last executing test programs: 4m11.214841782s ago: executing program 0 (id=3065): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r2, &(0x7f00000005c0)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f00000195c0)=ANY=[], 0x2a, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x20) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000100), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f0000019640)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}, 0x1c) 4m9.814117646s ago: executing program 0 (id=3066): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = syz_ublk_setup_io_uring(0xd, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000580)={0x2f, 0x0, 'client0\x00', 0x4, "3102079f5df45cd6", "b3f9bc0db0c2bae4aa80c52098c6945750aab6b90fdd4d8a63876dcc93c36f60", 0x4, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000740)={0x10000, 0xffffffff, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x81, 0x20080000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0xffffffffffffffff, 0xffff, 0x0, 0x8, 0x0, 0x80000000800000}) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000640)={0x2, @sdr={0x56555959, 0xd}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x63, 0x0, 0x0) r5 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r5, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 4m5.629273419s ago: executing program 0 (id=3076): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80800002c0001002bbd30005823a475624f94434ae8000000000000000000000000000000000001fe80000000000000000040000000000f000000000000000065d1f5fc1a4e48084bc656385c1a37a7b7dbd4d3c9a10c96033810cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001010000"], 0xb8}}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1000005, 0x180931, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000200), 0x0) 4m3.427063606s ago: executing program 0 (id=3080): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="8211", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@dstopts={{0x18, 0x29, 0x37, {0x87}}}], 0x18}}], 0x2, 0x44044010) 4m3.217827638s ago: executing program 0 (id=3081): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x3a, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/4080, 0xff0}], 0x1, 0x1, 0x9) 4m2.954646235s ago: executing program 0 (id=3082): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000f00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019f00)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000001a000)={'wlan1\x00'}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000d00)="735e6299a33e306886c84edfff8ff9a8fcab77de4c15328243001f55ff054a336b6c9dc8e50c71897fb390aecdc58da9e73a1a6ee0", 0x35) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019f40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019f80)=0x6) unshare(0x62040200) r5 = socket$igmp(0x2, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000d40), 0x80, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000019fc0)={0x0, 0x0, 0x9, 0x4, @vifc_lcl_ifindex, @broadcast}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x201c448, &(0x7f0000000dc0)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0xa87, &(0x7f00000001c0)="$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") 3m47.732860557s ago: executing program 32 (id=3082): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000f00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019f00)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000001a000)={'wlan1\x00'}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000d00)="735e6299a33e306886c84edfff8ff9a8fcab77de4c15328243001f55ff054a336b6c9dc8e50c71897fb390aecdc58da9e73a1a6ee0", 0x35) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019f40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019f80)=0x6) unshare(0x62040200) r5 = socket$igmp(0x2, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000d40), 0x80, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000019fc0)={0x0, 0x0, 0x9, 0x4, @vifc_lcl_ifindex, @broadcast}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x201c448, &(0x7f0000000dc0)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0xa87, &(0x7f00000001c0)="$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") 9.166280753s ago: executing program 2 (id=3804): r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r3], 0x50) r4 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) capset(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x5a, "19fe140814adc0a3a9635947204fba5aeed88bd7f5061c101c1a9ee54d5974f415829d866b630a1db248692ede45d828a88548d56538c6fe74b21ed694e80914917da2cd909b005c1478b1cc483d56ab12a5c86483ee7527437c"}, &(0x7f0000000180)=0x62) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={r8, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) r9 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) 6.978539999s ago: executing program 2 (id=3814): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e40)='mountinfo\x00') ppoll(&(0x7f0000000e80)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001400)='.\x00', 0x8000, &(0x7f0000001440)={0x6, 0x8a, 0x20000, {r0}}, 0x20) 6.899597577s ago: executing program 3 (id=3815): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000100)={&(0x7f0000000140)="92", 0x1a000}}, 0xee) 6.746633393s ago: executing program 4 (id=3817): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r3 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2, 0x5) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffe3e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x1e, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018340000040000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000001000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x6}, 0x50) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000100)={0x4, 0x80000, r3}) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @multicast2=0x1000000}, 0x10, 0x0}, 0x0) 6.328162636s ago: executing program 5 (id=3820): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) prlimit64(0x0, 0xe, &(0x7f00000073c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000007740)=0x8) r1 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000007780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000077c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x2) connect$unix(r2, &(0x7f0000007800)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000007880), 0x651, 0x0) recvmmsg(r2, &(0x7f00000078c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000007900)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000007940)='net/fib_trie\x00') pread64(r4, &(0x7f0000007980)=""/102356, 0x18fd4, 0xc2a) sendto$inet6(r0, &(0x7f0000000080)="cd", 0x1, 0x8010, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0), 0x8) 6.228691947s ago: executing program 1 (id=3821): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) 5.263194166s ago: executing program 3 (id=3822): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.255876727s ago: executing program 5 (id=3823): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10) listen(r0, 0x5) r1 = syz_io_uring_setup(0x10, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 5.196094473s ago: executing program 1 (id=3824): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000003c0), 0x651, 0x0) read(r2, &(0x7f0000000440)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xd8, 0x120, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x100}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000001c0)) 5.195892953s ago: executing program 2 (id=3825): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003d40)={'veth0_to_hsr\x00', 0x0}) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000003d80)={0x2d, 0x0, r1, 0xc}, 0x10) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000003dc0)={0x2d, 0x0, 0x0, 0xc}, 0x10) 5.194248333s ago: executing program 4 (id=3826): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000004480)={0x0, 0x18, 0xfa00, {0x40000000000104, &(0x7f0000004400)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000044c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000004580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000045c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000004680)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 4.83834357s ago: executing program 4 (id=3827): r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r3], 0x50) r4 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) capset(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) r7 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.178114648s ago: executing program 1 (id=3828): r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r3], 0x50) syz_usb_connect(0x0, 0x36, 0x0, 0x0) capset(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x5a, "19fe140814adc0a3a9635947204fba5aeed88bd7f5061c101c1a9ee54d5974f415829d866b630a1db248692ede45d828a88548d56538c6fe74b21ed694e80914917da2cd909b005c1478b1cc483d56ab12a5c86483ee7527437c"}, &(0x7f0000000180)=0x62) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) r8 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.130464183s ago: executing program 2 (id=3829): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000880)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0}, 0x10) 4.078101568s ago: executing program 5 (id=3830): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xd8, 0x120, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x100}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000001c0)) 4.038169983s ago: executing program 4 (id=3831): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$audion(0x0, 0x7, 0x4081) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0) 3.266361743s ago: executing program 4 (id=3832): openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x4, 0x3, &(0x7f00000001c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x6a}}, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000640), 0x8000, 0x2) syz_emit_vhci(0x0, 0x47) syz_open_procfs(r1, &(0x7f0000000600)='fdinfo/4\x00') ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000000c0)={0x2, @sliced={0x9c, [0x6d31, 0xfff, 0xfff8, 0xe64c, 0xa, 0x1, 0x7, 0xd, 0x5, 0x6, 0xc, 0x1, 0x5, 0x4, 0x7d67, 0x9, 0x8, 0xb, 0x2, 0x3ff, 0xff, 0x6, 0x3, 0x4577, 0xffa0, 0x7, 0x7, 0xe, 0x1, 0x6, 0x7, 0x2e7d, 0x13, 0x6, 0x1, 0x1, 0x0, 0x8007, 0x85b8, 0x5, 0x8, 0x5, 0x8, 0x6, 0x8, 0x6, 0x80, 0x5], 0x1}}) 3.266127132s ago: executing program 2 (id=3833): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000100)={&(0x7f0000000140)="92", 0x1a000}}, 0xee) 3.048769365s ago: executing program 5 (id=3834): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) 1.818699222s ago: executing program 5 (id=3835): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180)=0x40, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="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", 0x241}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="04", 0x1}], 0x1}}], 0x2, 0x4000001) close_range(r0, 0xffffffffffffffff, 0x0) 1.794155885s ago: executing program 1 (id=3836): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ftruncate(0xffffffffffffffff, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a80)=ANY=[], 0xcd0}, 0x1, 0x0, 0x0, 0x4011}, 0xc0c4) 1.777665046s ago: executing program 3 (id=3837): mkdirat(0xffffffffffffff9c, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) r2 = fsopen(&(0x7f00000027c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000002980)='./file1\x00', 0x60840, 0x8) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001a010000070021004242000030002280"], 0x4c}}, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003140)={0x50, 0x0, 0x8, {0x7, 0x29, 0xffffffcf, 0x1040, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000007c0)="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", 0x2000, 0x0) 1.611719023s ago: executing program 3 (id=3838): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0x17e}, {&(0x7f0000000680)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da372", 0x59}, {&(0x7f0000000880)="135c15194fad5248", 0x8}], 0x2) write(r0, &(0x7f00000008c0)="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", 0x3db) 1.472096428s ago: executing program 4 (id=3839): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@discard}, {@abort}, {@init_itable}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24040058) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) write$cgroup_pid(r4, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="08001ec66e7d", 0x6}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x4}}], 0x18}, 0x804) 1.373259428s ago: executing program 3 (id=3840): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001a80)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.26250742s ago: executing program 1 (id=3841): r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r3], 0x50) r4 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) capset(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) r7 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.093712117s ago: executing program 3 (id=3842): syz_usb_connect(0x5, 0xf4, &(0x7f0000000480)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b1"], 0x0) 820.205935ms ago: executing program 5 (id=3843): r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000200000040480b051000010102000109023900020100803209040000000000000009040100000000000009040101030000000007050102400000070581023200000705826d41"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x61, &(0x7f0000000140)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0x2b, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0x0, 0x4, 0x0, 0x0, 0x28, 0x1}, @hopopts={0x62}], {0x4e20, 0x4e21, 0x1b, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af530263"}}}}}}}, 0x0) read$msr(r4, &(0x7f0000000780)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000197c0), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000019800)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x0, 0x4eac, 0x5, 0xce}}) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000019840)=0x1, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = syz_open_dev$dvb_demux(&(0x7f0000000700), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000740)={0x100, 0x0, 0x1, 0x14, 0x4}) 548.828433ms ago: executing program 2 (id=3844): r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r3], 0x50) r4 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) capset(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x5a, "19fe140814adc0a3a9635947204fba5aeed88bd7f5061c101c1a9ee54d5974f415829d866b630a1db248692ede45d828a88548d56538c6fe74b21ed694e80914917da2cd909b005c1478b1cc483d56ab12a5c86483ee7527437c"}, &(0x7f0000000180)=0x62) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={r8, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) r9 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) 0s ago: executing program 1 (id=3845): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x60100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f00000005c0)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f00000195c0)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000019600)={0x0, 0x0, &(0x7f0000019640)={&(0x7f0000019680)=ANY=[@ANYRES64=r3], 0xcc}, 0x1, 0x0, 0x0, 0x801}, 0x4000891) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x12300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r9, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000040)=0xcda) kernel console output (not intermixed with test programs): layfs: failed to verify upper (/file0, ino=12, err=-28) [ 1007.541398][T14683] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1007.549086][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.560024][T15620] overlayfs: failed to verify index dir 'upper' xattr [ 1007.568089][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.580262][T15620] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1007.591033][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.611165][T15268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.622069][T15268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.642318][T15268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.662925][T15020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1007.682553][T15020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1007.722945][T14483] EXT4-fs (loop3): unmounting filesystem. [ 1007.743111][T14683] usb 5-1: Using ep0 maxpacket: 32 [ 1007.750803][T14683] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1007.759940][T14683] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1007.769476][T14683] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1007.799554][T14683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1007.841841][T14683] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1007.860367][T14683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1007.870838][T14683] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1007.907227][T14683] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1007.929073][T14683] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1007.940415][T14683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.990982][T14683] usb 5-1: config 0 descriptor?? [ 1008.016863][T15268] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.026543][T15268] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.035437][T15268] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.045628][T15268] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.046026][ T26] audit: type=1326 audit(1793360142.294:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.3.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6559f559 code=0x7ffc0000 [ 1008.093890][ T26] audit: type=1326 audit(1793360142.294:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.3.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6559f559 code=0x7ffc0000 [ 1008.216483][T14683] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1008.220671][ T26] audit: type=1326 audit(1793360142.344:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.3.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6559f559 code=0x7ffc0000 [ 1008.339449][ T26] audit: type=1326 audit(1793360142.344:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.3.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6559f559 code=0x7ffc0000 [ 1008.364690][ T8492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.381671][ T8492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.442912][T14683] usb 5-1: USB disconnect, device number 17 [ 1008.475780][T14683] usblp0: removed [ 1008.496194][T14567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1008.534643][T15652] sctp: [Deprecated]: syz.1.3179 (pid 15652) Use of int in max_burst socket option deprecated. [ 1008.534643][T15652] Use struct sctp_assoc_value instead [ 1008.590614][T14567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.616819][T14567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.654448][T15170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1008.864379][T15661] loop1: detected capacity change from 0 to 1024 [ 1008.902206][T15661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1008.964509][T15661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1009.846055][T15028] EXT4-fs (loop1): unmounting filesystem. [ 1010.038943][T15681] ceph: No mds server is up or the cluster is laggy [ 1010.593972][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1010.621063][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1010.630310][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1010.640330][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1010.650302][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1010.657869][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1010.756674][T15692] lo speed is unknown, defaulting to 1000 [ 1010.815251][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 1010.815267][ T26] audit: type=1326 audit(1793360145.064:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1010.961549][ T26] audit: type=1326 audit(1793360145.104:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1011.075930][ T26] audit: type=1326 audit(1793360145.104:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1011.185548][ T26] audit: type=1326 audit(1793360145.104:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1011.240141][T15692] rxe_eth0 speed is unknown, defaulting to 1000 [ 1011.307139][ T26] audit: type=1326 audit(1793360145.104:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1011.417355][ T26] audit: type=1326 audit(1793360145.104:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1011.500973][T15706] loop1: detected capacity change from 0 to 512 [ 1011.532829][ T26] audit: type=1326 audit(1793360145.104:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1011.571708][T15706] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1011.643599][T15706] EXT4-fs (loop1): 1 truncate cleaned up [ 1011.649300][T15706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1011.696358][ T26] audit: type=1326 audit(1793360145.104:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1011.859795][ T26] audit: type=1326 audit(1793360145.104:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1011.886142][ T26] audit: type=1326 audit(1793360145.104:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15694 comm="syz.1.3189" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f568739f559 code=0x7ffc0000 [ 1012.200599][ T4289] Bluetooth: Wrong link type (-22) [ 1012.691561][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 1012.740605][ T4272] team0: Port device syz_tun removed [ 1012.985698][T15692] chnl_net:caif_netlink_parms(): no params data found [ 1014.771599][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 1015.822187][T15692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.841438][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.893127][T15692] device bridge_slave_0 entered promiscuous mode [ 1015.900691][T15028] EXT4-fs (loop1): unmounting filesystem. [ 1016.022761][T15692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.029891][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.082476][T15692] device bridge_slave_1 entered promiscuous mode [ 1016.104819][T15747] loop1: detected capacity change from 0 to 512 [ 1016.122506][T15747] EXT4-fs: Ignoring removed nobh option [ 1016.241684][T15747] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1016.282285][T15747] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1016.295592][T15692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.300523][T15749] loop5: detected capacity change from 0 to 4096 [ 1016.315867][T15749] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1016.392960][T15692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.524995][T15692] team0: Port device team_slave_0 added [ 1016.570226][T15692] team0: Port device team_slave_1 added [ 1016.697720][T15692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.722876][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.844891][T15692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.855913][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 1016.983292][T15692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.991173][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.121588][T15692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.267389][T15692] device hsr_slave_0 entered promiscuous mode [ 1017.338767][T15692] device hsr_slave_1 entered promiscuous mode [ 1017.368765][T15692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.415945][T15692] Cannot create hsr debugfs directory [ 1017.866138][T15784] loop5: detected capacity change from 0 to 512 [ 1017.882175][T15692] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.943396][ T4289] Bluetooth: Wrong link type (-22) [ 1018.044679][T15784] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1018.063478][T15692] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.128469][T15784] EXT4-fs (loop5): 1 truncate cleaned up [ 1018.134318][T15784] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1018.270474][T15692] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.351625][T14684] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1018.471678][T15692] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.541431][T14684] usb 2-1: Using ep0 maxpacket: 32 [ 1018.552756][T14684] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1018.582830][T14684] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1018.638839][T14684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.672611][T14684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1018.695793][T14684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1018.729755][T14684] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1018.903246][T15803] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5972: inode #12: comm syz.5.3210: bad extra_isize 62 (inode size 256) [ 1018.926412][T15803] EXT4-fs (loop5): Remounting filesystem read-only [ 1019.021735][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 1019.329489][T14684] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1019.338935][T14684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.349689][T14684] usb 2-1: config 0 descriptor?? [ 1019.604911][T15692] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1019.678491][T15692] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1019.719296][T15692] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1019.775655][T15268] EXT4-fs (loop5): unmounting filesystem. [ 1019.829727][T15692] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1019.990470][T15812] lo speed is unknown, defaulting to 1000 [ 1020.061245][T15692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.108833][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1020.124119][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1020.156036][T15692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.195046][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1020.221826][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1020.263978][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.271158][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.335051][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1020.368130][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1020.378035][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1020.394626][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.401825][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.459104][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1020.480877][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.519172][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.551476][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.582402][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.619254][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.752648][T15812] rxe_eth0 speed is unknown, defaulting to 1000 [ 1020.759118][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.775612][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.813951][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1020.853969][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1020.894422][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1020.940421][T15692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1020.992957][ T4288] Bluetooth: Wrong link type (-22) [ 1020.998219][ T4288] Bluetooth: hci5: link tx timeout [ 1021.004874][ T4288] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1021.072186][T15842] loop3: detected capacity change from 0 to 512 [ 1021.113300][T15842] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1021.212530][T15842] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3224: bg 0: block 384: padding at end of block bitmap is not set [ 1021.281434][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.313677][T15842] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1021.342677][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.349263][T15842] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.3224: attempt to clear invalid blocks 983260 len 1 [ 1021.423684][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.427249][T15853] loop5: detected capacity change from 0 to 1024 [ 1021.437086][T15842] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.3224: Invalid inode table block 0 in block_group 0 [ 1021.470149][T15853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1021.536393][T15853] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1021.538601][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.582703][T15842] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1021.621543][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.628151][T15842] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1021.672051][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.691590][T15842] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.3224: Invalid inode table block 0 in block_group 0 [ 1021.780064][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.792483][T15268] EXT4-fs (loop5): unmounting filesystem. [ 1021.799256][T15842] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1021.852248][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.858819][T15842] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.3224: mark_inode_dirty error [ 1021.874178][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1021.888038][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1021.922353][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.928434][T15692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.928899][T15842] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1021.991890][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1021.998517][T15842] EXT4-fs (loop3): 1 truncate cleaned up [ 1022.026961][T15842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1022.102083][T15842] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.3224: Invalid inode table block 0 in block_group 0 [ 1022.222091][T15842] EXT4-fs (loop3): Remounting filesystem read-only [ 1022.399115][T15872] loop5: detected capacity change from 0 to 4096 [ 1022.407026][T15872] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1022.434861][T14679] usb 2-1: USB disconnect, device number 110 [ 1022.516379][T14483] EXT4-fs (loop3): unmounting filesystem. [ 1023.013567][T15887] loop1: detected capacity change from 0 to 256 [ 1023.098862][T15887] exfat: Deprecated parameter 'utf8' [ 1023.185280][T15887] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1023.620942][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1023.652595][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1023.751818][ T4288] Bluetooth: Wrong link type (-22) [ 1023.757129][ T4288] Bluetooth: hci3: link tx timeout [ 1023.763320][ T4288] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1023.770985][ T4288] Bluetooth: hci3: link tx timeout [ 1023.778626][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1023.781606][T14683] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1023.805540][T15692] device veth0_vlan entered promiscuous mode [ 1023.844745][T15910] netlink: 'syz.5.3238': attribute type 1 has an invalid length. [ 1023.882364][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1023.901137][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1023.957510][T15692] device veth1_vlan entered promiscuous mode [ 1023.991571][T14683] usb 2-1: Using ep0 maxpacket: 16 [ 1023.998527][T14683] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1024.010667][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1024.022177][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1024.064177][T14683] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1024.065118][T15914] loop5: detected capacity change from 0 to 512 [ 1024.073893][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1024.101990][T14683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.110019][T14683] usb 2-1: Product: syz [ 1024.122977][T15914] EXT4-fs: Ignoring removed nobh option [ 1024.162017][T15914] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1024.166531][T14683] usb 2-1: Manufacturer: syz [ 1024.182096][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1024.193190][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1024.211117][T15914] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 1024.231621][T14683] usb 2-1: SerialNumber: syz [ 1024.252284][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1024.259426][T14683] usb 2-1: config 0 descriptor?? [ 1024.302181][T15692] device veth0_macvtap entered promiscuous mode [ 1024.353737][T15692] device veth1_macvtap entered promiscuous mode [ 1025.070229][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.161369][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.171227][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.221452][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.235246][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.251632][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.281469][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.292288][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.318423][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.329362][T15922] sctp: [Deprecated]: syz.5.3241 (pid 15922) Use of int in max_burst socket option deprecated. [ 1025.329362][T15922] Use struct sctp_assoc_value instead [ 1025.351360][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.361735][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.382474][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.412002][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.435367][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.474130][T15692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.498317][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1025.512610][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1025.532030][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1025.612073][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1025.726069][T15932] loop5: detected capacity change from 0 to 256 [ 1025.742328][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.758118][T15932] exfat: Deprecated parameter 'utf8' [ 1025.775430][T15932] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1025.782345][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.821892][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 1025.881386][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.946391][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.981367][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.028488][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.046325][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.058496][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.068706][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.079475][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.090276][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.130556][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.151038][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.163686][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.175810][T15692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.210356][T15692] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.271549][T15692] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.280387][T15692] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.333875][T15692] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.423903][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1026.448990][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1026.615778][T10106] usb 2-1: USB disconnect, device number 111 [ 1026.778451][T15953] netlink: 'syz.1.3249': attribute type 1 has an invalid length. [ 1026.798199][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1027.032643][ T9993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.062418][ T9993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.109077][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1027.148708][T15020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.163676][T15020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.198288][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1028.302411][T15978] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1028.905212][T15981] loop4: detected capacity change from 0 to 256 [ 1028.952713][T15981] exfat: Deprecated parameter 'utf8' [ 1029.001391][T15981] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1029.575055][ T4288] Bluetooth: Wrong link type (-22) [ 1029.942522][T15996] netlink: 'syz.3.3259': attribute type 1 has an invalid length. [ 1030.250913][T16005] loop4: detected capacity change from 0 to 4096 [ 1030.401700][T16005] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1030.415901][T16005] ntfs3: loop4: failed to replay log file. Can't mount rw! [ 1030.436836][T15996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1030.492646][T16004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3259'. [ 1033.087404][T16048] netlink: 26 bytes leftover after parsing attributes in process `syz.5.3269'. [ 1033.489161][ T4288] Bluetooth: Wrong link type (-22) [ 1033.612362][T14684] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1033.669314][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 1033.669329][ T26] audit: type=1400 audit(1793360167.914:2328): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="f/o" pid=16038 comm="syz.4.3267" [ 1033.862736][T14684] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1033.891433][T14684] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1033.941412][T14684] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1033.978893][T14684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1034.039657][T14684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1034.090763][T14684] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1034.121826][T14684] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1034.129830][T14684] usb 2-1: Product: syz [ 1034.181403][T14684] usb 2-1: Manufacturer: syz [ 1034.226655][T14684] cdc_wdm 2-1:1.0: skipping garbage [ 1034.251406][T14684] cdc_wdm 2-1:1.0: skipping garbage [ 1034.289017][T14684] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1034.341400][T14684] cdc_wdm 2-1:1.0: Unknown control protocol [ 1034.672423][T16067] netlink: 'syz.4.3274': attribute type 1 has an invalid length. [ 1034.691991][T16065] device-mapper: table: 248:6: multipath: not enough path parameters (-EINVAL) [ 1034.692399][T16067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1034.702101][T16065] device-mapper: ioctl: error adding target to table [ 1036.359489][T14684] usb 2-1: USB disconnect, device number 112 [ 1037.662568][T14684] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1037.829226][T16104] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1037.839645][ T4288] Bluetooth: Wrong link type (-22) [ 1037.971484][T14684] usb 2-1: device descriptor read/64, error -71 [ 1038.262366][T14684] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1038.431649][T14684] usb 2-1: device descriptor read/64, error -71 [ 1039.348757][T14684] usb usb2-port1: attempt power cycle [ 1040.087239][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 9 is 1031 jiffies old. [ 1041.646182][T16161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.694722][T16163] loop1: detected capacity change from 0 to 64 [ 1041.797145][T16163] MINIX-fs: bad superblock [ 1041.916273][T16161] netlink: 'syz.1.3299': attribute type 1 has an invalid length. [ 1042.026351][T16157] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL) [ 1042.151496][T16157] device-mapper: ioctl: error adding target to table [ 1042.984831][ T4288] Bluetooth: Wrong link type (-22) [ 1043.975567][T14683] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1044.055892][T16206] cfg80211: Invalid regulatory domain detected: BB [ 1044.151435][T14683] usb 2-1: device descriptor read/64, error -71 [ 1044.431435][T14683] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1045.252326][T14683] usb 2-1: device descriptor read/64, error -71 [ 1045.372264][T14683] usb usb2-port1: attempt power cycle [ 1045.811452][T14683] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1045.862560][T14683] usb 2-1: device descriptor read/8, error -71 [ 1045.960528][T16210] loop5: detected capacity change from 0 to 32768 [ 1046.141487][T14683] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1046.191768][T14683] usb 2-1: device descriptor read/8, error -71 [ 1046.311541][T14683] usb usb2-port1: unable to enumerate USB device [ 1046.558008][ T4288] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1046.978258][ T4288] Bluetooth: Wrong link type (-22) [ 1047.241381][T14683] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1048.461380][T14683] usb 6-1: Using ep0 maxpacket: 16 [ 1048.469495][T14683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1048.532212][T14683] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1048.583316][T14683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.621503][T14683] usb 6-1: Product: syz [ 1048.652357][T14683] usb 6-1: Manufacturer: syz [ 1048.657053][T14683] usb 6-1: SerialNumber: syz [ 1048.694779][T14683] usb 6-1: config 0 descriptor?? [ 1048.726696][T14683] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1048.782981][T14683] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1048.973868][T14683] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1049.075449][T14683] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1049.121459][T14683] em28xx 6-1:0.0: board has no eeprom [ 1049.222326][T14683] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1049.251277][T14683] em28xx 6-1:0.0: dvb set to bulk mode. [ 1049.289514][T14683] usb 6-1: USB disconnect, device number 2 [ 1049.326933][T14683] em28xx 6-1:0.0: Disconnecting em28xx [ 1049.377804][T14684] em28xx 6-1:0.0: Binding DVB extension [ 1049.617747][T14684] em28xx 6-1:0.0: Registering input extension [ 1049.658781][T14683] em28xx 6-1:0.0: Closing input extension [ 1049.884822][T14683] em28xx 6-1:0.0: Freeing device [ 1050.099253][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3328'. [ 1050.291492][T14683] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1050.481272][T14683] usb 6-1: device descriptor read/64, error -71 [ 1051.731988][T16330] loop3: detected capacity change from 0 to 1024 [ 1051.788366][T16330] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1051.811421][T14683] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1051.842396][T16330] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1051.900198][T16330] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1051.972143][T16330] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1051.982722][T14683] usb 6-1: device descriptor read/64, error -71 [ 1051.991662][T16330] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.3331: Failed to acquire dquot type 0 [ 1052.058017][T16330] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1052.076036][T16330] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1052.107501][T14683] usb usb6-port1: attempt power cycle [ 1052.131493][T16330] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.3331: Failed to acquire dquot type 0 [ 1052.187629][T16330] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.3331: Freeing blocks not in datazone - block = 0, count = 4096 [ 1052.273688][T16330] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1052.321522][T16330] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1052.353536][T16330] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.3331: Failed to acquire dquot type 0 [ 1052.400799][T16330] EXT4-fs (loop3): 1 orphan inode deleted [ 1052.422577][T16330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1052.489381][T16330] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #2: block 16: comm syz.3.3331: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1052.521437][T14683] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1052.582208][T14683] usb 6-1: device descriptor read/8, error -71 [ 1052.600178][T16343] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #2: block 16: comm syz.3.3331: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1052.681649][ T8565] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1052.717833][T14483] EXT4-fs (loop3): unmounting filesystem. [ 1052.861551][T14683] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1052.881495][ T8565] usb 5-1: Using ep0 maxpacket: 8 [ 1052.901856][T14683] usb 6-1: device descriptor read/8, error -71 [ 1052.911773][ T8565] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1052.920056][ T8565] usb 5-1: config 179 has no interface number 0 [ 1052.961402][ T8565] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1052.991662][ T8565] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1053.021604][T14683] usb usb6-port1: unable to enumerate USB device [ 1053.051491][ T8565] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1053.088174][ T8565] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1053.130389][ T8565] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1053.207365][ T8565] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1053.231606][ T8565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.282992][T16341] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1053.308407][T16362] netlink: 'syz.5.3339': attribute type 10 has an invalid length. [ 1053.516137][T16362] team0: Device nlmon0 is of different type [ 1053.822935][ T8565] usb 5-1: USB disconnect, device number 18 [ 1053.828910][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1053.828958][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1055.061429][T14684] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1055.241459][T14684] usb 2-1: device descriptor read/64, error -71 [ 1055.511474][T14684] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1055.681646][T14684] usb 2-1: device descriptor read/64, error -71 [ 1055.751477][T11634] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1055.801636][T14684] usb usb2-port1: attempt power cycle [ 1055.911526][T11634] usb 5-1: device descriptor read/64, error -71 [ 1056.181617][T11634] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1056.231487][T14684] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1056.272356][T14684] usb 2-1: device descriptor read/8, error -71 [ 1056.341564][T11634] usb 5-1: device descriptor read/64, error -71 [ 1056.461736][T11634] usb usb5-port1: attempt power cycle [ 1056.551635][T14684] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1056.593048][T14684] usb 2-1: device descriptor read/8, error -71 [ 1056.711572][T14684] usb usb2-port1: unable to enumerate USB device [ 1056.881492][T11634] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1056.952062][T11634] usb 5-1: device descriptor read/8, error -71 [ 1057.221494][T11634] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1057.271937][T11634] usb 5-1: device descriptor read/8, error -71 [ 1057.398729][T11634] usb usb5-port1: unable to enumerate USB device [ 1057.844353][ T4288] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1057.856896][ T4288] Bluetooth: hci4: Injecting HCI hardware error event [ 1057.870219][ T4289] Bluetooth: hci4: hardware error 0x00 [ 1058.286627][T16448] loop1: detected capacity change from 0 to 1024 [ 1058.298822][ T4288] Bluetooth: Wrong link type (-22) [ 1058.304142][ T4288] Bluetooth: hci5: link tx timeout [ 1058.309277][ T4288] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1058.366101][T16448] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1058.417266][T16448] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1058.481502][T16448] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1058.541591][T16448] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1058.600606][T16448] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3357: Failed to acquire dquot type 0 [ 1058.649175][T16448] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1058.719935][T16448] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1058.776240][T16448] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3357: Failed to acquire dquot type 0 [ 1058.858738][T16448] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.3357: Freeing blocks not in datazone - block = 0, count = 4096 [ 1058.889249][T16448] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1058.921469][T16448] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1058.951527][T16448] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3357: Failed to acquire dquot type 0 [ 1059.015320][T16448] EXT4-fs (loop1): 1 orphan inode deleted [ 1059.031665][T16448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1059.095849][T16448] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.3357: iget: bad extended attribute block 6 [ 1059.146782][T16448] EXT4-fs error (device loop1): ext4_search_dir:1551: inode #2: block 16: comm syz.1.3357: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1059.221848][T16468] EXT4-fs error (device loop1): ext4_search_dir:1551: inode #2: block 16: comm syz.1.3357: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1059.324970][T16477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3364'. [ 1059.452662][T15028] EXT4-fs (loop1): unmounting filesystem. [ 1059.471713][T14684] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1059.651558][T14684] usb 6-1: device descriptor read/64, error -71 [ 1059.761626][ T4288] block nbd3: Receive control failed (result -32) [ 1060.331348][T14684] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1060.351516][ T4289] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1060.531545][T14684] usb 6-1: device descriptor read/64, error -71 [ 1060.585187][T16477] block nbd3: shutting down sockets [ 1060.696309][T14684] usb usb6-port1: attempt power cycle [ 1061.111411][T14684] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1061.151555][T10105] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1061.162043][T14684] usb 6-1: device descriptor read/8, error -71 [ 1061.217267][ T4289] Bluetooth: Wrong link type (-22) [ 1061.223386][ T4289] Bluetooth: hci5: link tx timeout [ 1061.228530][ T4289] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1061.321423][T10105] usb 4-1: device descriptor read/64, error -71 [ 1061.450936][T14684] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1061.482064][T14684] usb 6-1: device descriptor read/8, error -71 [ 1061.591454][T10105] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1061.601681][T14684] usb usb6-port1: unable to enumerate USB device [ 1061.701394][ T8565] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1061.781116][T10105] usb 4-1: device descriptor read/64, error -71 [ 1061.891609][ T8565] usb 5-1: Using ep0 maxpacket: 8 [ 1061.901697][T10105] usb usb4-port1: attempt power cycle [ 1061.905572][ T8565] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1061.941445][ T8565] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1061.961749][ T8565] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1061.981347][ T8565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.027573][ T8565] usb 5-1: config 0 descriptor?? [ 1062.315816][T10105] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1062.372977][T10105] usb 4-1: device descriptor read/8, error -71 [ 1062.403350][T16530] loop5: detected capacity change from 0 to 1024 [ 1062.440931][ T8565] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 1062.458164][ T8565] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 1062.467141][ T8565] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 1062.481484][ T8565] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 1062.488606][ T8565] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 1062.496055][ T8565] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 1062.511418][ T8565] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 1062.521511][T16530] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1062.541482][ T8565] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 1062.553914][T16530] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1062.573020][ T8565] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1062.598220][T16530] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1062.618687][T16530] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1062.629118][T16530] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3376: Failed to acquire dquot type 0 [ 1062.650536][ T8565] lenovo 0003:17EF:6047.0005: Failed to switch F7/9/11 mode: -71 [ 1062.651022][T16530] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1062.669345][T10105] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1062.680073][ T8565] lenovo 0003:17EF:6047.0005: Failed to switch middle button: -71 [ 1062.687653][T16530] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1062.698367][T16530] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3376: Failed to acquire dquot type 0 [ 1062.710302][T10105] usb 4-1: device descriptor read/8, error -71 [ 1062.712380][ T8565] lenovo 0003:17EF:6047.0005: Fn-lock setting failed: -71 [ 1062.725998][T16530] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.3376: Freeing blocks not in datazone - block = 0, count = 4096 [ 1062.750330][ T8565] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71 [ 1062.750606][T16530] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3376: Failed to acquire dquot type 0 [ 1062.790927][ T8565] usb 5-1: USB disconnect, device number 23 [ 1062.831581][T10105] usb usb4-port1: unable to enumerate USB device [ 1062.842197][T16530] EXT4-fs (loop5): 1 orphan inode deleted [ 1062.858598][T16530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1062.923619][T16537] fido_id[16537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1062.938278][T16530] EXT4-fs error (device loop5): ext4_lookup:1860: inode #15: comm syz.5.3376: iget: bad extended attribute block 6 [ 1063.027719][T16538] EXT4-fs error (device loop5): ext4_search_dir:1551: inode #2: block 16: comm syz.5.3376: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1063.093122][T16539] EXT4-fs error (device loop5): ext4_search_dir:1551: inode #2: block 16: comm syz.5.3376: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1063.251844][T15268] EXT4-fs (loop5): unmounting filesystem. [ 1063.689345][T16551] loop4: detected capacity change from 0 to 2048 [ 1065.216063][T14683] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1065.275597][ T4289] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1065.287016][ T4289] CPU: 1 PID: 4289 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 1065.294601][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1065.304680][ T4289] Workqueue: hci1 hci_rx_work [ 1065.309473][ T4289] Call Trace: [ 1065.312747][ T4289] [ 1065.315672][ T4289] dump_stack_lvl+0x188/0x24e [ 1065.320354][ T4289] ? show_regs_print_info+0x12/0x12 [ 1065.325588][ T4289] ? load_image+0x410/0x410 [ 1065.330106][ T4289] sysfs_create_dir_ns+0x26a/0x290 [ 1065.335249][ T4289] ? __lock_acquire+0x7ea0/0x7ea0 [ 1065.340273][ T4289] ? sysfs_warn_dup+0xa0/0xa0 [ 1065.344952][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 1065.350177][ T4289] kobject_add_internal+0x617/0xca0 [ 1065.355383][ T4289] kobject_add+0x160/0x230 [ 1065.359800][ T4289] ? kobject_init+0x1c0/0x1c0 [ 1065.364498][ T4289] ? __raw_spin_lock_init+0x41/0x100 [ 1065.369777][ T4289] ? klist_children_get+0x50/0x50 [ 1065.374800][ T4289] ? get_device_parent+0x121/0x3e0 [ 1065.379915][ T4289] device_add+0x470/0x1050 [ 1065.384340][ T4289] hci_conn_add_sysfs+0xd1/0x1e0 [ 1065.389383][ T4289] le_conn_complete_evt+0xf93/0x15c0 [ 1065.394676][ T4289] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1065.400919][ T4289] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1065.406553][ T4289] ? mutex_unlock+0x10/0x10 [ 1065.411049][ T4289] ? skb_pull_data+0xec/0x1f0 [ 1065.415755][ T4289] hci_le_conn_complete_evt+0x183/0x440 [ 1065.421310][ T4289] ? hci_remote_host_features_evt+0x230/0x230 [ 1065.427375][ T4289] hci_event_packet+0x7b3/0x1290 [ 1065.432313][ T4289] ? lock_chain_count+0x20/0x20 [ 1065.437162][ T4289] ? bis_list+0x280/0x280 [ 1065.441483][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1065.447377][ T4289] ? kcov_remote_start+0x50f/0x810 [ 1065.452519][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 1065.457734][ T4289] ? hci_send_to_monitor+0x9c/0x4a0 [ 1065.462935][ T4289] hci_rx_work+0x3eb/0xd40 [ 1065.467352][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 1065.472211][ T4289] ? process_one_work+0x7b4/0x1160 [ 1065.477416][ T4289] process_one_work+0x8ab/0x1160 [ 1065.482364][ T4289] ? worker_detach_from_pool+0x240/0x240 [ 1065.487996][ T4289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1065.493019][ T4289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1065.498588][ T4289] ? wq_worker_running+0x97/0x190 [ 1065.503621][ T4289] worker_thread+0xaf5/0x12a0 [ 1065.508321][ T4289] kthread+0x29d/0x330 [ 1065.512385][ T4289] ? worker_clr_flags+0x1a0/0x1a0 [ 1065.517405][ T4289] ? kthread_blkcg+0xd0/0xd0 [ 1065.521990][ T4289] ret_from_fork+0x1f/0x30 [ 1065.526442][ T4289] [ 1065.538505][ T4289] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1065.551901][ T4289] Bluetooth: hci1: failed to register connection device [ 1065.601378][T14683] usb 2-1: device descriptor read/64, error -71 [ 1065.881474][T14683] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1066.047666][T14683] usb 2-1: device descriptor read/64, error -71 [ 1066.093638][T16583] loop5: detected capacity change from 0 to 1024 [ 1066.181559][T14683] usb usb2-port1: attempt power cycle [ 1066.327306][T16583] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1066.373027][T16583] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1066.433852][T16583] __quota_error: 2 callbacks suppressed [ 1066.433870][T16583] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1066.526803][T16583] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1066.561607][T16583] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3390: Failed to acquire dquot type 0 [ 1066.589778][T16583] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1066.620665][T16583] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1066.661597][T16583] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3390: Failed to acquire dquot type 0 [ 1066.689525][T14683] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1066.692005][T16583] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.3390: Freeing blocks not in datazone - block = 0, count = 4096 [ 1066.728871][T14683] usb 2-1: device descriptor read/8, error -71 [ 1066.753209][T16583] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1066.781583][T16583] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1066.800395][T16583] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3390: Failed to acquire dquot type 0 [ 1066.841265][T16583] EXT4-fs (loop5): 1 orphan inode deleted [ 1066.857814][T16583] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1066.902129][T16583] EXT4-fs error (device loop5): ext4_lookup:1860: inode #15: comm syz.5.3390: iget: bad extended attribute block 6 [ 1066.940369][T16583] EXT4-fs error (device loop5): ext4_search_dir:1551: inode #2: block 16: comm syz.5.3390: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1067.646734][T14683] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1067.672104][T16583] EXT4-fs error (device loop5): ext4_search_dir:1551: inode #2: block 16: comm syz.5.3390: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1067.749449][T14683] usb 2-1: device descriptor read/8, error -71 [ 1067.828819][T15268] EXT4-fs (loop5): unmounting filesystem. [ 1067.892004][T14683] usb usb2-port1: unable to enumerate USB device [ 1068.101506][ T8565] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1068.315062][ T8565] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.358840][ T8565] usb 4-1: New USB device found, idVendor=110a, idProduct=1250, bcdDevice= 1.00 [ 1068.378321][ T8565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.416120][ T8565] usb 4-1: Product: syz [ 1068.429741][ T8565] usb 4-1: Manufacturer: syz [ 1068.444593][ T8565] usb 4-1: SerialNumber: syz [ 1068.674184][ T8565] mxuport 4-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1068.695064][ T8565] mxuport 4-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1068.721456][T10106] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1068.735654][ T8565] mxuport: probe of 4-1:1.0 failed with error -71 [ 1068.769325][ T8565] usb 4-1: USB disconnect, device number 120 [ 1069.072189][T14683] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1069.391421][T14683] usb 2-1: Using ep0 maxpacket: 32 [ 1069.404143][T14683] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1069.507335][T14683] usb 2-1: config 0 has no interface number 0 [ 1069.611215][T14683] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1069.634104][T14683] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1069.654052][T14683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.707455][T14683] usb 2-1: Product: syz [ 1069.708888][T10106] usb 6-1: Using ep0 maxpacket: 16 [ 1069.739291][T10106] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1069.741866][T14683] usb 2-1: Manufacturer: syz [ 1069.751007][T10106] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1069.773654][T10106] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1069.806408][T14683] usb 2-1: SerialNumber: syz [ 1069.813370][T10106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.827248][T14683] usb 2-1: config 0 descriptor?? [ 1069.831437][T10106] usb 6-1: Product: syz [ 1069.836389][T10106] usb 6-1: Manufacturer: syz [ 1069.841002][T10106] usb 6-1: SerialNumber: syz [ 1069.878932][T10106] usb 6-1: config 0 descriptor?? [ 1070.131989][T10106] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input46 [ 1071.271387][T10106] rc_core: IR keymap rc-imon-pad not found [ 1071.277314][T10106] Registered IR keymap rc-empty [ 1071.299148][T10106] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1071.321646][T10106] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1071.405878][T10106] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1071.441983][T10106] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input47 [ 1071.487308][T10106] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:11> initialized [ 1071.641548][T14684] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1071.661814][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 1071.681801][ C0] imon 6-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 7, intf0) [ 1071.914058][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1071.914919][T14680] usb 6-1: USB disconnect, device number 11 [ 1072.733145][T14684] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.751374][T14684] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1072.782187][T14684] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1072.811377][T14684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1072.819474][T14684] usb 4-1: Product: syz [ 1072.851539][T14684] usb 4-1: Manufacturer: syz [ 1073.117315][T14683] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1073.135203][T14683] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1073.145290][T14683] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1073.161486][T14683] f81534: probe of 2-1:0.12 failed with error -71 [ 1073.198601][T14683] usb 2-1: USB disconnect, device number 2 [ 1073.587628][ T4289] Bluetooth: Wrong link type (-22) [ 1073.593059][ T4289] Bluetooth: hci1: link tx timeout [ 1073.598918][ T4289] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1074.220774][T16675] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1074.981624][T16682] sctp: [Deprecated]: syz.1.3422 (pid 16682) Use of int in max_burst socket option deprecated. [ 1074.981624][T16682] Use struct sctp_assoc_value instead [ 1075.326501][T16684] lo speed is unknown, defaulting to 1000 [ 1075.662516][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 1075.761564][T14684] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1075.902386][T16684] rxe_eth0 speed is unknown, defaulting to 1000 [ 1075.975445][T14684] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1076.005959][T14684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.029072][T14684] usb 2-1: Product: syz [ 1076.046956][T14684] usb 2-1: Manufacturer: syz [ 1076.055726][T14684] usb 2-1: SerialNumber: syz [ 1076.099160][T14683] usb 4-1: USB disconnect, device number 121 [ 1076.719677][T14684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1076.741377][T14684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1076.791714][T14684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1076.824491][T14684] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1076.861558][T14684] usb 2-1: USB disconnect, device number 3 [ 1078.582898][T16712] loop5: detected capacity change from 0 to 1024 [ 1078.776098][T16712] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1078.999217][T16712] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1079.091835][T16712] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1079.176632][T16712] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1079.291499][T16712] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3433: Failed to acquire dquot type 0 [ 1079.411037][T16712] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1079.442391][T16712] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1079.552307][T16712] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3433: Failed to acquire dquot type 0 [ 1079.602007][T16712] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.3433: Freeing blocks not in datazone - block = 0, count = 4096 [ 1079.665958][T16712] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1079.894764][T16712] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1079.942255][T16712] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3433: Failed to acquire dquot type 0 [ 1080.101487][T16712] EXT4-fs (loop5): 1 orphan inode deleted [ 1080.108235][T16712] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1080.163595][ T4289] Bluetooth: Wrong link type (-22) [ 1080.169515][ T4289] Bluetooth: hci2: link tx timeout [ 1080.175501][ T4289] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1080.387583][T16712] EXT4-fs error (device loop5): ext4_lookup:1860: inode #15: comm syz.5.3433: iget: bad extended attribute block 6 [ 1080.513243][T16734] EXT4-fs error (device loop5): ext4_search_dir:1551: inode #2: block 16: comm syz.5.3433: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1080.551738][T16737] EXT4-fs error (device loop5): ext4_search_dir:1551: inode #2: block 16: comm syz.5.3433: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1080.601430][T11638] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1080.872756][T11638] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.891408][T11638] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1080.902837][ T4289] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1080.983849][T15268] EXT4-fs (loop5): unmounting filesystem. [ 1080.996854][T11638] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1081.022213][T11638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1081.030255][T11638] usb 5-1: Product: syz [ 1081.075471][T16744] atomic_op ffff8880596c9998 conn xmit_atomic 0000000000000000 [ 1081.083261][T11638] usb 5-1: Manufacturer: syz [ 1082.300845][T16759] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1082.981584][T14679] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1083.182650][T14679] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.219919][T14679] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1083.308999][T14679] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1083.501692][ T4289] Bluetooth: Wrong link type (-22) [ 1083.509245][ T4289] Bluetooth: hci2: link tx timeout [ 1083.515646][ T4289] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1084.353554][T11638] usb 5-1: USB disconnect, device number 24 [ 1085.040349][T14679] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1085.049620][T14679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.090479][T14679] usb 4-1: can't set config #1, error -71 [ 1085.100406][T14679] usb 4-1: USB disconnect, device number 122 [ 1085.666186][T16775] loop5: detected capacity change from 0 to 512 [ 1085.743686][T16775] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1085.992902][T16775] EXT4-fs (loop5): 1 truncate cleaned up [ 1085.998613][T16775] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1086.314916][T16775] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.3455: corrupted xattr entries [ 1086.396265][T16775] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1086.515261][T16786] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.3455: corrupted xattr entries [ 1086.659854][ T26] audit: type=1800 audit(1793360220.904:2329): pid=16786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3455" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1086.787863][ T4289] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1086.993656][T15268] EXT4-fs (loop5): unmounting filesystem. [ 1087.357997][ T26] audit: type=1800 audit(1793360221.604:2330): pid=16802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3463" name=08 dev="sda1" ino=2061 res=0 errno=0 [ 1087.451391][T14684] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1087.643559][T14684] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.704510][T14684] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1087.854691][T14684] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1087.926541][T14684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1087.973914][T14684] usb 6-1: Product: syz [ 1088.008589][T14684] usb 6-1: Manufacturer: syz [ 1089.626254][T16811] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1090.395084][T16819] sg_read: process 324 (syz.3.3465) changed security contexts after opening file descriptor, this is not allowed. [ 1091.201603][ T4370] usb 6-1: USB disconnect, device number 12 [ 1092.501684][T16830] sctp: [Deprecated]: syz.3.3472 (pid 16830) Use of int in max_burst socket option deprecated. [ 1092.501684][T16830] Use struct sctp_assoc_value instead [ 1092.571556][ T4289] Bluetooth: Wrong link type (-22) [ 1092.577069][ T4289] Bluetooth: hci2: link tx timeout [ 1092.582288][ T4289] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1092.590301][ T4289] Bluetooth: hci2: link tx timeout [ 1092.595486][ T4289] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1093.114888][T16837] loop3: detected capacity change from 0 to 256 [ 1094.611487][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 1095.171459][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1095.280288][ T4288] Bluetooth: Wrong link type (-22) [ 1095.286586][ T4288] Bluetooth: hci1: link tx timeout [ 1095.291801][ T4288] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1095.299450][ T4288] Bluetooth: hci1: link tx timeout [ 1095.304623][ T4288] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1096.304581][ T4288] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1097.401470][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 1097.760237][T16870] loop3: detected capacity change from 0 to 40427 [ 1097.850017][T16870] F2FS-fs (loop3): invalid crc value [ 1097.900254][T16870] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1104.811073][T16940] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[14155] was attempted by "./proc/thread-self/fail-nth   €  ' \x0c ÿÿÿÿ  ÿÿÿÿ  [ 1104.991371][T11634] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 1106.514408][T11634] usb 4-1: config 7 has an invalid interface number: 209 but max is 0 [ 1106.531351][T11634] usb 4-1: config 7 has no interface number 0 [ 1106.538273][T11634] usb 4-1: config 7 interface 209 has no altsetting 0 [ 1106.548560][T11634] usb 4-1: string descriptor 0 read error: -22 [ 1106.557911][T11634] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=7c.f2 [ 1106.567957][T11634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.813420][T14683] usb 4-1: USB disconnect, device number 123 [ 1107.035438][T16942] loop1: detected capacity change from 0 to 32768 [ 1107.390617][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1107.423373][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1107.468534][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1107.511843][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1107.581986][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1107.615898][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1107.643568][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1110.826141][T16988] sctp: [Deprecated]: syz.4.3522 (pid 16988) Use of int in max_burst socket option. [ 1110.826141][T16988] Use struct sctp_assoc_value instead [ 1110.934456][T16994] loop1: detected capacity change from 0 to 16 [ 1110.952097][T16994] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1110.970388][T16994] cramfs: empty filesystem [ 1112.460963][T14683] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1112.480401][ T26] audit: type=1400 audit(1793360246.204:2331): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="f/o" pid=17006 comm="syz.4.3528" [ 1112.556653][T17011] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1112.563910][T14680] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1112.574949][T17011] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1112.663330][T17011] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1112.683070][T14683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.705462][T14683] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1112.713089][T17011] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1112.751791][T14683] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1112.762517][T14680] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.772964][T17011] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1112.783098][T14680] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1112.800942][T17011] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1112.802955][T14683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1112.824335][T14680] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1112.846934][T17011] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1112.853704][T14683] usb 2-1: Product: syz [ 1112.864243][T14683] usb 2-1: Manufacturer: syz [ 1112.869104][T14680] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1113.578813][T14680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.610553][T14680] ttusb_dec_send_command: command bulk message failed: error -8 [ 1113.632353][T14680] ttusb-dec: probe of 4-1:1.0 failed with error -8 [ 1113.774337][T14683] dvb_ttusb_budget: ttusb_init_controller: error [ 1113.780910][T14683] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1113.808802][T14680] usb 4-1: USB disconnect, device number 124 [ 1113.880067][T14683] DVB: Unable to find symbol cx22700_attach() [ 1113.966544][T14683] DVB: Unable to find symbol tda10046_attach() [ 1114.563094][T17025] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1114.636751][T17025] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 1115.133942][T14683] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1116.261812][T14683] usb 2-1: USB disconnect, device number 4 [ 1116.469826][T17034] loop3: detected capacity change from 0 to 4096 [ 1116.561660][T17035] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1116.744337][T14483] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1117.317590][ T4288] Bluetooth: Wrong link type (-22) [ 1117.324362][ T4288] Bluetooth: hci1: link tx timeout [ 1117.329542][ T4288] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1117.338075][ T4288] Bluetooth: hci1: link tx timeout [ 1117.343420][ T4288] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1120.282021][ T26] audit: type=1400 audit(1793360254.004:2332): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="f/o" pid=17050 comm="syz.3.3540" [ 1121.245973][T17062] loop1: detected capacity change from 0 to 32768 [ 1121.269310][T17062] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.3544 (17062) [ 1121.361664][T17062] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1121.401631][T17062] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1121.439957][T17062] BTRFS info (device loop1): enabling ssd optimizations [ 1121.470011][T17062] BTRFS info (device loop1): not using ssd optimizations [ 1121.500298][T17062] BTRFS info (device loop1): turning off barriers [ 1121.531005][T17062] BTRFS info (device loop1): use no compression [ 1121.555884][T17062] BTRFS info (device loop1): using free space tree [ 1121.576195][T17073] loop3: detected capacity change from 0 to 1024 [ 1121.751933][T17073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1123.469952][T14483] EXT4-fs (loop3): unmounting filesystem. [ 1123.488431][T15028] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1125.302299][ T26] audit: type=1400 audit(1793360259.024:2333): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="f/o" pid=17112 comm="syz.4.3552" [ 1128.929239][T17140] loop3: detected capacity change from 0 to 1024 [ 1129.815681][T17140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1130.363439][T17158] loop1: detected capacity change from 0 to 1024 [ 1130.526614][T17158] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1130.562598][T17158] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1130.612317][T14483] EXT4-fs (loop3): unmounting filesystem. [ 1130.619505][T17158] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1130.629862][T17158] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1130.643619][T17158] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3566: Failed to acquire dquot type 0 [ 1130.700107][T17158] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1130.716764][T17158] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1130.754565][T17158] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3566: Failed to acquire dquot type 0 [ 1130.786752][T17158] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.3566: Freeing blocks not in datazone - block = 0, count = 4096 [ 1130.831841][T17158] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1130.852256][T17158] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1130.874858][ T26] audit: type=1326 audit(1793360265.124:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17166 comm="syz.5.3568" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d779f559 code=0x7ffc0000 [ 1130.876474][T17158] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3566: Failed to acquire dquot type 0 [ 1130.951443][ T26] audit: type=1326 audit(1793360265.124:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17166 comm="syz.5.3568" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d779f559 code=0x7ffc0000 [ 1130.999867][T17158] EXT4-fs (loop1): 1 orphan inode deleted [ 1131.061065][T17158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1131.134384][T17158] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.3566: iget: bad extended attribute block 6 [ 1131.163086][T17158] EXT4-fs error (device loop1): ext4_search_dir:1551: inode #2: block 16: comm syz.1.3566: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1131.181837][ T26] audit: type=1326 audit(1793360265.124:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17166 comm="syz.5.3568" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d779f559 code=0x7ffc0000 [ 1131.219406][ T26] audit: type=1326 audit(1793360265.124:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17166 comm="syz.5.3568" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe9d779f559 code=0x7ffc0000 [ 1131.276123][T17174] EXT4-fs error (device loop1): ext4_search_dir:1551: inode #2: block 16: comm syz.1.3566: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1131.420452][T15028] EXT4-fs (loop1): unmounting filesystem. [ 1131.987112][T17190] sctp: [Deprecated]: syz.4.3574 (pid 17190) Use of int in max_burst socket option deprecated. [ 1131.987112][T17190] Use struct sctp_assoc_value instead [ 1132.691677][T14680] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1132.881577][T10105] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1132.882909][T14680] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.961387][T14680] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1132.992381][T14680] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1133.010949][T17209] cfg80211: Invalid regulatory domain detected: BB [ 1133.027953][T14680] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1133.058368][T14680] usb 5-1: Product: syz [ 1133.068518][T14680] usb 5-1: Manufacturer: syz [ 1133.092044][T10105] usb 2-1: Using ep0 maxpacket: 16 [ 1133.099794][T10105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1133.113267][T14680] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 1133.134349][T14680] usb 5-1: No streaming interface found for terminal 2. [ 1133.155851][T10105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1133.214583][T10105] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1133.259511][T10105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.296217][T17203] loop5: detected capacity change from 0 to 32768 [ 1133.304097][T10105] usb 2-1: Product: syz [ 1133.328672][T10105] usb 2-1: Manufacturer: syz [ 1133.338367][T10105] usb 2-1: SerialNumber: syz [ 1133.363086][T10106] usb 5-1: USB disconnect, device number 25 [ 1133.374365][T10105] usb 2-1: config 0 descriptor?? [ 1133.415171][T10105] hub 2-1:0.0: bad descriptor, ignoring hub [ 1133.444609][T10105] hub: probe of 2-1:0.0 failed with error -5 [ 1133.607639][T10105] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1133.749938][ T4288] Bluetooth: Wrong link type (-22) [ 1133.755395][ T4288] Bluetooth: hci1: link tx timeout [ 1133.760599][ T4288] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1133.768615][ T4288] Bluetooth: hci1: link tx timeout [ 1133.774114][ T4288] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1135.270614][T10105] usb 2-1: USB disconnect, device number 5 [ 1135.782470][T17222] udevd[17222]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1136.371389][T10106] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1136.573435][T10106] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.593116][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1136.651595][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1136.669947][ T4288] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 1136.681468][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1136.694402][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1136.708604][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1136.718597][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1136.732359][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1136.750545][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1136.760516][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1136.771517][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1136.801369][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1136.916333][T10106] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1136.956593][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1137.641489][T10106] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 1137.683713][T10106] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1137.713846][T10106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.751692][T10106] usb 5-1: Product: syz [ 1137.755904][T10106] usb 5-1: Manufacturer: syz [ 1137.801140][T10106] usb 5-1: SerialNumber: syz [ 1137.831552][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1137.851548][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1137.921610][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1137.975902][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1138.188029][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1138.403356][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1138.411673][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1138.419615][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1138.427284][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1138.435635][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1138.443186][T17232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1138.453055][T10106] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1138.461712][T10106] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 1138.478197][T10106] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1138.488257][T10106] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1138.499456][T10106] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1138.673310][T11638] usb 5-1: USB disconnect, device number 26 [ 1138.703148][T11638] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1138.715897][T11638] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1138.727122][T11638] keyspan 5-1:1.0: device disconnected [ 1139.601587][T10106] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1139.756643][T17273] loop1: detected capacity change from 0 to 1024 [ 1139.856540][T10106] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1139.879008][T10106] usb 6-1: not running at top speed; connect to a high speed hub [ 1139.913455][T10106] usb 6-1: config 3 interface 0 has no altsetting 0 [ 1139.948578][T10106] usb 6-1: New USB device found, idVendor=05e1, idProduct=0480, bcdDevice=fc.5f [ 1139.981250][T10106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.012950][T10106] usb 6-1: Product: syz [ 1140.025161][T10106] usb 6-1: Manufacturer: syz [ 1140.042101][T10106] usb 6-1: SerialNumber: syz [ 1140.703615][T17273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1140.972628][T10106] au0828: au0828: Device initialization failed. [ 1141.371364][T10106] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 1141.436948][T10106] usb 6-1: USB disconnect, device number 13 [ 1141.607546][T15028] EXT4-fs (loop1): unmounting filesystem. [ 1143.826782][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1143.826797][ T26] audit: type=1400 audit(1793360278.074:2354): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="f/o" pid=17284 comm="syz.4.3604" [ 1143.967881][T17307] loop1: detected capacity change from 0 to 2048 [ 1144.206385][T17307] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1144.290396][T17307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1144.816408][T17313] loop3: detected capacity change from 0 to 256 [ 1144.861137][T17316] loop5: detected capacity change from 0 to 8 [ 1144.973315][T17316] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 1145.044527][T17316] unable to read xattr id index table [ 1145.560567][T17324] loop4: detected capacity change from 0 to 32768 [ 1146.207030][T17324] XFS (loop4): Mounting V5 Filesystem [ 1146.313947][T17324] XFS (loop4): Ending clean mount [ 1146.468104][T17324] XFS (loop4): Quotacheck needed: Please wait. [ 1146.501484][ T4288] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1146.629726][T17324] XFS (loop4): Quotacheck: Done. [ 1147.066393][ T26] audit: type=1800 audit(1793360281.244:2355): pid=17348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3618" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 1147.493242][T15692] XFS (loop4): Unmounting Filesystem [ 1148.806110][T17359] loop3: detected capacity change from 0 to 32768 [ 1148.906180][T17359] JBD2: Ignoring recovery information on journal [ 1148.914122][T17359] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 1148.922778][T17359] JBD2: bad block at offset 32 [ 1148.955350][T17359] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1149.213999][T17366] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 1149.235847][T17366] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1149.245736][T17366] OCFS2: File system is now read-only. [ 1149.251214][T17366] (syz.3.3628,17366,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1149.259858][T17366] (syz.3.3628,17366,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 1149.268263][T17366] (syz.3.3628,17366,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 1149.276650][T17366] (syz.3.3628,17366,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 1149.286189][T17366] (syz.3.3628,17366,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 1149.294324][T17366] (syz.3.3628,17366,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 1149.303226][T17366] (syz.3.3628,17366,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 1149.314636][T17366] (syz.3.3628,17366,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 1149.749817][T14483] ocfs2: Unmounting device (7,3) on (node local) [ 1150.201994][ T26] audit: type=1400 audit(1793360284.454:2356): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="f/o" pid=17352 comm="syz.1.3626" [ 1150.287170][T17373] loop3: detected capacity change from 0 to 512 [ 1150.351474][T17373] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1150.491698][T17373] EXT4-fs (loop3): 1 truncate cleaned up [ 1150.497400][T17373] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1151.091452][ T26] audit: type=1800 audit(1793360285.114:2357): pid=17379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3632" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1151.250861][T14483] EXT4-fs (loop3): unmounting filesystem. [ 1151.395823][T17381] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1151.463161][T17381] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1151.523558][T17381] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1151.572186][T17381] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1151.645938][T17381] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1152.578808][T17381] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1152.629132][T17381] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1152.841604][ T4277] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1152.981692][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807094dc00: rx timeout, send abort [ 1152.994546][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807094dc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1153.054406][ T4277] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.172806][T17405] loop5: detected capacity change from 0 to 256 [ 1153.183016][T17405] exfat: Unknown parameter '' [ 1153.827885][ T4277] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1153.941402][ T4277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1154.003328][ T4277] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 1154.044329][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.075508][ T4277] usb 4-1: config 0 descriptor?? [ 1154.493597][ T4277] hid-generic 0003:1B1C:0A55.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:0a55] on usb-dummy_hcd.3-1/input0 [ 1154.524209][T17418] jffs2: notice: (17418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1154.690916][T10106] usb 4-1: USB disconnect, device number 125 [ 1154.864295][T17421] fido_id[17421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1155.056114][T17428] lo speed is unknown, defaulting to 1000 [ 1155.095222][T17431] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1155.141951][T17431] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1155.161648][T17431] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1155.226133][T17431] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1155.277991][T17431] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1155.314332][T17431] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1155.342071][T17431] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1155.388307][T17428] rxe_eth0 speed is unknown, defaulting to 1000 [ 1155.478310][T17411] loop1: detected capacity change from 0 to 32768 [ 1155.732291][T17411] ERROR: (device loop1): diWrite: ixpxd invalid [ 1155.732291][T17411] [ 1155.946222][T17411] ERROR: (device loop1): remounting filesystem as read-only [ 1156.033814][T17411] ERROR: (device loop1): txCommit: [ 1156.033814][T17411] [ 1156.606444][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028ae2000: rx timeout, send abort [ 1156.615883][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888028ae2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1156.757988][T17445] loop3: detected capacity change from 0 to 1024 [ 1156.765296][T17445] EXT4-fs: Ignoring removed i_version option [ 1156.792282][T17445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1156.869326][T17445] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1156.879128][T17445] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1156.886114][T17445] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.3656: Freeing blocks not in datazone - block = 0, count = 4096 [ 1156.907762][T17445] EXT4-fs (loop3): Remounting filesystem read-only [ 1156.914474][T17445] EXT4-fs (loop3): 1 orphan inode deleted [ 1156.920225][T17445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1157.712480][T14483] EXT4-fs (loop3): unmounting filesystem. [ 1157.806185][T17456] loop1: detected capacity change from 0 to 128 [ 1157.909011][T17461] loop3: detected capacity change from 0 to 64 [ 1157.926288][T17464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1157.973065][T17456] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1158.032054][T17464] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1158.039534][T17464] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1158.093080][T17456] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1158.122557][T17464] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1158.152496][T17464] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1158.185520][T17471] loop5: detected capacity change from 0 to 256 [ 1158.189715][T17464] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1158.207066][T17464] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1158.442335][T17471] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1158.488904][T17476] overlayfs: failed to clone upperpath [ 1159.301590][T10105] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1159.401416][T11633] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1159.501511][T10105] usb 6-1: Using ep0 maxpacket: 16 [ 1159.509304][T10105] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1159.560344][T10105] usb 6-1: config 0 has no interface number 0 [ 1159.590712][T10105] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.611387][T11633] usb 5-1: Using ep0 maxpacket: 32 [ 1159.642591][T11633] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1159.673886][T10105] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.684070][T11633] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1159.701492][T10105] usb 6-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.721364][T11633] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1159.741218][T11633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1159.761272][T10105] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1159.774860][T10105] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1159.787036][T11633] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1159.817298][T10105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.827425][T11633] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1159.852150][T10105] usb 6-1: config 0 descriptor?? [ 1159.880743][T10105] usbhid 6-1:0.1: fixing wrong optional hid class descriptors count [ 1159.896103][T11633] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1159.925376][T11633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.982478][T11633] usb 5-1: config 0 descriptor?? [ 1160.000440][T17500] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1160.047986][T17500] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1160.092516][T17500] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1160.113207][T17500] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1161.071741][T17504] cgroup: fork rejected by pids controller in /syz3 [ 1161.283773][T10105] elan 0003:04F3:074D.0007: failed to start in urb: -90 [ 1161.293138][T17500] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1161.307275][T17500] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1161.379554][T17500] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1161.418230][T11633] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1161.517376][T17484] lo speed is unknown, defaulting to 1000 [ 1161.702822][T10105] elan 0003:04F3:074D.0007: Get report error for parm 6: 0 [ 1162.105627][T10105] elan 0003:04F3:074D.0007: Get report error for parm 7: -71 [ 1162.263207][T10105] elan 0003:04F3:074D.0007: hiddev1,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.5-1/input1 [ 1162.374648][T10105] elan 0003:04F3:074D.0007: Input device is not registered [ 1162.428511][T10105] elan: probe of 0003:04F3:074D.0007 failed with error -119 [ 1162.486439][T10105] usb 6-1: USB disconnect, device number 14 [ 1162.793980][T15020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1162.879537][T17587] fido_id[17587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1163.077525][T17484] rxe_eth0 speed is unknown, defaulting to 1000 [ 1164.094102][ T26] audit: type=1400 audit(1793360298.334:2358): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="f/o" pid=17588 comm="syz.1.3679" [ 1164.740208][T17602] jffs2: notice: (17602) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1164.880938][ T26] audit: type=1326 audit(1793360299.124:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.2.3683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9564b9f559 code=0x7ffc0000 [ 1164.985310][ T26] audit: type=1326 audit(1793360299.154:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.2.3683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9564b9f559 code=0x7ffc0000 [ 1165.011619][T17591] loop5: detected capacity change from 0 to 32768 [ 1165.106004][ T26] audit: type=1326 audit(1793360299.154:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.2.3683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9564b9f559 code=0x7ffc0000 [ 1165.281437][ T26] audit: type=1326 audit(1793360299.154:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.2.3683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9564b9f559 code=0x7ffc0000 [ 1165.316655][ T4370] usb 5-1: USB disconnect, device number 27 [ 1165.337896][ T4370] usblp0: removed [ 1165.352224][ T26] audit: type=1326 audit(1793360299.154:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.2.3683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f9564b9f559 code=0x7ffc0000 [ 1165.478549][ T26] audit: type=1326 audit(1793360299.154:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.2.3683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9564b9f559 code=0x7ffc0000 [ 1165.526791][T17615] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1165.586707][ T26] audit: type=1326 audit(1793360299.154:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.2.3683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9564b9f559 code=0x7ffc0000 [ 1165.613267][T17615] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1165.620980][T17615] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1165.676665][T17615] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1165.690997][ T26] audit: type=1326 audit(1793360299.154:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.2.3683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9564b9f559 code=0x7ffc0000 [ 1165.715008][T17615] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1165.766858][T17615] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1165.795672][T17615] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1165.797404][ T26] audit: type=1326 audit(1793360299.154:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.2.3683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9564b9f559 code=0x7ffc0000 [ 1165.919047][T17626] loop3: detected capacity change from 0 to 1024 [ 1166.008240][T17626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1166.270635][ T4289] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1166.287708][T17640] loop4: detected capacity change from 0 to 512 [ 1166.323690][T17640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1166.357137][T17640] EXT4-fs (loop4): 1 truncate cleaned up [ 1166.381408][T17640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1166.758461][T17650] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #12: comm syz.4.3697: bad extra_isize 62 (inode size 256) [ 1167.184729][T14483] EXT4-fs (loop3): unmounting filesystem. [ 1167.190562][T17650] EXT4-fs (loop4): Remounting filesystem read-only [ 1167.353268][T15692] EXT4-fs (loop4): unmounting filesystem. [ 1169.787769][T17657] loop5: detected capacity change from 0 to 4096 [ 1169.794627][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1169.822259][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1169.842719][T17657] ntfs3: loop5: Failed to load $Volume. [ 1169.860434][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1169.903209][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1169.958981][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1169.992446][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1170.020478][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1170.772706][ T4289] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1171.516532][T17687] loop1: detected capacity change from 0 to 512 [ 1171.610745][T17687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1171.719482][T17687] EXT4-fs (loop1): 1 truncate cleaned up [ 1171.735678][T17687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1172.736221][T17702] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #12: comm syz.1.3713: bad extra_isize 62 (inode size 256) [ 1172.772372][T17702] EXT4-fs (loop1): Remounting filesystem read-only [ 1172.981839][T17704] loop5: detected capacity change from 0 to 256 [ 1173.021086][T17704] exfat: Deprecated parameter 'namecase' [ 1173.085697][T17704] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1173.140132][T15028] EXT4-fs (loop1): unmounting filesystem. [ 1173.320089][T17717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1173.332148][T17717] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1173.347752][T17717] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1173.359884][T17717] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1173.390887][T17717] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1173.559892][T17719] loop1: detected capacity change from 0 to 32768 [ 1173.590331][T17717] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1173.622142][T17717] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1173.663410][T17719] XFS (loop1): Mounting V5 Filesystem [ 1173.741539][T11634] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1173.793423][T17719] XFS (loop1): Ending clean mount [ 1173.803229][T17719] XFS (loop1): Quotacheck needed: Please wait. [ 1174.975331][T11634] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 1175.000970][T11634] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50 [ 1175.015836][T17719] XFS (loop1): Quotacheck: Done. [ 1175.421608][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 1175.421626][ T26] audit: type=1800 audit(1793360309.494:2387): pid=17744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3718" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 1175.631404][T11634] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1175.648501][T15028] XFS (loop1): Unmounting Filesystem [ 1175.652067][T11634] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1175.668196][T11634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1175.701417][T11634] usb 4-1: Product: syz [ 1175.707583][T17748] loop4: detected capacity change from 0 to 512 [ 1175.709168][T11634] usb 4-1: Manufacturer: syz [ 1175.753834][T17748] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1175.854116][T17748] EXT4-fs (loop4): 1 truncate cleaned up [ 1175.859817][T17748] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1175.994994][T17712] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1176.020223][T17712] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1176.071652][T11634] dvb_ttusb_budget: ttusb_init_controller: error [ 1176.084719][T11634] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1176.201791][T17755] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #12: comm syz.4.3728: bad extra_isize 62 (inode size 256) [ 1176.222054][T17755] EXT4-fs (loop4): Remounting filesystem read-only [ 1176.733415][T11634] DVB: Unable to find symbol cx22700_attach() [ 1177.293017][T17757] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1177.814884][T17757] dvb_ttusb_budget: failed urb submission (0: err = -8)! [ 1177.840965][T15692] EXT4-fs (loop4): unmounting filesystem. [ 1177.962273][T11634] DVB: Unable to find symbol tda10046_attach() [ 1177.968487][T11634] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1178.018887][T11634] usb 4-1: USB disconnect, device number 126 [ 1178.228741][T17770] loop4: detected capacity change from 0 to 64 [ 1179.211399][ T26] audit: type=1400 audit(1793360312.894:2388): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="f/o" pid=17774 comm="syz.5.3729" [ 1179.377509][ T4370] kernel write not supported for file /dsp1 (pid: 4370 comm: kworker/0:4) [ 1179.721475][T17786] FAULT_INJECTION: forcing a failure. [ 1179.721475][T17786] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.765785][T17786] CPU: 1 PID: 17786 Comm: syz.4.3743 Not tainted syzkaller #0 [ 1179.773302][T17786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1179.783371][T17786] Call Trace: [ 1179.786659][T17786] [ 1179.789603][T17786] dump_stack_lvl+0x188/0x24e [ 1179.794305][T17786] ? lockdep_hardirqs_on+0x94/0x140 [ 1179.799519][T17786] ? show_regs_print_info+0x12/0x12 [ 1179.804744][T17786] ? load_image+0x410/0x410 [ 1179.809277][T17786] ? ip_route_output_key_hash+0x139/0x330 [ 1179.815092][T17786] should_fail_ex+0x390/0x4c0 [ 1179.819798][T17786] should_failslab+0x5/0x20 [ 1179.824315][T17786] slab_pre_alloc_hook+0x59/0x300 [ 1179.829356][T17786] ? memset+0x1e/0x40 [ 1179.833339][T17786] kmem_cache_alloc+0x56/0x2f0 [ 1179.838093][T17786] ? __inet_bhash2_update_saddr+0x203/0x1550 [ 1179.844074][T17786] __inet_bhash2_update_saddr+0x203/0x1550 [ 1179.849875][T17786] ? rcu_force_quiescent_state+0x220/0x220 [ 1179.855690][T17786] ? xfrm_lookup_route+0xf8/0x1b0 [ 1179.860787][T17786] tcp_v4_connect+0x9d8/0x18a0 [ 1179.865543][T17786] ? aa_sk_perm+0x950/0x950 [ 1179.870051][T17786] ? tcp_twsk_unique+0x970/0x970 [ 1179.874986][T17786] ? mark_lock+0x94/0x320 [ 1179.879315][T17786] __inet_stream_connect+0x242/0xe10 [ 1179.884615][T17786] ? lock_chain_count+0x20/0x20 [ 1179.889461][T17786] ? inet_stream_connect+0x4d/0xa0 [ 1179.894565][T17786] ? __local_bh_enable_ip+0x136/0x1c0 [ 1179.899928][T17786] ? inet_dgram_connect+0x340/0x340 [ 1179.905123][T17786] ? __local_bh_enable_ip+0x136/0x1c0 [ 1179.910489][T17786] ? _local_bh_enable+0xa0/0xa0 [ 1179.915345][T17786] inet_stream_connect+0x62/0xa0 [ 1179.920278][T17786] ? __inet_stream_connect+0xe10/0xe10 [ 1179.925729][T17786] __sys_connect+0x3cb/0x450 [ 1179.930317][T17786] ? __sys_connect_file+0x170/0x170 [ 1179.935529][T17786] __x64_sys_connect+0x76/0x80 [ 1179.940288][T17786] do_syscall_64+0x4c/0xa0 [ 1179.944697][T17786] ? clear_bhb_loop+0x60/0xb0 [ 1179.949362][T17786] ? clear_bhb_loop+0x60/0xb0 [ 1179.954032][T17786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.959922][T17786] RIP: 0033:0x7fe272b9f559 [ 1179.964334][T17786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.983936][T17786] RSP: 002b:00007fe273a78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1179.992348][T17786] RAX: ffffffffffffffda RBX: 00007fe272e25fa0 RCX: 00007fe272b9f559 [ 1180.000309][T17786] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000005 [ 1180.008273][T17786] RBP: 00007fe272c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1180.016235][T17786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.024196][T17786] R13: 00007fe272e26038 R14: 00007fe272e25fa0 R15: 00007ffd23758c28 [ 1180.032181][T17786] [ 1180.381611][T11634] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1180.523353][ T4289] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1180.561026][T17802] loop5: detected capacity change from 0 to 2048 [ 1180.589531][T11634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1180.617400][T11634] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1180.629183][T17802] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1180.635432][T11634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.675364][T11634] usb 5-1: config 0 descriptor?? [ 1180.697518][T17786] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1180.912665][T11634] usbhid 5-1:0.0: can't add hid device: -71 [ 1180.918682][T11634] usbhid: probe of 5-1:0.0 failed with error -71 [ 1180.943409][T11634] usb 5-1: USB disconnect, device number 28 [ 1181.089578][T17808] Driver unsupported XDP return value 0 on prog (id 163) dev N/A, expect packet loss! [ 1181.111475][ T4370] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1181.307374][ T4370] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 1181.347922][ T4370] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50 [ 1181.388661][ T4370] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.431436][ T4370] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1181.478651][ T4370] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1181.498045][ T4370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1181.521631][ T4370] usb 6-1: Product: syz [ 1181.525846][ T4370] usb 6-1: Manufacturer: syz [ 1181.768306][T17804] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1181.791277][T17804] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1181.824419][ T4370] dvb_ttusb_budget: ttusb_init_controller: error [ 1181.844227][ T4370] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1183.132862][T17836] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1183.647520][T17836] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 1184.138242][T17824] loop1: detected capacity change from 0 to 32768 [ 1184.152774][T17814] loop3: detected capacity change from 0 to 40427 [ 1184.201477][T17814] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1184.253094][ T4370] DVB: Unable to find symbol cx22700_attach() [ 1184.256146][T17814] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1185.223937][T17814] F2FS-fs (loop3): build fault injection attr: rate: 2, type: 0x3ffff [ 1185.241479][T17814] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 1185.392107][T17814] F2FS-fs (loop3): invalid crc value [ 1185.427856][T17814] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 1185.617752][ T4370] DVB: Unable to find symbol tda10046_attach() [ 1185.624728][ T4370] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1185.685081][ T4370] usb 6-1: USB disconnect, device number 15 [ 1186.106917][T17858] loop3: detected capacity change from 0 to 512 [ 1186.228503][T17858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1186.323266][T17858] EXT4-fs (loop3): 1 truncate cleaned up [ 1186.331612][T17858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1186.617719][ T4289] Bluetooth: Wrong link type (-22) [ 1186.623112][ T4289] Bluetooth: hci5: link tx timeout [ 1186.630466][ T4289] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1186.644633][ T4289] Bluetooth: hci5: link tx timeout [ 1186.649827][ T4289] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1186.699956][T17871] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #12: comm syz.3.3769: bad extra_isize 62 (inode size 256) [ 1186.796279][T17871] EXT4-fs (loop3): Remounting filesystem read-only [ 1187.120418][T14483] EXT4-fs (loop3): unmounting filesystem. [ 1188.691413][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 1189.351747][ T4288] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1189.420636][T17884] loop3: detected capacity change from 0 to 2048 [ 1189.520059][T17884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1189.778598][T17893] TCP: TCP_TX_DELAY enabled [ 1190.218346][T17907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3786'. [ 1190.419760][T17920] loop1: detected capacity change from 0 to 1024 [ 1190.461573][ T4370] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1190.552203][T17920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1190.793543][ T4370] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1190.812020][ T4370] usb 4-1: not running at top speed; connect to a high speed hub [ 1191.359196][T15028] EXT4-fs (loop1): unmounting filesystem. [ 1191.371475][ T4370] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 1191.386429][ T4370] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1191.395889][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.404162][ T4370] usb 4-1: Product: syz [ 1191.408348][ T4370] usb 4-1: Manufacturer: syz [ 1191.413310][ T4370] usb 4-1: SerialNumber: syz [ 1191.421670][T11634] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1191.628344][ T4370] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1191.636199][T11634] usb 6-1: too many configurations: 87, using maximum allowed: 8 [ 1191.661285][T11634] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1191.691632][T11634] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.699727][T11634] usb 6-1: Product: syz [ 1191.738926][T11634] usb 6-1: Manufacturer: syz [ 1191.748116][T11634] usb 6-1: SerialNumber: syz [ 1191.751157][T17913] loop4: detected capacity change from 0 to 32768 [ 1191.837028][ T4370] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1191.846283][ T4370] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1191.854220][ T4370] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1191.858872][T17913] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1191.863924][ T4370] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1191.879983][ T4370] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1191.888844][ T4370] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1191.902040][T17913] XFS (loop4): Mounting V5 Filesystem [ 1192.746417][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1192.858021][ T4370] usb 4-1: USB disconnect, device number 127 [ 1193.184927][T17221] udevd[17221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.237954][T17913] XFS (loop4): Ending clean mount [ 1193.327659][T17913] XFS (loop4): Quotacheck needed: Please wait. [ 1193.847076][T17913] XFS (loop4): Quotacheck: Done. [ 1193.936162][T15692] XFS (loop4): Unmounting Filesystem [ 1194.047866][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1194.077190][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 1194.110187][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 1194.143820][T17957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1194.157751][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1194.169724][T17957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1194.181758][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1194.208125][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1194.224530][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1194.245225][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1194.283446][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1194.303719][T11634] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1194.320352][T11634] lan78xx: probe of 6-1:1.0 failed with error -71 [ 1194.352654][T11634] usb 6-1: USB disconnect, device number 16 [ 1194.382544][T17963] loop1: detected capacity change from 0 to 1024 [ 1194.610384][T17964] loop3: detected capacity change from 0 to 32768 [ 1194.639773][T17964] JBD2: Ignoring recovery information on journal [ 1194.647625][T17964] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 1194.656801][T17964] JBD2: bad block at offset 32 [ 1194.664777][T17964] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1194.692241][T17963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1195.026187][T17976] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 1195.047116][T17976] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1195.057031][T17976] OCFS2: File system is now read-only. [ 1195.063198][T17976] (syz.3.3802,17976,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1195.071789][T17976] (syz.3.3802,17976,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 1195.082013][T17976] (syz.3.3802,17976,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 1195.090373][T17976] (syz.3.3802,17976,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 1195.099358][T17976] (syz.3.3802,17976,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 1195.107499][T17976] (syz.3.3802,17976,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 1195.116371][T17976] (syz.3.3802,17976,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 1195.142237][T17976] (syz.3.3802,17976,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 1195.799715][T15028] EXT4-fs (loop1): unmounting filesystem. [ 1196.026576][T14483] ocfs2: Unmounting device (7,3) on (node local) [ 1196.892139][T18006] loop5: detected capacity change from 0 to 128 [ 1197.039768][T18006] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1197.091660][T18006] hpfs: filesystem error: improperly stopped [ 1197.107897][T18006] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1197.131450][T18006] hpfs: You really don't want any checks? You are crazy... [ 1197.158736][T18006] hpfs: Code page index out of array [ 1197.164509][T18006] hpfs: code page support is disabled [ 1197.181483][T18006] hpfs: hpfs_map_4sectors(): unaligned read [ 1197.188492][T18006] hpfs: hpfs_map_4sectors(): unaligned read [ 1197.204158][T18006] hpfs: filesystem error: unable to find root dir [ 1197.233944][T18006] hpfs: hpfs_map_4sectors(): unaligned read [ 1197.251686][T18006] hpfs: hpfs_map_sector(): read error [ 1198.083176][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cfc6800: rx timeout, send abort [ 1198.277950][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cfc6800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1198.711741][T11633] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1198.926855][T11633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.961213][T11633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.987515][T11633] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1199.000721][T11633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.018307][T11633] usb 4-1: config 0 descriptor?? [ 1199.231518][T11634] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 1199.240631][T18023] ceph: No mds server is up or the cluster is laggy [ 1199.463801][T11633] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 1199.470851][T11633] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 1199.511604][T11633] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 1199.518604][T11633] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 1199.575010][T11633] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 1199.605411][T11633] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 1199.635812][T11633] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 1199.681782][T11633] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1199.845362][T11633] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 1200.014260][T11633] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 1200.027766][T11633] cp2112: probe of 0003:10C4:EA90.0008 failed with error -5 [ 1201.791792][ T8565] usb 4-1: USB disconnect, device number 2 [ 1202.026526][T18071] mmap: syz.1.3836 (18071) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1202.350099][T18077] input: syz0 as /devices/virtual/input/input49 [ 1202.951709][T14684] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1203.022746][ C1] vcan0: j1939_tp_rxtimer: 0xffff888070cb2c00: rx timeout, send abort [ 1203.031212][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888070cb2c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1203.181543][T14684] usb 4-1: Using ep0 maxpacket: 16 [ 1203.189164][T14684] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 1203.221399][T14684] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.232096][T17111] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1203.271441][T14684] usb 4-1: config 166 has 1 interface, different from the descriptor's value: 2 [ 1203.307678][T14684] usb 4-1: config 166 has no interface number 0 [ 1203.344251][T14684] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1203.387304][T14684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.405796][T14684] usb 4-1: Product: syz [ 1203.434243][T14684] usb 4-1: Manufacturer: syz [ 1203.440353][T17111] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 1203.470779][T14684] usb 4-1: SerialNumber: syz [ 1203.488728][T17111] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50 [ 1203.512535][T14684] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 1203.540191][T17111] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1203.598868][T17111] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1203.621523][T17111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1203.650313][T17111] usb 6-1: Product: syz [ 1203.685372][T17111] usb 6-1: Manufacturer: syz [ 1203.714050][T14684] usb 4-1: USB disconnect, device number 3 [ 1203.963557][T18089] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1203.987809][T18089] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1204.022147][ T7] ------------[ cut here ]------------ [ 1204.023424][T17111] dvb_ttusb_budget: ttusb_init_controller: error [ 1204.028414][ T7] WARNING: CPU: 0 PID: 7 at net/mac80211/iface.c:532 ieee80211_do_stop+0x1b35/0x2060 [ 1204.044435][ T7] Modules linked in: [ 1204.048354][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1204.049665][T17111] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1204.055789][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1204.074384][ T7] Workqueue: events rfkill_op_handler [ 1204.079866][ T7] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 1204.085914][ T7] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 cb 1f cd f7 <0f> 0b e9 f0 e8 ff ff e8 bf 1f cd f7 48 c7 c7 c0 2b c8 8b 89 de e8 [ 1204.105584][ T7] RSP: 0000:ffffc900000c7700 EFLAGS: 00010293 [ 1204.111713][ T7] RAX: ffffffff89b526b5 RBX: 0000000000000001 RCX: ffff88813fe93c00 [ 1204.119697][ T7] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1204.127737][ T7] RBP: ffffc900000c78e8 R08: ffffc900000c75a7 R09: 1ffff92000018eb4 [ 1204.135743][ T7] R10: dffffc0000000000 R11: fffff52000018eb5 R12: ffffc900000c7850 [ 1204.143753][ T7] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88807b482760 [ 1204.151751][ T7] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1204.160670][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1204.167293][ T7] CR2: 00007f568815da08 CR3: 0000000060251000 CR4: 00000000003506f0 [ 1204.175296][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1204.183302][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1204.191278][ T7] Call Trace: [ 1204.194606][ T7] [ 1204.197532][ T7] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1204.203570][ T7] ? rcu_is_watching+0x11/0xa0 [ 1204.208348][ T7] ? __mutex_lock+0x1ab/0xae0 [ 1204.213066][ T7] ? ieee80211_sdata_stop+0x80/0x80 [ 1204.218277][ T7] ? mutex_lock_nested+0x10/0x10 [ 1204.223254][ T7] ? __local_bh_enable_ip+0x136/0x1c0 [ 1204.228661][ T7] ? dev_deactivate_many+0xb49/0xcd0 [ 1204.234060][ T7] ieee80211_stop+0x41f/0x490 [ 1204.238787][ T7] ? dev_deactivate_many+0x242/0xcd0 [ 1204.244147][ T7] ? ieee80211_open+0x200/0x200 [ 1204.249009][ T7] __dev_close_many+0x1d1/0x2b0 [ 1204.253923][ T7] ? dev_close_many+0x400/0x400 [ 1204.258795][ T7] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1204.264997][ T7] dev_close_many+0x21c/0x400 [ 1204.269692][ T7] ? __dev_open+0x430/0x430 [ 1204.274249][ T7] ? __lock_acquire+0x7ea0/0x7ea0 [ 1204.279293][ T7] ? lock_chain_count+0x20/0x20 [ 1204.284191][ T7] ? cfg80211_rfkill_set_block+0x1a/0x40 [ 1204.289947][ T7] dev_close+0x154/0x210 [ 1204.294242][ T7] ? __dev_close_many+0x2b0/0x2b0 [ 1204.299303][ T7] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1204.305238][ T7] ? cfg80211_wiphy_work+0x260/0x260 [ 1204.310535][ T7] cfg80211_shutdown_all_interfaces+0xab/0x1c0 [ 1204.316732][ T7] ? cfg80211_wiphy_work+0x260/0x260 [ 1204.322070][ T7] cfg80211_rfkill_set_block+0x29/0x40 [ 1204.327554][ T7] rfkill_set_block+0x1c1/0x3c0 [ 1204.332454][ T7] ? process_one_work+0x7b4/0x1160 [ 1204.337581][ T7] rfkill_epo+0x75/0x170 [ 1204.341862][ T7] rfkill_op_handler+0x76/0x220 [ 1204.346733][ T7] process_one_work+0x8ab/0x1160 [ 1204.351735][ T7] ? worker_detach_from_pool+0x240/0x240 [ 1204.357376][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1204.362437][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1204.368005][ T7] ? wq_worker_running+0x97/0x190 [ 1204.373078][ T7] worker_thread+0xaf5/0x12a0 [ 1204.377790][ T7] kthread+0x29d/0x330 [ 1204.381871][ T7] ? worker_clr_flags+0x1a0/0x1a0 [ 1204.386887][ T7] ? kthread_blkcg+0xd0/0xd0 [ 1204.391510][ T7] ret_from_fork+0x1f/0x30 [ 1204.395926][ T7] [ 1204.398940][ T7] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1204.406202][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1204.413381][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1204.423425][ T7] Workqueue: events rfkill_op_handler [ 1204.428804][ T7] Call Trace: [ 1204.432096][ T7] [ 1204.435015][ T7] dump_stack_lvl+0x188/0x24e [ 1204.439697][ T7] ? memcpy+0x3c/0x60 [ 1204.443670][ T7] ? show_regs_print_info+0x12/0x12 [ 1204.448862][ T7] ? load_image+0x410/0x410 [ 1204.453361][ T7] panic+0x2d3/0x710 [ 1204.457250][ T7] ? bpf_jit_dump+0xd0/0xd0 [ 1204.461742][ T7] ? ret_from_fork+0x1f/0x30 [ 1204.466321][ T7] __warn+0x2f8/0x4f0 [ 1204.470286][ T7] ? ieee80211_do_stop+0x1b35/0x2060 [ 1204.475556][ T7] ? ieee80211_do_stop+0x1b35/0x2060 [ 1204.480826][ T7] report_bug+0x2ba/0x4f0 [ 1204.485149][ T7] ? ieee80211_do_stop+0x1b35/0x2060 [ 1204.490434][ T7] handle_bug+0x3a/0x70 [ 1204.494581][ T7] exc_invalid_op+0x16/0x40 [ 1204.499067][ T7] asm_exc_invalid_op+0x16/0x20 [ 1204.503904][ T7] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 1204.509785][ T7] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 cb 1f cd f7 <0f> 0b e9 f0 e8 ff ff e8 bf 1f cd f7 48 c7 c7 c0 2b c8 8b 89 de e8 [ 1204.529381][ T7] RSP: 0000:ffffc900000c7700 EFLAGS: 00010293 [ 1204.535438][ T7] RAX: ffffffff89b526b5 RBX: 0000000000000001 RCX: ffff88813fe93c00 [ 1204.543394][ T7] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1204.551353][ T7] RBP: ffffc900000c78e8 R08: ffffc900000c75a7 R09: 1ffff92000018eb4 [ 1204.559304][ T7] R10: dffffc0000000000 R11: fffff52000018eb5 R12: ffffc900000c7850 [ 1204.567259][ T7] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88807b482760 [ 1204.575222][ T7] ? ieee80211_do_stop+0x1b35/0x2060 [ 1204.580497][ T7] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1204.586471][ T7] ? rcu_is_watching+0x11/0xa0 [ 1204.591229][ T7] ? __mutex_lock+0x1ab/0xae0 [ 1204.595887][ T7] ? ieee80211_sdata_stop+0x80/0x80 [ 1204.601081][ T7] ? mutex_lock_nested+0x10/0x10 [ 1204.606002][ T7] ? __local_bh_enable_ip+0x136/0x1c0 [ 1204.611374][ T7] ? dev_deactivate_many+0xb49/0xcd0 [ 1204.616674][ T7] ieee80211_stop+0x41f/0x490 [ 1204.621350][ T7] ? dev_deactivate_many+0x242/0xcd0 [ 1204.626637][ T7] ? ieee80211_open+0x200/0x200 [ 1204.631477][ T7] __dev_close_many+0x1d1/0x2b0 [ 1204.636324][ T7] ? dev_close_many+0x400/0x400 [ 1204.641167][ T7] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1204.647313][ T7] dev_close_many+0x21c/0x400 [ 1204.651990][ T7] ? __dev_open+0x430/0x430 [ 1204.656479][ T7] ? __lock_acquire+0x7ea0/0x7ea0 [ 1204.661493][ T7] ? lock_chain_count+0x20/0x20 [ 1204.666326][ T7] ? cfg80211_rfkill_set_block+0x1a/0x40 [ 1204.671968][ T7] dev_close+0x154/0x210 [ 1204.676200][ T7] ? __dev_close_many+0x2b0/0x2b0 [ 1204.681211][ T7] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1204.687107][ T7] ? cfg80211_wiphy_work+0x260/0x260 [ 1204.692393][ T7] cfg80211_shutdown_all_interfaces+0xab/0x1c0 [ 1204.698549][ T7] ? cfg80211_wiphy_work+0x260/0x260 [ 1204.703822][ T7] cfg80211_rfkill_set_block+0x29/0x40 [ 1204.709268][ T7] rfkill_set_block+0x1c1/0x3c0 [ 1204.714107][ T7] ? process_one_work+0x7b4/0x1160 [ 1204.719204][ T7] rfkill_epo+0x75/0x170 [ 1204.723433][ T7] rfkill_op_handler+0x76/0x220 [ 1204.728269][ T7] process_one_work+0x8ab/0x1160 [ 1204.733200][ T7] ? worker_detach_from_pool+0x240/0x240 [ 1204.738820][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1204.743830][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1204.749362][ T7] ? wq_worker_running+0x97/0x190 [ 1204.754368][ T7] worker_thread+0xaf5/0x12a0 [ 1204.759042][ T7] kthread+0x29d/0x330 [ 1204.763093][ T7] ? worker_clr_flags+0x1a0/0x1a0 [ 1204.768099][ T7] ? kthread_blkcg+0xd0/0xd0 [ 1204.772672][ T7] ret_from_fork+0x1f/0x30 [ 1204.777081][ T7] [ 1204.780222][ T7] Kernel Offset: disabled [ 1204.784643][ T7] Rebooting in 86400 seconds..