: Injecting HCI hardware error event [ 261.383872][ T4181] Bluetooth: hci3: hardware error 0x00 [ 261.716387][ T1108] usb 2-1: config 218 has an invalid interface number: 5 but max is 0 [ 261.733778][ T1108] usb 2-1: config 218 has no interface number 0 [ 261.771027][ T1108] usb 2-1: config 218 interface 5 has no altsetting 0 [ 261.837953][ T6375] netlink: 'syz.3.497': attribute type 10 has an invalid length. [ 261.895447][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 262.079834][ T1108] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f1.1d [ 262.096217][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.104363][ T1108] usb 2-1: Product: syz [ 262.109271][ T1108] usb 2-1: Manufacturer: syz [ 262.113913][ T1108] usb 2-1: SerialNumber: syz [ 262.918879][ T1108] usb 2-1: can't set config #218, error -71 [ 262.925974][ T1108] usb 2-1: USB disconnect, device number 14 [ 263.701351][ T6393] loop2: detected capacity change from 0 to 32768 [ 263.762842][ T6393] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.501 (6393) [ 264.047885][ T6393] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 264.097012][ T6393] BTRFS info (device loop2): setting nodatacow, compression disabled [ 264.165190][ T6393] BTRFS info (device loop2): max_inline at 0 [ 264.357360][ T6393] BTRFS info (device loop2): enabling disk space caching [ 264.427950][ T6393] BTRFS info (device loop2): turning off barriers [ 264.490053][ T6393] BTRFS info (device loop2): doing ref verification [ 264.529205][ T6393] BTRFS info (device loop2): force clearing of disk cache [ 264.688320][ T6393] BTRFS info (device loop2): enabling ssd optimizations [ 264.726168][ T6393] BTRFS info (device loop2): max_inline at 4096 [ 264.732481][ T6393] BTRFS info (device loop2): disk space caching is enabled [ 264.799009][ T6393] BTRFS info (device loop2): has skinny extents [ 264.995276][ T6423] loop5: detected capacity change from 0 to 8 [ 268.217323][ T6446] loop1: detected capacity change from 0 to 40427 [ 268.392802][ T6446] F2FS-fs (loop1): invalid crc value [ 268.430853][ T6446] F2FS-fs (loop1): Found nat_bits in checkpoint [ 268.438143][ T6393] BTRFS error (device loop2): open_ctree failed: -12 [ 268.488706][ T4188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4188) [ 268.504129][ T6446] F2FS-fs (loop1): Start checkpoint disabled! [ 268.524024][ T6446] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 270.009541][ T6469] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 270.016094][ T6469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 270.038071][ T6477] netlink: 'syz.2.513': attribute type 10 has an invalid length. [ 270.143667][ T6469] vhci_hcd vhci_hcd.0: Device attached [ 270.164565][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 270.406877][ T6471] vhci_hcd: connection closed [ 270.408583][ T1219] vhci_hcd: stop threads [ 270.418305][ T1219] vhci_hcd: release socket [ 270.422847][ T1219] vhci_hcd: disconnect device [ 270.459431][ T4223] attempt to access beyond end of device [ 270.459431][ T4223] loop1: rw=2049, want=40984, limit=40427 [ 270.496685][ T23] vhci_hcd: vhci_device speed not set [ 271.308613][ T6492] loop5: detected capacity change from 0 to 512 [ 272.276227][ T6492] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 272.288009][ T6492] UDF-fs: Scanning with blocksize 512 failed [ 272.320975][ T6492] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 272.366691][ T6492] UDF-fs: Scanning with blocksize 1024 failed [ 272.403568][ T6500] usb usb1: usbfs: process 6500 (syz.3.520) did not claim interface 0 before use [ 272.426781][ T6492] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 272.434214][ T6492] UDF-fs: Scanning with blocksize 2048 failed [ 272.491241][ T6500] MPTCP: addr_signal error, rm_addr=1 [ 272.571008][ T6492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 272.603335][ T6492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.664935][ T6509] loop0: detected capacity change from 0 to 1024 [ 273.177329][ T6519] loop1: detected capacity change from 0 to 40427 [ 274.072717][ T6519] F2FS-fs (loop1): invalid crc value [ 274.089272][ T6519] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.129145][ T6519] F2FS-fs (loop1): Start checkpoint disabled! [ 274.141533][ T6519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 274.439126][ T6509] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #3: block 1: comm syz.0.522: lblock 1 mapped to illegal pblock 1 (length 1) [ 274.619953][ T6509] Quota error (device loop0): write_blk: dquota write failed [ 274.642096][ T6509] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 274.686259][ T6509] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.522: Failed to acquire dquot type 0 [ 274.698724][ T6509] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.522: Freeing blocks not in datazone - block = 0, count = 4096 [ 274.757420][ T1219] attempt to access beyond end of device [ 274.757420][ T1219] loop1: rw=2049, want=40984, limit=40427 [ 274.802321][ T6509] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.522: Invalid inode bitmap blk 0 in block_group 0 [ 274.867682][ T6509] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 274.913071][ T6509] EXT4-fs (loop0): 1 orphan inode deleted [ 274.949028][ T6509] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 274.994963][ T1219] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 275.049441][ T6534] netlink: 'syz.2.529': attribute type 10 has an invalid length. [ 275.051103][ T1219] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 275.058208][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 275.081031][ T1219] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:4: Failed to release dquot type 0 [ 275.658035][ T6541] loop0: detected capacity change from 0 to 40427 [ 275.891043][ T6541] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 275.898941][ T6541] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 275.920830][ T6541] F2FS-fs (loop0): invalid crc value [ 276.134575][ T6541] F2FS-fs (loop0): Found nat_bits in checkpoint [ 276.194840][ T6541] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 276.202193][ T6541] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 276.271219][ T6512] delete_channel: no stack [ 276.549065][ T6554] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 276.555612][ T6554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.568228][ T6554] vhci_hcd vhci_hcd.0: Device attached [ 276.642215][ T6556] vhci_hcd: connection closed [ 276.643564][ T1219] vhci_hcd: stop threads [ 276.655840][ T1219] vhci_hcd: release socket [ 276.665001][ T1219] vhci_hcd: disconnect device [ 276.741075][ T6561] MPTCP: addr_signal error, rm_addr=1 [ 276.854742][ T6566] loop1: detected capacity change from 0 to 512 [ 277.023598][ T6566] EXT4-fs (loop1): 1 orphan inode deleted [ 277.036257][ T6566] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.066274][ T1108] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 277.074494][ T6566] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.259832][ T6573] fuse: Unknown parameter 'use00000000000000000000' [ 277.446468][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.309980][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.325773][ T1108] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 278.343015][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.563957][ T1108] usb 4-1: config 0 descriptor?? [ 279.886341][ T1108] usbhid 4-1:0.0: can't add hid device: -71 [ 279.895006][ T1108] usbhid: probe of 4-1:0.0 failed with error -71 [ 279.896117][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 279.930458][ T1108] usb 4-1: USB disconnect, device number 8 [ 280.296410][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.308553][ T23] usb 3-1: config 0 has no interface number 0 [ 280.441708][ T6608] MPTCP: addr_signal error, rm_addr=1 [ 280.526617][ T23] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 280.574289][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.590943][ T23] usb 3-1: Product: syz [ 280.606855][ T23] usb 3-1: Manufacturer: syz [ 280.623134][ T23] usb 3-1: SerialNumber: syz [ 280.693065][ T23] usb 3-1: config 0 descriptor?? [ 280.976775][ T23] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 281.000550][ T23] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.022868][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 281.041832][ T23] usb 3-1: media controller created [ 281.078214][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.500247][ T6615] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 281.506833][ T6615] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.515933][ T6615] vhci_hcd vhci_hcd.0: Device attached [ 282.459505][ T23] usb 3-1: USB disconnect, device number 4 [ 282.514020][ T6617] vhci_hcd: connection closed [ 282.514380][ T4344] vhci_hcd: stop threads [ 282.546966][ T4344] vhci_hcd: release socket [ 282.551532][ T4344] vhci_hcd: disconnect device [ 282.643899][ T6630] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 282.675916][ T6634] loop1: detected capacity change from 0 to 512 [ 282.737294][ T6598] delete_channel: no stack [ 282.745421][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 282.859671][ T6634] EXT4-fs (loop1): Ignoring removed bh option [ 282.979826][ T6634] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 283.212506][ T6634] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 283.381530][ T6634] EXT4-fs (loop1): group descriptors corrupted! [ 283.906154][ T6452] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 284.340809][ T6647] loop2: detected capacity change from 0 to 40427 [ 284.347927][ T6642] fuse: Unknown parameter 'use00000000000000000000' [ 284.414689][ T6646] MPTCP: addr_signal error, rm_addr=1 [ 284.465342][ T6647] F2FS-fs (loop2): invalid crc value [ 284.486184][ T6647] F2FS-fs (loop2): Found nat_bits in checkpoint [ 284.538983][ T6647] F2FS-fs (loop2): Start checkpoint disabled! [ 285.118728][ T6647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 285.626213][ T6452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.813124][ T6452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.823182][ T6452] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 285.833805][ T6452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.847130][ T6452] usb 6-1: config 0 descriptor?? [ 286.181025][ T1219] attempt to access beyond end of device [ 286.181025][ T1219] loop2: rw=2049, want=40984, limit=40427 [ 286.259011][ T6670] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 286.265564][ T6670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 286.273445][ T6670] vhci_hcd vhci_hcd.0: Device attached [ 286.289977][ T6672] vhci_hcd: connection closed [ 286.290952][ T721] vhci_hcd: stop threads [ 286.309530][ T721] vhci_hcd: release socket [ 286.314232][ T721] vhci_hcd: disconnect device [ 286.386401][ T6452] usbhid 6-1:0.0: can't add hid device: -71 [ 286.392444][ T6452] usbhid: probe of 6-1:0.0 failed with error -71 [ 286.432311][ T6452] usb 6-1: USB disconnect, device number 5 [ 286.493587][ T5838] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 286.937252][ T6681] loop5: detected capacity change from 0 to 4096 [ 286.946476][ T5838] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.960653][ T5838] usb 2-1: config 0 has no interface number 0 [ 287.040455][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 287.061390][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 287.082932][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 287.101795][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 287.109800][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 287.123394][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 287.131361][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 287.139294][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 287.156311][ T5838] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 287.175735][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.181173][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 287.364203][ T6681] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00 [ 287.986198][ T5838] usb 2-1: Product: syz [ 287.990441][ T5838] usb 2-1: Manufacturer: syz [ 287.995065][ T5838] usb 2-1: SerialNumber: syz [ 288.034760][ T5838] usb 2-1: config 0 descriptor?? [ 288.124779][ T6687] loop2: detected capacity change from 0 to 8 [ 288.185391][ T6687] SQUASHFS error: zlib decompression failed, data probably corrupt [ 288.226121][ T6687] SQUASHFS error: Failed to read block 0x9b: -5 [ 288.234500][ T6687] SQUASHFS error: Unable to read metadata cache entry [99] [ 288.243300][ T6690] netlink: 'syz.3.571': attribute type 10 has an invalid length. [ 288.246646][ T6687] SQUASHFS error: Unable to read inode 0x127 [ 288.280288][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 288.368496][ T6695] loop5: detected capacity change from 0 to 64 [ 288.381564][ T5838] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 288.398919][ T5838] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 288.426487][ T5838] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 288.683547][ T6697] loop2: detected capacity change from 0 to 40427 [ 288.690406][ T5838] usb 2-1: media controller created [ 288.711395][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.764170][ T6697] F2FS-fs (loop2): invalid crc value [ 288.877061][ T6697] F2FS-fs (loop2): Found nat_bits in checkpoint [ 288.915828][ T6697] F2FS-fs (loop2): Start checkpoint disabled! [ 288.946862][ T6697] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 289.545063][ T5838] usb 2-1: USB disconnect, device number 15 [ 290.137613][ T6679] delete_channel: no stack [ 290.225077][ T9] attempt to access beyond end of device [ 290.225077][ T9] loop2: rw=2049, want=40984, limit=40427 [ 290.416304][ T6452] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 290.431164][ T6718] loop0: detected capacity change from 0 to 1764 [ 290.856772][ T6452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.223682][ T6452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.332364][ T6452] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 291.363211][ T6452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.388243][ T6452] usb 4-1: config 0 descriptor?? [ 292.877061][ T6743] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 292.883625][ T6743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 292.891257][ T6743] vhci_hcd vhci_hcd.0: Device attached [ 292.897068][ T6452] usbhid 4-1:0.0: can't add hid device: -71 [ 292.902742][ T6742] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 292.903117][ T6452] usbhid: probe of 4-1:0.0 failed with error -71 [ 293.107521][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 293.162241][ T6744] vhci_hcd: connection closed [ 293.163745][ T6452] usb 4-1: USB disconnect, device number 9 [ 293.166723][ T5827] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 293.181871][ T9] vhci_hcd: stop threads [ 293.186256][ T9] vhci_hcd: release socket [ 293.203319][ T9] vhci_hcd: disconnect device [ 293.989731][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805feb3000: rx timeout, send abort [ 294.498098][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805feb3000: abort rx timeout. Force session deactivation [ 294.658376][ T6764] loop0: detected capacity change from 0 to 40427 [ 294.705958][ T6764] F2FS-fs (loop0): invalid crc value [ 294.722192][ T6764] F2FS-fs (loop0): Found nat_bits in checkpoint [ 294.756245][ T6452] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 294.773745][ T6764] F2FS-fs (loop0): Start checkpoint disabled! [ 295.073382][ T6764] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 295.446320][ T6452] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.454901][ T6452] usb 4-1: config 0 has no interface number 0 [ 295.492469][ T6777] loop2: detected capacity change from 0 to 512 [ 295.568051][ T6777] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 295.583796][ T4406] attempt to access beyond end of device [ 295.583796][ T4406] loop0: rw=2049, want=40984, limit=40427 [ 295.639396][ T6777] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 295.657215][ T6452] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 295.668952][ T6777] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.675958][ T6452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.694100][ T6452] usb 4-1: Product: syz [ 295.698441][ T6452] usb 4-1: Manufacturer: syz [ 295.703143][ T6452] usb 4-1: SerialNumber: syz [ 295.721447][ T6452] usb 4-1: config 0 descriptor?? [ 295.921420][ T6782] loop2: detected capacity change from 0 to 64 [ 295.996392][ T6452] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 296.513599][ T6452] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.525598][ T6452] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 297.922931][ T6452] usb 4-1: media controller created [ 298.229345][ T6452] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.405490][ T5827] vhci_hcd: vhci_device speed not set [ 298.420121][ T6759] delete_channel: no stack [ 298.629947][ T5010] usb 4-1: USB disconnect, device number 10 [ 298.846205][ T1108] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 298.911766][ T6803] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 298.918321][ T6803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 298.926291][ T6803] vhci_hcd vhci_hcd.0: Device attached [ 299.206457][ T6452] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 300.401765][ T6804] vhci_hcd: connection reset by peer [ 300.414292][ T4406] vhci_hcd: stop threads [ 300.420780][ T4406] vhci_hcd: release socket [ 300.854181][ T4406] vhci_hcd: disconnect device [ 301.799018][ T6816] loop3: detected capacity change from 0 to 40427 [ 301.873167][ T6816] F2FS-fs (loop3): invalid crc value [ 301.894621][ T6816] F2FS-fs (loop3): Found nat_bits in checkpoint [ 301.938932][ T6816] F2FS-fs (loop3): Start checkpoint disabled! [ 301.960982][ T6816] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 302.076300][ T1108] usb 6-1: device not accepting address 6, error -71 [ 304.002071][ T6831] loop0: detected capacity change from 0 to 64 [ 304.376582][ T6452] vhci_hcd: vhci_device speed not set [ 307.119365][ T9] attempt to access beyond end of device [ 307.119365][ T9] loop3: rw=2049, want=40984, limit=40427 [ 307.464378][ T6854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 307.471023][ T6854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 307.479179][ T6854] vhci_hcd vhci_hcd.0: Device attached [ 308.322174][ T6857] vhci_hcd: connection closed [ 308.322758][ T721] vhci_hcd: stop threads [ 308.332152][ T721] vhci_hcd: release socket [ 308.353034][ T721] vhci_hcd: disconnect device [ 308.466418][ T4608] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 308.926341][ T4608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.971795][ T4608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.994806][ T4608] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 309.004879][ T4608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.189962][ T4608] usb 3-1: config 0 descriptor?? [ 310.316157][ T6875] loop3: detected capacity change from 0 to 40427 [ 310.423019][ T6875] F2FS-fs (loop3): invalid crc value [ 310.488216][ T6875] F2FS-fs (loop3): Found nat_bits in checkpoint [ 310.533627][ T6875] F2FS-fs (loop3): Start checkpoint disabled! [ 310.540485][ T4608] usbhid 3-1:0.0: can't add hid device: -71 [ 310.552695][ T4608] usbhid: probe of 3-1:0.0 failed with error -71 [ 310.578035][ T4608] usb 3-1: USB disconnect, device number 5 [ 310.640557][ T6875] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 312.471312][ T6901] [ 312.473711][ T6901] ====================================================== [ 312.480747][ T6901] WARNING: possible circular locking dependency detected [ 312.487801][ T6901] 5.15.185-syzkaller #0 Not tainted [ 312.493024][ T6901] ------------------------------------------------------ [ 312.500049][ T6901] syz.5.631/6901 is trying to acquire lock: [ 312.505951][ T6901] ffff88807dcbc920 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 312.515617][ T6901] [ 312.515617][ T6901] but task is already holding lock: [ 312.522997][ T6901] ffffc90001892558 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 312.532608][ T6901] [ 312.532608][ T6901] which lock already depends on the new lock. [ 312.532608][ T6901] [ 312.543032][ T6901] [ 312.543032][ T6901] the existing dependency chain (in reverse order) is: [ 312.552062][ T6901] [ 312.552062][ T6901] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 312.560086][ T6901] _raw_spin_lock+0x2a/0x40 [ 312.565139][ T6901] __inet_hash+0xe3/0x960 [ 312.570012][ T6901] inet_csk_listen_start+0x22f/0x320 [ 312.575841][ T6901] inet_listen+0x350/0x7e0 [ 312.580814][ T6901] __sys_listen+0x19d/0x220 [ 312.585865][ T6901] __x64_sys_listen+0x56/0x60 [ 312.591087][ T6901] do_syscall_64+0x4c/0xa0 [ 312.596050][ T6901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.602473][ T6901] [ 312.602473][ T6901] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 312.610196][ T6901] __lock_acquire+0x2c33/0x7c60 [ 312.615576][ T6901] lock_acquire+0x197/0x3f0 [ 312.620596][ T6901] mptcp_diag_get_info+0x1db/0x990 [ 312.626226][ T6901] inet_sk_diag_fill+0xef6/0x1b50 [ 312.631771][ T6901] mptcp_diag_dump+0xcca/0x1290 [ 312.637141][ T6901] __inet_diag_dump+0x1f6/0x380 [ 312.642508][ T6901] inet_diag_dump_compat+0x161/0x200 [ 312.648310][ T6901] netlink_dump+0x5ab/0xcb0 [ 312.653328][ T6901] __netlink_dump_start+0x523/0x700 [ 312.659041][ T6901] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 312.665102][ T6901] sock_diag_rcv_msg+0x164/0x3e0 [ 312.670552][ T6901] netlink_rcv_skb+0x1e0/0x430 [ 312.675834][ T6901] sock_diag_rcv+0x26/0x40 [ 312.680782][ T6901] netlink_unicast+0x77c/0x920 [ 312.686097][ T6901] netlink_sendmsg+0x8ab/0xbc0 [ 312.691433][ T6901] ____sys_sendmsg+0x5a2/0x8c0 [ 312.696753][ T6901] ___sys_sendmsg+0x1f0/0x260 [ 312.701985][ T6901] __se_sys_sendmsg+0x190/0x250 [ 312.707472][ T6901] do_syscall_64+0x4c/0xa0 [ 312.712438][ T6901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.718891][ T6901] [ 312.718891][ T6901] other info that might help us debug this: [ 312.718891][ T6901] [ 312.729131][ T6901] Possible unsafe locking scenario: [ 312.729131][ T6901] [ 312.736591][ T6901] CPU0 CPU1 [ 312.741971][ T6901] ---- ---- [ 312.747351][ T6901] lock(&h->lhash2[i].lock); [ 312.752050][ T6901] lock(sk_lock-AF_INET6); [ 312.759089][ T6901] lock(&h->lhash2[i].lock); [ 312.766280][ T6901] lock(sk_lock-AF_INET6); [ 312.770782][ T6901] [ 312.770782][ T6901] *** DEADLOCK *** [ 312.770782][ T6901] [ 312.778922][ T6901] 6 locks held by syz.5.631/6901: [ 312.783938][ T6901] #0: ffffffff8d234428 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 312.793242][ T6901] #1: ffffffff8d2342e8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 312.803606][ T6901] #2: ffff88807795c690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 312.814317][ T6901] #3: ffffffff8d30e648 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 312.824602][ T6901] #4: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 312.833915][ T6901] #5: ffffc90001892558 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 312.843926][ T6901] [ 312.843926][ T6901] stack backtrace: [ 312.849824][ T6901] CPU: 1 PID: 6901 Comm: syz.5.631 Not tainted 5.15.185-syzkaller #0 [ 312.857881][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.867939][ T6901] Call Trace: [ 312.871220][ T6901] [ 312.874167][ T6901] dump_stack_lvl+0x168/0x230 [ 312.878854][ T6901] ? load_image+0x3b0/0x3b0 [ 312.883374][ T6901] ? show_regs_print_info+0x20/0x20 [ 312.888583][ T6901] ? print_circular_bug+0x12b/0x1a0 [ 312.893777][ T6901] check_noncircular+0x274/0x310 [ 312.898712][ T6901] ? add_chain_block+0x940/0x940 [ 312.903642][ T6901] ? lockdep_lock+0xdc/0x1e0 [ 312.908231][ T6901] ? mark_lock+0x94/0x320 [ 312.912559][ T6901] __lock_acquire+0x2c33/0x7c60 [ 312.917420][ T6901] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 312.923404][ T6901] ? verify_lock_unused+0x140/0x140 [ 312.928604][ T6901] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 312.934585][ T6901] ? verify_lock_unused+0x140/0x140 [ 312.939779][ T6901] ? __local_bh_enable_ip+0xcb/0x1b0 [ 312.945059][ T6901] ? __local_bh_enable_ip+0x12a/0x1b0 [ 312.950429][ T6901] ? lockdep_hardirqs_on+0x94/0x140 [ 312.955625][ T6901] ? __local_bh_enable_ip+0x12a/0x1b0 [ 312.960990][ T6901] ? _local_bh_enable+0xa0/0xa0 [ 312.965835][ T6901] ? skb_put+0x117/0x210 [ 312.970071][ T6901] lock_acquire+0x197/0x3f0 [ 312.974572][ T6901] ? inet_sk_diag_fill+0xef6/0x1b50 [ 312.979772][ T6901] ? read_lock_is_recursive+0x10/0x10 [ 312.985146][ T6901] ? rcu_lock_release+0x5/0x20 [ 312.989911][ T6901] ? __lock_acquire+0x7c60/0x7c60 [ 312.994931][ T6901] ? inet_sk_diag_fill+0xef6/0x1b50 [ 313.000124][ T6901] mptcp_diag_get_info+0x1db/0x990 [ 313.005243][ T6901] ? inet_sk_diag_fill+0xef6/0x1b50 [ 313.010440][ T6901] inet_sk_diag_fill+0xef6/0x1b50 [ 313.015476][ T6901] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 313.021195][ T6901] ? rcu_lock_release+0x5/0x20 [ 313.025954][ T6901] ? do_raw_spin_lock+0x11d/0x280 [ 313.030982][ T6901] ? inet_diag_bc_sk+0x187/0x10c0 [ 313.036021][ T6901] ? preempt_schedule_thunk+0x16/0x18 [ 313.041403][ T6901] mptcp_diag_dump+0xcca/0x1290 [ 313.046254][ T6901] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 313.052839][ T6901] __inet_diag_dump+0x1f6/0x380 [ 313.057690][ T6901] inet_diag_dump_compat+0x161/0x200 [ 313.062971][ T6901] ? inet_diag_dump_start_compat+0x20/0x20 [ 313.068773][ T6901] ? memset+0x1e/0x40 [ 313.072747][ T6901] ? __alloc_skb+0x473/0x750 [ 313.077333][ T6901] netlink_dump+0x5ab/0xcb0 [ 313.081835][ T6901] ? netlink_lookup+0x1d0/0x1d0 [ 313.086678][ T6901] ? __inet_diag_dump_start+0x805/0x970 [ 313.092226][ T6901] __netlink_dump_start+0x523/0x700 [ 313.097427][ T6901] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 313.102971][ T6901] ? inet_diag_unregister+0xb0/0xb0 [ 313.108169][ T6901] ? mutex_lock_io_nested+0x60/0x60 [ 313.113362][ T6901] ? __inet_diag_dump+0x380/0x380 [ 313.118390][ T6901] ? inet_diag_dump_start_compat+0x20/0x20 [ 313.124192][ T6901] ? inet_diag_dump+0x50/0x50 [ 313.128865][ T6901] ? dev_queue_xmit+0x20/0x20 [ 313.133538][ T6901] ? memcpy+0x3c/0x60 [ 313.137515][ T6901] ? sock_diag_rcv+0x17/0x40 [ 313.142099][ T6901] ? sock_diag_rcv+0x17/0x40 [ 313.146686][ T6901] ? inet_diag_unregister+0xb0/0xb0 [ 313.151883][ T6901] sock_diag_rcv_msg+0x164/0x3e0 [ 313.156820][ T6901] netlink_rcv_skb+0x1e0/0x430 [ 313.161586][ T6901] ? sock_diag_bind+0xa0/0xa0 [ 313.166258][ T6901] ? netlink_ack+0xb60/0xb60 [ 313.170846][ T6901] ? __lock_acquire+0x7c60/0x7c60 [ 313.175871][ T6901] sock_diag_rcv+0x26/0x40 [ 313.180283][ T6901] netlink_unicast+0x77c/0x920 [ 313.185048][ T6901] netlink_sendmsg+0x8ab/0xbc0 [ 313.189808][ T6901] ? netlink_getsockopt+0x560/0x560 [ 313.195001][ T6901] ? aa_sock_msg_perm+0x94/0x150 [ 313.199934][ T6901] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 313.205215][ T6901] ? security_socket_sendmsg+0x7c/0xa0 [ 313.210667][ T6901] ? netlink_getsockopt+0x560/0x560 [ 313.215865][ T6901] ____sys_sendmsg+0x5a2/0x8c0 [ 313.220627][ T6901] ? memset+0x1e/0x40 [ 313.224601][ T6901] ? __sys_sendmsg_sock+0x30/0x30 [ 313.229624][ T6901] ? import_iovec+0x6f/0xa0 [ 313.234119][ T6901] ___sys_sendmsg+0x1f0/0x260 [ 313.238805][ T6901] ? __sys_sendmsg+0x250/0x250 [ 313.243571][ T6901] ? percpu_counter_add_batch+0x13b/0x160 [ 313.249292][ T6901] ? __fdget+0x18b/0x210 [ 313.253552][ T6901] __se_sys_sendmsg+0x190/0x250 [ 313.258399][ T6901] ? __x64_sys_sendmsg+0x80/0x80 [ 313.263330][ T6901] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 313.269313][ T6901] ? lockdep_hardirqs_on+0x94/0x140 [ 313.274514][ T6901] do_syscall_64+0x4c/0xa0 [ 313.278924][ T6901] ? clear_bhb_loop+0x30/0x80 [ 313.283593][ T6901] ? clear_bhb_loop+0x30/0x80 [ 313.288261][ T6901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.294169][ T6901] RIP: 0033:0x7f64f0f48929 [ 313.298593][ T6901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.318206][ T6901] RSP: 002b:00007f64eedb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.326617][ T6901] RAX: ffffffffffffffda RBX: 00007f64f116ffa0 RCX: 00007f64f0f48929 [ 313.334583][ T6901] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 313.342548][ T6901] RBP: 00007f64f0fcab39 R08: 0000000000000000 R09: 0000000000000000 [ 313.350514][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.358478][ T6901] R13: 0000000000000000 R14: 00007f64f116ffa0 R15: 00007fffac8d5508 [ 313.366451][ T6901] [ 313.370429][ T6901] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 313.379236][ T6901] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6901, name: syz.5.631 [ 313.388223][ T6901] INFO: lockdep is turned off. [ 313.392993][ T6901] Preemption disabled at: [ 313.393004][ T6901] [<0000000000000000>] 0x0 [ 313.401905][ T6901] CPU: 1 PID: 6901 Comm: syz.5.631 Not tainted 5.15.185-syzkaller #0 [ 313.409990][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.420044][ T6901] Call Trace: [ 313.423325][ T6901] [ 313.426252][ T6901] dump_stack_lvl+0x168/0x230 [ 313.430931][ T6901] ? show_regs_print_info+0x20/0x20 [ 313.436124][ T6901] ? load_image+0x3b0/0x3b0 [ 313.440624][ T6901] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 313.446777][ T6901] ___might_sleep+0x47c/0x600 [ 313.451454][ T6901] ? __might_sleep+0xf0/0xf0 [ 313.456046][ T6901] ? read_lock_is_recursive+0x10/0x10 [ 313.461434][ T6901] ? rcu_lock_release+0x5/0x20 [ 313.466202][ T6901] __lock_sock_fast+0x2f/0xe0 [ 313.470880][ T6901] ? inet_sk_diag_fill+0xef6/0x1b50 [ 313.476084][ T6901] mptcp_diag_get_info+0x1e7/0x990 [ 313.481205][ T6901] inet_sk_diag_fill+0xef6/0x1b50 [ 313.486252][ T6901] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 313.491970][ T6901] ? rcu_lock_release+0x5/0x20 [ 313.496742][ T6901] ? do_raw_spin_lock+0x11d/0x280 [ 313.501765][ T6901] ? inet_diag_bc_sk+0x187/0x10c0 [ 313.506784][ T6901] ? preempt_schedule_thunk+0x16/0x18 [ 313.512156][ T6901] mptcp_diag_dump+0xcca/0x1290 [ 313.517005][ T6901] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 313.523593][ T6901] __inet_diag_dump+0x1f6/0x380 [ 313.528440][ T6901] inet_diag_dump_compat+0x161/0x200 [ 313.533720][ T6901] ? inet_diag_dump_start_compat+0x20/0x20 [ 313.539524][ T6901] ? memset+0x1e/0x40 [ 313.543501][ T6901] ? __alloc_skb+0x473/0x750 [ 313.548092][ T6901] netlink_dump+0x5ab/0xcb0 [ 313.552592][ T6901] ? netlink_lookup+0x1d0/0x1d0 [ 313.557436][ T6901] ? __inet_diag_dump_start+0x805/0x970 [ 313.562981][ T6901] __netlink_dump_start+0x523/0x700 [ 313.568175][ T6901] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 313.573722][ T6901] ? inet_diag_unregister+0xb0/0xb0 [ 313.578917][ T6901] ? mutex_lock_io_nested+0x60/0x60 [ 313.584112][ T6901] ? __inet_diag_dump+0x380/0x380 [ 313.589134][ T6901] ? inet_diag_dump_start_compat+0x20/0x20 [ 313.594935][ T6901] ? inet_diag_dump+0x50/0x50 [ 313.599628][ T6901] ? dev_queue_xmit+0x20/0x20 [ 313.604298][ T6901] ? memcpy+0x3c/0x60 [ 313.608272][ T6901] ? sock_diag_rcv+0x17/0x40 [ 313.612861][ T6901] ? sock_diag_rcv+0x17/0x40 [ 313.617458][ T6901] ? inet_diag_unregister+0xb0/0xb0 [ 313.622651][ T6901] sock_diag_rcv_msg+0x164/0x3e0 [ 313.627584][ T6901] netlink_rcv_skb+0x1e0/0x430 [ 313.632347][ T6901] ? sock_diag_bind+0xa0/0xa0 [ 313.637021][ T6901] ? netlink_ack+0xb60/0xb60 [ 313.641606][ T6901] ? __lock_acquire+0x7c60/0x7c60 [ 313.646647][ T6901] sock_diag_rcv+0x26/0x40 [ 313.651066][ T6901] netlink_unicast+0x77c/0x920 [ 313.655828][ T6901] netlink_sendmsg+0x8ab/0xbc0 [ 313.660589][ T6901] ? netlink_getsockopt+0x560/0x560 [ 313.665786][ T6901] ? aa_sock_msg_perm+0x94/0x150 [ 313.670719][ T6901] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 313.676003][ T6901] ? security_socket_sendmsg+0x7c/0xa0 [ 313.681476][ T6901] ? netlink_getsockopt+0x560/0x560 [ 313.686671][ T6901] ____sys_sendmsg+0x5a2/0x8c0 [ 313.691438][ T6901] ? memset+0x1e/0x40 [ 313.695448][ T6901] ? __sys_sendmsg_sock+0x30/0x30 [ 313.700473][ T6901] ? import_iovec+0x6f/0xa0 [ 313.704977][ T6901] ___sys_sendmsg+0x1f0/0x260 [ 313.709654][ T6901] ? __sys_sendmsg+0x250/0x250 [ 313.714422][ T6901] ? percpu_counter_add_batch+0x13b/0x160 [ 313.720146][ T6901] ? __fdget+0x18b/0x210 [ 313.724386][ T6901] __se_sys_sendmsg+0x190/0x250 [ 313.729238][ T6901] ? __x64_sys_sendmsg+0x80/0x80 [ 313.734174][ T6901] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 313.740153][ T6901] ? lockdep_hardirqs_on+0x94/0x140 [ 313.745350][ T6901] do_syscall_64+0x4c/0xa0 [ 313.749773][ T6901] ? clear_bhb_loop+0x30/0x80 [ 313.754444][ T6901] ? clear_bhb_loop+0x30/0x80 [ 313.759116][ T6901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.765010][ T6901] RIP: 0033:0x7f64f0f48929 [ 313.769421][ T6901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.789020][ T6901] RSP: 002b:00007f64eedb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.797430][ T6901] RAX: ffffffffffffffda RBX: 00007f64f116ffa0 RCX: 00007f64f0f48929 [ 313.805414][ T6901] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 313.813384][ T6901] RBP: 00007f64f0fcab39 R08: 0000000000000000 R09: 0000000000000000 [ 313.821350][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.829317][ T6901] R13: 0000000000000000 R14: 00007f64f116ffa0 R15: 00007fffac8d5508 [ 313.837287][ T6901] [ 313.886897][ T6906] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 313.893445][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 313.901016][ T6906] vhci_hcd vhci_hcd.0: Device attached [ 313.914796][ T4344] attempt to access beyond end of device [ 313.914796][ T4344] loop3: rw=2049, want=40984, limit=40427 [ 313.978186][ T6907] vhci_hcd: connection closed [ 313.978677][ T4344] vhci_hcd: stop threads [ 313.990234][ T4344] vhci_hcd: release socket [ 313.994726][ T4344] vhci_hcd: disconnect device [ 317.088475][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.094789][ T1422] ieee802154 phy1 wpan1: encryption failed: -22