last executing test programs: 3m24.031354999s ago: executing program 3 (id=711): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000019080), r0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x1, 0x2000402) lseek(r1, 0x403, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 3m22.591969144s ago: executing program 3 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x20001, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m20.874270167s ago: executing program 3 (id=719): syz_usb_connect(0x6, 0x371, &(0x7f00000005c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgget$private(0x0, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') pread64(r2, &(0x7f0000000040)=""/33, 0x21, 0x73) lseek(r2, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d758438215189798", 0xc2) 3m16.358641339s ago: executing program 3 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) 3m13.407226123s ago: executing program 3 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m9.571048097s ago: executing program 3 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m54.203753739s ago: executing program 32 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.343833498s ago: executing program 0 (id=972): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_open_dev$sndctrl(&(0x7f0000000c40), 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='prev_state.funct', 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16, @ANYBLOB="070027bd7000fbdbdb250200000008000100", @ANYRES32, @ANYBLOB="2c7be67ef7f08942e1bb8d14d05b950800e4cc807e52d8f5623bd4f4408b1a8ca296200f9a07ae71787aae768edfa53d530b954cb426383e0090d78a15e35feefb929256fd9104ca7b511b437d0ee737775d5b21a4d30d349bbf7abeedcfadcc35f0964ec48bbb7d5e1f1dfc2022cfefcafa85495fdc6623a5cab7a83c60c99ff54c77981a2ecaecd26a0e13ce54e54cf5da0fa8a382e77e61e44391aa93", @ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="b9a2e212ba0ac4fdda7d4e6b787e44559fdc3456c5180bec6f0e16c8b71ce714432582b4c9c08279644e880b4e0a716f3019c7a8ab5a4426303a3d2b33baf621c1fdd00ba278848578ca1175a0"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004044) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="722c17303ceb52"], 0xfdef) socket$kcm(0x10, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 24.750346787s ago: executing program 0 (id=973): sched_setaffinity(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 21.83397256s ago: executing program 0 (id=979): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbfs(0x0, 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) chroot(0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000009050000000000000000000000000a0900010073797a3100000000240002000c000280050001000600000014000180080001006401010108000200ac14143908000540000000030c00048008"], 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x20044082) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 14.491047711s ago: executing program 0 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@delneigh={0x4c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x5, 0x2, 0x100, 0xf}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_FLAGS_EXT={0x8}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x68001}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) 13.261425442s ago: executing program 0 (id=985): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) shutdown(r2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0), 0x0, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r4, &(0x7f0000000280)='1', 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) 10.89920571s ago: executing program 4 (id=989): syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0xf5, 0x218, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) 9.326311489s ago: executing program 2 (id=990): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) 9.31898691s ago: executing program 1 (id=991): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbfs(0x0, 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 9.30811325s ago: executing program 4 (id=992): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r0, 0x480}, {r1, 0x38}, {0xffffffffffffffff, 0x2010}, {0xffffffffffffffff, 0x200}], 0x4, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) creat(&(0x7f0000000040)='./file0\x00', 0x82) 8.312059445s ago: executing program 2 (id=993): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000100)=""/234, 0xea}], 0x1) 8.196202847s ago: executing program 0 (id=994): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe80000000000000000000800010000000000000aa"], 0x0) 8.033880571s ago: executing program 4 (id=995): syz_usb_connect(0x6, 0x371, &(0x7f00000005c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgget$private(0x0, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') pread64(r2, &(0x7f0000000040)=""/33, 0x21, 0x73) lseek(r2, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d758438215189798", 0xc2) 6.904131099s ago: executing program 2 (id=996): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) io_setup(0x8, &(0x7f0000000080)) 5.101423264s ago: executing program 1 (id=997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @local, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 5.029722406s ago: executing program 2 (id=998): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x84) getsockopt$inet_mreq(r0, 0x0, 0x50, 0x0, &(0x7f0000000080)=0xff00) 4.525350828s ago: executing program 4 (id=999): io_uring_setup(0x559c, 0x0) setpriority(0x0, 0x0, 0x2a14b58) pipe2$9p(0x0, 0x800) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0xffffff0d) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/203, 0xcb}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x34, r4, 0x1, 0x3, 0x0, {0x1e}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") chroot(0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000001c00)) syz_open_dev$tty20(0xc, 0x4, 0x0) 4.520594618s ago: executing program 2 (id=1007): syz_usb_connect(0x6, 0x371, &(0x7f00000005c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgget$private(0x0, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') pread64(r2, &(0x7f0000000040)=""/33, 0x21, 0x73) lseek(r2, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d758438215189798", 0xc2) 3.25964189s ago: executing program 1 (id=1000): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0xa8, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x22, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115ad", 0x149}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56171, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004000}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) shmctl$SHM_LOCK(0x0, 0xb) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.24481925s ago: executing program 4 (id=1001): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) 680.026263ms ago: executing program 4 (id=1002): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) shutdown(r2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0), 0x0, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r4, &(0x7f0000000280)='1', 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) 679.200793ms ago: executing program 1 (id=1003): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) 469.290389ms ago: executing program 1 (id=1004): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='!', 0x1, 0x2cf2) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd\x00') getdents(r1, &(0x7f0000001ec0)=""/4108, 0x100c) 468.366849ms ago: executing program 2 (id=1005): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x42, 0xc0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000240)=""/244, 0xf4) 0s ago: executing program 1 (id=1006): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbfs(0x0, 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 77.959226][ T5763] cgroup: Unknown subsys name 'net' [ 78.099517][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.772541][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.340422][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.348899][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.357140][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.365552][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.400354][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.407855][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.451072][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.459423][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.468405][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.476157][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.483542][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.491653][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.499210][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.507104][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.514909][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.536019][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.543505][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.553152][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.560522][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.568531][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.576479][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.589996][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.599495][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.621797][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.026253][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.070319][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 82.169714][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 82.236200][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 82.304829][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.313166][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.320410][ T5779] bridge_slave_0: entered allmulticast mode [ 82.327657][ T5779] bridge_slave_0: entered promiscuous mode [ 82.350012][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.359791][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.367060][ T5775] bridge_slave_0: entered allmulticast mode [ 82.374577][ T5775] bridge_slave_0: entered promiscuous mode [ 82.383052][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.390283][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.398019][ T5779] bridge_slave_1: entered allmulticast mode [ 82.405479][ T5779] bridge_slave_1: entered promiscuous mode [ 82.446481][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.453711][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.460850][ T5775] bridge_slave_1: entered allmulticast mode [ 82.468150][ T5775] bridge_slave_1: entered promiscuous mode [ 82.535059][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.545295][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.552717][ T5782] bridge_slave_0: entered allmulticast mode [ 82.559714][ T5782] bridge_slave_0: entered promiscuous mode [ 82.568965][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.576196][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.584084][ T5782] bridge_slave_1: entered allmulticast mode [ 82.591020][ T5782] bridge_slave_1: entered promiscuous mode [ 82.600764][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.613083][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.634363][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.687842][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.709453][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.724285][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.745256][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.752809][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.759987][ T5778] bridge_slave_0: entered allmulticast mode [ 82.767982][ T5778] bridge_slave_0: entered promiscuous mode [ 82.799148][ T5779] team0: Port device team_slave_0 added [ 82.808012][ T5779] team0: Port device team_slave_1 added [ 82.814400][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.824058][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.831193][ T5778] bridge_slave_1: entered allmulticast mode [ 82.838813][ T5778] bridge_slave_1: entered promiscuous mode [ 82.859192][ T5775] team0: Port device team_slave_0 added [ 82.868780][ T5775] team0: Port device team_slave_1 added [ 82.888437][ T5782] team0: Port device team_slave_0 added [ 82.930132][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.942156][ T5782] team0: Port device team_slave_1 added [ 82.971753][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.978862][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.005206][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.020472][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.052456][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.059435][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.086443][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.107864][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.115107][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.141177][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.190901][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.198047][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.224198][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.236063][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.243561][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.270077][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.283562][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.290531][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.316773][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.343082][ T5778] team0: Port device team_slave_0 added [ 83.357834][ T5778] team0: Port device team_slave_1 added [ 83.376412][ T5779] hsr_slave_0: entered promiscuous mode [ 83.383395][ T5779] hsr_slave_1: entered promiscuous mode [ 83.462196][ T5777] Bluetooth: hci0: command tx timeout [ 83.475780][ T5775] hsr_slave_0: entered promiscuous mode [ 83.482745][ T5775] hsr_slave_1: entered promiscuous mode [ 83.488933][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.497491][ T5775] Cannot create hsr debugfs directory [ 83.527186][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.534410][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.560469][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.573448][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.580434][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.606438][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.623871][ T5782] hsr_slave_0: entered promiscuous mode [ 83.630814][ T5777] Bluetooth: hci3: command tx timeout [ 83.630835][ T5786] Bluetooth: hci1: command tx timeout [ 83.642649][ T5782] hsr_slave_1: entered promiscuous mode [ 83.648961][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.656602][ T5782] Cannot create hsr debugfs directory [ 83.701770][ T5777] Bluetooth: hci2: command tx timeout [ 83.748223][ T5778] hsr_slave_0: entered promiscuous mode [ 83.755056][ T5778] hsr_slave_1: entered promiscuous mode [ 83.762721][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.770295][ T5778] Cannot create hsr debugfs directory [ 84.157449][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.171126][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.184054][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.206148][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.281258][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.302805][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.315609][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.345447][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.388641][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.406933][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.422483][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.436099][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.563122][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.574576][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.595661][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.607178][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.674134][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.728561][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.755143][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.778763][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.786207][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.816069][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.823337][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.838384][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.848584][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.903636][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.910811][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.923248][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.930427][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.949876][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.989181][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.996364][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.024842][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.032110][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.068464][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.083554][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.188244][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.241147][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.294450][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.301674][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.333797][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.340984][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.385949][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.542815][ T5777] Bluetooth: hci0: command tx timeout [ 85.662957][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.685065][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.704083][ T5777] Bluetooth: hci3: command tx timeout [ 85.709545][ T5777] Bluetooth: hci1: command tx timeout [ 85.783398][ T5777] Bluetooth: hci2: command tx timeout [ 85.814977][ T5779] veth0_vlan: entered promiscuous mode [ 85.850373][ T5775] veth0_vlan: entered promiscuous mode [ 85.880988][ T5779] veth1_vlan: entered promiscuous mode [ 85.929222][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.938121][ T5775] veth1_vlan: entered promiscuous mode [ 85.989551][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.046846][ T5775] veth0_macvtap: entered promiscuous mode [ 86.059381][ T5775] veth1_macvtap: entered promiscuous mode [ 86.077091][ T5779] veth0_macvtap: entered promiscuous mode [ 86.105452][ T5779] veth1_macvtap: entered promiscuous mode [ 86.127425][ T5782] veth0_vlan: entered promiscuous mode [ 86.160399][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.188822][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.200019][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.212298][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.223931][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.244060][ T5782] veth1_vlan: entered promiscuous mode [ 86.254858][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.275651][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.287983][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.295783][ T5778] veth0_vlan: entered promiscuous mode [ 86.313947][ T5778] veth1_vlan: entered promiscuous mode [ 86.324457][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.333556][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.343414][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.352778][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.373926][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.383010][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.392114][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.400856][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.519978][ T5782] veth0_macvtap: entered promiscuous mode [ 86.532301][ T5782] veth1_macvtap: entered promiscuous mode [ 86.583448][ T5778] veth0_macvtap: entered promiscuous mode [ 86.600170][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.611601][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.622982][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.634578][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.647380][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.678249][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.690634][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.701665][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.712221][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.723933][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.732421][ T5778] veth1_macvtap: entered promiscuous mode [ 86.762284][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.770352][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.790614][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.804035][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.812906][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.822497][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.881144][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.895989][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.910243][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.919959][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.931656][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.942729][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.950822][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.963725][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.974347][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.987141][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.999334][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.068204][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.083712][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.095832][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.106688][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.117485][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.129711][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.154240][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.212063][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.220859][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.246104][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.255156][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.302273][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.310146][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.462500][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.470376][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.621587][ T5777] Bluetooth: hci0: command tx timeout [ 87.655030][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.676952][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.688730][ T5838] syzkaller0: entered promiscuous mode [ 87.714804][ T5838] syzkaller0: entered allmulticast mode [ 87.766667][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.791625][ T5777] Bluetooth: hci1: command tx timeout [ 87.797107][ T5777] Bluetooth: hci3: command tx timeout [ 87.811998][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.862243][ T5777] Bluetooth: hci2: command tx timeout [ 88.440830][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.542815][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.034103][ T5852] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7'. [ 90.401446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.811603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 91.190425][ T5786] Bluetooth: hci0: command tx timeout [ 91.192642][ T5777] Bluetooth: hci3: command tx timeout [ 91.197133][ T5786] Bluetooth: hci1: command tx timeout [ 91.201244][ T5777] Bluetooth: hci2: command tx timeout [ 91.331980][ T788] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.551422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.606037][ T1190] cfg80211: failed to load regulatory.db [ 92.711492][ T788] usb 2-1: device descriptor read/all, error -71 [ 93.198803][ T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.247469][ T5777] Bluetooth: hci3: command tx timeout [ 93.518170][ T5874] tipc: Started in network mode [ 93.596922][ T5874] tipc: Node identity d665a462bf58, cluster identity 4711 [ 93.701201][ T5874] tipc: Enabled bearer , priority 0 [ 93.991560][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.999469][ T788] usb 2-1: no configurations [ 94.023834][ T5873] tipc: Disabling bearer [ 94.043112][ T788] usb 2-1: can't read configurations, error -22 [ 94.091615][ T788] usb usb2-port1: attempt power cycle [ 97.008409][ T5887] netlink: 'syz.3.19': attribute type 9 has an invalid length. [ 97.028440][ T5897] Bluetooth: MGMT ver 1.22 [ 97.069436][ T5897] unsupported nlmsg_type 40 [ 97.098184][ T5900] ======================================================= [ 97.098184][ T5900] WARNING: The mand mount option has been deprecated and [ 97.098184][ T5900] and is ignored by this kernel. Remove the mand [ 97.098184][ T5900] option from the mount to silence this warning. [ 97.098184][ T5900] ======================================================= [ 97.133120][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.376966][ T5897] netlink: 312 bytes leftover after parsing attributes in process `syz.1.21'. [ 98.081504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.292846][ T5915] xt_hashlimit: size too large, truncated to 1048576 [ 103.853515][ T5936] capability: warning: `syz.2.26' uses 32-bit capabilities (legacy support in use) [ 104.910278][ T5939] netlink: 312 bytes leftover after parsing attributes in process `syz.2.33'. [ 105.487378][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 105.562620][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 106.262772][ T5945] ceph: No mds server is up or the cluster is laggy [ 106.413493][ T788] libceph: connect (1)[c::]:6789 error -101 [ 106.419531][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 107.184610][ T5951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.30'. [ 107.196391][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.30'. [ 107.911773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 110.061910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.471508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 111.981610][ T5967] netlink: 312 bytes leftover after parsing attributes in process `syz.1.42'. [ 112.421652][ T788] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 112.579409][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 112.681053][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 112.739538][ T788] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.103493][ T788] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.179077][ T5972] ceph: No mds server is up or the cluster is laggy [ 113.193229][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 113.199291][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 113.321563][ T788] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.361620][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.455102][ T788] hub 2-1:4.0: USB hub found [ 113.641637][ T788] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 113.743963][ T5977] syz.0.37 uses obsolete (PF_INET,SOCK_PACKET) [ 113.754207][ T788] usb 2-1: USB disconnect, device number 5 [ 114.362934][ T5981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45'. [ 114.372060][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.45'. [ 116.502440][ T5989] jffs2: notice: (5989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 116.713308][ T5989] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 116.996860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 117.633420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 118.298932][ T5998] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.720539][ T6003] Cannot find set identified by id 0 to match [ 118.738297][ T5987] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 118.738297][ T5987] program syz.0.48 not setting count and/or reply_len properly [ 122.347348][ T6014] netlink: 312 bytes leftover after parsing attributes in process `syz.1.52'. [ 123.381209][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.54'. [ 123.392000][ T6020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.54'. [ 123.961607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.800310][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.57'. [ 127.673329][ T6051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.63'. [ 128.752326][ T6049] netlink: 312 bytes leftover after parsing attributes in process `syz.3.64'. [ 131.698703][ T6062] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 131.698703][ T6062] program syz.3.66 not setting count and/or reply_len properly [ 131.924425][ T6063] warning: `syz.1.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.113947][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 132.986936][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.122624][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.981721][ T5833] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.211421][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 134.230321][ T5833] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 134.526346][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.662354][ T6083] netlink: 40 bytes leftover after parsing attributes in process `syz.2.73'. [ 134.701644][ T5833] usb 2-1: Product: syz [ 134.902829][ T5833] usb 2-1: Manufacturer: syz [ 135.072086][ T5833] usb 2-1: SerialNumber: syz [ 135.083108][ T5833] usb 2-1: config 0 descriptor?? [ 135.321685][ T5833] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 136.535366][ T6092] netlink: 312 bytes leftover after parsing attributes in process `syz.2.74'. [ 136.541983][ T5833] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 136.891541][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.314394][ T5833] usb 2-1: USB disconnect, device number 6 [ 137.491532][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 137.535224][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.606831][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.651540][ T27] usb 1-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 137.668500][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.723428][ T27] usb 1-1: config 0 descriptor?? [ 137.793547][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.78'. [ 139.403195][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 139.409227][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 139.449903][ T27] usb 1-1: USB disconnect, device number 2 [ 140.279408][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.82'. [ 142.763356][ T6130] syz.0.83[6130]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 144.927252][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.935734][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.804443][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.908894][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.320100][ T6110] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.329276][ T6110] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.338440][ T6110] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.362753][ T6110] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.710465][ T6140] netlink: 312 bytes leftover after parsing attributes in process `syz.0.87'. [ 148.726209][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 151.904316][ T6158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.91'. [ 153.608179][ T6168] syzkaller0: entered promiscuous mode [ 153.613838][ T6168] syzkaller0: entered allmulticast mode [ 153.901647][ T6128] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.096468][ T6168] tipc: Enabled bearer , priority 0 [ 154.127514][ T6128] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.158398][ T6128] usb 2-1: no configurations [ 154.172425][ T6167] tipc: Resetting bearer [ 154.181899][ T6128] usb 2-1: can't read configurations, error -22 [ 154.292344][ T6167] tipc: Disabling bearer [ 154.929357][ T6177] netlink: 312 bytes leftover after parsing attributes in process `syz.0.98'. [ 155.136994][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.99'. [ 155.173192][ T6182] netlink: 'syz.1.100': attribute type 19 has an invalid length. [ 158.694093][ T6196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.103'. [ 161.260758][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 162.313713][ T6208] netlink: 312 bytes leftover after parsing attributes in process `syz.1.109'. [ 164.136401][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 166.252660][ T6230] loop4: detected capacity change from 0 to 7 [ 166.475366][ T6232] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.115'. [ 167.225636][ T6230] Dev loop4: unable to read RDB block 7 [ 167.231486][ T6230] loop4: unable to read partition table [ 167.237289][ T6230] loop4: partition table beyond EOD, truncated [ 167.243488][ T6230] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 170.496096][ T6240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.677513][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.119'. [ 171.887059][ T6251] netlink: 312 bytes leftover after parsing attributes in process `syz.1.120'. [ 173.217187][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.121'. [ 174.214016][ T5787] Bluetooth: hci3: command tx timeout [ 183.565216][ T6296] netlink: 312 bytes leftover after parsing attributes in process `syz.1.131'. [ 184.735996][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'. [ 192.450512][ T6338] 0x00000000000a-0x000000000309 : "" [ 192.620520][ T6338] ftl_cs: FTL header corrupt! [ 194.522631][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.550836][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.139205][ T6342] netlink: 312 bytes leftover after parsing attributes in process `syz.0.142'. [ 198.191636][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'. [ 200.888573][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 202.886178][ T6370] netlink: 312 bytes leftover after parsing attributes in process `syz.3.151'. [ 204.351407][ T5833] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 206.313145][ T5833] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 206.452049][ T5833] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 206.462716][ T5833] usb 1-1: config 4 has no interface number 0 [ 206.468873][ T5833] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.508009][ T5833] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 206.531520][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.554900][ T5833] usb 1-1: Product: syz [ 206.559125][ T5833] usb 1-1: Manufacturer: syz [ 206.577482][ T5833] usb 1-1: SerialNumber: syz [ 206.743244][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 206.749404][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 206.755547][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 206.765547][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 207.086641][ T5833] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 207.254390][ T5833] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 207.264157][ T5833] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 207.269811][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.154'. [ 207.290925][ T5833] usb 1-1: media controller created [ 207.303824][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.520098][ T5833] DVB: Unable to find symbol dib7000p_attach() [ 207.527746][ T5833] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 207.851608][ T5833] rc_core: IR keymap rc-dib0700-rc5 not found [ 207.881764][ T5833] Registered IR keymap rc-empty [ 207.904668][ T5833] dvb-usb: could not initialize remote control. [ 207.974549][ T5833] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 208.178688][ T5833] usb 1-1: USB disconnect, device number 3 [ 208.926716][ T5833] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 209.101736][ T6407] netlink: 312 bytes leftover after parsing attributes in process `syz.3.160'. [ 216.251730][ T6434] binder: 6432:6434 ioctl 4018620d 0 returned -22 [ 217.559443][ T6441] netlink: 312 bytes leftover after parsing attributes in process `syz.3.172'. [ 218.125286][ T6444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.173'. [ 225.192141][ T6469] erspan0: entered promiscuous mode [ 225.208496][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 226.063768][ T6474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.182'. [ 227.079248][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 230.211479][ T5833] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 230.795862][ T6496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.191'. [ 230.829827][ T6496] Zero length message leads to an empty skb [ 231.977292][ T6487] tipc: Started in network mode [ 232.021444][ T6487] tipc: Node identity 2eef64ba81ff, cluster identity 4711 [ 232.055420][ T6487] tipc: Enabled bearer , priority 0 [ 232.115620][ T5833] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.124063][ T5833] usb 4-1: no configurations [ 232.128890][ T5833] usb 4-1: can't read configurations, error -22 [ 232.195910][ T6486] tipc: Disabling bearer [ 232.248020][ T6501] netlink: 312 bytes leftover after parsing attributes in process `syz.1.183'. [ 235.776476][ T5815] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 236.133190][ T5815] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 236.143240][ T5815] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 236.156099][ T5815] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 236.910703][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.919037][ T5815] usb 2-1: Product: syz [ 236.923750][ T5815] usb 2-1: Manufacturer: syz [ 236.928433][ T5815] usb 2-1: SerialNumber: syz [ 236.936467][ T5815] usb 2-1: config 0 descriptor?? [ 236.951487][ T6516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.959200][ T6516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.841316][ C1] sched: RT throttling activated [ 239.278549][ T5815] dm9601: probe of 2-1:0.0 failed with error -71 [ 239.322430][ T5815] usb 2-1: USB disconnect, device number 9 [ 239.974937][ T6544] netlink: 312 bytes leftover after parsing attributes in process `syz.0.201'. [ 243.667874][ T6562] netlink: 'syz.2.205': attribute type 9 has an invalid length. [ 245.462692][ T6566] process 'syz.1.213' launched '/dev/fd/10' with NULL argv: empty string added [ 246.912768][ T6576] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6576] [ 246.987189][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 247.084994][ T6580] netlink: 312 bytes leftover after parsing attributes in process `syz.3.216'. [ 250.988136][ T6604] loop3: detected capacity change from 0 to 2048 [ 251.233681][ T6604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.300985][ T6604] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.255267][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.870722][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.877307][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.208418][ T6631] netlink: 312 bytes leftover after parsing attributes in process `syz.2.229'. [ 260.983445][ T6649] syzkaller0: entered promiscuous mode [ 261.001336][ T6649] syzkaller0: entered allmulticast mode [ 261.301829][ T5833] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 261.628103][ T6649] tipc: Enabled bearer , priority 0 [ 261.657441][ T6646] tipc: Resetting bearer [ 261.667562][ T5833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.851661][ T5833] usb 2-1: no configurations [ 261.856325][ T5833] usb 2-1: can't read configurations, error -22 [ 261.918999][ T6646] tipc: Disabling bearer [ 263.361920][ T6677] netlink: 312 bytes leftover after parsing attributes in process `syz.3.239'. [ 266.081128][ T6700] loop1: detected capacity change from 0 to 512 [ 266.188171][ T6700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.222297][ T6700] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.646943][ T6716] syzkaller0: entered promiscuous mode [ 268.677016][ T6716] syzkaller0: entered allmulticast mode [ 268.971522][ T5814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 269.124788][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.182987][ T6716] tipc: Enabled bearer , priority 0 [ 269.231537][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.236757][ T6715] tipc: Resetting bearer [ 269.251486][ T5814] usb 4-1: no configurations [ 269.256138][ T5814] usb 4-1: can't read configurations, error -22 [ 269.354500][ T6715] tipc: Disabling bearer [ 269.402805][ T6718] netlink: 312 bytes leftover after parsing attributes in process `syz.2.252'. [ 270.409823][ T6728] FAULT_INJECTION: forcing a failure. [ 270.409823][ T6728] name failslab, interval 1, probability 0, space 0, times 1 [ 270.451390][ T6728] CPU: 1 PID: 6728 Comm: syz.3.255 Not tainted syzkaller #0 [ 270.458747][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.468828][ T6728] Call Trace: [ 270.472130][ T6728] [ 270.475085][ T6728] dump_stack_lvl+0x18c/0x250 [ 270.479789][ T6728] ? show_regs_print_info+0x20/0x20 [ 270.484994][ T6728] ? load_image+0x420/0x420 [ 270.489519][ T6728] ? __might_sleep+0xe0/0xe0 [ 270.494128][ T6728] ? __lock_acquire+0x7d80/0x7d80 [ 270.499182][ T6728] should_fail_ex+0x394/0x4c0 [ 270.503880][ T6728] should_failslab+0x9/0x20 [ 270.508413][ T6728] slab_pre_alloc_hook+0x59/0x300 [ 270.513470][ T6728] ? alloc_fdtable+0xca/0x2c0 [ 270.518166][ T6728] __kmem_cache_alloc_node+0x53/0x250 [ 270.523671][ T6728] ? __lock_acquire+0x7d80/0x7d80 [ 270.528742][ T6728] ? alloc_fdtable+0xca/0x2c0 [ 270.533460][ T6728] kmalloc_trace+0x2a/0xe0 [ 270.537887][ T6728] alloc_fdtable+0xca/0x2c0 [ 270.542402][ T6728] dup_fd+0x747/0xa20 [ 270.546406][ T6728] ? __ia32_sys_get_robust_list+0x110/0x110 [ 270.552327][ T6728] ksys_unshare+0x45c/0x8f0 [ 270.556853][ T6728] ? sighand_ctor+0x50/0x50 [ 270.561381][ T6728] ? lock_chain_count+0x20/0x20 [ 270.566266][ T6728] ? syscall_enter_from_user_mode+0x25/0x80 [ 270.572179][ T6728] __x64_sys_unshare+0x38/0x40 [ 270.576955][ T6728] do_syscall_64+0x55/0xb0 [ 270.581385][ T6728] ? clear_bhb_loop+0x40/0x90 [ 270.586067][ T6728] ? clear_bhb_loop+0x40/0x90 [ 270.590757][ T6728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.596670][ T6728] RIP: 0033:0x7f6d2879e159 [ 270.601100][ T6728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.620718][ T6728] RSP: 002b:00007f6d2961d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 270.629226][ T6728] RAX: ffffffffffffffda RBX: 00007f6d28a25fa0 RCX: 00007f6d2879e159 [ 270.637208][ T6728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024040400 [ 270.645183][ T6728] RBP: 00007f6d28835024 R08: 0000000000000000 R09: 0000000000000000 [ 270.653167][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.661139][ T6728] R13: 00007f6d28a26038 R14: 00007f6d28a25fa0 R15: 00007fff66300ec8 [ 270.669129][ T6728] [ 273.236969][ T6752] netlink: 312 bytes leftover after parsing attributes in process `syz.2.262'. [ 274.159870][ T6757] sctp: failed to load transform for md5: -2 [ 274.167176][ T6758] sctp: failed to load transform for md5: -2 [ 284.524034][ T6825] sctp: failed to load transform for md5: -2 [ 284.530907][ T6826] sctp: failed to load transform for md5: -2 [ 287.480782][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 287.566033][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 287.914280][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 287.961152][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 288.219670][ T6849] ceph: No mds server is up or the cluster is laggy [ 288.691742][ T6860] tipc: Enabled bearer , priority 0 [ 290.580522][ T6128] tipc: Node number set to 2937087162 [ 293.151528][ T788] libceph: connect (1)[c::]:6789 error -101 [ 293.226449][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 293.598919][ T788] libceph: connect (1)[c::]:6789 error -101 [ 293.682316][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 293.896498][ T6890] ceph: No mds server is up or the cluster is laggy [ 294.199466][ T6896] loop2: detected capacity change from 0 to 256 [ 294.613453][ T6896] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 295.057775][ T28] audit: type=1800 audit(1788450122.185:2): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.296" name="file1" dev="loop2" ino=1048722 res=0 errno=0 [ 299.714010][ T6926] loop1: detected capacity change from 0 to 128 [ 299.782755][ T6926] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.867096][ T6926] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.977349][ T6926] syz.1.302 (pid 6926) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 300.105149][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.237511][ T6132] libceph: connect (1)[c::]:6789 error -101 [ 301.249366][ T6132] libceph: mon0 (1)[c::]:6789 connect error [ 301.573891][ T6132] libceph: connect (1)[c::]:6789 error -101 [ 301.646245][ T6132] libceph: mon0 (1)[c::]:6789 connect error [ 301.936427][ T6937] ceph: No mds server is up or the cluster is laggy [ 302.061956][ T6132] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 302.306539][ T6132] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 302.361315][ T6132] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 302.481117][ T6132] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 302.633717][ T6132] usb 4-1: config 220 has no interface number 2 [ 302.783247][ T6132] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 302.861391][ T6132] usb 4-1: config 220 interface 0 has no altsetting 0 [ 302.868257][ T6132] usb 4-1: config 220 interface 76 has no altsetting 0 [ 302.912834][ T6132] usb 4-1: config 220 interface 1 has no altsetting 0 [ 302.998449][ T6132] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 303.082817][ T6132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.351859][ T6132] usb 4-1: Product: syz [ 303.356166][ T6132] usb 4-1: Manufacturer: syz [ 303.360822][ T6132] usb 4-1: SerialNumber: syz [ 303.439313][ T6955] loop1: detected capacity change from 0 to 512 [ 303.462420][ T6955] ext4: Unknown parameter 'dont_appraise' [ 303.497709][ T6955] overlayfs: workdir and upperdir must reside under the same mount [ 303.660652][ T6132] usb 4-1: selecting invalid altsetting 0 [ 303.704105][ T6132] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 303.710553][ T6132] usb 4-1: No valid video chain found. [ 303.907739][ T6132] usb 4-1: selecting invalid altsetting 0 [ 304.005964][ T6132] usbtest: probe of 4-1:220.1 failed with error -22 [ 304.286235][ T6132] usb 4-1: USB disconnect, device number 6 [ 307.095400][ T6981] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 309.987472][ T7004] loop1: detected capacity change from 0 to 512 [ 310.061037][ T7004] ext4: Unknown parameter 'smackfsroot' [ 310.557651][ T6132] libceph: connect (1)[c::]:6789 error -101 [ 310.603055][ T6132] libceph: mon0 (1)[c::]:6789 connect error [ 310.944282][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 311.009067][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 311.250061][ T7014] ceph: No mds server is up or the cluster is laggy [ 314.481392][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 314.530345][ T7050] loop1: detected capacity change from 0 to 128 [ 314.601821][ T7050] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.671729][ T7050] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.698369][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.711318][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.741650][ T788] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 314.771129][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.812873][ T788] usb 3-1: config 0 descriptor?? [ 315.767026][ T788] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 315.891087][ T788] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 315.941753][ T788] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 315.949238][ T788] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 316.006221][ T788] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 316.861501][ T7064] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 318.048030][ T788] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 318.082247][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.088604][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.213030][ T788] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 318.331479][ T788] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 318.426198][ T788] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 318.790597][ T788] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 318.810178][ T788] playstation: probe of 0003:054C:0DF2.0001 failed with error -71 [ 318.997963][ T788] usb 3-1: USB disconnect, device number 2 [ 319.509709][ T7085] loop2: detected capacity change from 0 to 512 [ 320.479365][ T7085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 320.487567][ T7085] System zones: 1-12 [ 320.533746][ T7085] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.344: missing EA_INODE flag [ 320.553951][ T7085] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.344: error while reading EA inode 12 err=-117 [ 320.567124][ T7085] EXT4-fs (loop2): 1 orphan inode deleted [ 320.574464][ T7085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.419841][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.298162][ T7133] WARNING! power/level is deprecated; use power/control instead [ 330.230385][ T7139] loop1: detected capacity change from 0 to 512 [ 330.282037][ T7139] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.589195][ T7139] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 331.307746][ T7147] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 331.334848][ T7139] Quota error (device loop1): write_blk: dquota write failed [ 331.441349][ T7139] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 331.618085][ T7139] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.360: Failed to acquire dquot type 0 [ 331.664837][ T7139] EXT4-fs (loop1): 1 truncate cleaned up [ 331.692360][ T7139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.776807][ T7139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.133535][ T7154] loop1: detected capacity change from 0 to 16 [ 332.212743][ T7154] erofs: (device loop1): mounted with root inode @ nid 36. [ 332.742524][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 332.860533][ T7169] bridge0: port 3(vlan2) entered blocking state [ 332.867741][ T7169] bridge0: port 3(vlan2) entered disabled state [ 332.874806][ T7169] vlan2: entered allmulticast mode [ 332.880034][ T7169] dummy0: entered allmulticast mode [ 332.892994][ T7169] vlan2: entered promiscuous mode [ 332.898100][ T7169] dummy0: entered promiscuous mode [ 336.417306][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 336.467551][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 336.859054][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 336.929509][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 337.140767][ T7194] ceph: No mds server is up or the cluster is laggy [ 337.815454][ T7205] netlink: 'syz.2.376': attribute type 9 has an invalid length. [ 340.051476][ T7219] sctp: failed to load transform for md5: -4 [ 340.053496][ T7218] sctp: failed to load transform for md5: -2 [ 340.553518][ T6128] libceph: connect (1)[c::]:6789 error -101 [ 340.610971][ T6128] libceph: mon0 (1)[c::]:6789 connect error [ 340.965715][ T6128] libceph: connect (1)[c::]:6789 error -101 [ 341.046312][ T6128] libceph: mon0 (1)[c::]:6789 connect error [ 341.351074][ T7232] ceph: No mds server is up or the cluster is laggy [ 341.647050][ T7241] loop1: detected capacity change from 0 to 512 [ 341.969398][ T7241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 342.158716][ T7241] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.501601][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 343.629772][ T7257] netlink: 'syz.3.386': attribute type 9 has an invalid length. [ 344.797818][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 344.826626][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.885370][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.919314][ T5833] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 344.928838][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.955891][ T5833] usb 3-1: config 0 descriptor?? [ 345.973249][ T7276] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 346.030810][ T7270] sctp: failed to load transform for md5: -2 [ 346.037829][ T7272] sctp: failed to load transform for md5: -2 [ 346.290382][ T5833] hid-led 0003:1D34:000A.0002: item fetching failed at offset 0/3 [ 346.300359][ T5833] hid-led: probe of 0003:1D34:000A.0002 failed with error -22 [ 346.394742][ T7285] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 347.024726][ T5833] usb 3-1: USB disconnect, device number 3 [ 347.226363][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 347.622038][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 347.924682][ T7293] ceph: No mds server is up or the cluster is laggy [ 347.978374][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 348.014102][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 349.338954][ T7317] netlink: 'syz.2.397': attribute type 9 has an invalid length. [ 352.154655][ T7330] tipc: Resetting bearer [ 352.500792][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.508170][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.861761][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 353.061557][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 353.076173][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.096526][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.115760][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 353.126952][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.146129][ T9] usb 3-1: config 0 descriptor?? [ 353.577412][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.657587][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.283571][ T7330] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.293541][ T7330] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.302533][ T7330] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.311649][ T7330] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.024457][ T7363] netlink: 'syz.1.408': attribute type 9 has an invalid length. [ 356.626644][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 356.665101][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 356.697698][ T9] usb 3-1: USB disconnect, device number 4 [ 359.125432][ T7393] nfs4: Bad value for 'sec' [ 361.256591][ T7400] netlink: 'syz.3.418': attribute type 9 has an invalid length. [ 364.121876][ T7427] nfs4: Bad value for 'sec' [ 365.910936][ T7350] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 365.922920][ T7433] netlink: 'syz.1.428': attribute type 9 has an invalid length. [ 367.295161][ T7444] loop4: detected capacity change from 0 to 7 [ 367.373068][ T7446] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.432'. [ 368.667019][ T7444] Dev loop4: unable to read RDB block 7 [ 368.672716][ T7444] loop4: unable to read partition table [ 368.678601][ T7444] loop4: partition table beyond EOD, truncated [ 368.684896][ T7444] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 370.657944][ T7350] libceph: connect (1)[c::]:6789 error -101 [ 370.711835][ T7350] libceph: mon0 (1)[c::]:6789 connect error [ 370.808145][ T7350] libceph: connect (1)[c::]:6789 error -101 [ 370.890646][ T7350] libceph: mon0 (1)[c::]:6789 connect error [ 371.385306][ T7459] ceph: No mds server is up or the cluster is laggy [ 372.461569][ T7464] netlink: 'syz.0.438': attribute type 9 has an invalid length. [ 376.009546][ T7350] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 376.471527][ T7350] usb 4-1: Using ep0 maxpacket: 8 [ 376.567973][ T7350] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 376.659959][ T7350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.740776][ T7350] usb 4-1: Product: syz [ 376.782175][ T7350] usb 4-1: Manufacturer: syz [ 376.830985][ T7350] usb 4-1: SerialNumber: syz [ 376.987959][ T7350] usb 4-1: config 0 descriptor?? [ 377.258589][ T7350] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 378.046144][ T7500] loop4: detected capacity change from 0 to 7 [ 378.117132][ T7502] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.442'. [ 379.430099][ T7350] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 379.448353][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.457331][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.561602][ T7500] Dev loop4: unable to read RDB block 7 [ 379.567232][ T7500] loop4: unable to read partition table [ 379.573139][ T7500] loop4: partition table beyond EOD, truncated [ 379.579804][ T7500] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 379.681320][ T7503] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 379.858156][ T8] usb 4-1: USB disconnect, device number 7 [ 383.494122][ T7535] loop4: detected capacity change from 0 to 7 [ 383.652110][ T7537] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.457'. [ 384.432379][ T7535] Dev loop4: unable to read RDB block 7 [ 384.437979][ T7535] loop4: unable to read partition table [ 384.443828][ T7535] loop4: partition table beyond EOD, truncated [ 384.450037][ T7535] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 384.882726][ T7539] netlink: 'syz.1.448': attribute type 9 has an invalid length. [ 387.105551][ T7544] netlink: 'syz.2.452': attribute type 9 has an invalid length. [ 387.651605][ T6128] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 388.398729][ T7552] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 388.541419][ T6128] usb 1-1: Using ep0 maxpacket: 8 [ 388.583477][ T6128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.608070][ T6128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.631341][ T6128] usb 1-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 388.648851][ T6128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.661797][ T6128] usb 1-1: config 0 descriptor?? [ 393.074922][ T7581] loop4: detected capacity change from 0 to 7 [ 393.144161][ T7583] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.467'. [ 394.462542][ T7581] Dev loop4: unable to read RDB block 7 [ 394.468181][ T7581] loop4: unable to read partition table [ 394.474131][ T7581] loop4: partition table beyond EOD, truncated [ 394.480428][ T7581] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 394.601766][ T6128] usbhid 1-1:0.0: can't add hid device: -32 [ 394.607817][ T6128] usbhid: probe of 1-1:0.0 failed with error -32 [ 396.002309][ T7585] netlink: 'syz.2.469': attribute type 9 has an invalid length. [ 396.137303][ T6128] usb 1-1: USB disconnect, device number 4 [ 399.442059][ T7605] netlink: 'syz.3.468': attribute type 9 has an invalid length. [ 402.131323][ T7629] nfs4: Unknown parameter 's' [ 403.788423][ T7630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.471'. [ 403.798947][ T7630] tipc: Invalid UDP bearer configuration [ 403.803475][ T7630] tipc: Enabling of bearer rejected, failed to enable media [ 405.781818][ T7635] netlink: 'syz.3.482': attribute type 9 has an invalid length. [ 409.931674][ T7668] loop2: detected capacity change from 0 to 40427 [ 409.984467][ T7669] nfs4: Bad value for 'sec' [ 410.754128][ T7668] F2FS-fs (loop2): heap/no_heap options were deprecated [ 410.761470][ T7668] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 412.933444][ T7677] netlink: 'syz.0.491': attribute type 9 has an invalid length. [ 413.659666][ T7682] netlink: 'syz.2.494': attribute type 9 has an invalid length. [ 414.013205][ T7686] 0x00000000000a-0x000000000309 : "" [ 414.244688][ T7691] loop0: detected capacity change from 0 to 256 [ 416.719629][ T7686] ftl_cs: FTL header corrupt! [ 419.877416][ T7705] nfs4: Bad value for 'sec' [ 422.087733][ T7715] loop1: detected capacity change from 0 to 256 [ 422.296021][ T7715] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 424.284332][ T7719] netlink: 'syz.0.503': attribute type 9 has an invalid length. [ 425.371660][ T5814] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 426.741434][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 428.184820][ T5814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 428.199651][ T5814] usb 2-1: no configurations [ 428.205489][ T5814] usb 2-1: can't read configurations, error -22 [ 428.807369][ T7758] nfs4: Bad value for 'sec' [ 430.109676][ T7762] netlink: 'syz.0.510': attribute type 9 has an invalid length. [ 432.213905][ T7768] loop3: detected capacity change from 0 to 512 [ 432.462664][ T7768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.515: iget: bad extra_isize 58 (inode size 256) [ 432.544425][ T7768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.515: error while reading EA inode 11 err=-117 [ 432.593963][ T7768] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 432.631543][ T7768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.515: iget: bad extra_isize 58 (inode size 256) [ 432.691378][ T7768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.515: error while reading EA inode 11 err=-117 [ 432.722279][ T7768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.515: iget: bad extra_isize 58 (inode size 256) [ 432.771733][ T7768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.515: error while reading EA inode 18 err=-117 [ 432.805061][ T7768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.515: iget: bad extra_isize 58 (inode size 256) [ 432.835936][ T7768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.515: error while reading EA inode 18 err=-117 [ 432.882762][ T7768] EXT4-fs (loop3): 1 orphan inode deleted [ 432.890059][ T7768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.128993][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.589729][ T7773] netlink: 'syz.3.516': attribute type 9 has an invalid length. [ 435.184802][ T7778] loop4: detected capacity change from 0 to 7 [ 435.346949][ T7780] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.512'. [ 436.115524][ T7778] Dev loop4: unable to read RDB block 7 [ 436.121117][ T7778] loop4: unable to read partition table [ 436.126984][ T7778] loop4: partition table beyond EOD, truncated [ 436.133206][ T7778] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 439.681332][ T6132] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 440.075678][ T7806] netlink: 'syz.2.521': attribute type 9 has an invalid length. [ 440.887750][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.894151][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.937039][ T7788] tipc: Enabling of bearer rejected, failed to enable media [ 440.963999][ T6132] usb 4-1: unable to get BOS descriptor or descriptor too short [ 440.981098][ T6132] usb 4-1: no configurations [ 441.071261][ T6132] usb 4-1: can't read configurations, error -22 [ 442.306303][ T7816] 0x000000000000-0x000000020000 : "" [ 442.348169][ T7816] ftl_cs: FTL header not found. [ 442.795794][ T7820] netlink: 'syz.1.525': attribute type 9 has an invalid length. [ 445.736021][ T7845] loop4: detected capacity change from 0 to 7 [ 445.888710][ T7847] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.527'. [ 446.721424][ T7845] Dev loop4: unable to read RDB block 7 [ 446.727077][ T7845] loop4: unable to read partition table [ 446.732929][ T7845] loop4: partition table beyond EOD, truncated [ 446.739105][ T7845] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 448.520682][ T7858] netlink: 'syz.3.535': attribute type 9 has an invalid length. [ 450.752226][ T7863] overlayfs: failed to resolve './file1/file0': -2 [ 455.636137][ T7897] netlink: 'syz.2.544': attribute type 9 has an invalid length. [ 459.043839][ T7912] sctp: failed to load transform for md5: -2 [ 459.050814][ T7914] sctp: failed to load transform for md5: -2 [ 460.612318][ T7933] overlayfs: failed to resolve './file1/file0': -2 [ 461.964664][ T7939] netlink: 'syz.2.548': attribute type 9 has an invalid length. [ 463.565672][ T7945] netlink: 'syz.3.556': attribute type 9 has an invalid length. [ 468.263593][ T7960] sctp: failed to load transform for md5: -2 [ 468.270545][ T7962] sctp: failed to load transform for md5: -2 [ 470.101958][ T7984] netlink: 'syz.0.563': attribute type 9 has an invalid length. [ 471.973749][ T7992] netlink: 'syz.1.566': attribute type 9 has an invalid length. [ 473.459461][ T7995] syzkaller0: entered promiscuous mode [ 473.467555][ T7995] syzkaller0: entered allmulticast mode [ 473.802442][ T5814] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 474.015394][ T7995] tipc: Started in network mode [ 474.021295][ T7995] tipc: Node identity 427ed4fe9367, cluster identity 4711 [ 474.028716][ T7995] tipc: Enabled bearer , priority 0 [ 474.064750][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 474.079959][ T5814] usb 1-1: no configurations [ 474.086527][ T7994] tipc: Resetting bearer [ 474.101690][ T5814] usb 1-1: can't read configurations, error -22 [ 474.678981][ T7994] tipc: Disabling bearer [ 474.893701][ T8006] sctp: failed to load transform for md5: -2 [ 474.901498][ T8007] sctp: failed to load transform for md5: -2 [ 477.290796][ T8030] sg_write: data in/out 1536/136 bytes for SCSI command 0x0-- guessing data in; [ 477.290796][ T8030] program syz.3.572 not setting count and/or reply_len properly [ 481.804388][ T8056] syzkaller0: entered promiscuous mode [ 481.875241][ T8058] sctp: failed to load transform for md5: -2 [ 481.882664][ T8060] sctp: failed to load transform for md5: -2 [ 482.601269][ T8056] syzkaller0: entered allmulticast mode [ 484.431907][ T5814] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 484.650039][ T8080] sg_write: data in/out 1536/136 bytes for SCSI command 0x0-- guessing data in; [ 484.650039][ T8080] program syz.1.584 not setting count and/or reply_len properly [ 487.785765][ T8098] netlink: 'syz.0.590': attribute type 9 has an invalid length. [ 491.846475][ T8113] loop4: detected capacity change from 0 to 7 [ 492.008907][ T8115] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.592'. [ 492.773640][ T8113] Dev loop4: unable to read RDB block 7 [ 492.779341][ T8113] loop4: unable to read partition table [ 492.785172][ T8113] loop4: partition table beyond EOD, truncated [ 492.791383][ T8113] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 494.756195][ T8125] overlayfs: failed to resolve './file1/file0': -2 [ 495.327775][ T8130] netlink: 'syz.2.600': attribute type 9 has an invalid length. [ 497.835985][ T8140] sg_write: data in/out 1536/136 bytes for SCSI command 0x0-- guessing data in; [ 497.835985][ T8140] program syz.0.595 not setting count and/or reply_len properly [ 501.400887][ T8163] overlayfs: failed to resolve './file1/file0': -2 [ 501.681941][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.688307][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.355835][ T8179] netlink: 'syz.1.612': attribute type 9 has an invalid length. [ 507.897736][ T8191] overlayfs: failed to resolve './file1/file0': -2 [ 508.146483][ T8196] loop0: detected capacity change from 0 to 512 [ 508.284090][ T8196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.383730][ T8196] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 511.337614][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.876214][ T8217] netlink: 'syz.0.623': attribute type 9 has an invalid length. [ 515.615943][ T8229] loop4: detected capacity change from 0 to 7 [ 516.531674][ T8229] Dev loop4: unable to read RDB block 7 [ 516.537280][ T8229] loop4: unable to read partition table [ 516.543550][ T8229] loop4: partition table beyond EOD, truncated [ 516.549724][ T8229] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 517.727963][ T8238] overlayfs: overlapping lowerdir path [ 518.061913][ T8245] netlink: 'syz.0.625': attribute type 9 has an invalid length. [ 518.799922][ T8242] syzkaller0: entered promiscuous mode [ 518.826562][ T8242] syzkaller0: entered allmulticast mode [ 519.101344][ T5814] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 519.248792][ T8250] 0x000000000000-0x000000020000 : "" [ 519.302205][ T8250] ftl_cs: FTL header not found. [ 519.335408][ T8242] tipc: Enabled bearer , priority 0 [ 519.356122][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 519.372928][ T5814] usb 4-1: no configurations [ 519.393453][ T5814] usb 4-1: can't read configurations, error -22 [ 519.431661][ T8241] tipc: Resetting bearer [ 519.525285][ T8241] tipc: Disabling bearer [ 521.521520][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 522.361484][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 522.369558][ T8272] netlink: 312 bytes leftover after parsing attributes in process `syz.3.638'. [ 522.392241][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.412906][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.444966][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 522.487541][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.505066][ T8274] overlayfs: overlapping lowerdir path [ 522.556586][ T8] usb 2-1: config 0 descriptor?? [ 523.387876][ T8285] netlink: 'syz.3.640': attribute type 9 has an invalid length. [ 524.901422][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 524.982464][ T8287] syzkaller0: entered promiscuous mode [ 524.988245][ T8287] syzkaller0: entered allmulticast mode [ 525.153799][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 525.159905][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 525.212360][ T8] usb 2-1: USB disconnect, device number 14 [ 525.301394][ T5814] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 525.484656][ T8287] tipc: Started in network mode [ 525.489636][ T8287] tipc: Node identity f257ba871ef3, cluster identity 4711 [ 525.507772][ T8287] tipc: Enabled bearer , priority 0 [ 525.523520][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 525.551487][ T5814] usb 3-1: no configurations [ 525.560235][ T5814] usb 3-1: can't read configurations, error -22 [ 525.570130][ T8286] tipc: Resetting bearer [ 525.607746][ T8286] tipc: Disabling bearer [ 526.615288][ T8302] overlayfs: overlapping lowerdir path [ 527.787719][ T8307] netlink: 312 bytes leftover after parsing attributes in process `syz.2.648'. [ 528.924561][ T8320] netlink: 'syz.1.651': attribute type 9 has an invalid length. [ 529.219475][ T8324] 0x00000000000a-0x000000000309 : "" [ 529.234281][ T8324] ftl_cs: FTL header corrupt! [ 529.241419][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 530.843011][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 532.675727][ T8336] syzkaller0: entered promiscuous mode [ 532.681434][ T8336] syzkaller0: entered allmulticast mode [ 532.967702][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 532.991341][ T6132] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 533.003599][ T9] usb 1-1: can't read configurations, error -71 [ 533.225683][ T8336] tipc: Enabled bearer , priority 0 [ 533.320743][ T6132] usb 3-1: unable to get BOS descriptor or descriptor too short [ 533.396258][ T6132] usb 3-1: no configurations [ 533.442995][ T6132] usb 3-1: can't read configurations, error -22 [ 533.511409][ T8335] tipc: Resetting bearer [ 533.606964][ T8335] tipc: Disabling bearer [ 535.894329][ T8349] netlink: 312 bytes leftover after parsing attributes in process `syz.3.660'. [ 536.969184][ T8360] overlayfs: overlapping lowerdir path [ 537.988722][ T8363] 0x00000000000a-0x000000000309 : "" [ 538.004301][ T8363] ftl_cs: FTL header corrupt! [ 543.991252][ T5814] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 544.211249][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 544.220784][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.256973][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.387215][ T5814] usb 1-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 544.407543][ T7350] libceph: connect (1)[c::]:6789 error -101 [ 544.499497][ T7350] libceph: mon0 (1)[c::]:6789 connect error [ 544.529423][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.722703][ T5814] usb 1-1: config 0 descriptor?? [ 544.873057][ T7350] libceph: connect (1)[c::]:6789 error -101 [ 544.961397][ T7350] libceph: mon0 (1)[c::]:6789 connect error [ 545.102232][ T8388] ceph: No mds server is up or the cluster is laggy [ 548.081453][ T5814] usb 1-1: can't set config #0, error -71 [ 548.206754][ T5814] usb 1-1: USB disconnect, device number 9 [ 549.410309][ T8407] overlayfs: overlapping lowerdir path [ 551.182925][ T8414] netlink: 'syz.1.677': attribute type 9 has an invalid length. [ 555.685841][ T8437] netlink: 312 bytes leftover after parsing attributes in process `syz.2.684'. [ 556.708883][ T8444] overlayfs: overlapping lowerdir path [ 557.042025][ T8446] netlink: 'syz.2.687': attribute type 9 has an invalid length. [ 558.001367][ T6128] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 558.196075][ T8450] syzkaller0: entered promiscuous mode [ 558.202086][ T8450] syzkaller0: entered allmulticast mode [ 558.245741][ T6128] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 558.261616][ T6128] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 558.286438][ T6128] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 558.311364][ T6128] usb 2-1: config 220 has no interface number 2 [ 558.317753][ T6128] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 558.353459][ T6128] usb 2-1: config 220 interface 0 has no altsetting 0 [ 558.360478][ T6128] usb 2-1: config 220 interface 76 has no altsetting 0 [ 558.381612][ T6128] usb 2-1: config 220 interface 1 has no altsetting 0 [ 558.392260][ T6128] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 558.411470][ T6128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.419529][ T6128] usb 2-1: Product: syz [ 558.431217][ T6128] usb 2-1: Manufacturer: syz [ 558.435883][ T6128] usb 2-1: SerialNumber: syz [ 558.481356][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 558.675392][ T8450] tipc: Enabled bearer , priority 0 [ 558.693727][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.711459][ T9] usb 1-1: no configurations [ 558.716112][ T9] usb 1-1: can't read configurations, error -22 [ 558.731686][ T8449] tipc: Resetting bearer [ 558.798203][ T8449] tipc: Disabling bearer [ 558.897884][ T6128] usb 2-1: selecting invalid altsetting 0 [ 558.911995][ T6128] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 558.918477][ T6128] usb 2-1: No valid video chain found. [ 558.936311][ T6128] usb 2-1: selecting invalid altsetting 0 [ 558.946189][ T6128] usbtest: probe of 2-1:220.1 failed with error -22 [ 558.958765][ T6128] usb 2-1: USB disconnect, device number 15 [ 564.613527][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.620340][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.753044][ T8472] netlink: 312 bytes leftover after parsing attributes in process `syz.2.693'. [ 567.247196][ T8492] syzkaller0: entered promiscuous mode [ 567.336922][ T8492] syzkaller0: entered allmulticast mode [ 567.681482][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 568.361463][ T8507] netlink: 312 bytes leftover after parsing attributes in process `syz.2.704'. [ 571.053993][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 571.067551][ T9] usb 4-1: no configurations [ 571.072973][ T9] usb 4-1: can't read configurations, error -22 [ 575.228589][ T8548] loop2: detected capacity change from 0 to 512 [ 575.362515][ T8548] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 575.690744][ T8548] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 576.433217][ T8548] Quota error (device loop2): write_blk: dquota write failed [ 576.487379][ T8548] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 577.051640][ T8548] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.714: Failed to acquire dquot type 0 [ 577.270836][ T8548] EXT4-fs (loop2): 1 truncate cleaned up [ 577.910647][ T8548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.549827][ T8548] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.471404][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 590.131565][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 590.165932][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.444317][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.564395][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 590.591524][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.747945][ T8] usb 4-1: config 0 descriptor?? [ 595.907135][ T8] usbhid 4-1:0.0: can't add hid device: -32 [ 596.658185][ T8] usbhid: probe of 4-1:0.0 failed with error -32 [ 598.021338][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 602.011824][ T6128] usb 4-1: USB disconnect, device number 15 [ 606.356899][ T8669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 606.370985][ T8669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 606.380581][ T8669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 606.394698][ T8669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 606.420709][ T8669] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 606.430938][ T8669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 608.821277][ T5777] Bluetooth: hci4: command tx timeout [ 609.169157][ T8682] loop1: detected capacity change from 0 to 512 [ 609.304828][ T8682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.369000][ T5779] tipc: Disabling bearer [ 609.411381][ T8682] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 609.654565][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.689664][ T8668] chnl_net:caif_netlink_parms(): no params data found [ 610.971317][ T5777] Bluetooth: hci4: command tx timeout [ 611.637760][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.701354][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.708582][ T8668] bridge_slave_0: entered allmulticast mode [ 611.771312][ T8668] bridge_slave_0: entered promiscuous mode [ 611.794620][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.811354][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.826711][ T8668] bridge_slave_1: entered allmulticast mode [ 611.844579][ T8668] bridge_slave_1: entered promiscuous mode [ 612.448286][ T8700] bridge0: port 3(vlan2) entered blocking state [ 612.455300][ T8700] bridge0: port 3(vlan2) entered disabled state [ 612.464333][ T8700] vlan2: entered allmulticast mode [ 612.469524][ T8700] dummy0: entered allmulticast mode [ 612.481786][ T8700] vlan2: entered promiscuous mode [ 612.486924][ T8700] dummy0: entered promiscuous mode [ 612.579088][ T8668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.719479][ T8668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.837764][ T8668] team0: Port device team_slave_0 added [ 612.903755][ T8668] team0: Port device team_slave_1 added [ 612.997273][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.011288][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.093498][ T8668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.108249][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.115718][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.142273][ T5777] Bluetooth: hci4: command tx timeout [ 613.149676][ T8668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.270573][ T5777] Bluetooth: hci4: command tx timeout [ 616.222405][ T8668] hsr_slave_0: entered promiscuous mode [ 616.304506][ T8668] hsr_slave_1: entered promiscuous mode [ 616.347581][ T8668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.359324][ T8668] Cannot create hsr debugfs directory [ 616.654691][ T8715] netlink: 'syz.2.764': attribute type 4 has an invalid length. [ 617.617828][ T8715] netlink: 'syz.2.764': attribute type 4 has an invalid length. [ 618.023740][ T8668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 619.503561][ T8668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 619.617845][ T8668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 619.710504][ T8668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 620.296096][ T8732] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.770'. [ 621.557612][ T8668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.612024][ T8668] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.643432][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.650616][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.699304][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.706601][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.286232][ T8668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.515924][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.587392][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.059863][ T8668] veth0_vlan: entered promiscuous mode [ 627.288530][ T8668] veth1_vlan: entered promiscuous mode [ 627.316336][ T8767] loop1: detected capacity change from 0 to 40427 [ 627.379966][ T8767] F2FS-fs (loop1): heap/no_heap options were deprecated [ 627.388148][ T8767] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 628.648497][ T8668] veth0_macvtap: entered promiscuous mode [ 628.706143][ T8668] veth1_macvtap: entered promiscuous mode [ 630.048236][ T8773] netlink: 'syz.2.777': attribute type 9 has an invalid length. [ 630.087762][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.191050][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.209238][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.226325][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.246218][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.272616][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.301201][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.311058][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.341271][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.360201][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.390896][ T8668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.418548][ T8668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.441189][ T8668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.449937][ T8668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.751778][ T8782] 0x00000000000a-0x000000000309 : "" [ 631.820656][ T8782] ftl_cs: FTL header corrupt! [ 633.648454][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.681271][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.801820][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.848530][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.028676][ T8810] bridge0: port 3(vlan2) entered blocking state [ 636.035273][ T8810] bridge0: port 3(vlan2) entered disabled state [ 636.041864][ T8810] vlan2: entered allmulticast mode [ 636.047017][ T8810] dummy0: entered allmulticast mode [ 636.054002][ T8810] vlan2: entered promiscuous mode [ 636.059084][ T8810] dummy0: entered promiscuous mode [ 637.629579][ T8819] netlink: 'syz.2.787': attribute type 9 has an invalid length. [ 640.200512][ T8834] loop1: detected capacity change from 0 to 256 [ 643.423609][ T8849] netlink: 'syz.2.798': attribute type 9 has an invalid length. [ 649.828532][ T8883] netlink: 'syz.2.808': attribute type 9 has an invalid length. [ 650.651864][ T8669] Bluetooth: hci4: command tx timeout [ 653.865859][ T6132] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 654.123830][ T8901] tipc: Enabled bearer , priority 0 [ 654.199553][ T6132] usb 2-1: unable to get BOS descriptor or descriptor too short [ 654.250861][ T6132] usb 2-1: no configurations [ 654.279911][ T6132] usb 2-1: can't read configurations, error -22 [ 654.503516][ T8900] tipc: Disabling bearer [ 656.809649][ T8921] netlink: 'syz.1.818': attribute type 9 has an invalid length. [ 664.304826][ T8946] loop4: detected capacity change from 0 to 7 [ 664.407164][ T8948] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.819'. [ 665.241350][ T8946] Dev loop4: unable to read RDB block 7 [ 665.246988][ T8946] loop4: unable to read partition table [ 665.252846][ T8946] loop4: partition table beyond EOD, truncated [ 665.259043][ T8946] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 667.041270][ T8962] netlink: 'syz.1.827': attribute type 9 has an invalid length. [ 675.131633][ T8995] loop4: detected capacity change from 0 to 7 [ 675.431600][ T8998] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.835'. [ 675.536041][ T8995] Dev loop4: unable to read RDB block 7 [ 675.542967][ T8995] loop4: unable to read partition table [ 675.548855][ T8995] loop4: partition table beyond EOD, truncated [ 675.555079][ T8995] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 682.367516][ T9037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 682.478852][ T9042] loop2: detected capacity change from 0 to 256 [ 682.995034][ T9043] loop4: detected capacity change from 0 to 7 [ 683.062931][ T9045] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.849'. [ 684.003709][ T9043] Dev loop4: unable to read RDB block 7 [ 684.009383][ T9043] loop4: unable to read partition table [ 684.015788][ T9043] loop4: partition table beyond EOD, truncated [ 684.022472][ T9043] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 685.952501][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.959242][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.398411][ T9058] overlayfs: missing 'lowerdir' [ 686.781554][ T9054] loop2: detected capacity change from 0 to 40427 [ 686.865401][ T9054] F2FS-fs (loop2): invalid crc value [ 686.893600][ T9054] F2FS-fs (loop2): Found nat_bits in checkpoint [ 686.957432][ T9070] loop1: detected capacity change from 0 to 128 [ 686.974919][ T9070] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 687.026840][ T9070] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 688.536548][ T9054] F2FS-fs (loop2): Start checkpoint disabled! [ 688.570782][ T9054] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 691.191374][ T9099] loop2: detected capacity change from 0 to 256 [ 691.937837][ T9110] ip_tables: iptables: counters copy to user failed while replacing table [ 692.983321][ T8669] Bluetooth: hci4: command tx timeout [ 697.787305][ T9144] syzkaller0: entered promiscuous mode [ 697.830728][ T9144] syzkaller0: entered allmulticast mode [ 699.731515][ T5832] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 699.936625][ T9144] tipc: Enabled bearer , priority 0 [ 699.972685][ T5832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 699.985832][ T9142] tipc: Resetting bearer [ 700.004630][ T5832] usb 1-1: no configurations [ 700.009961][ T5832] usb 1-1: can't read configurations, error -22 [ 700.133153][ T9142] tipc: Disabling bearer [ 704.067587][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.075138][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.896793][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.949191][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.475971][ T9168] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.484995][ T9168] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.493963][ T9168] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.502965][ T9168] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.557059][ T9177] bridge0: port 3(vlan2) entered blocking state [ 706.563515][ T9177] bridge0: port 3(vlan2) entered disabled state [ 706.569879][ T9177] vlan2: entered allmulticast mode [ 706.575113][ T9177] dummy0: entered allmulticast mode [ 706.581638][ T9177] vlan2: entered promiscuous mode [ 706.586718][ T9177] dummy0: entered promiscuous mode [ 708.073120][ T9207] syzkaller0: entered promiscuous mode [ 708.089278][ T9207] syzkaller0: entered allmulticast mode [ 708.391840][ T9189] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 708.590499][ T9207] tipc: Started in network mode [ 708.602714][ T9207] tipc: Node identity 967b9cf9511e, cluster identity 4711 [ 708.623003][ T9207] tipc: Enabled bearer , priority 0 [ 708.667593][ T9189] usb 5-1: unable to get BOS descriptor or descriptor too short [ 708.696319][ T9189] usb 5-1: no configurations [ 708.702666][ T9189] usb 5-1: can't read configurations, error -22 [ 708.735060][ T9206] tipc: Resetting bearer [ 708.825808][ T9206] tipc: Disabling bearer [ 712.836778][ T9252] bridge0: entered allmulticast mode [ 712.943507][ T9252] FAULT_INJECTION: forcing a failure. [ 712.943507][ T9252] name failslab, interval 1, probability 0, space 0, times 0 [ 713.057669][ T9252] CPU: 1 PID: 9252 Comm: syz.2.906 Not tainted syzkaller #0 [ 713.065027][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.075133][ T9252] Call Trace: [ 713.078465][ T9252] [ 713.081429][ T9252] dump_stack_lvl+0x18c/0x250 [ 713.086177][ T9252] ? show_regs_print_info+0x20/0x20 [ 713.091416][ T9252] ? load_image+0x420/0x420 [ 713.095957][ T9252] ? __might_sleep+0xe0/0xe0 [ 713.100593][ T9252] ? __lock_acquire+0x7d80/0x7d80 [ 713.105673][ T9252] should_fail_ex+0x394/0x4c0 [ 713.110401][ T9252] should_failslab+0x9/0x20 [ 713.114967][ T9252] slab_pre_alloc_hook+0x59/0x300 [ 713.120055][ T9252] kmem_cache_alloc+0x5a/0x2c0 [ 713.124875][ T9252] ? getname_flags+0xbb/0x500 [ 713.129619][ T9252] getname_flags+0xbb/0x500 [ 713.134187][ T9252] do_sys_openat2+0xda/0x1d0 [ 713.138827][ T9252] ? do_sys_open+0xe0/0xe0 [ 713.143305][ T9252] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 713.149334][ T9252] ? lock_chain_count+0x20/0x20 [ 713.154238][ T9252] __x64_sys_openat+0x139/0x160 [ 713.159134][ T9252] do_syscall_64+0x55/0xb0 [ 713.163597][ T9252] ? clear_bhb_loop+0x40/0x90 [ 713.168311][ T9252] ? clear_bhb_loop+0x40/0x90 [ 713.173027][ T9252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.178962][ T9252] RIP: 0033:0x7fbeeef5e98e [ 713.183418][ T9252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 713.203057][ T9252] RSP: 002b:00007fbeefe63b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 713.211510][ T9252] RAX: ffffffffffffffda RBX: 00007fbeefe646c0 RCX: 00007fbeeef5e98e [ 713.219513][ T9252] RDX: 0000000000000002 RSI: 00007fbeefe63c00 RDI: ffffffffffffff9c [ 713.227526][ T9252] RBP: 00007fbeef035024 R08: 0000000000000000 R09: 0000000000000000 [ 713.235546][ T9252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.243559][ T9252] R13: 00007fbeef226038 R14: 00007fbeef225fa0 R15: 00007ffdb2a8b858 [ 713.251605][ T9252] [ 713.254785][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.714577][ T9261] netlink: 'syz.2.911': attribute type 9 has an invalid length. [ 718.281991][ T9268] loop4: detected capacity change from 0 to 256 [ 721.672628][ T9298] netlink: 84 bytes leftover after parsing attributes in process `syz.1.922'. [ 721.702304][ T9300] random: crng reseeded on system resumption [ 723.407286][ T9306] loop1: detected capacity change from 0 to 512 [ 723.491434][ T9306] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.926: corrupted in-inode xattr: invalid ea_ino [ 723.535286][ T9306] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.926: couldn't read orphan inode 15 (err -117) [ 723.570010][ T9306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.743068][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.056325][ T9321] loop1: detected capacity change from 0 to 8192 [ 725.352869][ T9325] loop2: detected capacity change from 0 to 256 [ 728.051921][ T9341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 729.011196][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 730.167273][ T9356] loop1: detected capacity change from 0 to 512 [ 730.206867][ T9356] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 730.299540][ T9356] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 730.473095][ T9356] Quota error (device loop1): write_blk: dquota write failed [ 730.553394][ T9356] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 730.638507][ T9356] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.934: Failed to acquire dquot type 0 [ 730.746960][ T9356] EXT4-fs (loop1): 1 truncate cleaned up [ 730.833502][ T9356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.161379][ T9362] Quota error (device loop1): write_blk: dquota write failed [ 731.169205][ T9362] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 731.179317][ T9362] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.934: Failed to acquire dquot type 0 [ 731.343838][ T9368] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.945'. [ 731.977547][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.262127][ T9384] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 734.516424][ T9384] overlayfs: failed to look up (tracing) for ino (-66) [ 735.756556][ T9387] 0x00000000000a-0x000000000309 : "" [ 735.789113][ T9387] ftl_cs: FTL header corrupt! [ 740.871432][ T9399] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.954'. [ 741.029322][ T9402] loop4: detected capacity change from 0 to 256 [ 741.064495][ T9402] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 741.096519][ T8] libceph: connect (1)[c::]:6789 error -101 [ 741.123168][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 742.477540][ T9406] ceph: No mds server is up or the cluster is laggy [ 742.486781][ T8] libceph: connect (1)[c::]:6789 error -101 [ 742.506090][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 745.670252][ T9430] 0x00000000000a-0x000000000309 : "" [ 745.700704][ T9430] ftl_cs: FTL header corrupt! [ 747.579528][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.589804][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.217316][ T9436] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.966'. [ 750.064979][ T9186] libceph: connect (1)[c::]:6789 error -101 [ 750.083703][ T9186] libceph: mon0 (1)[c::]:6789 connect error [ 751.663707][ T9451] ceph: No mds server is up or the cluster is laggy [ 751.682192][ T9187] libceph: connect (1)[c::]:6789 error -101 [ 751.688468][ T9187] libceph: mon0 (1)[c::]:6789 connect error [ 753.728269][ T9471] loop1: detected capacity change from 0 to 512 [ 753.756242][ T9471] EXT4-fs: Ignoring removed bh option [ 753.790832][ T9471] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 753.833207][ T9471] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 753.844076][ T9471] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.978: Corrupt directory, running e2fsck is recommended [ 753.863144][ T9471] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 753.887740][ T9471] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.978: corrupted in-inode xattr: e_name out of bounds [ 753.921239][ T9471] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.978: couldn't read orphan inode 15 (err -117) [ 753.955434][ T9471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.510438][ T9478] loop2: detected capacity change from 0 to 512 [ 754.525570][ T9478] ext4: Unknown parameter 'smackfsroot' [ 754.598782][ T9480] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 754.827617][ T9484] 0x00000000000a-0x000000000309 : "" [ 754.873813][ T9484] ftl_cs: FTL header corrupt! [ 756.924363][ T9474] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 759.328311][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.361551][ T9492] loop4: detected capacity change from 0 to 256 [ 759.575200][ T9493] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 759.579854][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 759.604463][ T9493] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 759.698363][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.831507][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.840708][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.849483][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.858258][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.866900][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.875905][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.884530][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.921222][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.941285][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 761.988350][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.261946][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.270659][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.331359][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.339987][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.391419][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.399995][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.437239][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.461277][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.508891][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.566317][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.596219][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.628496][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.651589][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.660231][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.691496][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.700073][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.731649][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.740232][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.797506][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.837932][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.864909][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.883983][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.908608][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.932600][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.953504][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.968671][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 763.998632][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.039389][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.066904][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.100714][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.153459][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.189725][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.229147][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.258221][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.294077][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.345271][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.414596][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.446692][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.478041][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.531184][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.539830][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.576604][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.603655][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.629923][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.659538][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.697463][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.723699][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.749970][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.769310][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.797923][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.828426][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.839295][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.865735][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.876164][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.889746][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.906948][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.918330][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.932922][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.946391][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.957853][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.970488][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.985980][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 764.996321][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.013355][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.023090][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.032073][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.040822][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.050352][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.073249][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.088689][ T9509] loop2: detected capacity change from 0 to 256 [ 765.096503][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.110789][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.122821][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.137803][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.162615][ T9509] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 765.179858][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.190068][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.205564][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.218501][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.227936][ T9509] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 765.238184][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.253789][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.275189][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.317463][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.340334][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.373057][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.396425][ T9509] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 765.404363][ T9492] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 765.441150][ T28] audit: type=1800 audit(1788450592.570:3): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.982" name="file1" dev="loop4" ino=1048887 res=0 errno=0 [ 765.492504][ T9509] exFAT-fs (loop2): failed to load alloc-bitmap [ 765.499298][ T9509] exFAT-fs (loop2): failed to recognize exfat type [ 765.511955][ T9492] syz.4.982 (9492) used greatest stack depth: 19824 bytes left [ 766.428022][ T9522] loop4: detected capacity change from 0 to 16 [ 767.471630][ T9531] loop4: detected capacity change from 0 to 7 [ 767.504813][ T9531] Dev loop4: unable to read RDB block 7 [ 767.510657][ T9531] loop4: unable to read partition table [ 767.517159][ T9531] loop4: partition table beyond EOD, truncated [ 767.523652][ T9531] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 767.539536][ T9531] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.990'. [ 768.255094][ T9539] xt_hashlimit: size too large, truncated to 1048576 [ 768.332970][ T6132] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 768.369732][ T6132] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 768.493369][ T9542] fido_id[9542]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 775.483782][ T9568] loop4: detected capacity change from 0 to 7 [ 775.517394][ T9568] Dev loop4: unable to read RDB block 7 [ 775.523323][ T9568] loop4: unable to read partition table [ 775.529732][ T9568] loop4: partition table beyond EOD, truncated [ 775.536194][ T9568] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 775.552584][ T9568] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1001'. [ 776.043915][ T9575] loop1: detected capacity change from 0 to 2048 [ 776.147018][ T9575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.306912][ T28] audit: type=1804 audit(1788450603.440:4): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1004" name="/newroot/258/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 776.423745][ T4486] [ 776.426098][ T4486] ====================================================== [ 776.433171][ T4486] WARNING: possible circular locking dependency detected [ 776.440194][ T4486] syzkaller #0 Not tainted [ 776.444600][ T4486] ------------------------------------------------------ [ 776.451607][ T4486] kworker/u4:12/4486 is trying to acquire lock: [ 776.457836][ T4486] ffff8880525bdac8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0 [ 776.467596][ T4486] [ 776.467596][ T4486] but task is already holding lock: [ 776.474964][ T4486] ffff88807d584c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 776.485011][ T4486] [ 776.485011][ T4486] which lock already depends on the new lock. [ 776.485011][ T4486] [ 776.495434][ T4486] [ 776.495434][ T4486] the existing dependency chain (in reverse order) is: [ 776.504466][ T4486] [ 776.504466][ T4486] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 776.512932][ T4486] percpu_down_read+0x44/0x1a0 [ 776.518245][ T4486] ext4_writepages+0x1a4/0x350 [ 776.523543][ T4486] do_writepages+0x351/0x590 [ 776.528666][ T4486] __writeback_single_inode+0x14e/0xee0 [ 776.534778][ T4486] writeback_single_inode+0x21f/0x760 [ 776.540730][ T4486] write_inode_now+0x183/0x210 [ 776.546053][ T4486] iput+0x58f/0x900 [ 776.550429][ T4486] ext4_xattr_block_set+0x223d/0x3000 [ 776.556367][ T4486] ext4_expand_extra_isize_ea+0x1111/0x1ea0 [ 776.562828][ T4486] __ext4_expand_extra_isize+0x306/0x400 [ 776.569032][ T4486] __ext4_mark_inode_dirty+0x458/0x6d0 [ 776.575047][ T4486] ext4_evict_inode+0x7dd/0xe70 [ 776.580460][ T4486] evict+0x4b7/0x8a0 [ 776.584916][ T4486] ext4_orphan_cleanup+0xc33/0x1470 [ 776.590665][ T4486] ext4_fill_super+0x5fb5/0x6870 [ 776.596161][ T4486] get_tree_bdev+0x3e5/0x520 [ 776.601307][ T4486] vfs_get_tree+0x8c/0x280 [ 776.606287][ T4486] do_new_mount+0x24a/0xa40 [ 776.611344][ T4486] __se_sys_mount+0x2e7/0x3d0 [ 776.616569][ T4486] do_syscall_64+0x55/0xb0 [ 776.621539][ T4486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.627987][ T4486] [ 776.627987][ T4486] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 776.635587][ T4486] __lock_acquire+0x37ef/0x7d80 [ 776.641020][ T4486] lock_acquire+0x19e/0x420 [ 776.646080][ T4486] down_write+0x97/0x200 [ 776.650882][ T4486] ext4_destroy_inline_data+0x28/0xe0 [ 776.656820][ T4486] ext4_do_writepages+0x4f2/0x3990 [ 776.662486][ T4486] ext4_writepages+0x1dd/0x350 [ 776.667802][ T4486] do_writepages+0x351/0x590 [ 776.672955][ T4486] __writeback_single_inode+0x14e/0xee0 [ 776.679060][ T4486] writeback_sb_inodes+0x813/0x1020 [ 776.684809][ T4486] wb_writeback+0x45e/0xbe0 [ 776.689852][ T4486] wb_workfn+0x400/0xe60 [ 776.694653][ T4486] process_scheduled_works+0xa60/0x1600 [ 776.700766][ T4486] worker_thread+0xa5e/0xfe0 [ 776.705913][ T4486] kthread+0x2fa/0x390 [ 776.710538][ T4486] ret_from_fork+0x48/0x80 [ 776.715514][ T4486] ret_from_fork_asm+0x11/0x20 [ 776.720840][ T4486] [ 776.720840][ T4486] other info that might help us debug this: [ 776.720840][ T4486] [ 776.731088][ T4486] Possible unsafe locking scenario: [ 776.731088][ T4486] [ 776.738557][ T4486] CPU0 CPU1 [ 776.743951][ T4486] ---- ---- [ 776.749342][ T4486] rlock(&sbi->s_writepages_rwsem); [ 776.754671][ T4486] lock(&ei->xattr_sem); [ 776.761549][ T4486] lock(&sbi->s_writepages_rwsem); [ 776.769299][ T4486] lock(&ei->xattr_sem); [ 776.773666][ T4486] [ 776.773666][ T4486] *** DEADLOCK *** [ 776.773666][ T4486] [ 776.781830][ T4486] 3 locks held by kworker/u4:12/4486: [ 776.787222][ T4486] #0: ffff88801e24a138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 776.798527][ T4486] #1: ffffc9000f107d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 776.811039][ T4486] #2: ffff88807d584c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 776.821540][ T4486] [ 776.821540][ T4486] stack backtrace: [ 776.827452][ T4486] CPU: 1 PID: 4486 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 776.835112][ T4486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.845195][ T4486] Workqueue: writeback wb_workfn (flush-7:1) [ 776.851231][ T4486] Call Trace: [ 776.854540][ T4486] [ 776.857502][ T4486] dump_stack_lvl+0x18c/0x250 [ 776.862219][ T4486] ? load_image+0x420/0x420 [ 776.866755][ T4486] ? show_regs_print_info+0x20/0x20 [ 776.871998][ T4486] ? print_circular_bug+0x12b/0x1a0 [ 776.877238][ T4486] check_noncircular+0x2fc/0x400 [ 776.882218][ T4486] ? print_deadlock_bug+0x5d0/0x5d0 [ 776.887456][ T4486] ? lockdep_lock+0xf5/0x230 [ 776.892089][ T4486] ? mark_lock+0x94/0x320 [ 776.896460][ T4486] ? _find_first_zero_bit+0xd6/0x100 [ 776.901795][ T4486] __lock_acquire+0x37ef/0x7d80 [ 776.906701][ T4486] ? __read_once_word_nocheck+0x9/0x10 [ 776.912199][ T4486] ? verify_lock_unused+0x140/0x140 [ 776.917436][ T4486] ? __read_once_word_nocheck+0x9/0x10 [ 776.922933][ T4486] ? unwind_next_frame+0x224f/0x2990 [ 776.928253][ T4486] lock_acquire+0x19e/0x420 [ 776.932784][ T4486] ? ext4_destroy_inline_data+0x28/0xe0 [ 776.938344][ T4486] ? __might_sleep+0xe0/0xe0 [ 776.942951][ T4486] ? read_lock_is_recursive+0x20/0x20 [ 776.948342][ T4486] ? __read_once_word_nocheck+0x9/0x10 [ 776.953810][ T4486] ? __might_sleep+0xe0/0xe0 [ 776.958412][ T4486] ? register_lock_class+0xc4/0x8a0 [ 776.963623][ T4486] down_write+0x97/0x200 [ 776.967877][ T4486] ? ext4_destroy_inline_data+0x28/0xe0 [ 776.973427][ T4486] ? down_read_killable+0x340/0x340 [ 776.978632][ T4486] ? ext4_journal_check_start+0x178/0x250 [ 776.984362][ T4486] ext4_destroy_inline_data+0x28/0xe0 [ 776.989741][ T4486] ext4_do_writepages+0x4f2/0x3990 [ 776.994872][ T4486] ? verify_lock_unused+0x140/0x140 [ 777.000072][ T4486] ? __lock_acquire+0x1336/0x7d80 [ 777.005098][ T4486] ? kasan_save_free_info+0x28/0x40 [ 777.010304][ T4486] ? ____kasan_slab_free+0x126/0x1f0 [ 777.015600][ T4486] ? process_scheduled_works+0xa60/0x1600 [ 777.021435][ T4486] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 777.028325][ T4486] ? rcu_read_lock_any_held+0xb4/0x140 [ 777.033790][ T4486] ? __lock_acquire+0x1336/0x7d80 [ 777.038823][ T4486] ext4_writepages+0x1dd/0x350 [ 777.043592][ T4486] ? ext4_read_folio+0x2f0/0x2f0 [ 777.048532][ T4486] ? __rwlock_init+0x150/0x150 [ 777.053310][ T4486] ? do_raw_spin_unlock+0x121/0x230 [ 777.058529][ T4486] ? ext4_read_folio+0x2f0/0x2f0 [ 777.063476][ T4486] do_writepages+0x351/0x590 [ 777.068081][ T4486] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 777.073836][ T4486] ? writeback_sb_inodes+0x4bd/0x1020 [ 777.079220][ T4486] ? __lock_acquire+0x7d80/0x7d80 [ 777.084247][ T4486] ? do_raw_spin_lock+0x11f/0x2b0 [ 777.089297][ T4486] __writeback_single_inode+0x14e/0xee0 [ 777.094866][ T4486] writeback_sb_inodes+0x813/0x1020 [ 777.100124][ T4486] ? queue_io+0x530/0x530 [ 777.104464][ T4486] ? move_expired_inodes+0x726/0x770 [ 777.109788][ T4486] ? rcu_is_watching+0x15/0xb0 [ 777.114569][ T4486] ? queue_io+0x3ba/0x530 [ 777.118910][ T4486] wb_writeback+0x45e/0xbe0 [ 777.123427][ T4486] ? queue_io+0x391/0x530 [ 777.127766][ T4486] ? percpu_ref_tryget+0x250/0x250 [ 777.132892][ T4486] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 777.138876][ T4486] ? __lock_acquire+0x7d80/0x7d80 [ 777.143927][ T4486] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.149146][ T4486] wb_workfn+0x400/0xe60 [ 777.153406][ T4486] ? inode_wait_for_writeback+0x230/0x230 [ 777.159131][ T4486] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 777.165124][ T4486] ? __lock_acquire+0x7d80/0x7d80 [ 777.170149][ T4486] ? read_lock_is_recursive+0x20/0x20 [ 777.175526][ T4486] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.180723][ T4486] ? process_scheduled_works+0x975/0x1600 [ 777.186468][ T4486] ? process_scheduled_works+0x975/0x1600 [ 777.192212][ T4486] process_scheduled_works+0xa60/0x1600 [ 777.197791][ T4486] ? worker_attach_to_pool+0x370/0x370 [ 777.203288][ T4486] ? assign_work+0x3cc/0x5d0 [ 777.207913][ T4486] worker_thread+0xa5e/0xfe0 [ 777.212516][ T4486] ? _raw_spin_unlock+0x40/0x40 [ 777.217368][ T4486] ? __kthread_parkme+0x71/0x1c0 [ 777.222310][ T4486] kthread+0x2fa/0x390 [ 777.226404][ T4486] ? pr_cont_work+0x550/0x550 [ 777.231115][ T4486] ? kthread_blkcg+0xd0/0xd0 [ 777.235716][ T4486] ret_from_fork+0x48/0x80 [ 777.240154][ T4486] ? kthread_blkcg+0xd0/0xd0 [ 777.244750][ T4486] ret_from_fork_asm+0x11/0x20 [ 777.249540][ T4486] [ 777.329395][ T4486] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 777.392997][ T4486] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 777.405824][ T4486] EXT4-fs (loop1): This should not happen!! Data will be lost [ 777.405824][ T4486] [ 777.417140][ T4486] EXT4-fs (loop1): Total free blocks count 0 [ 777.423428][ T4486] EXT4-fs (loop1): Free/Dirty block details [ 777.429955][ T4486] EXT4-fs (loop1): free_blocks=2415919504 [ 777.438038][ T4486] EXT4-fs (loop1): dirty_blocks=16 [ 777.449229][ T4486] EXT4-fs (loop1): Block reservation details [ 777.457304][ T4486] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 777.472468][ T4486] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28