last executing test programs: 9m37.405596727s ago: executing program 32 (id=149): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port0\x00', 0x786520dbf34c80ff, 0x20a03, 0x122, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m13.298770778s ago: executing program 33 (id=216): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r2, 0x3}, 0x8) 7m20.131083777s ago: executing program 34 (id=582): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000300)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) 5m28.272549747s ago: executing program 35 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000091}, 0x840) 5m17.456450972s ago: executing program 36 (id=1009): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = socket(0x10, 0x2, 0x4) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r1, r1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 4m35.026931486s ago: executing program 6 (id=1131): statfs(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 4m30.347124573s ago: executing program 6 (id=1141): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) write$cgroup_pid(r1, &(0x7f0000002700), 0x12) 4m28.632547492s ago: executing program 6 (id=1148): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) lsetxattr(&(0x7f0000000580)='./file1\x00', &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) 4m26.938911566s ago: executing program 6 (id=1153): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='nobarrier,nls=ascii,part=0x0000000000000000,nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00'/15, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x44, 0x729, &(0x7f00000005c0)="$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") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) 4m24.395662137s ago: executing program 6 (id=1160): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 4m13.924766015s ago: executing program 37 (id=1182): r0 = syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x10000, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000e50000000000", @ANYRES32=0x0, @ANYRES32], 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x51, 0x0, @fd, 0x1, 0x0, 0x7, 0x1}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 4m13.784319484s ago: executing program 6 (id=1186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300c046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x55d, &(0x7f0000000b40)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@nogrpid}, {@grpjquota}, {@barrier}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) unlink(&(0x7f0000000440)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4m12.266419376s ago: executing program 38 (id=1186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300c046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x55d, &(0x7f0000000b40)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@nogrpid}, {@grpjquota}, {@barrier}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) unlink(&(0x7f0000000440)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3m6.68110643s ago: executing program 9 (id=1315): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 3m5.496324645s ago: executing program 9 (id=1318): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x7fdaa000) read(r0, &(0x7f00000000c0)=""/175, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 3m0.676433828s ago: executing program 9 (id=1334): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @local}, 0x19) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) 2m58.941405814s ago: executing program 9 (id=1339): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 2m58.760107636s ago: executing program 2 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x55bf9eb, 0x0) 2m57.411531221s ago: executing program 2 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x800000000000001) 2m56.671240581s ago: executing program 9 (id=1347): syz_usb_connect$sierra_net(0x352aadd564ada08, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x20, 0x5, 0x82, 0x5}, {0x9, 0x5, 0x9, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0xf, 0x3, 0x40, 0xa, 0x3f, 0x8}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b30"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000840)={0x14, &(0x7f0000000740)={0x20, 0xc, 0x2, {0x2, 0xa}}, 0x0}, 0x0) 2m56.401586564s ago: executing program 2 (id=1348): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0) 2m55.664320439s ago: executing program 9 (id=1352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e22, 0x4, @empty, 0x4}}, 0x3, 0x0, 0x5, 0x8001, 0x12, 0x4, 0x8}, &(0x7f0000000080)=0x9c) 2m52.877468157s ago: executing program 39 (id=1352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e22, 0x4, @empty, 0x4}}, 0x3, 0x0, 0x5, 0x8001, 0x12, 0x4, 0x8}, &(0x7f0000000080)=0x9c) 2m52.755279814s ago: executing program 2 (id=1358): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 2m51.051062189s ago: executing program 2 (id=1361): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @local}, 0x19) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) 2m48.310149468s ago: executing program 2 (id=1368): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x83a5, 0x1, [0x5]}, 0xa) 2m46.005214883s ago: executing program 40 (id=1368): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x83a5, 0x1, [0x5]}, 0xa) 2m10.711019554s ago: executing program 5 (id=1424): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) 2m9.604629184s ago: executing program 5 (id=1428): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) lseek(r0, 0xfffd, 0x0) 2m8.976971395s ago: executing program 5 (id=1432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000020c00)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x1c, 0x24, 0x800, 0x0, 0x8, {0x0, 0x0, 0x0, 0x0, {}, {0x8}, {0xd}}}, 0x34cec29d7a9cacce}}, 0x0) recvfrom$netrom(r1, 0x0, 0x0, 0x40000022, 0x0, 0x0) 2m7.395970086s ago: executing program 5 (id=1445): pipe(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x4) 2m6.611610957s ago: executing program 5 (id=1438): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) r1 = syz_clone(0x80, 0x0, 0x5d, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x6) rt_tgsigqueueinfo(r1, r1, 0x4, &(0x7f0000000140)={0x2b, 0x5, 0xfffffff9}) 2m4.117550115s ago: executing program 5 (id=1451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) 1m48.409639331s ago: executing program 41 (id=1451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) 1m4.290459094s ago: executing program 4 (id=1624): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5, 0x0, 0xc}, {}, {0xfffb, 0x2, 0x6}, {0x3}, {0x2, 0x0, 0x5, 0x3}, {0x8000, 0x0, 0x0, 0x80000}, {0x1, 0x7, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x1002, 0x2}}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1m3.472151384s ago: executing program 4 (id=1628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000500)=0xe2, 0x4) r1 = dup(r0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=' ', 0x1}], 0x1}, 0x40805) 1m2.641761063s ago: executing program 4 (id=1631): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffa, [0x80000001], 0x2}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 59.678141021s ago: executing program 4 (id=1639): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x1200000, &(0x7f0000000540)=ANY=[], 0x0, 0x41c, &(0x7f00000007c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 58.882534854s ago: executing program 4 (id=1642): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000050013000800000005000500ce"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 58.13418322s ago: executing program 4 (id=1645): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x80000) r1 = dup(r0) r2 = syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x2822, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 55.52501869s ago: executing program 42 (id=1645): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x80000) r1 = dup(r0) r2 = syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x2822, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 11.161742398s ago: executing program 0 (id=1797): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.783018914s ago: executing program 0 (id=1807): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ppoll(&(0x7f00000002c0)=[{r0, 0x80}, {r0, 0x6226}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 8.045625995s ago: executing program 8 (id=1808): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x210000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') 7.334746446s ago: executing program 0 (id=1810): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) socket(0x14, 0x2, 0x0) 7.256070246s ago: executing program 8 (id=1811): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x8001, 0x2e}, 0x8) 7.226438146s ago: executing program 7 (id=1813): creat(&(0x7f0000000300)='./file1\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xc1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20400, 0x180) fsync(r0) 6.342752392s ago: executing program 7 (id=1815): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201300000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 6.243998032s ago: executing program 8 (id=1816): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000bbffe641a3e02bb664010100000000000000000000000080800000cc000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000100000000000040fbffffffffffffff00000000000000000100000000000000020000000000000000000000000000000008"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff9d"], 0xb8}}, 0x10) 5.33121819s ago: executing program 7 (id=1818): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x2, 0x40000336}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.893504843s ago: executing program 8 (id=1819): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x14444, &(0x7f00000010c0)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d6617596765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a956c3e26de72edc9ec3db403d8b2e970b9dcea448e6f67d99a77aa5f0cd7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRES32, @ANYRESDEC], 0xfe, 0xc22, &(0x7f00000002c0)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 4.893036241s ago: executing program 0 (id=1820): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.759688502s ago: executing program 3 (id=1821): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 4.486291628s ago: executing program 7 (id=1822): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8919, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_gettime(r0, &(0x7f0000000380)) 4.280892279s ago: executing program 1 (id=1823): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f, r1, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) setuid(0xee00) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000080)={r2}) 4.031726534s ago: executing program 3 (id=1824): socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.504999486s ago: executing program 1 (id=1825): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44011}], 0x1, 0x40) read$alg(r1, &(0x7f0000000280)=""/59, 0x3b) 3.444182161s ago: executing program 7 (id=1826): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 3.335252687s ago: executing program 8 (id=1827): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002800), &(0x7f0000002840)='./file0\x00', 0x4002, &(0x7f0000002180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000140)="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", 0x2000, &(0x7f0000004ec0)={&(0x7f0000000000)={0x50, 0x0, 0xfffffffffffffff6, {0x7, 0x2b, 0xee, 0x2004, 0x5, 0xfa5, 0x61, 0x0, 0x0, 0x0, 0x40, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004f80)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x14df, {0x7, 0x2b, 0xb8, 0x4010000, 0x2b4, 0xd, 0xfffffffc, 0xd9, 0x0, 0x0, 0x100, 0x2b54}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000002140)=@known='system.posix_acl_access\x00') 2.873271627s ago: executing program 3 (id=1828): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.652690964s ago: executing program 7 (id=1829): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000003c0), 0x19, 0x507fc1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffffffe, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 2.598289784s ago: executing program 1 (id=1830): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) 2.125006623s ago: executing program 3 (id=1831): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1.669150364s ago: executing program 1 (id=1832): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x802, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.668729927s ago: executing program 0 (id=1833): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x1ff, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.588005407s ago: executing program 8 (id=1834): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000c80)={[{@errors_remount}, {@mblk_io_submit}, {@barrier}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x445, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$9p_tcp(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8000, 0x0) 1.192991185s ago: executing program 3 (id=1835): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 826.072818ms ago: executing program 1 (id=1836): syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0x8e1462587df374c9, @remote, @mcast2, {[], @ni={0x193}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ff00", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x2, 0x81, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}) 243.627021ms ago: executing program 0 (id=1837): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x210000, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x420, &(0x7f0000000c40)="$eJzs3M9O3EYcwPEx2aUbKkWVooY/4TBpWokesrFNWYRycr2zyyRe27K9EZwqVCBCAVKVVCpcWi5pK7UPkWsfoFIvfYw+RaP2Daj8Zwmwu4Bg+SP0/UhoZj0/z/zGsjzaRWMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACE4dZN0zKEp/32guzPrUdBq1fDZ5tZ0envk0PFMeMKYaR/olIRY/mhsbvvmz/OOxnNP42K22lRETsf3vvoyd3SUOf8YxK+FFvbO6/+zHM8VXzpv73MhSd2SZrK13GgW05TSR0Hcq5WMx/PN2LZ0J6KF+NEtaQbKScJIjnlfi6tublpqaqLQdtv1h1PdQ7OPrJNsyafVkPlRHHgP35ajd157Xnab2YxaXMaM5veiM90IhPltKRcXVtfmT4pyTTIOqbdEOLHLMg+qSfbtG3Lsm2rNjM3M2uaJdu05aED5hGi65Tspi2f9obBzTPIxzdwLnvF+g8AAAAAAG4uI/uNPf3+X85+hzdEQ3vKvOq0AAAAAADAAGX/+R9Ni3JaGxMG3/8BAAAAALhpfn6/x64ibvfaYxeHHxh//SuiqGzshgufGhtOGu5siFJ23q2jPSaNCeNO0UlW1ErFJ1dNGuN50Hgn+l1RrB7Mo9deP6MrgWLkownkO+z2fuiRgPhVTORBE8t5udxpyUcZaWhPVd3Ae2IJx7kzlKiF5LvNte9FNv1f/NYdQ6yura9Uv361vpzlspv2srtRbKDo2kfR/2KI1/v7HnvPeLjoIht3JB/XPDj/obx9qHvMcdFnzDfifh5zfyQvRw7Pv5LO36r2m32RhXXOmb8Rk3nM5NTDtHg41SML+6Qs7INZ9L8WZ8yiXHTQO4t/9rOYPmcWAHBVVk9YhYzuhf8MT7nBre7HP9Ef5DEPJrIHa2mix7pinrSumKdc3TqZHc3i9653IPRbY9Nxf/Nb1WEh9lfVt+kJb/uOG3u2kV7CW683vhH3trZ3Hq1tLL1YebGyadvTNfML05yxRTmbRlGw9gAAelDRO2Mk+cmIIh1+ZQ3PWU4yr2QUuM9kpOtNJbWfqMidd/ymkmEUJIEbeGnlua6rWMbtMAyiRDaCSIZBrBeyN7/I4tUvsWo5fqLdOPSUEyvpBn7iuIms69iVYftLT8fzKspOjkPl6oZ2nUQHvoyD9h+uqkoZK3UgUNeVn+iGTqu+DCPdcqJF+Tzw2i0l6yp2I63/Lt6w0xlL+40gamXdVq/6YgMAcE1sbe+8XFpfX/n2AitXPUcAAHAYqzQAAAAAAAAAAAAAAAAAAAAAANffADb5DQkhLnL74JGKIYS4rLGuaaUirkUaVAZcGT7rjb2XVwzxckkMKp+rfjIBuGj/BwAA//8uRKkR") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r0, &(0x7f00000001c0)='./file0\x00', 0x141) 243.283492ms ago: executing program 3 (id=1838): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x4, 0x202, 0x17558e07, 0x90e, 0x7c26, 0xffffffff, 0x7, r2}, 0x20) 0s ago: executing program 1 (id=1839): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1, 0x0, 0x2008}, 0x0, 0x20008000, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) kernel console output (not intermixed with test programs): vsim netdevsim2 netdevsim2: renamed from eth2 [ 604.709712][ T9922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 605.313464][T10109] loop0: detected capacity change from 0 to 2048 [ 605.421611][ T6407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.551955][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.964457][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.089230][T10114] cgroup: fork rejected by pids controller in /syz9 [ 606.326853][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.334383][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.424587][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.432192][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.381853][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.765823][ T1118] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.015886][ T1118] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.242182][ T1118] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.359003][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.573308][ T1118] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.655006][ T3415] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.662794][ T3415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.755530][ T3415] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.763388][ T3415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.575367][ T1118] bridge_slave_1: left allmulticast mode [ 609.581513][ T1118] bridge_slave_1: left promiscuous mode [ 609.588170][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.642271][ T1118] bridge_slave_0: left allmulticast mode [ 609.648338][ T1118] bridge_slave_0: left promiscuous mode [ 609.654947][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.492875][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.552063][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.611821][ T1118] bond0 (unregistering): Released all slaves [ 611.387548][ T9939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.621767][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.632888][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.647586][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.673935][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.686826][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 611.782028][ T1118] hsr_slave_0: left promiscuous mode [ 611.856980][ T1118] hsr_slave_1: left promiscuous mode [ 611.885752][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.893732][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.919381][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.930447][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.075819][ T1118] veth1_macvtap: left promiscuous mode [ 612.098219][ T1118] veth0_macvtap: left promiscuous mode [ 612.104137][ T1118] veth1_vlan: left promiscuous mode [ 612.116822][ T1118] veth0_vlan: left promiscuous mode [ 613.121133][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1243'. [ 613.300487][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 613.341389][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 613.560271][ T30] audit: type=1326 audit(1770648547.455:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.5.1244" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ad539 code=0x0 [ 613.746691][ T5797] Bluetooth: hci4: command tx timeout [ 614.750933][T10196] bond_slave_0: entered promiscuous mode [ 614.784907][T10198] bond_slave_0: left promiscuous mode [ 614.834314][ T9939] veth0_vlan: entered promiscuous mode [ 614.997910][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.022199][ T9939] veth1_vlan: entered promiscuous mode [ 615.583671][T10208] loop5: detected capacity change from 0 to 7 [ 615.657732][T10208] Dev loop5: unable to read RDB block 7 [ 615.664183][T10208] loop5: AHDI p1 p2 p3 [ 615.668931][T10208] loop5: partition table partially beyond EOD, truncated [ 615.704739][T10208] loop5: p1 start 1601398130 is beyond EOD, truncated [ 615.712257][T10208] loop5: p2 start 1702059890 is beyond EOD, truncated [ 615.838782][ T5797] Bluetooth: hci4: command tx timeout [ 615.927070][ T9939] veth0_macvtap: entered promiscuous mode [ 616.094301][ T9939] veth1_macvtap: entered promiscuous mode [ 616.385577][ T9922] veth0_vlan: entered promiscuous mode [ 616.473637][T10168] chnl_net:caif_netlink_parms(): no params data found [ 616.683954][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.730681][ T9922] veth1_vlan: entered promiscuous mode [ 617.139796][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.355755][ T8628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.411613][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 617.504474][ T8628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.635907][ T8628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.647410][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 617.729516][ T9] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 617.738916][ T9] usb 1-1: config 0 has no interface number 0 [ 617.778590][T10232] loop5: detected capacity change from 0 to 512 [ 617.822085][ T9] usb 1-1: config 0 interface 119 has no altsetting 0 [ 617.845597][ T8628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.868466][T10232] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 617.908658][ T5797] Bluetooth: hci4: command tx timeout [ 617.933763][ T9] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 617.943336][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.951739][ T9] usb 1-1: Product: syz [ 617.956086][ T9] usb 1-1: Manufacturer: syz [ 617.961056][ T9] usb 1-1: SerialNumber: syz [ 617.974368][ T9922] veth0_macvtap: entered promiscuous mode [ 618.074187][T10232] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 9: comm syz.5.1252: lblock 0 mapped to illegal pblock 9 (length 1) [ 618.139604][ T9922] veth1_macvtap: entered promiscuous mode [ 618.176003][ T9] usb 1-1: config 0 descriptor?? [ 618.203393][T10232] EXT4-fs (loop5): mount failed [ 618.582003][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.708955][ T9] mos7840 1-1:0.119: required endpoints missing [ 618.767369][ T9] usb 1-1: USB disconnect, device number 15 [ 619.040870][ T8614] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.112529][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.120189][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.157715][T10168] bridge_slave_0: entered allmulticast mode [ 619.173762][T10168] bridge_slave_0: entered promiscuous mode [ 619.254476][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.262394][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.314620][T10168] bridge_slave_1: entered allmulticast mode [ 619.369368][T10168] bridge_slave_1: entered promiscuous mode [ 619.421557][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.443985][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 619.523898][ T8614] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.636756][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 619.651883][ T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 619.660976][ T9] usb 6-1: config 0 has no interface number 0 [ 619.708263][ T9] usb 6-1: config 0 interface 12 has no altsetting 0 [ 619.742012][ T8614] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.745282][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 619.765635][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.773960][ T9] usb 6-1: Product: syz [ 619.778377][ T9] usb 6-1: Manufacturer: syz [ 619.783153][ T9] usb 6-1: SerialNumber: syz [ 619.894039][ T9] usb 6-1: config 0 descriptor?? [ 619.987357][ T5797] Bluetooth: hci4: command tx timeout [ 619.994918][ T8614] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.070148][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.232329][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.292364][T10168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.332922][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.399665][T10168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.427660][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.924169][T10168] team0: Port device team_slave_0 added [ 620.974762][T10168] team0: Port device team_slave_1 added [ 621.236196][ T9] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 621.244373][ T9] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 621.257005][ T9] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 621.265034][ T9] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 621.382938][ T9] usb 6-1: USB disconnect, device number 12 [ 621.480654][ T8614] bridge_slave_1: left allmulticast mode [ 621.488697][ T8614] bridge_slave_1: left promiscuous mode [ 621.498174][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.574237][ T8614] bridge_slave_0: left allmulticast mode [ 621.580965][ T8614] bridge_slave_0: left promiscuous mode [ 621.589977][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.290871][T10168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.298346][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.325941][T10168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.398079][T10168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.405256][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.432520][T10168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.894232][T10168] hsr_slave_0: entered promiscuous mode [ 622.911046][T10168] hsr_slave_1: entered promiscuous mode [ 622.920951][T10168] debugfs: 'hsr0' already exists in 'hsr' [ 622.927078][T10168] Cannot create hsr debugfs directory [ 623.408202][ T8614] hsr_slave_0: left promiscuous mode [ 623.427121][ T8614] hsr_slave_1: left promiscuous mode [ 623.434657][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.444625][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.475169][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.484308][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.527112][ T8614] veth1_macvtap: left promiscuous mode [ 623.532821][ T8614] veth0_macvtap: left promiscuous mode [ 623.541647][ T8614] veth1_vlan: left promiscuous mode [ 623.547409][ T8614] veth0_vlan: left promiscuous mode [ 624.338072][ T8614] team0 (unregistering): Port device team_slave_1 removed [ 624.390140][ T8614] team0 (unregistering): Port device team_slave_0 removed [ 626.160175][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.168569][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.385682][T10168] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 626.465373][T10168] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 626.522642][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.531350][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.534122][T10168] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 626.624517][T10168] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 627.628727][ T8614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.636961][ T8614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.885316][ T8614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.894481][ T8614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.059490][T10168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.406761][T10331] bond_slave_0: entered promiscuous mode [ 628.466187][T10168] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.567257][T10332] bond_slave_0: left promiscuous mode [ 628.705937][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.713800][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.843596][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.851295][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.032754][T10327] loop5: detected capacity change from 0 to 32768 [ 629.050333][T10327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1255 (10327) [ 629.124550][T10327] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 629.135430][T10327] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 629.382230][T10327] BTRFS info (device loop5): enabling ssd optimizations [ 629.394374][T10327] BTRFS info (device loop5): turning on async discard [ 629.401761][T10327] BTRFS info (device loop5): enabling free space tree [ 629.914058][ T6407] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 630.728606][T10362] Bluetooth: MGMT ver 1.23 [ 631.107774][T10190] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 631.367427][T10190] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 631.377057][T10190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.458406][T10190] usb 6-1: config 0 descriptor?? [ 631.542092][T10190] gspca_main: spca508-2.14.0 probing 8086:0110 [ 632.088545][T10190] gspca_spca508: reg_read err -110 [ 632.117162][T10190] gspca_spca508: reg_read err -32 [ 632.160417][T10190] gspca_spca508: reg_read err -32 [ 632.177460][T10190] gspca_spca508: reg_read err -32 [ 632.404934][T10190] gspca_spca508: reg write: error -71 [ 632.411448][T10190] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 632.508488][T10190] usb 6-1: USB disconnect, device number 13 [ 632.742871][T10168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.441632][T10392] loop1: detected capacity change from 0 to 2048 [ 633.618180][T10392] loop1: p3 < > p4 < > [ 633.622757][T10392] loop1: partition table partially beyond EOD, truncated [ 633.695506][T10392] loop1: p3 start 4284289 is beyond EOD, truncated [ 633.907330][ T5137] loop1: p3 < > p4 < > [ 633.911812][ T5137] loop1: partition table partially beyond EOD, truncated [ 634.779811][T10402] loop2: detected capacity change from 0 to 32768 [ 634.797123][ T5137] loop1: p3 start 4284289 is beyond EOD, truncated [ 634.805504][T10402] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1270 (10402) [ 634.839504][T10402] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 634.850165][T10402] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 635.011693][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 635.073196][T10410] netlink: 190 bytes leftover after parsing attributes in process `syz.0.1284'. [ 635.275899][T10402] BTRFS info (device loop2): enabling ssd optimizations [ 635.283209][T10402] BTRFS info (device loop2): turning on async discard [ 635.290353][T10402] BTRFS info (device loop2): enabling free space tree [ 636.075107][ T9922] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 636.271776][ T8314] udevd[8314]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 636.473221][ T8314] udevd[8314]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 636.942313][T10168] veth0_vlan: entered promiscuous mode [ 637.048173][T10435] loop5: detected capacity change from 0 to 2048 [ 637.129285][T10168] veth1_vlan: entered promiscuous mode [ 637.204746][ T8314] Alternate GPT is invalid, using primary GPT. [ 637.211962][ T8314] loop5: p1 p2 p3 [ 637.215912][ T8314] loop5: partition table partially beyond EOD, truncated [ 637.481999][T10435] loop5: unable to read partition table [ 637.534312][T10435] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 637.659048][T10168] veth0_macvtap: entered promiscuous mode [ 637.795695][T10168] veth1_macvtap: entered promiscuous mode [ 638.075603][T10168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.226089][T10168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.378780][ T8646] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.421593][ T8646] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.503930][ T8632] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.561442][ T8632] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.593439][ T6029] udevd[6029]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 638.638556][ T8314] udevd[8314]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 638.645180][ T5998] udevd[5998]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 639.139231][T10451] loop0: detected capacity change from 0 to 64 [ 640.702588][ T5911] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 640.928008][ T5911] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 640.937598][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.029678][ T5911] usb 3-1: config 0 descriptor?? [ 641.158537][ T5911] gspca_main: spca508-2.14.0 probing 8086:0110 [ 641.346773][ T5911] gspca_spca508: reg_read err -32 [ 641.377079][ T5911] gspca_spca508: reg_read err -32 [ 641.407179][ T5911] gspca_spca508: reg_read err -32 [ 641.453451][ T5911] gspca_spca508: reg_read err -32 [ 642.427974][T10480] loop0: detected capacity change from 0 to 32768 [ 642.439259][ T5911] gspca_spca508: reg write: error -71 [ 642.445120][ T5911] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 642.478382][T10480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1287 (10480) [ 642.511474][ T5911] usb 3-1: USB disconnect, device number 3 [ 642.601339][T10480] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 642.612007][T10480] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 642.847849][T10480] BTRFS info (device loop0): enabling ssd optimizations [ 642.855157][T10480] BTRFS info (device loop0): turning on async discard [ 642.862432][T10480] BTRFS info (device loop0): enabling free space tree [ 643.320087][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 645.417149][T10531] loop1: detected capacity change from 0 to 64 [ 646.658009][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 648.160213][ T8632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.168915][ T8632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.442905][ T8614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.451214][ T8614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.712511][T10564] loop2: detected capacity change from 0 to 16 [ 648.791564][T10564] erofs (device loop2): mounted with root inode @ nid 36. [ 650.197007][T10190] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 650.417030][T10190] usb 6-1: Using ep0 maxpacket: 16 [ 650.459137][T10190] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.470746][T10190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 650.477727][T10190] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 650.487683][T10190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.601994][T10190] usb 6-1: config 0 descriptor?? [ 651.200531][T10190] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 651.208452][T10190] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 651.216146][T10190] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 651.326926][T10190] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 651.656964][T10190] usb 6-1: USB disconnect, device number 14 [ 652.163675][T10596] fido_id[10596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 654.389743][T10631] input: syz0 as /devices/virtual/input/input14 [ 657.006739][T10190] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 657.207090][T10190] usb 6-1: Using ep0 maxpacket: 16 [ 657.266852][T10190] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.278488][T10190] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.288793][T10190] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 657.302327][T10190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 657.310090][T10190] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 657.320585][T10190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.679866][T10190] usb 6-1: config 0 descriptor?? [ 658.146895][T10658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.179328][T10658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.293463][T10190] hid (null): global environment stack underflow [ 658.300242][T10190] hid (null): report_id 0 is invalid [ 658.318260][T10190] hid (null): usage index exceeded [ 658.332603][T10190] hid (null): invalid report_size 25380 [ 658.338545][T10190] hid (null): unknown global tag 0xd [ 658.346058][T10190] hid (null): unknown global tag 0xc [ 658.351808][T10190] hid (null): unknown global tag 0xd [ 658.613005][T10190] usb 6-1: USB disconnect, device number 15 [ 659.008826][T10672] loop1: detected capacity change from 0 to 4096 [ 659.046735][T10672] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 659.387751][T10672] ntfs3(loop1): ino=19, mi_enum_attr [ 659.424624][T10672] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 659.779394][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.954158][T10681] loop0: detected capacity change from 0 to 1024 [ 660.072154][T10686] loop9: detected capacity change from 0 to 512 [ 660.231273][T10681] EXT4-fs error (device loop0): ext4_quota_enable:7177: inode #3: comm syz.0.1349: iget: bad extended attribute block 5 [ 660.331483][T10681] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.1349: Bad quota inode: 3, type: 0 [ 660.348312][T10686] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 660.410646][T10681] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 660.484587][T10686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 660.519639][T10681] EXT4-fs (loop0): mount failed [ 660.526012][T10686] System zones: 1-12 [ 660.656831][T10686] EXT4-fs (loop9): 1 truncate cleaned up [ 660.664855][T10686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.038389][T10686] loop9: detected capacity change from 512 to 0 [ 661.083836][T10693] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4953: inode #15: block 8: comm syz.9.1339: unable to read itable block [ 661.084088][ C0] I/O error, dev loop9, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 661.217026][T10693] buffer_io_error: 23 callbacks suppressed [ 661.217108][T10693] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 661.286985][T10693] EXT4-fs (loop9): I/O error while writing superblock [ 661.503202][T10699] loop1: detected capacity change from 0 to 1024 [ 661.675138][T10699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 661.687923][T10168] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4953: inode #11: block 7: comm syz-executor: unable to read itable block [ 661.688134][T10168] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 661.688233][T10168] EXT4-fs (loop9): I/O error while writing superblock [ 661.688846][T10168] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4953: inode #11: block 7: comm syz-executor: unable to read itable block [ 661.689040][T10168] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 661.689139][T10168] EXT4-fs (loop9): I/O error while writing superblock [ 662.046948][T10699] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.259100][T10699] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1341: Freeing blocks not in datazone - block = 0, count = 16 [ 662.377021][T10699] EXT4-fs (loop1): Remounting filesystem read-only [ 662.532077][T10168] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.559906][ T3415] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.638414][T10168] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 662.676242][T10168] EXT4-fs (loop9): I/O error while writing superblock [ 662.862181][ T3415] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.931542][ T9939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 663.124879][ T3415] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.421638][ T3415] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.464346][T10719] loop5: detected capacity change from 0 to 512 [ 663.554582][T10719] EXT4-fs: Ignoring removed nobh option [ 663.622516][T10719] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 663.754426][T10719] EXT4-fs (loop5): 1 truncate cleaned up [ 663.788688][T10719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.314586][ T3415] bridge_slave_1: left allmulticast mode [ 664.321504][ T3415] bridge_slave_1: left promiscuous mode [ 664.328044][ T3415] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.332185][ T6407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.377811][ T3415] bridge_slave_0: left allmulticast mode [ 664.383690][ T3415] bridge_slave_0: left promiscuous mode [ 664.393809][ T3415] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.340916][ T3415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.408736][ T3415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.451236][ T3415] bond0 (unregistering): Released all slaves [ 666.041039][T10743] loop2: detected capacity change from 0 to 512 [ 666.112870][T10743] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 666.207992][T10743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 666.228106][T10743] System zones: 1-12 [ 666.317215][T10743] EXT4-fs (loop2): 1 truncate cleaned up [ 666.406517][ T3415] hsr_slave_0: left promiscuous mode [ 666.420194][T10743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.486657][ T3415] hsr_slave_1: left promiscuous mode [ 666.502309][ T3415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.510554][ T3415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.619206][ T3415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.631868][ T3415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.798638][ T3415] veth1_macvtap: left promiscuous mode [ 666.804511][ T3415] veth0_macvtap: left promiscuous mode [ 666.811575][T10743] loop2: detected capacity change from 512 to 0 [ 666.885032][ C0] I/O error, dev loop2, sector 26 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 666.886635][ T3415] veth1_vlan: left promiscuous mode [ 666.895854][T10747] EXT4-fs error (device loop2): __ext4_find_entry:1615: inode #2: comm syz.2.1358: reading directory lblock 0 [ 666.991535][ T3415] veth0_vlan: left promiscuous mode [ 667.018504][T10747] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 667.120153][T10747] EXT4-fs (loop2): I/O error while writing superblock [ 667.132863][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 667.143659][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 667.154266][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 667.169336][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 667.183848][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 667.722471][ T9922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.788523][ T9922] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 667.833934][ T9922] EXT4-fs (loop2): I/O error while writing superblock [ 669.266686][ T5784] Bluetooth: hci4: command tx timeout [ 669.369436][ T3415] team0 (unregistering): Port device team_slave_1 removed [ 669.417275][ T3415] team0 (unregistering): Port device team_slave_0 removed [ 669.983645][T10763] veth0_vlan: entered allmulticast mode [ 670.031508][T10779] loop5: detected capacity change from 0 to 256 [ 670.110027][T10779] exfat: Deprecated parameter 'utf8' [ 670.146655][T10766] veth0_vlan: left promiscuous mode [ 670.187260][T10779] exfat: Deprecated parameter 'utf8' [ 670.200290][T10766] veth0_vlan: entered promiscuous mode [ 670.343641][T10779] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 670.929266][ T3415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.194527][ T3415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.346534][ T5784] Bluetooth: hci4: command tx timeout [ 671.411305][ T3415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.565540][ T3415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.349164][ T3415] bridge_slave_1: left allmulticast mode [ 672.355037][ T3415] bridge_slave_1: left promiscuous mode [ 672.362150][ T3415] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.403876][ T3415] bridge_slave_0: left allmulticast mode [ 672.409902][ T3415] bridge_slave_0: left promiscuous mode [ 672.417059][ T3415] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.751193][T10799] loop0: detected capacity change from 0 to 512 [ 672.828405][T10799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 672.915966][T10799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 673.002236][T10799] System zones: 1-12 [ 673.140354][T10799] EXT4-fs (loop0): 1 truncate cleaned up [ 673.203410][T10799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.429762][ T5784] Bluetooth: hci4: command tx timeout [ 673.526733][T10799] loop0: detected capacity change from 512 to 0 [ 673.559388][ C0] I/O error, dev loop0, sector 26 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 673.571370][T10804] EXT4-fs error (device loop0): __ext4_find_entry:1615: inode #2: comm syz.0.1370: reading directory lblock 0 [ 673.599161][T10804] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 673.607994][T10804] EXT4-fs (loop0): I/O error while writing superblock [ 673.637430][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 673.647880][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 673.658078][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 673.682056][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 673.718427][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 673.772556][ T3415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.803531][ T3415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.853913][ T3415] bond0 (unregistering): Released all slaves [ 673.937640][T10753] chnl_net:caif_netlink_parms(): no params data found [ 674.231606][ T8351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.292811][ T8351] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 674.301597][ T8351] EXT4-fs (loop0): I/O error while writing superblock [ 674.758590][ T3415] hsr_slave_0: left promiscuous mode [ 674.812281][ T3415] hsr_slave_1: left promiscuous mode [ 674.838484][ T3415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.846039][ T3415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.873888][ T3415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.881971][ T3415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.955993][ T3415] veth1_macvtap: left promiscuous mode [ 674.981230][ T3415] veth0_macvtap: left promiscuous mode [ 674.987704][ T3415] veth1_vlan: left promiscuous mode [ 674.993250][ T3415] veth0_vlan: left promiscuous mode [ 675.506628][ T5797] Bluetooth: hci4: command tx timeout [ 675.826866][ T5797] Bluetooth: hci0: command tx timeout [ 676.361229][ T3415] team0 (unregistering): Port device team_slave_1 removed [ 676.448776][ T3415] team0 (unregistering): Port device team_slave_0 removed [ 677.316214][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.324699][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.335642][T10753] bridge_slave_0: entered allmulticast mode [ 677.354804][T10753] bridge_slave_0: entered promiscuous mode [ 677.371800][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.379646][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.389683][T10753] bridge_slave_1: entered allmulticast mode [ 677.400045][T10753] bridge_slave_1: entered promiscuous mode [ 677.652739][T10753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.681024][T10753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.781219][ T3415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.791993][ T3415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.906702][ T5797] Bluetooth: hci0: command tx timeout [ 677.977723][ T3415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.988970][ T3415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.023917][T10753] team0: Port device team_slave_0 added [ 678.033895][T10805] chnl_net:caif_netlink_parms(): no params data found [ 678.104721][T10753] team0: Port device team_slave_1 added [ 678.174383][ T3415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.186862][ T3415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.339195][ T3415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.350250][ T3415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.373480][T10753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.381420][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.408022][T10753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.488364][T10753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.495538][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.522089][T10753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.880129][T10753] hsr_slave_0: entered promiscuous mode [ 678.897786][T10753] hsr_slave_1: entered promiscuous mode [ 678.908080][T10753] debugfs: 'hsr0' already exists in 'hsr' [ 678.913997][T10753] Cannot create hsr debugfs directory [ 678.972402][ T3415] bridge_slave_1: left allmulticast mode [ 678.978471][ T3415] bridge_slave_1: left promiscuous mode [ 678.985083][ T3415] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.013910][ T3415] bridge_slave_0: left allmulticast mode [ 679.020799][ T3415] bridge_slave_0: left promiscuous mode [ 679.027615][ T3415] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.404027][ T3415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.420219][ T3415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.438631][ T3415] bond0 (unregistering): Released all slaves [ 679.644916][T10805] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.652704][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.662485][T10805] bridge_slave_0: entered allmulticast mode [ 679.672970][T10805] bridge_slave_0: entered promiscuous mode [ 679.756901][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.764555][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.776788][T10805] bridge_slave_1: entered allmulticast mode [ 679.789141][T10805] bridge_slave_1: entered promiscuous mode [ 679.987475][ T5797] Bluetooth: hci0: command tx timeout [ 680.012806][T10805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.098053][ T3415] hsr_slave_0: left promiscuous mode [ 680.105481][ T3415] hsr_slave_1: left promiscuous mode [ 680.114373][ T3415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.122086][ T3415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.141714][ T3415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.149468][ T3415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.173923][ T3415] veth1_macvtap: left promiscuous mode [ 680.181451][ T3415] veth0_macvtap: left promiscuous mode [ 680.188344][ T3415] veth1_vlan: left promiscuous mode [ 680.193847][ T3415] veth0_vlan: left promiscuous mode [ 680.877460][ T3415] team0 (unregistering): Port device team_slave_1 removed [ 680.911407][ T3415] team0 (unregistering): Port device team_slave_0 removed [ 681.139259][T10805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.290143][T10805] team0: Port device team_slave_0 added [ 681.348732][T10805] team0: Port device team_slave_1 added [ 681.442407][T10805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.450312][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.477916][T10805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.537845][T10805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.545075][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.572957][T10805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.833847][T10805] hsr_slave_0: entered promiscuous mode [ 681.847104][T10805] hsr_slave_1: entered promiscuous mode [ 681.855774][T10805] debugfs: 'hsr0' already exists in 'hsr' [ 681.862680][T10805] Cannot create hsr debugfs directory [ 682.068224][ T5797] Bluetooth: hci0: command tx timeout [ 682.374577][T10753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 682.421889][T10753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 682.454273][T10753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 682.515087][T10753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 683.029926][T10805] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 683.064589][T10805] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 683.091122][T10805] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 683.113494][T10805] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 683.224795][T10753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.304190][T10753] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.345874][ T3415] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.353478][ T3415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.393597][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.401168][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.915674][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.043993][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.097202][ T8646] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.104717][ T8646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.184889][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.192489][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.661888][T10753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.035803][T10753] veth0_vlan: entered promiscuous mode [ 685.118518][T10753] veth1_vlan: entered promiscuous mode [ 685.348986][T10753] veth0_macvtap: entered promiscuous mode [ 685.382475][T10753] veth1_macvtap: entered promiscuous mode [ 685.459631][T10805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.506664][T10753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.580104][T10753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.637589][ T1324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.693153][ T1324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.725632][ T1324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.745793][ T1324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.381856][T10805] veth0_vlan: entered promiscuous mode [ 687.473244][T10805] veth1_vlan: entered promiscuous mode [ 687.633089][T10805] veth0_macvtap: entered promiscuous mode [ 687.679943][T10805] veth1_macvtap: entered promiscuous mode [ 687.798852][T10805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.889748][T10805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.967100][ T1324] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.015989][ T1324] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.047660][ T1324] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.067648][ T1324] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.710078][ T8633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.718256][ T8633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.853852][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.862775][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.812214][T10913] loop3: detected capacity change from 0 to 1024 [ 690.833286][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 690.844383][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 690.855147][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 690.869480][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 690.881397][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 690.998877][T10913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 691.087285][T10913] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.822540][ T1324] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 6) [ 691.910142][ T1324] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 691.922854][ T1324] EXT4-fs (loop3): This should not happen!! Data will be lost [ 691.922854][ T1324] [ 692.017453][ T3415] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 692.086602][ T3415] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 692.102442][ T3415] EXT4-fs (loop3): This should not happen!! Data will be lost [ 692.102442][ T3415] [ 692.237534][T10916] chnl_net:caif_netlink_parms(): no params data found [ 692.423314][T10753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 692.947771][ T5784] Bluetooth: hci1: command tx timeout [ 693.007508][ T8646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.015550][ T8646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.411235][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.421978][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.242636][T10957] sctp: [Deprecated]: syz.5.1377 (pid 10957) Use of int in max_burst socket option deprecated. [ 694.242636][T10957] Use struct sctp_assoc_value instead [ 694.435947][T10916] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.443715][T10916] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.527556][T10916] bridge_slave_0: entered allmulticast mode [ 694.560143][T10916] bridge_slave_0: entered promiscuous mode [ 694.697420][T10916] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.704994][T10916] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.755508][T10916] bridge_slave_1: entered allmulticast mode [ 694.779084][T10916] bridge_slave_1: entered promiscuous mode [ 694.902166][T10966] loop3: detected capacity change from 0 to 16 [ 694.985753][T10966] erofs (device loop3): mounted with root inode @ nid 36. [ 695.029618][ T5784] Bluetooth: hci1: command tx timeout [ 695.108230][T10916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.121018][T10966] syz.3.1378: attempt to access beyond end of device [ 695.121018][T10966] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 695.242398][T10966] syz.3.1378: attempt to access beyond end of device [ 695.242398][T10966] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 695.290477][T10916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.372038][T10966] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192 [ 695.437737][T10966] erofs (device loop3): read error -117 @ 1 of nid 89 [ 695.486655][ T30] audit: type=1800 audit(1770648629.375:19): pid=10966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1378" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 695.713724][T10916] team0: Port device team_slave_0 added [ 695.828053][T10916] team0: Port device team_slave_1 added [ 696.221935][T10916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.231962][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.259925][T10916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.434136][T10916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.442221][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.468653][T10916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.109953][ T5784] Bluetooth: hci1: command tx timeout [ 697.698287][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.708520][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.085091][T10986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.181492][T10986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.328411][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1401'. [ 698.893740][T10916] hsr_slave_0: entered promiscuous mode [ 698.924126][T10916] hsr_slave_1: entered promiscuous mode [ 698.949516][T10916] debugfs: 'hsr0' already exists in 'hsr' [ 698.955674][T10916] Cannot create hsr debugfs directory [ 699.059720][ T8646] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.092228][ T8646] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.186724][ T5784] Bluetooth: hci1: command tx timeout [ 699.210022][ T8646] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.495135][ T8646] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.795804][T11022] loop7: detected capacity change from 0 to 16 [ 699.855912][T11022] erofs (device loop7): mounted with root inode @ nid 36. [ 699.968866][T11022] syz.7.1396: attempt to access beyond end of device [ 699.968866][T11022] loop7: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 700.039881][T11022] syz.7.1396: attempt to access beyond end of device [ 700.039881][T11022] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 700.137014][T11022] erofs (device loop7): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192 [ 700.206663][T11022] erofs (device loop7): read error -117 @ 1 of nid 89 [ 700.254101][ T30] audit: type=1800 audit(1770648634.155:20): pid=11022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1396" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 700.937156][T10190] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 701.148803][T10190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.159602][T10190] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.258743][T10190] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 701.268443][T10190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 701.277589][T10190] usb 2-1: SerialNumber: syz [ 701.628059][T10190] usb 2-1: 0:2 : does not exist [ 701.769890][T10190] usb 2-1: USB disconnect, device number 5 [ 702.003659][T10916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 702.120571][T10916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 702.233168][T11044] udevd[11044]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.284168][T10916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 702.360621][T10916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 703.383512][T11053] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.392131][T11053] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.318937][T11053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.471859][T11053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.584554][ T58] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.752588][ T58] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.858000][ T58] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.896959][ T8646] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.762358][T10916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.977300][T10916] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.061936][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.069523][ T8628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.196800][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.204517][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.500134][T10916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.020932][T10916] veth0_vlan: entered promiscuous mode [ 710.128028][T10916] veth1_vlan: entered promiscuous mode [ 710.533802][T10916] veth0_macvtap: entered promiscuous mode [ 710.605668][T10916] veth1_macvtap: entered promiscuous mode [ 710.831750][T10916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.023513][T10916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.272937][ T8628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.348637][ T8628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.413122][ T8628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.466914][ T8628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.887516][T10190] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 712.114971][T10190] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.130135][T10190] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.140570][T10190] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 712.153961][T10190] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 712.163435][T10190] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.380403][T10190] usb 8-1: config 0 descriptor?? [ 713.017338][T10190] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 713.037044][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 713.052598][T11181] loop3: detected capacity change from 0 to 2048 [ 713.194755][T11181] EXT4-fs: Ignoring removed i_version option [ 713.296971][T10190] usb 8-1: USB disconnect, device number 4 [ 713.442301][T11181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.565237][T11181] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.653152][T11187] fido_id[11187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 715.759027][T10753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.793669][T10190] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 717.038354][T10190] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 717.049343][T10190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.122103][T10190] usb 4-1: config 0 descriptor?? [ 717.603970][T10190] usbhid 4-1:0.0: can't add hid device: -71 [ 717.610804][T10190] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 717.730763][T10190] usb 4-1: USB disconnect, device number 4 [ 718.880841][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.891916][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.054794][T11256] input: syz1 as /devices/virtual/input/input15 [ 719.147609][ T8628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.155759][ T8628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.229184][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.378272][T11282] loop0: detected capacity change from 0 to 1024 [ 721.419076][T11284] tls_set_device_offload_rx: netdev not found [ 721.578738][T11282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 721.618791][T11282] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.897780][T11282] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.1455: lblock 3 mapped to illegal pblock 3 (length 3) [ 721.935930][T11282] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 721.949220][T11282] EXT4-fs (loop0): This should not happen!! Data will be lost [ 721.949220][T11282] [ 722.030565][T11296] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.1455: lblock 3 mapped to illegal pblock 3 (length 1) [ 722.109070][T11296] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.1455: lblock 3 mapped to illegal pblock 3 (length 1) [ 722.152173][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 722.173609][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 722.184207][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 722.201579][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 722.343481][T11282] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1455: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 722.464713][T11282] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 722.481512][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 722.488298][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 722.789068][ T8628] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm kworker/u8:16: lblock 0 mapped to illegal pblock 0 (length 1) [ 722.879478][ T8628] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 722.892153][ T8628] EXT4-fs (loop0): This should not happen!! Data will be lost [ 722.892153][ T8628] [ 722.902273][T11297] ceph: No mds server is up or the cluster is laggy [ 722.982770][T10916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 723.037157][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 723.045633][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 723.604675][T11315] loop0: detected capacity change from 0 to 128 [ 723.714871][T11315] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 723.778369][T11315] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 723.997944][T11315] syz.0.1460 (pid 11315) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 724.234853][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 724.339246][T10916] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 726.456595][T11345] ------------[ cut here ]------------ [ 726.465508][T11345] WARNING: fs/exec.c:119 at path_noexec+0x2ac/0x310, CPU#1: syz.7.1470/11345 [ 726.481125][T11345] Modules linked in: [ 726.485328][T11345] CPU: 1 UID: 0 PID: 11345 Comm: syz.7.1470 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 726.497683][T11345] Tainted: [L]=SOFTLOCKUP [ 726.502177][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 726.512709][T11345] RIP: 0010:path_noexec+0x2ac/0x310 [ 726.520871][T11345] Code: 49 89 ff 8b 7d d4 e8 93 d5 e1 ff 4c 89 ff e9 c8 fe ff ff 44 89 e7 e8 83 d5 e1 ff 4d 85 ed 0f 85 a3 fe ff ff e8 65 ea 38 ff 90 <0f> 0b 90 48 8b 7d c0 4c 8b 37 e8 75 ca e1 ff 48 8b 00 48 89 45 c8 [ 726.541026][T11345] RSP: 0018:ffff888027b0bb80 EFLAGS: 00010287 [ 726.547932][T11345] RAX: ffffffff82c47e0b RBX: ffff888032f64e10 RCX: 0000000000080000 [ 726.556142][T11345] RDX: ffffc90014401000 RSI: 0000000000000059 RDI: 000000000000005a [ 726.568381][T11345] RBP: ffff888027b0bbc0 R08: ffffea000000000f R09: 0000000000000003 [ 726.577713][T11345] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 726.585994][T11345] R13: 0000000000000000 R14: ffff888140992aa0 R15: 0000000000000000 [ 726.594459][T11345] FS: 0000000000000000(0000) GS:ffff8881aa958000(0063) knlGS:00000000f5406b40 [ 726.603930][T11345] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 726.610876][T11345] CR2: 000000002fb1fff8 CR3: 000000004e8de000 CR4: 00000000003526f0 [ 726.619224][T11345] Call Trace: [ 726.622662][T11345] [ 726.625771][T11345] do_mmap+0x1572/0x1d70 [ 726.630593][T11345] vm_mmap_pgoff+0x40c/0x760 [ 726.635517][T11345] ksys_mmap_pgoff+0x51c/0x7d0 [ 726.640769][T11345] __ia32_sys_mmap_pgoff+0x11a/0x1d0 [ 726.647201][T11345] ia32_sys_call+0x19c7/0x4340 [ 726.652305][T11345] __do_fast_syscall_32+0x14a/0x310 [ 726.658138][T11345] do_fast_syscall_32+0x37/0x80 [ 726.663289][T11345] do_SYSENTER_32+0x1f/0x30 [ 726.671157][T11345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 726.679251][T11345] RIP: 0023:0xf73dd539 [ 726.683564][T11345] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 726.703603][T11345] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 726.712649][T11345] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 726.721059][T11345] RDX: 0000000003000007 RSI: 0000000000000012 RDI: 0000000000000005 [ 726.729390][T11345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 726.737769][T11345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 726.745940][T11345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 726.754323][T11345] [ 726.757736][T11345] ---[ end trace 0000000000000000 ]--- [ 727.582886][T11354] loop3: detected capacity change from 0 to 512 [ 727.651237][T11354] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 727.795267][T11354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 727.840723][T11354] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1473: corrupted in-inode xattr: e_value size too large [ 727.926820][ T5837] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 727.960522][T11354] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1473: couldn't read orphan inode 15 (err -117) [ 728.048986][T11354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.131505][ T5837] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 728.182131][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.193627][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.206546][ T5837] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 728.314631][ T5837] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 728.327110][ T5837] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 728.335454][ T5837] usb 8-1: Manufacturer: syz [ 728.427982][ T5837] usb 8-1: config 0 descriptor?? [ 728.848162][T10753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.949050][ T5837] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 729.066818][ T5837] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 729.847989][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 730.757826][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 730.992840][ T5911] usb 8-1: USB disconnect, device number 5 [ 731.667117][T10190] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 731.800121][ T5797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 731.834566][ T5797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 731.847458][ T5797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 731.886699][T10190] usb 1-1: Using ep0 maxpacket: 8 [ 731.897687][ T5797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 731.920486][ T5797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 731.983411][T10190] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 732.016681][T10190] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.026988][T10190] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 732.037256][T10190] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 732.050366][T10190] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.063790][T10190] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 732.073234][T10190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.553471][T10190] usb 1-1: usb_control_msg returned -32 [ 732.559569][T10190] usbtmc 1-1:16.0: can't read capabilities [ 733.307239][T11410] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 733.511598][T10190] usb 1-1: USB disconnect, device number 16 [ 733.887652][T11395] chnl_net:caif_netlink_parms(): no params data found [ 733.988938][ T5784] Bluetooth: hci5: command tx timeout [ 735.893998][T11443] loop0: detected capacity change from 0 to 256 [ 736.071212][ T5784] Bluetooth: hci5: command tx timeout [ 736.435392][T11395] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.443946][T11395] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.535156][T11395] bridge_slave_0: entered allmulticast mode [ 736.603309][T11395] bridge_slave_0: entered promiscuous mode [ 736.670102][T11395] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.681241][T11395] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.787338][T11395] bridge_slave_1: entered allmulticast mode [ 736.847138][T11395] bridge_slave_1: entered promiscuous mode [ 737.357539][T11395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.480380][T11395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.046804][T11395] team0: Port device team_slave_0 added [ 738.119402][T11395] team0: Port device team_slave_1 added [ 738.167648][ T5784] Bluetooth: hci5: command tx timeout [ 738.268265][T11464] loop7: detected capacity change from 0 to 512 [ 738.413332][T11395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.420855][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.450096][T11395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.469940][T11395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.477870][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.504484][T11395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.537197][T11464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 738.618726][T11464] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.146187][T11477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1506'. [ 739.227681][T10805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 739.282611][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1506'. [ 739.367936][T11395] hsr_slave_0: entered promiscuous mode [ 739.397839][T11395] hsr_slave_1: entered promiscuous mode [ 739.408406][T11395] debugfs: 'hsr0' already exists in 'hsr' [ 739.414328][T11395] Cannot create hsr debugfs directory [ 739.930285][T11483] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 739.994652][T11483] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 740.227028][ T5784] Bluetooth: hci5: command tx timeout [ 740.660841][T11494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1510'. [ 742.031177][T10190] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 742.139168][T11509] loop7: detected capacity change from 0 to 1024 [ 742.206002][T11509] EXT4-fs: Ignoring removed orlov option [ 742.249532][T10190] usb 1-1: Using ep0 maxpacket: 16 [ 742.267616][T10190] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 742.279709][T10190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 742.318370][T11509] /dev/loop7: Can't open blockdev [ 742.375325][T10190] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 742.384825][T10190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.394944][T10190] usb 1-1: Product: syz [ 742.399756][T10190] usb 1-1: Manufacturer: syz [ 742.404532][T10190] usb 1-1: SerialNumber: syz [ 742.569242][T10190] usb 1-1: config 0 descriptor?? [ 742.683567][T10190] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 742.693949][T10190] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 743.212076][T11515] netlink: 'syz.3.1517': attribute type 1 has an invalid length. [ 743.296090][T10190] em28xx 1-1:0.0: unknown em28xx chip ID (238) [ 743.533754][T10190] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 743.753334][T10190] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 743.760976][T10190] em28xx 1-1:0.0: No AC97 audio processor [ 743.855202][T10190] usb 1-1: USB disconnect, device number 17 [ 743.882194][T10190] em28xx 1-1:0.0: Disconnecting em28xx [ 743.907877][T10190] em28xx 1-1:0.0: Freeing device [ 744.103026][T11517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.162030][T11517] bond1: (slave bond2): making interface the new active one [ 744.172429][T11517] bond1: (slave bond2): Enslaving as an active interface with an up link [ 744.262393][T11395] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 744.347976][T11395] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 744.612468][ T3415] bridge_slave_1: left allmulticast mode [ 744.618633][ T3415] bridge_slave_1: left promiscuous mode [ 744.625165][ T3415] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.759385][ T3415] bridge_slave_0: left allmulticast mode [ 744.765348][ T3415] bridge_slave_0: left promiscuous mode [ 744.772422][ T3415] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.919678][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1520'. [ 744.984104][T11529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1520'. [ 745.768706][ T3415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.823360][ T3415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.848119][ T3415] bond0 (unregistering): Released all slaves [ 745.882869][T11395] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 746.104666][T11395] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 746.666952][ T3415] hsr_slave_0: left promiscuous mode [ 746.688212][ T3415] hsr_slave_1: left promiscuous mode [ 746.727500][ T3415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.801481][ T3415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.436633][T10190] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 747.487102][T11557] loop1: detected capacity change from 0 to 512 [ 747.648526][T10190] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 747.661452][T10190] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.675671][T10190] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 747.685229][T10190] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.828353][T11557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.852827][T11557] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.129177][T10190] usb 8-1: usb_control_msg returned -32 [ 748.135088][T10190] usbtmc 8-1:16.0: can't read capabilities [ 748.388764][ T3415] team0 (unregistering): Port device team_slave_1 removed [ 748.518007][ T3415] team0 (unregistering): Port device team_slave_0 removed [ 748.923028][T11574] loop3: detected capacity change from 0 to 2048 [ 749.118291][T11574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.314739][T11574] EXT4-fs (loop3): shut down requested (1) [ 749.649905][T10753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.074939][ T9939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.514728][ T5911] usb 8-1: USB disconnect, device number 6 [ 750.624265][T11395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.941383][T11395] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.088534][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.096072][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.209795][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.217421][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.525279][T11601] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1537'. [ 752.891698][T10190] libceph: connect (1)[c::]:6789 error -101 [ 752.937295][T10190] libceph: mon0 (1)[c::]:6789 connect error [ 753.020877][T10190] libceph: connect (1)[c::]:6789 error -101 [ 753.127394][T10190] libceph: mon0 (1)[c::]:6789 connect error [ 753.170924][T10190] libceph: connect (1)[b::]:6789 error -101 [ 753.196697][T10190] libceph: mon0 (1)[b::]:6789 connect error [ 753.450026][ T24] libceph: connect (1)[c::]:6789 error -101 [ 753.477171][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 753.514372][ T24] libceph: connect (1)[b::]:6789 error -101 [ 753.535430][T11614] ceph: No mds server is up or the cluster is laggy [ 753.547103][T11619] ceph: No mds server is up or the cluster is laggy [ 753.554831][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 753.857489][T11395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.764641][T11645] loop3: detected capacity change from 0 to 256 [ 754.852212][T11645] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 754.935965][T11645] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 756.012039][ T30] audit: type=1800 audit(1770648945.910:21): pid=11660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1552" name="file0" dev="tmpfs" ino=265 res=0 errno=0 [ 756.728268][T11395] veth0_vlan: entered promiscuous mode [ 756.882950][T11395] veth1_vlan: entered promiscuous mode [ 757.238209][T11670] loop0: detected capacity change from 0 to 1024 [ 757.289856][T11670] EXT4-fs: Ignoring removed orlov option [ 757.304413][T11395] veth0_macvtap: entered promiscuous mode [ 757.360387][T11670] /dev/loop0: Can't open blockdev [ 757.417422][T11395] veth1_macvtap: entered promiscuous mode [ 757.621430][T11674] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1556'. [ 757.741101][T11679] loop7: detected capacity change from 0 to 128 [ 757.772839][T11674] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1556'. [ 757.834646][T11679] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 757.906578][T11676] bridge0: entered allmulticast mode [ 757.945428][T11679] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 758.052825][T11678] pim6reg: entered allmulticast mode [ 758.200113][T11395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.330908][T11395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.460609][ T24] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 758.466891][ T8628] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.558043][ T8628] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.600619][ T8628] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.657089][ T8628] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.705945][ T24] usb 8-1: config 0 has no interfaces? [ 758.747243][ T24] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 758.756748][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.764953][ T24] usb 8-1: Product: syz [ 758.769579][ T24] usb 8-1: Manufacturer: syz [ 758.774380][ T24] usb 8-1: SerialNumber: syz [ 758.902965][ T24] usb 8-1: config 0 descriptor?? [ 759.210467][T11679] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.1559: Logical block already allocated [ 759.314325][ T5911] usb 8-1: USB disconnect, device number 7 [ 760.141218][T10805] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 761.314616][T11714] loop1: detected capacity change from 0 to 2048 [ 761.942040][T11714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.370354][T11714] netlink: 'syz.1.1564': attribute type 27 has an invalid length. [ 762.728586][T11740] bridge0: entered allmulticast mode [ 762.797649][T11742] pim6reg: entered allmulticast mode [ 763.534723][T11755] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1574'. [ 763.916910][T11731] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 764.006908][T11761] loop0: detected capacity change from 0 to 256 [ 764.219920][T11761] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 764.665348][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 764.674823][T11770] netlink: 'syz.3.1578': attribute type 13 has an invalid length. [ 764.823407][ T9939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.875381][T11770] vxlan0: entered promiscuous mode [ 764.897278][ T3415] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.913536][ T3415] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.932240][ T3415] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.968280][ T8628] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.109336][T11785] overlayfs: missing 'lowerdir' [ 766.348967][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.357304][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.663305][ T8614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.671511][ T8614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.063262][T11795] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 767.186376][T11795] bond1: (slave lo): Enslaving as an active interface with an up link [ 767.198184][T11795] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 769.134192][T11830] batadv_slave_1: entered promiscuous mode [ 769.197970][T11829] batadv_slave_1: left promiscuous mode [ 769.744143][T11837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 769.985616][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 769.993744][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 770.001852][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 770.009866][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 770.017569][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 770.124997][T11841] loop0: detected capacity change from 0 to 512 [ 770.179262][T11841] EXT4-fs: Ignoring removed bh option [ 770.244607][T11841] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 770.363508][T11841] EXT4-fs (loop0): 1 truncate cleaned up [ 770.384433][T11841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.203441][T10916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.563677][T11867] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1608'. [ 774.688839][T11921] loop0: detected capacity change from 0 to 64 [ 776.243424][T11936] loop1: detected capacity change from 0 to 512 [ 776.474426][ T8614] Bluetooth: hci2: Frame reassembly failed (-84) [ 776.750343][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 776.969096][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 776.997955][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.006515][ T24] usb 4-1: config 0 has no interface number 0 [ 777.063093][ T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 777.063254][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.084406][ T24] usb 4-1: Product: syz [ 777.089150][ T24] usb 4-1: Manufacturer: syz [ 777.093951][ T24] usb 4-1: SerialNumber: syz [ 777.185801][ T24] usb 4-1: config 0 descriptor?? [ 777.215974][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 778.544292][ T24] gspca_spca1528: reg_w err -71 [ 778.550097][ T24] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 778.557024][ T5797] Bluetooth: hci2: command 0x1003 tx timeout [ 778.573659][ T5784] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 778.654889][ T24] usb 4-1: USB disconnect, device number 5 [ 779.071957][T11960] kernel read not supported for file /file0 (pid: 11960 comm: syz.1.1638) [ 779.072892][ T30] audit: type=1800 audit(1770648968.980:22): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1638" name="file0" dev="mqueue" ino=40042 res=0 errno=0 [ 779.114372][T11963] loop4: detected capacity change from 0 to 136 [ 779.337178][T11962] loop0: detected capacity change from 0 to 2048 [ 779.960231][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 780.131167][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 780.141384][T11973] loop3: detected capacity change from 0 to 128 [ 780.344189][ T8614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.612509][ T8614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.991257][ T8614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.145209][ T8614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.715913][ T8614] bridge_slave_1: left allmulticast mode [ 781.722197][ T8614] bridge_slave_1: left promiscuous mode [ 781.729134][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.783619][ T8614] bridge_slave_0: left allmulticast mode [ 781.790310][ T8614] bridge_slave_0: left promiscuous mode [ 781.797136][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.659105][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.743723][ T8614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.804521][ T8614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.843539][ T8614] bond0 (unregistering): Released all slaves [ 783.481823][T10190] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 783.516508][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 783.709691][T10190] usb 8-1: Using ep0 maxpacket: 16 [ 783.719240][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 783.776439][T10190] usb 8-1: config 0 has no interfaces? [ 783.782491][T10190] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 783.792223][T10190] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.802640][ T8614] hsr_slave_0: left promiscuous mode [ 783.818112][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.829948][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.840151][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 783.849671][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.871940][ T8614] hsr_slave_1: left promiscuous mode [ 783.880234][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.888047][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.902116][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.914684][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.932103][T10190] usb 8-1: config 0 descriptor?? [ 783.941315][ T24] usb 2-1: config 0 descriptor?? [ 783.984084][ T24] hub 2-1:0.0: USB hub found [ 784.125604][ T8614] veth1_macvtap: left promiscuous mode [ 784.179241][ T8614] veth0_macvtap: left promiscuous mode [ 784.185226][ T8614] veth1_vlan: left promiscuous mode [ 784.191759][ T24] hub 2-1:0.0: 1 port detected [ 784.221431][ T8614] veth0_vlan: left promiscuous mode [ 784.272463][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 784.299500][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 784.312014][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 784.351607][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 784.384953][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 784.436715][ T5911] usb 8-1: USB disconnect, device number 8 [ 784.511052][T12009] loop3: detected capacity change from 0 to 1024 [ 784.598715][T12009] EXT4-fs: Ignoring removed nobh option [ 784.604654][T12009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 784.759481][T12009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.775644][ T30] audit: type=1326 audit(1770648974.680:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 784.813310][ T24] hub 2-1:0.0: activate --> -90 [ 784.856964][ T30] audit: type=1326 audit(1770648974.710:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 784.879667][ T30] audit: type=1326 audit(1770648974.720:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 784.902145][ T30] audit: type=1326 audit(1770648974.720:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 784.924570][ T30] audit: type=1326 audit(1770648974.720:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 784.949376][ T30] audit: type=1326 audit(1770648974.720:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 784.972547][ T30] audit: type=1326 audit(1770648974.730:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 784.995062][ T30] audit: type=1326 audit(1770648974.730:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 785.017696][ T30] audit: type=1326 audit(1770648974.730:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 785.042155][ T30] audit: type=1326 audit(1770648974.730:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 785.305677][ T5911] usb 2-1: USB disconnect, device number 6 [ 785.496995][ T24] usb 2-1-port1: config error [ 785.725799][T10753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.470066][ T5784] Bluetooth: hci2: command tx timeout [ 786.985373][T12039] loop0: detected capacity change from 0 to 136 [ 787.038470][T12039] iso9660: Bad value for 'dmode' [ 787.161964][ T8614] team0 (unregistering): Port device team_slave_1 removed [ 787.298467][ T8614] team0 (unregistering): Port device team_slave_0 removed [ 788.546762][ T5797] Bluetooth: hci2: command tx timeout [ 789.303707][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050376a00: rx timeout, send abort [ 789.314835][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888050376a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 789.827379][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 790.293470][T12074] netlink: 'syz.0.1670': attribute type 10 has an invalid length. [ 790.435125][T12074] team0: Port device dummy0 added [ 790.471733][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1670'. [ 790.630486][ T5784] Bluetooth: hci2: command tx timeout [ 790.645934][T12010] chnl_net:caif_netlink_parms(): no params data found [ 790.907007][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 791.140898][ T24] usb 4-1: config index 0 descriptor too short (expected 100, got 43) [ 791.149633][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.160244][ T24] usb 4-1: config 0 has no interfaces? [ 791.253559][ T24] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 791.263107][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.272314][ T24] usb 4-1: Product: syz [ 791.276953][ T24] usb 4-1: Manufacturer: syz [ 791.284165][ T24] usb 4-1: SerialNumber: syz [ 791.396390][ T24] usb 4-1: config 0 descriptor?? [ 792.136589][T12099] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 792.178796][ T5911] usb 4-1: USB disconnect, device number 6 [ 792.252528][T12010] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.260459][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.316965][T12010] bridge_slave_0: entered allmulticast mode [ 792.339788][T12010] bridge_slave_0: entered promiscuous mode [ 792.399918][T12010] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.411943][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.467484][T12010] bridge_slave_1: entered allmulticast mode [ 792.518363][T12010] bridge_slave_1: entered promiscuous mode [ 792.707034][ T5784] Bluetooth: hci2: command tx timeout [ 792.987973][T12108] netlink: 'syz.3.1681': attribute type 3 has an invalid length. [ 793.054601][T12010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.155422][T12010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.550980][T12010] team0: Port device team_slave_0 added [ 793.604491][T12010] team0: Port device team_slave_1 added [ 793.898774][T12010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.906068][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.933016][T12010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.162151][T12010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.169970][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.196760][T12010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.566945][T12128] loop3: detected capacity change from 0 to 128 [ 794.679076][T12134] loop0: detected capacity change from 0 to 256 [ 794.718438][T12128] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 794.822383][T12128] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.838038][T12134] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4711949a, utbl_chksum : 0xe619d30d) [ 794.999328][T12010] hsr_slave_0: entered promiscuous mode [ 795.050223][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 795.050295][ T30] audit: type=1800 audit(1770648984.950:37): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1688" name="file1" dev="loop0" ino=1048731 res=0 errno=0 [ 795.116851][T12010] hsr_slave_1: entered promiscuous mode [ 795.169965][T12010] debugfs: 'hsr0' already exists in 'hsr' [ 795.179026][T12010] Cannot create hsr debugfs directory [ 795.236995][ T30] audit: type=1800 audit(1770648985.080:38): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1688" name="file1" dev="loop0" ino=1048731 res=0 errno=0 [ 795.424058][T10753] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 797.057648][T12164] loop7: detected capacity change from 0 to 512 [ 797.126650][T12164] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 797.262388][T12164] EXT4-fs (loop7): 1 truncate cleaned up [ 797.309421][T12164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 797.379324][T12168] loop0: detected capacity change from 0 to 128 [ 797.523966][T12164] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 797.594803][T12164] EXT4-fs (loop7): Remounting filesystem read-only [ 797.646892][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 797.655664][T12168] FAT-fs (loop0): Filesystem has been set read-only [ 797.679765][T12164] EXT4-fs warning (device loop7): ext4_xattr_inode_lookup_create:1607: inode #19: comm syz.7.1697: cleanup dec ref error -28 [ 797.757468][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 797.779897][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 797.817014][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 797.840794][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 797.864371][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 797.907731][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 797.944375][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 797.985515][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.053494][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.130937][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.159983][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.215974][T10805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.245558][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.295787][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.346372][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.398782][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.436642][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.516885][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.541848][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.616665][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.625445][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.707080][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.715772][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.723022][T12010] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 798.751358][T12180] syz.3.1702(12180): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 798.759679][T12168] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 798.885624][T12010] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 799.000624][T12010] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 799.067498][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 799.102630][T12010] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 799.268026][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.281737][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.292706][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.306099][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.321160][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.513523][ T24] usb 8-1: config 0 descriptor?? [ 799.751850][T12194] input: syz1 as /devices/virtual/input/input16 [ 800.067691][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 800.129799][ T24] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 800.971203][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.981025][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.321553][T12199] team0: Port device dummy0 removed [ 801.397310][ C0] plantronics 0003:047F:FFFF.0015: usb_submit_urb(ctrl) failed: -1 [ 801.635630][T12199] bridge_slave_0: left allmulticast mode [ 801.643050][T12199] bridge_slave_0: left promiscuous mode [ 801.650160][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.798709][T12199] bridge_slave_1: left allmulticast mode [ 801.804806][T12199] bridge_slave_1: left promiscuous mode [ 801.811879][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.919913][T12199] bond0: (slave bond_slave_0): Releasing backup interface [ 801.955933][T12199] bond0: (slave bond_slave_1): Releasing backup interface [ 802.012879][T12199] team0: Port device team_slave_0 removed [ 802.053343][T12199] team0: Port device team_slave_1 removed [ 802.079101][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.159526][T12199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.192428][ T9867] usb 8-1: USB disconnect, device number 9 [ 802.244413][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.273399][T12199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.421818][T12199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 802.565899][T12219] loop1: detected capacity change from 0 to 1024 [ 802.742825][T12219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 802.772246][T12219] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.035106][T12010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.175772][T12225] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1713: Freeing blocks not in datazone - block = 0, count = 16 [ 803.301879][T12010] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.416104][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.423717][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.662192][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.669917][ T8628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.725466][ T8646] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 112: padding at end of block bitmap is not set [ 803.799228][ T8646] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 803.811896][ T8646] EXT4-fs (loop1): This should not happen!! Data will be lost [ 803.811896][ T8646] [ 803.821959][ T8646] EXT4-fs (loop1): Total free blocks count 0 [ 803.828374][ T8646] EXT4-fs (loop1): Free/Dirty block details [ 803.834451][ T8646] EXT4-fs (loop1): free_blocks=16 [ 803.839853][ T8646] EXT4-fs (loop1): dirty_blocks=144 [ 803.845277][ T8646] EXT4-fs (loop1): Block reservation details [ 803.851670][ T8646] EXT4-fs (loop1): i_reserved_data_blocks=9 [ 804.088282][ T8614] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 128 with error 28 [ 805.908700][T12259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1726'. [ 806.330733][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.669411][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 806.950985][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.961767][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.032036][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 807.041613][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 807.052814][ T24] usb 4-1: SerialNumber: syz [ 807.382711][ T24] usb 4-1: 0:2 : does not exist [ 807.465369][ T24] usb 4-1: USB disconnect, device number 7 [ 807.622842][T11044] udevd[11044]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.846602][ T9955] kernel write not supported for file bpf-prog (pid: 9955 comm: kworker/0:7) [ 808.986527][T12010] veth0_vlan: entered promiscuous mode [ 809.081144][T12010] veth1_vlan: entered promiscuous mode [ 809.456120][T12010] veth0_macvtap: entered promiscuous mode [ 809.583936][T12010] veth1_macvtap: entered promiscuous mode [ 809.849373][T12010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.908856][T12010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.077223][ T8633] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.114452][ T8633] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.170947][ T8633] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.209166][ T8633] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.105808][T12330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1746'. [ 811.793713][T12345] loop1: detected capacity change from 0 to 512 [ 811.940052][T12345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.039520][T12345] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 812.440314][ T9939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.995718][T12364] loop3: detected capacity change from 0 to 128 [ 813.352074][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 813.902791][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1756'. [ 815.226027][T12394] loop3: detected capacity change from 0 to 512 [ 815.264760][T12395] schedule_timeout: wrong timeout value fffffffffffffff8 [ 815.273999][T12395] CPU: 1 UID: 0 PID: 12395 Comm: vivid-003-sdr-c Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 815.274166][T12395] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 815.274220][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 815.274316][T12395] Call Trace: [ 815.274368][T12395] [ 815.274424][T12395] __dump_stack+0x26/0x30 [ 815.274607][T12395] dump_stack_lvl+0x14c/0x1c0 [ 815.274781][T12395] dump_stack+0x1e/0x25 [ 815.274939][T12395] schedule_timeout+0x1d2/0x240 [ 815.275084][T12395] ? kthread_should_stop+0xd7/0x140 [ 815.275294][T12395] vivid_thread_sdr_cap+0x12af/0x1720 [ 815.275558][T12395] ? __pfx_autoremove_wake_function+0x10/0x10 [ 815.275835][T12395] kthread+0xd5a/0xf00 [ 815.275980][T12395] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 815.276190][T12395] ? __pfx_kthread+0x10/0x10 [ 815.276320][T12395] ret_from_fork+0x207/0x6f0 [ 815.276502][T12395] ? __switch_to+0x521/0x750 [ 815.276650][T12395] ? __pfx_kthread+0x10/0x10 [ 815.276778][T12395] ret_from_fork_asm+0x1a/0x30 [ 815.276956][T12395] [ 815.516019][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 815.660906][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 815.700745][T12394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.741647][ T24] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 815.777377][T12394] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.880871][T12399] loop7: detected capacity change from 0 to 2048 [ 816.022802][T12399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 816.108469][T12394] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 816.501830][T12403] fido_id[12403]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 816.582285][T10753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.256869][ T8614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.265009][ T8614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.433069][T12416] loop3: detected capacity change from 0 to 1024 [ 817.601263][ T8628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.610222][ T8628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.655340][T12419] 9p: Bad value for 'rfdno' [ 817.758280][T12416] hfsplus: cannot replace xattr [ 817.927998][T12413] loop7: detected capacity change from 0 to 4096 [ 817.976976][T12413] ntfs3: Unknown parameter 'ÿ' [ 818.217602][ T8614] hfsplus: b-tree write err: -5, ino 4 [ 818.746833][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 818.947411][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 818.999044][ T24] usb 1-1: config 179 has an invalid interface number: 97 but max is 0 [ 819.007821][ T24] usb 1-1: config 179 has no interface number 0 [ 819.050458][ T24] usb 1-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 819.062103][ T24] usb 1-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 819.073761][ T24] usb 1-1: config 179 interface 97 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 819.087390][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 819.096742][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.310483][T12423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 819.495557][T12433] loop1: detected capacity change from 0 to 1024 [ 819.677956][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 819.724070][T12433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 819.764122][ T24] usb 1-1: USB disconnect, device number 18 [ 819.821931][T12433] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.990815][T12433] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.1770: lblock 0 mapped to illegal pblock 0 (length 1) [ 820.087308][T12433] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 820.100123][T12433] EXT4-fs (loop1): This should not happen!! Data will be lost [ 820.100123][T12433] [ 820.449689][T12448] loop8: detected capacity change from 0 to 512 [ 820.521453][T12448] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 820.529419][T12448] UDF-fs: Scanning with blocksize 512 failed [ 820.552522][T12433] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.1770: lblock 0 mapped to illegal pblock 0 (length 1) [ 820.600050][T12448] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 820.608063][T12448] UDF-fs: Scanning with blocksize 1024 failed [ 820.693587][T12448] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 820.701835][T12448] UDF-fs: Scanning with blocksize 2048 failed [ 820.717627][ T30] audit: type=1800 audit(1770649010.630:39): pid=12433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1770" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 820.723002][T12433] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.1770: lblock 0 mapped to illegal pblock 0 (length 1) [ 820.810017][T12448] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 820.866853][T12448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 821.005288][ T30] audit: type=1800 audit(1770649010.910:40): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1773" name="file2" dev="loop8" ino=36 res=0 errno=0 [ 821.076614][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 821.199139][T12440] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 821.336907][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 821.441248][ T9939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 821.442953][ T24] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 821.461562][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.472133][ T24] usb 8-1: config 0 has no interface number 0 [ 821.491542][ T24] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 821.501121][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.509453][ T24] usb 8-1: Product: syz [ 821.513788][ T24] usb 8-1: Manufacturer: syz [ 821.518668][ T24] usb 8-1: SerialNumber: syz [ 821.538100][ T24] usb 8-1: config 0 descriptor?? [ 821.695302][ T24] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 821.703046][ T24] uvcvideo 8-1:0.105: No valid video chain found. [ 821.811428][ T24] usb 8-1: USB disconnect, device number 10 [ 823.396691][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 823.454182][T12480] loop8: detected capacity change from 0 to 512 [ 823.637003][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 823.679393][ T24] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 823.701710][T12480] EXT4-fs (loop8): 1 orphan inode deleted [ 823.729095][T12480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.757635][ T8628] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 823.768434][ T8628] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 1 [ 823.780742][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 823.789067][ T24] usb 8-1: config 0 has no interface number 0 [ 823.819329][T12480] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.862737][ T24] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 823.873192][ T24] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 823.941087][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 823.952202][ T24] usb 8-1: config 0 has no interface number 0 [ 823.975868][ T24] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 823.986791][ T24] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.001531][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 824.010325][ T24] usb 8-1: config 0 has no interface number 0 [ 824.037601][ T24] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.049913][ T24] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.157357][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 824.165733][ T24] usb 8-1: config 0 has no interface number 0 [ 824.210997][ T24] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.221356][ T24] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.315052][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 824.323833][ T24] usb 8-1: config 0 has no interface number 0 [ 824.376782][ T24] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.387216][ T24] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.410353][T12010] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.430601][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 824.432786][ T9955] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 824.439065][ T24] usb 8-1: config 0 has no interface number 0 [ 824.462562][ T24] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.472996][ T24] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.526889][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 824.535174][ T24] usb 8-1: config 0 has no interface number 0 [ 824.638524][ T24] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.648796][ T24] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.666869][ T9955] usb 4-1: Using ep0 maxpacket: 16 [ 824.668032][T12494] loop0: detected capacity change from 0 to 512 [ 824.702116][ T9955] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 824.711800][ T9955] usb 4-1: config 0 has no interface number 0 [ 824.747833][ T9955] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.759351][ T9955] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.772480][ T9955] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 824.782778][ T9955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.802343][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 824.811077][ T24] usb 8-1: config 0 has no interface number 0 [ 824.836646][T12494] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 824.869104][ T24] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.879313][ T24] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.931986][ T9955] usb 4-1: config 0 descriptor?? [ 824.983919][ T24] usb 8-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 824.993524][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.002131][ T24] usb 8-1: Product: syz [ 825.006592][ T24] usb 8-1: Manufacturer: syz [ 825.011419][ T24] usb 8-1: SerialNumber: syz [ 825.046889][T12494] EXT4-fs (loop0): 1 truncate cleaned up [ 825.110286][T12494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.312099][ T30] audit: type=1800 audit(1770649015.220:41): pid=12494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1787" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 825.312905][ T24] usb 8-1: config 0 descriptor?? [ 825.443921][ T24] etas_es58x 8-1:0.2: Starting syz syz (Serial Number syz) [ 825.453576][ T9955] uclogic 0003:28BD:1903.0017: interface is invalid, ignoring [ 825.621890][T10190] usb 4-1: USB disconnect, device number 8 [ 825.697786][ T24] etas_es58x 8-1:0.2: could not parse product info: '424242424242' [ 825.901519][T10916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.937174][ T24] usb 8-1: USB disconnect, device number 11 [ 825.983950][ T24] etas_es58x 8-1:0.2: Disconnecting syz syz [ 826.543782][T12514] loop0: detected capacity change from 0 to 128 [ 826.701907][T12514] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 826.738041][T12514] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 827.361478][T10916] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 827.691647][T12529] overlay: filesystem on ./file0 not supported [ 828.130998][T12537] loop7: detected capacity change from 0 to 256 [ 828.179350][T12537] exfat: Deprecated parameter 'utf8' [ 828.185037][T12537] exfat: Deprecated parameter 'utf8' [ 828.262829][T12537] exfat: Deprecated parameter 'utf8' [ 828.332849][T12540] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1801'. [ 828.417027][T12537] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 828.449002][T12540] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 831.895717][ T5911] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 832.079229][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 832.114109][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.126003][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.136358][ T5911] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 832.151612][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.295409][ T5911] usb 1-1: config 0 descriptor?? [ 832.592641][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 832.601794][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 832.699619][ T5911] usb 1-1: USB disconnect, device number 19 [ 832.727474][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1816'. [ 832.800353][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1816'. [ 832.889477][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1816'. [ 834.236932][ T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 834.247748][T12607] loop8: detected capacity change from 0 to 2048 [ 834.349650][T12607] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 834.454674][T12607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 834.483828][ T24] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 834.495757][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.505278][ T24] usb 1-1: Product: syz [ 834.509859][ T24] usb 1-1: Manufacturer: syz [ 834.514649][ T24] usb 1-1: SerialNumber: syz [ 834.598795][ T24] usb 1-1: config 0 descriptor?? [ 834.690244][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 835.896689][ T24] gspca_stk1135: reg_w 0xd err -71 [ 835.903182][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 835.910658][ T24] gspca_stk1135: Sensor write failed [ 835.916749][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 835.923229][ T24] gspca_stk1135: Sensor write failed [ 835.931206][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 835.938483][ T24] gspca_stk1135: Sensor read failed [ 835.943981][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 835.950858][ T24] gspca_stk1135: Sensor read failed [ 835.956326][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 835.963229][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 835.969896][ T24] gspca_stk1135: Sensor read failed [ 835.975363][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 835.982098][ T24] gspca_stk1135: Sensor read failed [ 835.990170][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 835.997287][ T24] gspca_stk1135: Sensor write failed [ 836.002911][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 836.009622][ T24] gspca_stk1135: Sensor write failed [ 836.015344][ T24] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 836.345604][ T24] usb 1-1: USB disconnect, device number 20 [ 836.417665][T10924] udevd[10924]: setting mode of /dev/bus/usb/001/020 to 020664 failed: No such file or directory [ 836.529123][T10924] udevd[10924]: setting owner of /dev/bus/usb/001/020 to uid=0, gid=0 failed: No such file or directory [ 837.377501][T12647] loop8: detected capacity change from 0 to 512 [ 837.419596][T12647] EXT4-fs: Ignoring removed mblk_io_submit option [ 837.434227][T12647] EXT4-fs: Ignoring removed mblk_io_submit option [ 837.519839][T12647] EXT4-fs (loop8): Test dummy encryption mode enabled [ 837.527134][T12647] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 837.685046][T12647] EXT4-fs (loop8): 1 truncate cleaned up [ 837.773500][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 837.774885][T12647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.864686][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 838.186701][T12647] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 838.237451][T12647] overlayfs: upper fs does not support tmpfile. [ 838.287190][T12647] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 838.731379][T12669] Dead loop on virtual device ipvlan1, fix it urgently! [ 838.738928][T12669] ===================================================== [ 838.746133][T12669] BUG: KMSAN: uninit-value in __schedule+0x8f3/0x8460 [ 838.753490][T12669] __schedule+0x8f3/0x8460 [ 838.758228][T12669] __cond_resched+0x57/0xd0 [ 838.762902][T12669] __kmalloc_cache_noprof+0x107/0x1710 [ 838.768649][T12669] sctp_datamsg_from_user+0x99/0x22d0 [ 838.774269][T12669] sctp_sendmsg_to_asoc+0x19ca/0x2240 [ 838.780116][T12669] sctp_sendmsg+0x38b2/0x5270 [ 838.785037][T12669] inet_sendmsg+0x265/0x290 [ 838.789915][T12669] ____sys_sendmsg+0xd6a/0x1080 [ 838.798847][T12669] ___sys_sendmsg+0x271/0x3b0 [ 838.803689][T12669] __sys_sendmsg+0x1aa/0x300 [ 838.809483][T12669] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 838.815232][T12669] ia32_sys_call+0x35f2/0x4340 [ 838.820323][T12669] __do_fast_syscall_32+0x14a/0x310 [ 838.825720][T12669] do_fast_syscall_32+0x37/0x80 [ 838.830843][T12669] do_SYSENTER_32+0x1f/0x30 [ 838.835516][T12669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.842101][T12669] [ 838.844496][T12669] Local variable __bpf_net_ctx.i created at: [ 838.850628][T12669] __dev_queue_xmit+0x40a1/0x5890 [ 838.855900][T12669] ip6_finish_output2+0x2475/0x2d10 [ 838.861627][T12669] [ 838.864046][T12669] CPU: 0 UID: 0 PID: 12669 Comm: syz.3.1838 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 838.875687][T12669] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 838.881058][T12669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 838.891332][T12669] ===================================================== [ 838.901948][T12669] Disabling lock debugging due to kernel taint [ 838.909399][T12669] Kernel panic - not syncing: kmsan.panic set ... [ 838.915945][T12669] CPU: 0 UID: 0 PID: 12669 Comm: syz.3.1838 Tainted: G B W L syzkaller #0 PREEMPT(voluntary) [ 838.927530][T12669] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 838.934040][T12669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 838.944216][T12669] Call Trace: [ 838.947595][T12669] [ 838.950622][T12669] __dump_stack+0x26/0x30 [ 838.955143][T12669] dump_stack_lvl+0x50/0x1c0 [ 838.959922][T12669] ? dump_stack+0x12/0x25 [ 838.964431][T12669] dump_stack+0x1e/0x25 [ 838.968750][T12669] vpanic+0x435/0xd40 [ 838.972918][T12669] panic+0x15d/0x160 [ 838.977027][T12669] kmsan_report+0x31a/0x320 [ 838.981728][T12669] ? __msan_warning+0x1b/0x30 [ 838.986573][T12669] ? __schedule+0x8f3/0x8460 [ 838.991308][T12669] ? __cond_resched+0x57/0xd0 [ 838.996133][T12669] ? __kmalloc_cache_noprof+0x107/0x1710 [ 839.001942][T12669] ? sctp_datamsg_from_user+0x99/0x22d0 [ 839.007682][T12669] ? sctp_sendmsg_to_asoc+0x19ca/0x2240 [ 839.013382][T12669] ? sctp_sendmsg+0x38b2/0x5270 [ 839.018402][T12669] ? inet_sendmsg+0x265/0x290 [ 839.023221][T12669] ? ____sys_sendmsg+0xd6a/0x1080 [ 839.028413][T12669] ? ___sys_sendmsg+0x271/0x3b0 [ 839.033421][T12669] ? __sys_sendmsg+0x1aa/0x300 [ 839.038310][T12669] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 839.044155][T12669] ? ia32_sys_call+0x35f2/0x4340 [ 839.049322][T12669] ? __do_fast_syscall_32+0x14a/0x310 [ 839.054887][T12669] ? do_fast_syscall_32+0x37/0x80 [ 839.060126][T12669] ? do_SYSENTER_32+0x1f/0x30 [ 839.065013][T12669] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 839.071742][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.077081][T12669] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 839.083167][T12669] ? is_mmconf_reserved+0x771/0x7a0 [ 839.088565][T12669] ? filter_irq_stacks+0x49/0x190 [ 839.093844][T12669] ? stack_depot_save_flags+0x35/0x790 [ 839.099651][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.104988][T12669] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 839.111541][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.116874][T12669] __msan_warning+0x1b/0x30 [ 839.121553][T12669] __schedule+0x8f3/0x8460 [ 839.126141][T12669] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 839.132439][T12669] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 839.138407][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.143828][T12669] ? sctp_datamsg_from_user+0x99/0x22d0 [ 839.149524][T12669] ? __msan_warning+0x1b/0x30 [ 839.154361][T12669] ? filter_irq_stacks+0x13f/0x190 [ 839.159657][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.165022][T12669] __cond_resched+0x57/0xd0 [ 839.169688][T12669] __kmalloc_cache_noprof+0x107/0x1710 [ 839.175305][T12669] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 839.181333][T12669] ? sctp_datamsg_from_user+0x99/0x22d0 [ 839.187053][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.192483][T12669] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 839.198598][T12669] sctp_datamsg_from_user+0x99/0x22d0 [ 839.204199][T12669] sctp_sendmsg_to_asoc+0x19ca/0x2240 [ 839.209764][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.215081][T12669] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 839.221155][T12669] sctp_sendmsg+0x38b2/0x5270 [ 839.226017][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.231436][T12669] ? __pfx_sctp_sendmsg+0x10/0x10 [ 839.236621][T12669] inet_sendmsg+0x265/0x290 [ 839.241462][T12669] ? __pfx_inet_sendmsg+0x10/0x10 [ 839.246648][T12669] ____sys_sendmsg+0xd6a/0x1080 [ 839.251705][T12669] ___sys_sendmsg+0x271/0x3b0 [ 839.256557][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.261904][T12669] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 839.267910][T12669] ? __rcu_read_unlock+0x6c/0xd0 [ 839.273004][T12669] ? __fget_files+0x3b4/0x4a0 [ 839.277883][T12669] ? __fget_files+0x3b9/0x4a0 [ 839.282787][T12669] ? kmsan_get_metadata+0xf1/0x160 [ 839.288129][T12669] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 839.294165][T12669] __sys_sendmsg+0x1aa/0x300 [ 839.298943][T12669] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 839.304653][T12669] ia32_sys_call+0x35f2/0x4340 [ 839.309645][T12669] __do_fast_syscall_32+0x14a/0x310 [ 839.315067][T12669] do_fast_syscall_32+0x37/0x80 [ 839.320122][T12669] do_SYSENTER_32+0x1f/0x30 [ 839.324802][T12669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 839.331331][T12669] RIP: 0023:0xf743d539 [ 839.335508][T12669] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 839.355288][T12669] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 839.363873][T12669] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 839.371979][T12669] RDX: 0000000000080001 RSI: 0000000000000000 RDI: 0000000000000000 [ 839.380069][T12669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 839.388142][T12669] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 839.396235][T12669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 839.404338][T12669] [ 841.167953][T12669] Shutting down cpus with NMI [ 841.173420][T12669] Kernel Offset: disabled [ 841.177818][T12669] Rebooting in 86400 seconds..