last executing test programs: 20m33.056346459s ago: executing program 32 (id=129): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x1, 0x800) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) 18m21.097914335s ago: executing program 33 (id=520): syz_open_dev$usbfs(0x0, 0x205, 0x2581) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 18m21.003418727s ago: executing program 34 (id=522): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="4efe60b7", 0x4}, {&(0x7f00000003c0)="4babd0", 0x3}], 0x2, 0x0, 0x0, 0x40000}, 0x4) 18m18.040343163s ago: executing program 0 (id=535): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 18m17.607769892s ago: executing program 0 (id=536): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x8000) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0xfdef) 18m13.547848598s ago: executing program 35 (id=537): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x814000, &(0x7f0000000000), 0x1, 0x76a, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 18m13.474725236s ago: executing program 0 (id=539): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x7fffffffffffffff, 0x4, 0xb3f, 0x3, 0x40000000000001a, 0x6, 0x6, 0xffffffffffffffff, 0x100fff}) 18m12.816008684s ago: executing program 0 (id=542): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 18m11.926191021s ago: executing program 0 (id=550): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18m11.497651043s ago: executing program 0 (id=544): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) open_by_handle_at(r0, &(0x7f00000000c0)=@FILEID_NILFS_WITH_PARENT={0x17, 0xf8, {0xfffffffffffffffa, 0x8, 0x1ff, 0x2, 0x5}}, 0x402800) 18m9.154384226s ago: executing program 36 (id=544): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) open_by_handle_at(r0, &(0x7f00000000c0)=@FILEID_NILFS_WITH_PARENT={0x17, 0xf8, {0xfffffffffffffffa, 0x8, 0x1ff, 0x2, 0x5}}, 0x402800) 16m45.803401646s ago: executing program 8 (id=663): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x411}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 16m44.72022437s ago: executing program 8 (id=665): r0 = inotify_init() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x3}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m43.678086607s ago: executing program 8 (id=668): pselect6(0x0, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 16m41.769720619s ago: executing program 8 (id=671): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000700)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000340)) 16m40.071468017s ago: executing program 8 (id=677): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001740)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="c5819a27274164ec0f9eeb3cfd0fbd2a", 0x10}], 0x1, 0x0, 0x0, 0xfece5538a3894cc4}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) 16m38.997054038s ago: executing program 8 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16m35.351122185s ago: executing program 37 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14m20.312463166s ago: executing program 7 (id=1040): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) ioctl$TCXONC(r0, 0x540a, 0x0) 14m18.368307703s ago: executing program 7 (id=1046): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e1800, 0x56) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 14m16.949621256s ago: executing program 7 (id=1059): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(r1, &(0x7f0000000100)='.\x02\x00', r1, &(0x7f0000000040)='./file0\x00', 0x2) 14m16.211084064s ago: executing program 7 (id=1052): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 14m13.820407122s ago: executing program 7 (id=1056): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000840)={'#! ', './file1', [{0x20, '#! '}, {}]}, 0x10) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 14m12.695679764s ago: executing program 7 (id=1062): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9rmFsS1G7vXH2BIr7WY+OhENKFgdNONgvgnCv4JXQi6dyEiuNGFgi4qrioSOTNnJpMH9ra+NvPB5XznPY87M1f0TZ0C+LG71cI8DAg1vCWCArBA1rZXsfKryKHgo7J6Q+xPRH4QqXv9Vw8s7V9tttv5pu79mqQgYJ+YcTJtOvf04bHi+RPk5f1xC6FIFqnD9Po90i3ZlZ12PRqzpLNiJBeTlRsX/vEsDk+qU4N35FsNCC2f/mD3Mq9mGTNjiA70r88gXMAQwLu+16a3aZK8eWw7z4wpSXoV48uyL+FT/L93mQnfRYYkB0rXkP3Q5+8l+EJAGa93t1psvSS3GLvX7OeOhMli5XkQc1wBA4BKGJqiXEdJ7AKApW7nxpLu9U9tdJrr+Xp+LctWziy/OCpHdHgX2Gjny2SGYdMTJgoefE6rgZ//tHcj/wABKBgaeF4jsy/pLufFE0FIFUiC3KCGFHjm+6diu6U7uIiTmANwe8DuTBaoDq6mcJmntgpCSZSGCgeEPSSYM47TrevttW0QyKXtQPkajfcoeyUThRvlK2f99LdF1kWuitwZ9TNwb5d7k5Sp8Fm0xQFQwZ1mt7tpHi/L2FbxFYwtm/edE+nqXkPXrJ6iII4UDYyIiIiIiIiI+Ev4GQAA//8sQT03") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x31a8eb60}}) 14m9.499235537s ago: executing program 38 (id=1062): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9rmFsS1G7vXH2BIr7WY+OhENKFgdNONgvgnCv4JXQi6dyEiuNGFgi4qrioSOTNnJpMH9ra+NvPB5XznPY87M1f0TZ0C+LG71cI8DAg1vCWCArBA1rZXsfKryKHgo7J6Q+xPRH4QqXv9Vw8s7V9tttv5pu79mqQgYJ+YcTJtOvf04bHi+RPk5f1xC6FIFqnD9Po90i3ZlZ12PRqzpLNiJBeTlRsX/vEsDk+qU4N35FsNCC2f/mD3Mq9mGTNjiA70r88gXMAQwLu+16a3aZK8eWw7z4wpSXoV48uyL+FT/L93mQnfRYYkB0rXkP3Q5+8l+EJAGa93t1psvSS3GLvX7OeOhMli5XkQc1wBA4BKGJqiXEdJ7AKApW7nxpLu9U9tdJrr+Xp+LctWziy/OCpHdHgX2Gjny2SGYdMTJgoefE6rgZ//tHcj/wABKBgaeF4jsy/pLufFE0FIFUiC3KCGFHjm+6diu6U7uIiTmANwe8DuTBaoDq6mcJmntgpCSZSGCgeEPSSYM47TrevttW0QyKXtQPkajfcoeyUThRvlK2f99LdF1kWuitwZ9TNwb5d7k5Sp8Fm0xQFQwZ1mt7tpHi/L2FbxFYwtm/edE+nqXkPXrJ6iII4UDYyIiIiIiIiI+Ev4GQAA//8sQT03") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x31a8eb60}}) 6m0.998407933s ago: executing program 1 (id=2716): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x0, 0x295, &(0x7f0000000140)="$eJzs3E1rK1UYAOB3mtx7a0HShVAUwRE3rkJbceGuRSqIAUUJoriw2BQlUwsNFJJFPzb6JxT/gS7dCi7EjQv/gAhSBTd2JyJE8mmaTpJaSYPe59nM4cx5z/vORztlmJ53nzyo7x029i8vk7OIJIpJbMUfEauxFIUAAP6Pfm+347d2z6JrAQDuxuTn/yOLKgkAmLP8539xfNhrvc3pXZYGAMzJv3v/7x0BAPwXvfHW269sVyo7r6fpcsTBx8fV42p3O3i078cHkUUt1qMUf0a0h3rtl16u7KynHT+vRvXgtB9/elztfT24PYjfiFKs5sUnOxtpz9X4e7HSj/9hJWqxGaV4LD//Zm78/Xj2mZH85SjF9+/FYWSxF53Yv+NPNtL0xVcraRRjJP5Bd1xX/p85vpcAAAAAAAAAAAAAAAAAAAAAAODWyulQ7vo95fKk/b347cnrAy1fXR9ofH2eYjxxbZlhAAAAAAAAAAAAAAAAAAAAeDg1mq36bpbVjqY1Pvz2868jpo9pXnx39uaMeZqtetLPOzvpvBuPPv3TJ5PHnCezz08yI0WhP8c/LOyrp8Z63inkz7M02pOc3SDFcv/szy6jMKPUby7ef/y5xtrz13cNcnR7ho2x8AdzuKb3pt1av5YicqPOb5Er7VyMYc8XncbgqO/8Nh4c9cjPV/7gtU+3dr88+fGXm8489189AAAAAAAAAAAAAAAAAADAmO6/kd/IRy/MuxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWJRGs1XfzbLa/Wi2Possqx0NeqY1kogY9Cz1Z5octeBDBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+CsAAP//3Pl/Vg==") prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmget(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)) fstat(0xffffffffffffffff, 0x0) 6m0.04670788s ago: executing program 1 (id=2717): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) close(0x3) 5m58.844101431s ago: executing program 1 (id=2720): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82000, 0xa1) getdents64(r1, 0x0, 0x0) 5m58.175778088s ago: executing program 1 (id=2724): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) setuid(0xee01) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x7}}, 0x24, 0x2) 5m57.01291381s ago: executing program 1 (id=2729): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000080)=ANY=[], 0xfd, 0x326, &(0x7f00000007c0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x4) 5m55.927331762s ago: executing program 1 (id=2735): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 5m54.145118086s ago: executing program 39 (id=2735): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1m4.728660217s ago: executing program 5 (id=3836): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m4.151339727s ago: executing program 5 (id=3828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = dup2(r0, r1) close_range(r3, 0xffffffffffffffff, 0x0) 1m3.296713179s ago: executing program 5 (id=3833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xfffffffffffffd8e}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1m2.334446711s ago: executing program 5 (id=3838): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 1m1.471524607s ago: executing program 5 (id=3842): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000fc0)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 1m0.819988722s ago: executing program 5 (id=3844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 58.570874044s ago: executing program 40 (id=3844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 10.231255735s ago: executing program 4 (id=4004): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 8.662811228s ago: executing program 3 (id=4011): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 8.584594569s ago: executing program 4 (id=4012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 8.103667767s ago: executing program 2 (id=4013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x4, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x1ffffffffffffff}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 7.3896128s ago: executing program 9 (id=4014): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 7.239167458s ago: executing program 4 (id=4015): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x24}}}}}, 0x20}}, 0xc800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 7.166529866s ago: executing program 6 (id=4016): r0 = socket(0xa, 0x3, 0xff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$nci(r1, &(0x7f00000002c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x4, @b={0x7f, 0x3, 0x1, 0x2, {}, 0x1}}, 0x9) close(0x3) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c) 7.079007122s ago: executing program 2 (id=4017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103004d07000640975ecc001400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6.410952708s ago: executing program 6 (id=4018): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf, 0x6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.031982145s ago: executing program 4 (id=4019): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x3, 0x0, 0x100, 0xfffffffe, {0x1, 0xfffffffffffffff1, 0x9, 0x8, 0x100000000, 0xffffffff80000001, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, 0x0, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 5.004322539s ago: executing program 3 (id=4020): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 4.990642025s ago: executing program 9 (id=4021): socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4.939561895s ago: executing program 2 (id=4022): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000200)={0x0, 0xc2d3, 0x10100, 0x2, 0x3, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000000)) io_uring_enter(r2, 0x79a5, 0x2, 0x46, 0x0, 0x0) fanotify_mark(r1, 0x1, 0x1033, r0, 0x0) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r0, 0xe, 0x4) write$binfmt_script(r4, &(0x7f0000001380)={'#! ', './file0'}, 0xb) 3.900253086s ago: executing program 3 (id=4023): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000300), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 3.890150367s ago: executing program 9 (id=4024): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 3.760758897s ago: executing program 2 (id=4025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x78d4a000) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$unix(0x1, 0x1, 0x0) 3.164617073s ago: executing program 6 (id=4026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x10000000}) io_setup(0x5, &(0x7f0000000140)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) shutdown(r0, 0x0) 2.899359814s ago: executing program 3 (id=4027): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2.723814594s ago: executing program 4 (id=4028): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x29) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2.293444091s ago: executing program 6 (id=4029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) set_mempolicy(0xa002, 0x0, 0x40000006) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2.196354843s ago: executing program 9 (id=4030): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) 2.054994438s ago: executing program 3 (id=4031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) 1.403623433s ago: executing program 6 (id=4032): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 1.312540795s ago: executing program 2 (id=4033): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880000, 0x0, 0x40, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 1.19990876s ago: executing program 9 (id=4034): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000a000000040001801800028014000180080001040000000000000000ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 419.298507ms ago: executing program 4 (id=4035): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 261.461239ms ago: executing program 3 (id=4036): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write(r2, 0x0, 0x0) 106.233829ms ago: executing program 6 (id=4037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) memfd_create(0x0, 0x3) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x270}]}, 0x34}}, 0x0) 70.986445ms ago: executing program 9 (id=4038): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1c520, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 2 (id=4039): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) kernel console output (not intermixed with test programs): empt to access beyond end of device [ 968.966412][T13215] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 969.057501][T13215] syz.4.2079: attempt to access beyond end of device [ 969.057501][T13215] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 969.171688][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 969.171760][ T29] audit: type=1800 audit(1781285743.214:90): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2079" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 969.827513][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2080'. [ 970.669848][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 970.903519][ T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 970.967422][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.047369][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.106757][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 971.225155][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 971.267049][ T9] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 971.316353][ T9] usb 10-1: Manufacturer: syz [ 971.357438][ T9] usb 10-1: config 0 descriptor?? [ 971.942934][ T9] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 972.083765][ T9] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 974.125273][ T7829] usb 10-1: USB disconnect, device number 15 [ 976.165918][T13290] overlayfs: failed to resolve './file0': -2 [ 976.516520][T13294] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 982.079851][ T9] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 982.286324][ T9] usb 10-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 982.384040][ T9] usb 10-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 982.411068][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 982.431033][ T9] usb 10-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 982.463264][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.534454][ T9] usb 10-1: config 0 descriptor?? [ 982.555369][T13350] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 983.171391][ T9] kye 0003:0458:0087.001B: unknown main item tag 0x7 [ 983.254368][ T9] kye 0003:0458:0087.001B: hidraw0: USB HID v9.0d Device [HID 0458:0087] on usb-dummy_hcd.9-1/input0 [ 983.400982][ T9] usb 10-1: USB disconnect, device number 16 [ 984.330779][T13363] fido_id[13363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 986.814838][T13397] fuse: fd is not a fuse device [ 987.857948][ T9] libceph: connect (1)[c::]:6789 error -101 [ 987.869578][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 987.938151][T13407] ceph: No mds server is up or the cluster is laggy [ 990.199507][T13440] overlayfs: failed to clone upperpath [ 993.264347][T13470] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2152'. [ 993.376460][T13470] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2152'. [ 993.728784][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2154'. [ 993.817318][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2154'. [ 993.829662][T13481] loop4: detected capacity change from 0 to 2048 [ 993.960935][T13481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 995.580722][T13496] nbd4: detected capacity change from 0 to 63 [ 995.619738][T13499] block nbd4: NBD_DISCONNECT [ 995.642266][T13499] block nbd4: Disconnected due to user request. [ 995.691898][T13499] block nbd4: shutting down sockets [ 995.724341][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 995.733932][ C0] buffer_io_error: 6 callbacks suppressed [ 995.734007][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 995.747845][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 995.757212][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 995.765286][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 995.774680][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 995.782723][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 995.792072][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 995.849670][T10391] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 995.862455][T10391] Buffer I/O error on dev nbd4, logical block 0, async page read [ 995.896551][T10391] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 995.971586][T10391] Buffer I/O error on dev nbd4, logical block 1, async page read [ 995.994533][T10391] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.023840][T10391] Buffer I/O error on dev nbd4, logical block 2, async page read [ 996.073147][T10391] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.116215][T10391] Buffer I/O error on dev nbd4, logical block 3, async page read [ 996.149624][T10391] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.217549][T10391] Buffer I/O error on dev nbd4, logical block 0, async page read [ 996.272284][T10391] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.331318][T10391] Buffer I/O error on dev nbd4, logical block 1, async page read [ 996.384871][T10391] ldm_validate_partition_table(): Disk read failed. [ 996.422900][T10391] Dev nbd4: unable to read RDB block 0 [ 996.448296][T10391] nbd4: unable to read partition table [ 996.612334][T10391] ldm_validate_partition_table(): Disk read failed. [ 996.670746][T10391] Dev nbd4: unable to read RDB block 0 [ 996.712137][T10391] nbd4: unable to read partition table [ 998.193373][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2171'. [ 998.425771][T13534] loop9: detected capacity change from 0 to 8 [ 998.521406][T13534] squashfs image failed sanity check [ 998.723975][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2172'. [ 998.914091][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2172'. [ 998.935333][ T29] audit: type=1326 audit(1781285772.964:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.4.2175" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x0 [ 999.913527][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2177'. [ 999.936616][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2177'. [ 1000.620291][ T7829] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1000.803103][ T7829] usb 2-1: Using ep0 maxpacket: 8 [ 1000.846886][ T7829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1000.861318][T13563] fuse: Bad value for 'fd' [ 1000.889145][ T7829] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1000.943369][ T7829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.020684][ T7829] usb 2-1: config 0 descriptor?? [ 1001.347033][ T7829] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1001.884556][T13571] tls_set_device_offload: netdev not found [ 1001.939527][ T7829] usb 2-1: USB disconnect, device number 5 [ 1003.470369][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.477051][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.682448][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2193'. [ 1005.717696][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'. [ 1005.794407][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'. [ 1005.901258][T13622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2198'. [ 1008.332695][T13659] overlayfs: failed to clone lowerpath [ 1013.410797][T13719] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1014.311034][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1014.329299][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1014.446741][ T807] libceph: connect (1)[c::]:6789 error -101 [ 1014.457736][ T807] libceph: mon0 (1)[c::]:6789 connect error [ 1014.617337][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1014.672445][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1014.731438][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1014.759356][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1015.087840][T13734] ceph: No mds server is up or the cluster is laggy [ 1015.089264][T13730] ceph: No mds server is up or the cluster is laggy [ 1015.200832][ T5686] libceph: connect (1)[c::]:6789 error -101 [ 1015.207321][ T5686] libceph: mon0 (1)[c::]:6789 connect error [ 1020.078321][T13799] loop4: detected capacity change from 0 to 512 [ 1020.095169][T13799] EXT4-fs: Ignoring removed orlov option [ 1020.160005][T13799] EXT4-fs: Ignoring removed mblk_io_submit option [ 1020.313127][T13799] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2256: corrupted in-inode xattr: e_value size too large [ 1020.342505][T13799] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1020.348709][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1020.364755][ C1] EXT4-fs (loop4): initial error at time 1781285794: ext4_iget_extra_inode:5128: inode 15 [ 1020.375079][ C1] EXT4-fs (loop4): last error at time 1781285794: ext4_iget_extra_inode:5128: inode 15 [ 1020.390146][T13799] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2256: couldn't read orphan inode 15 (err -117) [ 1020.402597][T13799] loop4: lost filesystem error report for type 5 error -117 [ 1020.451135][T13799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.755366][T13799] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 12: comm syz.4.2256: lblock 3 mapped to illegal pblock 12 (length 1) [ 1021.323323][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.133699][T13834] loop4: detected capacity change from 0 to 64 [ 1024.886674][T13852] loop4: detected capacity change from 0 to 2048 [ 1025.018708][T13852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.038187][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2274'. [ 1026.580720][T13874] overlayfs: failed to clone upperpath [ 1026.749733][T13876] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1026.770521][T13876] overlayfs: failed to set xattr on upper [ 1026.837971][T13876] overlayfs: ...falling back to redirect_dir=nofollow. [ 1026.892350][T13876] overlayfs: ...falling back to index=off. [ 1026.966530][T13876] overlayfs: ...falling back to uuid=null. [ 1031.159143][ T807] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1031.398935][ T807] usb 10-1: Using ep0 maxpacket: 32 [ 1031.445474][ T807] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1031.491713][ T807] usb 10-1: config 0 has no interface number 0 [ 1031.514509][ T807] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 119, changing to 10 [ 1031.557501][ T807] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 49336, setting to 1024 [ 1031.605051][ T807] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1031.679864][ T807] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1031.732455][ T807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.786529][ T807] usb 10-1: Product: syz [ 1031.804782][ T29] audit: type=1326 audit(1781285805.834:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.6.2293" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703f01c code=0x0 [ 1031.847316][ T807] usb 10-1: Manufacturer: syz [ 1031.863040][ T807] usb 10-1: SerialNumber: syz [ 1031.912962][ T807] usb 10-1: config 0 descriptor?? [ 1032.996357][ T807] appletouch 10-1:0.85: Geyser mode initialized. [ 1033.042207][ T807] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input18 [ 1033.322445][ T807] usb 10-1: USB disconnect, device number 17 [ 1033.322690][ C1] appletouch 10-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1033.415095][ T807] appletouch 10-1:0.85: input: appletouch disconnected [ 1034.113318][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 1034.159016][T13948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2300'. [ 1035.046948][T13947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.055804][T13947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.910245][T13947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.960757][T13947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.149216][T13967] loop4: detected capacity change from 0 to 4096 [ 1036.276437][T13968] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1036.345768][ T29] audit: type=1800 audit(1781285810.374:93): pid=13967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2306" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1036.997007][T13947] vxlan0: left promiscuous mode [ 1037.043487][T13947] bond2: left allmulticast mode [ 1037.276075][T13948] veth1: entered promiscuous mode [ 1037.319726][ T7663] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.362379][ T7663] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.395086][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2308'. [ 1037.420975][ T7663] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.472097][ T7663] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.613628][ T7663] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.671460][ T7663] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.748018][ T7663] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.795105][ T7663] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.967333][ T29] audit: type=1800 audit(1781285813.004:94): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2312" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1214 res=0 errno=0 [ 1040.306623][T14006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'. [ 1040.558446][T14010] loop1: detected capacity change from 0 to 128 [ 1041.661670][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2323'. [ 1046.037322][T14066] sctp: [Deprecated]: syz.6.2337 (pid 14066) Use of int in max_burst socket option deprecated. [ 1046.037322][T14066] Use struct sctp_assoc_value instead [ 1049.114385][T14096] loop1: detected capacity change from 0 to 512 [ 1049.170989][T14096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1049.312255][T14096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.326686][T14096] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.966646][ T8345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.589194][T14152] input: syz0 as /devices/virtual/input/input19 [ 1055.037271][T14173] loop9: detected capacity change from 0 to 16 [ 1055.132025][T14173] erofs (device loop9): mounted with root inode @ nid 36. [ 1055.539960][ T807] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1055.723869][ T807] usb 10-1: Using ep0 maxpacket: 16 [ 1055.769062][ T807] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.828877][ T807] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.868767][ T807] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1055.942872][ T807] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1055.974992][ T807] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1056.017599][ T807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.092324][ T807] usb 10-1: config 0 descriptor?? [ 1056.728202][T14182] bridge_slave_0: left allmulticast mode [ 1056.769241][T14182] bridge_slave_0: left promiscuous mode [ 1056.794634][T14182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.799942][ T807] hid (null): invalid report_count 52999 [ 1056.816193][ T807] hid (null): unknown global tag 0xc [ 1056.844686][ T807] hid (null): unknown global tag 0xc [ 1056.867215][ T807] hid (null): global environment stack underflow [ 1056.904452][ T807] hid (null): unknown global tag 0xe [ 1056.939675][ T807] hid (null): bogus close delimiter [ 1056.982062][T14191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2381'. [ 1057.089075][T14182] bridge_slave_1: left allmulticast mode [ 1057.111119][ T807] usb 10-1: USB disconnect, device number 18 [ 1057.134781][T14182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.366628][T14182] bond0: (slave bond_slave_0): Releasing backup interface [ 1057.517899][T14182] bond0: (slave bond_slave_1): Releasing backup interface [ 1057.770503][T14182] team0: Port device team_slave_0 removed [ 1057.874151][T14182] team0: Port device team_slave_1 removed [ 1057.913559][T14182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.947228][T14182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.018240][T14182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.042359][T14182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.154690][T14182] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1058.876389][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2387'. [ 1058.905558][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 1059.123622][ T7693] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.156736][ T7693] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.205089][ T7693] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.248989][ T7693] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.674828][ T29] audit: type=1326 audit(1781286089.765:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.6.2391" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1059.778297][ T29] audit: type=1326 audit(1781286089.765:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.6.2391" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1059.859352][ T29] audit: type=1326 audit(1781286089.835:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.6.2391" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1059.939407][ T29] audit: type=1326 audit(1781286089.935:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.6.2391" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1060.463225][T14235] overlayfs: failed to resolve './cgroup': -2 [ 1061.321022][T14246] bridge_slave_0: left allmulticast mode [ 1061.354352][T14246] bridge_slave_0: left promiscuous mode [ 1061.405817][T14246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.476430][T14253] input: syz0 as /devices/virtual/input/input20 [ 1061.620339][T14246] bridge_slave_1: left allmulticast mode [ 1061.651172][T14246] bridge_slave_1: left promiscuous mode [ 1061.676227][T14246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.835810][T14246] bond0: (slave bond_slave_0): Releasing backup interface [ 1061.995017][T14259] kernel read not supported for file /file0 (pid: 14259 comm: syz.9.2404) [ 1062.025217][T14246] bond0: (slave bond_slave_1): Releasing backup interface [ 1062.054620][ T29] audit: type=1800 audit(1781286092.145:99): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2404" name="file0" dev="mqueue" ino=37257 res=0 errno=0 [ 1062.278445][T14246] team0: Port device team_slave_0 removed [ 1062.402039][T14246] team0: Port device team_slave_1 removed [ 1062.469610][T14246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.507373][T14246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.556560][ T29] audit: type=1326 audit(1781286092.645:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.2405" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 1062.654452][ T29] audit: type=1326 audit(1781286092.685:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.2405" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 1062.757807][T14246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.808943][T14246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.816696][ T29] audit: type=1326 audit(1781286092.865:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.2405" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 1062.900059][T14246] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1062.929475][ T29] audit: type=1326 audit(1781286092.865:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.2405" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 1064.904639][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.918383][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.085511][T14295] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2414'. [ 1065.449728][ T5580] Bluetooth: hci4: command 0x0406 tx timeout [ 1065.456556][ T807] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1065.482999][ T807] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1066.431652][T14311] overlayfs: failed to clone upperpath [ 1066.662503][ T29] audit: type=1326 audit(1781286096.745:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.1.2421" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 1066.784512][ T29] audit: type=1326 audit(1781286096.785:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.1.2421" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 1067.542687][ T5580] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1067.551335][ T5580] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1067.610265][ T5580] Bluetooth: hci1: command 0x0406 tx timeout [ 1067.616821][ T807] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1067.639743][ T807] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1069.373590][T14346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.435900][T14346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.701223][T14354] netlink: 'syz.3.2436': attribute type 1 has an invalid length. [ 1069.827532][T14346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.849424][ T5580] Bluetooth: hci5: command 0x0406 tx timeout [ 1069.858247][ T807] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1069.878747][ T807] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1069.913537][T14346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.541240][T14354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1071.066723][T14346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.118702][T14346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.384694][T14346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.416138][T14346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.499091][ T7829] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1071.622337][ T5580] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1071.632234][ T5580] Bluetooth: hci2: Injecting HCI hardware error event [ 1071.640274][ T5580] Bluetooth: hci2: hardware error 0x00 [ 1071.767872][ T7829] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1071.815661][ T7697] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1071.839112][ T7829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.862057][ T7697] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.890156][ T7829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.948374][ T7829] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1071.986489][ T7829] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1072.003134][ T7647] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.035008][ T7647] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.044214][ T7829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.105435][ T7829] usb 2-1: config 0 descriptor?? [ 1072.198997][ T7663] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.242674][ T7663] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.380258][ T7647] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.412279][ T7647] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.612614][ T7829] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 1072.923895][ T7829] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1073.082200][ T7829] usb 2-1: USB disconnect, device number 6 [ 1073.370466][T14381] Bluetooth: hci0: command 0x0406 tx timeout [ 1073.375680][ T807] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1073.454039][ T807] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1073.694400][ T5580] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1074.094273][T14390] fido_id[14390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1076.757203][T14442] syz.4.2463(14442): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1076.825732][T14442] devpts: Bad value for 'max' [ 1077.336571][T14450] netlink: 'syz.6.2466': attribute type 4 has an invalid length. [ 1077.390453][T14449] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2465'. [ 1077.417944][T14450] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2466'. [ 1077.458120][T14451] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2465'. [ 1078.065526][T14459] overlayfs: failed to clone upperpath [ 1078.630249][T14470] overlayfs: failed to clone upperpath [ 1082.755276][T14522] netlink: 'syz.4.2488': attribute type 4 has an invalid length. [ 1087.559124][ T5063] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1087.769427][ T5063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.822269][ T5063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.875233][ T5063] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1087.922241][ T5063] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1087.961417][ T5063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.015972][ T5063] usb 5-1: config 0 descriptor?? [ 1088.133454][T14598] netlink: 'syz.6.2515': attribute type 8 has an invalid length. [ 1088.156576][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2515'. [ 1088.366839][T14598] bond0: entered promiscuous mode [ 1088.424443][T14598] gretap0: entered promiscuous mode [ 1088.499248][T14598] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1088.609830][T14598] hsr1: entered promiscuous mode [ 1088.623732][ T5063] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1089.106596][ T5063] usb 5-1: USB disconnect, device number 14 [ 1089.484904][T14605] fido_id[14605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1092.516155][T14653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2533'. [ 1092.552416][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'. [ 1095.205971][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 1095.241764][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 1095.302810][T14690] netlink: 190 bytes leftover after parsing attributes in process `syz.3.2547'. [ 1096.368150][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2554'. [ 1097.084772][T14716] netlink: 'syz.6.2557': attribute type 11 has an invalid length. [ 1097.148025][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2557'. [ 1099.732505][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2561'. [ 1099.780184][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2561'. [ 1100.299366][ T5686] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1100.619796][ T5686] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1100.670251][ T5686] usb 5-1: no configurations [ 1100.690024][ T5686] usb 5-1: can't read configurations, error -22 [ 1101.236543][T14807] fuse: Bad value for 'fd' [ 1102.705322][T14819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1103.117433][T14825] loop1: detected capacity change from 0 to 2048 [ 1103.244274][T14825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1103.515169][T14825] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1103.588033][T14825] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1103.602817][T14839] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 1103.695273][T14839] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1103.695273][T14839] [ 1103.703292][T14825] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1103.703292][T14825] [ 1103.757669][T14825] EXT4-fs (loop1): Total free blocks count 0 [ 1103.787483][T14839] EXT4-fs (loop1): Total free blocks count 0 [ 1103.818694][T14825] EXT4-fs (loop1): Free/Dirty block details [ 1103.828816][T14839] EXT4-fs (loop1): Free/Dirty block details [ 1103.866812][T14825] EXT4-fs (loop1): free_blocks=2415919104 [ 1104.013877][ T8345] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1104.555790][T14846] netlink: 'syz.9.2584': attribute type 10 has an invalid length. [ 1104.604771][T14846] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2584'. [ 1104.704784][T14846] A link change request failed with some changes committed already. Interface netdevsim2 may have been left with an inconsistent configuration, please check. [ 1105.191965][T14850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.282807][T14850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.787608][T14850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1105.847387][T14850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1105.994954][T14850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1106.048674][T14850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1106.164160][T14850] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1106.290281][T14871] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2593'. [ 1106.323215][T14871] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2593'. [ 1106.335099][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.342690][T14771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.428119][T14771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.435939][T14771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.865234][T14907] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2608'. [ 1109.909945][T14907] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2608'. [ 1113.250025][T14951] netlink: 204 bytes leftover after parsing attributes in process `syz.9.2623'. [ 1113.295267][T14951] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2623'. [ 1114.933519][T14961] loop1: detected capacity change from 0 to 4096 [ 1115.476207][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2633'. [ 1118.163478][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2647'. [ 1118.194804][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2647'. [ 1118.239275][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2647'. [ 1118.406680][T15012] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1118.439517][T15012] overlayfs: missing 'lowerdir' [ 1119.438028][T15025] loop1: detected capacity change from 0 to 2048 [ 1119.506633][T15025] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1119.607390][T15025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1120.461417][T15041] loop1: detected capacity change from 0 to 256 [ 1121.064576][T15046] loop4: detected capacity change from 0 to 512 [ 1121.206267][T15047] overlayfs: failed to clone upperpath [ 1121.383656][T15046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.410876][T15046] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.621423][T15054] IPv6: A: Disabled Multicast RS [ 1122.006756][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2663'. [ 1122.102281][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.487714][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2675'. [ 1124.656385][T15102] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1126.347066][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.354279][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.297074][T15137] overlayfs: failed to decode file handle (len=0, type=0, flags=0, err=-22) [ 1128.741321][T15141] loop1: detected capacity change from 0 to 4096 [ 1128.815586][T15157] loop4: detected capacity change from 0 to 128 [ 1128.849338][T15157] FAT-fs (loop4): bogus sectors per cluster 0 [ 1128.861591][T15157] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1129.017770][T15159] fuse: Bad value for 'fd' [ 1129.902134][T15169] 9p: Bad value for 'rfdno' [ 1130.437625][T15177] overlay: filesystem on ./bus not supported [ 1130.533091][T15176] overlayfs: failed to decode file handle (len=0, type=0, flags=0, err=-22) [ 1131.120776][T15182] loop4: detected capacity change from 0 to 256 [ 1133.193414][T15204] overlayfs: failed to clone lowerpath [ 1133.270002][T15207] loop1: detected capacity change from 0 to 256 [ 1133.311202][T15207] FAT-fs (loop1): bogus logical sector size 128 [ 1133.348990][T15207] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1134.305653][T15213] overlayfs: failed to clone upperpath [ 1136.085704][T15225] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2723'. [ 1136.140285][T15227] loop1: detected capacity change from 0 to 512 [ 1136.159088][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2723'. [ 1136.194707][T15227] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1136.232752][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 1136.284219][T15225] netlink: 'syz.4.2723': attribute type 26 has an invalid length. [ 1136.303832][T15227] EXT4-fs (loop1): 1 truncate cleaned up [ 1136.384150][T15227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.507472][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 1136.553370][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 1136.633430][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 1136.681560][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 1136.857353][ T8345] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1137.832014][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.630506][T14748] bridge_slave_1: left allmulticast mode [ 1139.646474][T14748] bridge_slave_1: left promiscuous mode [ 1139.664935][T14748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.683093][T14748] bridge_slave_0: left allmulticast mode [ 1139.689825][T14748] bridge_slave_0: left promiscuous mode [ 1139.696573][T14748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.702737][T14748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.784497][T14748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.863769][T14748] bond0 (unregistering): Released all slaves [ 1140.934406][T14748] bond1 (unregistering): Released all slaves [ 1141.017136][T14748] bond2 (unregistering): Released all slaves [ 1141.111867][T14381] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1141.136906][T14381] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1141.148335][T14381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1141.166616][T14381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1141.182970][T14381] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1141.272912][ T5580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1141.285951][ T5580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1141.301590][ T5580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1141.320822][ T5580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1141.373048][ T5580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1142.253035][T14748] hsr_slave_0: left promiscuous mode [ 1142.295672][T14748] hsr_slave_1: left promiscuous mode [ 1142.313209][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.340525][T14748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.417699][T14748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.452442][T14748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1143.204428][ T29] audit: type=1326 audit(1781286429.354:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.4.2749" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1143.347963][ T29] audit: type=1326 audit(1781286429.394:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.4.2749" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1143.434222][ T29] audit: type=1326 audit(1781286429.394:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.4.2749" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1143.529393][T14381] Bluetooth: hci0: command tx timeout [ 1143.566319][ T29] audit: type=1326 audit(1781286429.394:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.4.2749" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1143.732487][ T29] audit: type=1326 audit(1781286429.404:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.4.2749" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1143.895880][ T29] audit: type=1326 audit(1781286429.414:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.4.2749" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1144.026274][ T29] audit: type=1326 audit(1781286429.414:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.4.2749" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=217 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1144.166827][ T29] audit: type=1326 audit(1781286429.424:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.4.2749" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1144.304012][ T29] audit: type=1326 audit(1781286429.434:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.4.2749" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1145.613653][T14381] Bluetooth: hci0: command tx timeout [ 1146.489626][T15340] fuse: fd is not a fuse device [ 1147.688652][T14381] Bluetooth: hci0: command tx timeout [ 1148.153893][ T5230] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1149.769800][T14381] Bluetooth: hci0: command tx timeout [ 1149.843068][T15380] overlayfs: failed to clone upperpath [ 1150.682977][T15395] netlink: 'syz.9.2777': attribute type 1 has an invalid length. [ 1150.772326][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 1150.839147][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 1150.886621][T15397] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2775'. [ 1150.969015][T15397] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2775'. [ 1151.581393][T15398] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1153.222186][T15434] fuse: Bad value for 'fd' [ 1154.663816][ T5230] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1154.703759][T14748] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.720414][T14748] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.765615][T14748] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.804515][T14748] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.834649][T15274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.875335][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.913187][T15274] bridge_slave_0: entered allmulticast mode [ 1154.957663][T15274] bridge_slave_0: entered promiscuous mode [ 1155.073942][T14748] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.102219][T14748] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.137852][T14748] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.173040][T14748] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.198446][T15274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.226562][T15274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.268918][T15274] bridge_slave_1: entered allmulticast mode [ 1155.279864][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2791'. [ 1155.308618][T15274] bridge_slave_1: entered promiscuous mode [ 1155.315184][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2791'. [ 1155.597195][T15453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2793'. [ 1155.739682][T15274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.789595][T15274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.153297][T15274] team0: Port device team_slave_0 added [ 1156.207365][T15274] team0: Port device team_slave_1 added [ 1156.571715][T15274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.597530][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.686348][T15274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.731317][T15274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.753302][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.861730][T15274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.507937][T15274] hsr_slave_0: entered promiscuous mode [ 1157.559294][T15274] hsr_slave_1: entered promiscuous mode [ 1157.590228][T15274] debugfs: 'hsr0' already exists in 'hsr' [ 1157.614588][T15274] Cannot create hsr debugfs directory [ 1158.357210][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'. [ 1158.413133][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'. [ 1158.455044][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'. [ 1158.467511][T15490] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.2805'. [ 1158.494672][T15490] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.2805'. [ 1158.949083][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'. [ 1160.929754][T15274] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1161.061992][T15274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1161.113769][T15274] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1161.233625][T15274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1161.281701][T15274] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1161.370300][T15274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1161.395568][ T5230] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1161.415526][T15274] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1161.501291][T15274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1163.862971][T15274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.131910][T15274] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.230571][T14743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.238325][T14743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.255830][T15559] overlayfs: failed to clone upperpath [ 1164.302117][T15559] overlayfs: failed to clone upperpath [ 1164.440976][T14759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.448642][T14759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.227174][ T5230] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1168.243256][T15615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2843'. [ 1169.256353][ T30] IPVS: starting estimator thread 0... [ 1169.385364][T15637] IPVS: using max 192 ests per chain, 9600 per kthread [ 1170.012299][T15274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.146596][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2856'. [ 1173.129327][T15696] fuse: fd is not a fuse device [ 1173.539156][T15274] veth0_vlan: entered promiscuous mode [ 1173.768071][T15274] veth1_vlan: entered promiscuous mode [ 1174.474135][T15274] veth0_macvtap: entered promiscuous mode [ 1174.584427][T15274] veth1_macvtap: entered promiscuous mode [ 1174.975711][T15274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.220155][T15274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.426967][T14743] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.465402][T14743] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.529422][T14761] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.577450][T14757] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.562404][T15749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2873'. [ 1177.633603][T15749] netlink: 'syz.4.2873': attribute type 7 has an invalid length. [ 1177.709589][T15749] netlink: 'syz.4.2873': attribute type 8 has an invalid length. [ 1177.758743][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2873'. [ 1181.857550][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 1181.938658][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 1183.295526][T14761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.353238][T14761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.699028][T14769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.725121][T14769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.480176][T15860] loop4: detected capacity change from 0 to 512 [ 1185.540453][T15860] EXT4-fs: Ignoring removed orlov option [ 1185.578612][T15860] EXT4-fs: inline encryption not supported [ 1185.636322][T15860] ext4: Unknown parameter 'appraise_type' [ 1185.912411][T15869] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2907'. [ 1185.924682][T15865] Set syz1 is full, maxelem 1029 reached [ 1186.001877][T15869] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2907'. [ 1187.786442][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.793550][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.831561][T15924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.841141][T15924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.059884][T15926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.067739][T15926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.076984][T15926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.084709][T15926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.140954][T15926] bridge0: entered promiscuous mode [ 1190.166449][T15926] bridge0: entered allmulticast mode [ 1191.006774][ T29] audit: type=1326 audit(1781286477.144:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1191.104846][ T29] audit: type=1326 audit(1781286477.194:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1191.230752][ T29] audit: type=1326 audit(1781286477.194:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1191.359599][ T29] audit: type=1326 audit(1781286477.194:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1191.470375][T15947] loop5: detected capacity change from 0 to 1024 [ 1191.493057][ T29] audit: type=1326 audit(1781286477.204:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1191.647129][ T29] audit: type=1326 audit(1781286477.194:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1191.718699][ T29] audit: type=1326 audit(1781286477.204:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1191.745586][ T29] audit: type=1326 audit(1781286477.224:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1191.773379][ T29] audit: type=1326 audit(1781286477.224:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1191.861040][T15947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1191.886768][ T29] audit: type=1326 audit(1781286477.224:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15937 comm="syz.6.2930" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1193.182080][T15274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.134168][T15976] fuse: Bad value for 'fd' [ 1194.892396][T15983] loop5: detected capacity change from 0 to 256 [ 1195.080931][T15983] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba999a5, utbl_chksum : 0xe619d30d) [ 1195.383537][T15987] ceph: No mds server is up or the cluster is laggy [ 1196.217271][T16001] pim6reg: entered allmulticast mode [ 1196.321694][T16001] pim6reg: left allmulticast mode [ 1199.085882][T16039] team0: Port device wlan0 removed [ 1201.855286][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2972'. [ 1201.994033][T16084] netlink: 'syz.3.2974': attribute type 1 has an invalid length. [ 1202.584609][T16084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1202.777199][T16091] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1202.860466][T16091] overlayfs: maximum fs stacking depth exceeded [ 1202.899825][T16088] bond3: (slave gretap1): making interface the new active one [ 1202.956564][T16088] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1203.053881][T16095] fuse: fd is not a fuse device [ 1204.138967][T13840] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1204.333119][T13840] usb 6-1: Using ep0 maxpacket: 32 [ 1204.369913][T13840] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1204.397151][T13840] usb 6-1: config 0 has no interface number 0 [ 1204.427918][T13840] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1204.495196][T13840] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1204.524932][T13840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.546781][T13840] usb 6-1: Product: syz [ 1204.583404][T13840] usb 6-1: Manufacturer: syz [ 1204.612719][T13840] usb 6-1: SerialNumber: syz [ 1204.646669][T13840] usb 6-1: config 0 descriptor?? [ 1204.698597][T16106] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1205.035168][T16106] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1205.176750][T16120] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2985'. [ 1205.682855][T16127] fuse: Bad value for 'fd' [ 1206.376775][T13840] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1206.439727][T13840] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1206.550047][T13840] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1206.663751][T13840] usb 6-1: USB disconnect, device number 4 [ 1209.119409][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1209.324857][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1209.408685][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1209.443945][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.477612][ T24] usb 6-1: Product: syz [ 1209.495588][ T24] usb 6-1: Manufacturer: syz [ 1209.512549][ T24] usb 6-1: SerialNumber: syz [ 1209.560765][ T24] usb 6-1: config 0 descriptor?? [ 1209.642360][ T24] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1209.681956][T16178] netlink: 'syz.9.3004': attribute type 1 has an invalid length. [ 1210.068708][T16182] bond2: (slave gretap1): making interface the new active one [ 1210.125790][T16182] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1211.055997][ T24] usb 6-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1211.245649][T13840] usb 6-1: USB disconnect, device number 5 [ 1211.332279][T13840] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1211.370902][T13840] ssu100 6-1:0.0: device disconnected [ 1212.044351][T16208] fuse: fd is not a fuse device [ 1213.319054][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1213.326762][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1216.288457][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'. [ 1216.372216][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 1216.424508][T16268] macvtap1: entered promiscuous mode [ 1216.472929][T16268] erspan0: entered promiscuous mode [ 1216.489829][T16268] macvtap1: entered allmulticast mode [ 1216.506701][T16268] erspan0: entered allmulticast mode [ 1217.342430][T16279] netlink: 'syz.6.3038': attribute type 1 has an invalid length. [ 1217.834225][T16279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1218.234730][T16284] bond1: (slave gretap1): making interface the new active one [ 1218.281023][T16284] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1219.215227][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3046'. [ 1219.328030][T16308] all: renamed from bridge_slave_1 (while UP) [ 1220.356177][T16314] sctp: [Deprecated]: syz.9.3050 (pid 16314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1220.356177][T16314] Use struct sctp_sack_info instead [ 1221.402936][T16336] netlink: 'syz.3.3056': attribute type 1 has an invalid length. [ 1221.436962][T16336] netlink: 'syz.3.3056': attribute type 4 has an invalid length. [ 1221.511230][T16336] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3056'. [ 1221.604468][T16337] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1221.655410][T16337] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1221.728087][T16337] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1223.144394][T16357] Bluetooth: MGMT ver 1.23 [ 1223.620856][T14381] Bluetooth: hci0: command 0x0c1a tx timeout [ 1225.529591][T13840] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1225.689979][T14381] Bluetooth: hci0: command 0x0c1a tx timeout [ 1225.752503][T13840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.821383][T13840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.861826][T13840] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1225.913506][T13840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.991759][T13840] usb 6-1: config 0 descriptor?? [ 1226.604324][T13840] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1226.639100][T13840] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1226.669187][T13840] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1226.701108][T13840] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1226.721827][T13840] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1226.738084][T13840] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1226.769125][T13840] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1226.870759][T13840] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1226.982929][T13840] cp2112 0003:10C4:EA90.001F: Part Number: 0xDD Device Version: 0xDD [ 1227.263817][T16411] loop5: detected capacity change from 0 to 512 [ 1227.363231][T16411] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 1227.532415][T13840] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 1227.633495][T13840] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -32 [ 1227.769245][T14381] Bluetooth: hci0: command 0x0c1a tx timeout [ 1227.784557][T13840] usb 6-1: USB disconnect, device number 6 [ 1228.098877][T16407] fido_id[16407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1229.397146][T16432] fuse: fd is not a fuse device [ 1229.495839][T16432] overlayfs: failed to clone lowerpath [ 1231.532877][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3090'. [ 1231.629177][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3090'. [ 1231.722518][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3090'. [ 1233.569817][T16478] loop4: detected capacity change from 0 to 1024 [ 1233.667149][T16478] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1233.909224][T16478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.803556][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.952207][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3097'. [ 1235.010357][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3097'. [ 1235.097411][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 1235.168600][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 1236.352858][T16504] loop4: detected capacity change from 0 to 1024 [ 1236.429754][T16504] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1236.526821][T16504] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.3104: lblock 2 mapped to illegal pblock 2 (length 1) [ 1236.547055][T16504] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1236.550604][T16504] __quota_error: 17 callbacks suppressed [ 1236.550721][T16504] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1236.560239][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1236.560333][ C1] EXT4-fs (loop4): initial error at time 1781286522: ext4_map_blocks:791: inode 3: block 2 [ 1236.560523][ C1] EXT4-fs (loop4): last error at time 1781286522: ext4_map_blocks:791: inode 3: block 2 [ 1236.620196][T16504] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.3104: lblock 0 mapped to illegal pblock 48 (length 1) [ 1236.658476][T16504] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1236.668782][T16504] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1236.739897][T16504] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3104: Failed to acquire dquot type 0 [ 1236.783558][T16504] loop4: lost filesystem error report for type 5 error -117 [ 1236.784834][T16504] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1236.899974][T16504] loop4: lost filesystem error report for type 5 error -117 [ 1236.912332][T16504] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.3104: mark_inode_dirty error [ 1236.987187][T16504] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1236.988743][T16504] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1237.025070][T16504] EXT4-fs (loop4): 1 orphan inode deleted [ 1237.121633][T14771] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 1237.146861][T16504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1237.202148][T14771] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1237.206434][T14771] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1237.290571][T14771] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:22: Failed to release dquot type 0 [ 1237.412027][T16504] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1237.506660][T16515] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1237.546268][T16515] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.3104: lblock 0 mapped to illegal pblock 48 (length 1) [ 1237.632487][T16515] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 1237.711357][T16515] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1238.394855][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.944709][T16532] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3108'. [ 1238.997989][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3110'. [ 1239.020751][T16538] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3108'. [ 1239.195250][T16534] vxlan0: entered promiscuous mode [ 1239.377902][T14761] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.430798][T14761] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.469391][T14761] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.513156][T14767] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1245.971452][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3131'. [ 1246.107725][T16650] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1246.127841][T16650] overlayfs: failed to set xattr on upper [ 1246.155128][T16650] overlayfs: ...falling back to redirect_dir=nofollow. [ 1246.189474][T16650] overlayfs: ...falling back to index=off. [ 1246.202850][T16650] overlayfs: ...falling back to uuid=null. [ 1246.226316][T16650] overlayfs: ...falling back to xino=off. [ 1246.262936][T16650] overlayfs: conflicting lowerdir path [ 1246.543682][T16657] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3134'. [ 1247.976139][T16675] loop4: detected capacity change from 0 to 1024 [ 1248.114295][T16675] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1248.162950][T16675] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1248.215978][T16675] EXT4-fs error (device loop4): __ext4_iget:5481: inode #8: block 1803188595: comm syz.4.3140: invalid block [ 1248.243370][T16675] loop4: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 1248.246175][T16675] EXT4-fs (loop4): no journal found [ 1248.255971][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1248.256072][ C0] EXT4-fs (loop4): initial error at time 1781286537: __ext4_iget:5481: inode 8: block 1803188595 [ 1248.256294][ C0] EXT4-fs (loop4): last error at time 1781286537: __ext4_iget:5481: inode 8: block 1803188595 [ 1248.319965][T16675] EXT4-fs (loop4): can't get journal size [ 1248.355057][T16675] EXT4-fs error (device loop4): __ext4_iget:5481: inode #8: block 1803188595: comm syz.4.3140: invalid block [ 1248.486267][T16675] loop4: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 1248.515412][T16675] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1248.637643][T16675] EXT4-fs (loop4): mount failed [ 1249.174092][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1249.214544][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1249.234017][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.246595][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.254910][T16690] ceph: No mds server is up or the cluster is laggy [ 1249.401713][T16697] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 1249.888014][T16697] bond4: entered promiscuous mode [ 1249.936951][T16697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1250.258732][T16700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1250.317454][T16700] bond4: (slave ipip2): The slave device specified does not support setting the MAC address [ 1250.374371][T16700] bond4: (slave ipip2): Setting fail_over_mac to active for active-backup mode [ 1250.681953][T16700] bond4: (slave ipip2): making interface the new active one [ 1250.733753][T16700] ipip2: entered promiscuous mode [ 1250.843029][T16700] bond4: (slave ipip2): Enslaving as an active interface with an up link [ 1251.010394][T16713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1253.809175][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3163'. [ 1254.527091][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3167'. [ 1254.627818][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3167'. [ 1256.851097][T16790] loop5: detected capacity change from 0 to 4096 [ 1256.903133][T16790] EXT4-fs: inline encryption not supported [ 1257.012641][T16790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1257.117699][T16790] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 1257.175276][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1257.197686][T16790] System zones: 0-5 [ 1257.225872][T16790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1258.166646][T15274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.417061][ T29] audit: type=1326 audit(1781286548.557:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1259.514504][ T29] audit: type=1326 audit(1781286548.557:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1259.617967][ T29] audit: type=1326 audit(1781286548.597:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1259.704599][ T29] audit: type=1326 audit(1781286548.597:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1259.811297][ T29] audit: type=1326 audit(1781286548.597:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1259.945858][ T29] audit: type=1326 audit(1781286548.607:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1260.081985][ T29] audit: type=1326 audit(1781286548.607:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1260.176228][ T29] audit: type=1326 audit(1781286548.607:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1260.246149][ T29] audit: type=1326 audit(1781286548.617:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1260.342533][ T29] audit: type=1326 audit(1781286548.617:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.5.3190" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb701c code=0x7ffc0000 [ 1260.497464][T13840] libceph: connect (1)[c::]:6789 error -101 [ 1260.508681][T13840] libceph: mon0 (1)[c::]:6789 connect error [ 1260.557203][T16838] ceph: No mds server is up or the cluster is laggy [ 1261.301876][T16849] overlayfs: failed to clone upperpath [ 1262.521319][T16867] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3202'. [ 1263.109141][T16875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1263.949821][ T30] libceph: connect (1)[c::]:6789 error -101 [ 1263.999562][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 1264.238050][T16885] ceph: No mds server is up or the cluster is laggy [ 1264.279869][ T30] libceph: connect (1)[c::]:6789 error -101 [ 1264.313416][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 1265.060964][T13840] libceph: connect (1)[c::]:6789 error -101 [ 1265.103750][T13840] libceph: mon0 (1)[c::]:6789 connect error [ 1265.196979][T16902] ceph: No mds server is up or the cluster is laggy [ 1268.510135][T16945] loop5: detected capacity change from 0 to 1024 [ 1268.527093][T16945] EXT4-fs: Ignoring removed nobh option [ 1268.559219][T16945] EXT4-fs: Ignoring removed orlov option [ 1268.641341][T16945] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1268.789292][T16945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1268.849948][ T5679] libceph: connect (1)[c::]:6789 error -101 [ 1268.897218][ T5679] libceph: mon0 (1)[c::]:6789 connect error [ 1268.930877][T16947] ceph: No mds server is up or the cluster is laggy [ 1269.817309][T15274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.992701][T16993] overlayfs: failed to clone upperpath [ 1272.202183][T16996] loop4: detected capacity change from 0 to 256 [ 1274.481595][T17029] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3253'. [ 1275.849036][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1276.018714][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1276.056143][ T30] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 1276.090936][ T30] usb 6-1: config 2 has no interface number 0 [ 1276.109846][ T30] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1276.121617][T17051] fuse: fd is not a fuse device [ 1276.170116][ T30] usb 6-1: config 2 interface 88 has no altsetting 0 [ 1276.230699][ T30] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1276.276030][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1276.357138][ T30] usb 6-1: Product: syz [ 1276.382424][ T30] usb 6-1: Manufacturer: syz [ 1276.408035][ T30] usb 6-1: SerialNumber: syz [ 1276.457214][T17041] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1276.803996][T17041] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1277.899627][ T30] asix 6-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1278.119454][ T30] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1278.182052][ T30] asix 6-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1278.236710][ T30] asix 6-1:2.88: probe with driver asix failed with error -71 [ 1278.326183][ T30] usb 6-1: USB disconnect, device number 7 [ 1279.687100][T17080] overlayfs: failed to clone upperpath [ 1281.538401][T17103] netlink: 'syz.6.3276': attribute type 1 has an invalid length. [ 1281.751031][T17103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1282.429222][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3281'. [ 1282.454773][T17109] bond2: (slave gretap2): making interface the new active one [ 1282.594157][T17109] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1282.945105][T17119] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3280'. [ 1283.001411][T17119] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3280'. [ 1283.054704][T17119] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3280'. [ 1283.213407][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1283.341887][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1285.654561][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3293'. [ 1285.774047][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3293'. [ 1286.560096][T17164] netlink: 'syz.5.3296': attribute type 1 has an invalid length. [ 1286.689560][T17167] netlink: 'syz.4.3295': attribute type 1 has an invalid length. [ 1286.985245][T17164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1287.172562][T17179] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3299'. [ 1287.214974][T17179] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3299'. [ 1287.335001][T17170] bond1: (slave gretap1): making interface the new active one [ 1287.369649][T17180] fuse: fd is not a fuse device [ 1287.435515][T17170] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1287.498682][T17167] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1288.544423][T17189] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3302'. [ 1289.244518][T17196] loop4: detected capacity change from 0 to 512 [ 1289.327746][T17196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1289.370401][T17196] EXT4-fs: Ignoring removed mblk_io_submit option [ 1289.491986][T17201] fuse: fd is not a fuse device [ 1289.554520][T17196] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1289.625317][T17196] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1289.773480][T17196] EXT4-fs (loop4): 1 truncate cleaned up [ 1289.860427][T17196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1289.985408][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 1290.084242][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 1290.263613][T17203] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1290.339495][T17203] EXT4-fs (loop4): Remounting filesystem read-only [ 1290.772094][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.157744][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3313'. [ 1292.180696][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1292.995350][T17241] loop5: detected capacity change from 0 to 512 [ 1293.061341][T17242] all: renamed from bridge_slave_1 [ 1293.065632][T17241] ext4: Unknown parameter 'orlov.jqfmt' [ 1293.550174][T17246] netlink: 'syz.9.3323': attribute type 1 has an invalid length. [ 1293.578547][T17245] overlayfs: failed to clone upperpath [ 1294.045550][T17246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1294.155598][T17251] loop5: detected capacity change from 0 to 512 [ 1294.194443][T17251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1294.226245][T17251] EXT4-fs: Ignoring removed mblk_io_submit option [ 1294.353688][T17251] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1294.402747][T17251] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1294.463487][T17251] EXT4-fs (loop5): 1 truncate cleaned up [ 1294.509389][T17249] bond3: (slave gretap2): making interface the new active one [ 1294.524499][T17251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.572326][T17249] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1295.012128][T15274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.712007][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3327'. [ 1295.865960][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3327'. [ 1296.755217][T17279] fuse: fd is not a fuse device [ 1297.172232][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3332'. [ 1299.078997][T17305] netlink: 'syz.4.3339': attribute type 1 has an invalid length. [ 1299.683595][T17305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1301.221194][T17334] fuse: fd is not a fuse device [ 1301.266208][T17335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3351'. [ 1301.282257][T17334] overlayfs: failed to clone lowerpath [ 1301.357028][T17335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3351'. [ 1306.501646][T17377] loop4: detected capacity change from 0 to 128 [ 1306.783001][T17377] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1306.871734][T17377] ext4 filesystem being mounted at /444/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1307.265087][T17377] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 1307.367740][T17377] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 1308.013372][ T9703] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1310.663627][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.674459][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.019013][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1311.209318][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1311.267431][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1311.324747][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1311.373230][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1311.403772][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.463839][ T24] usb 5-1: config 0 descriptor?? [ 1312.136857][ T24] lenovo 0003:17EF:6047.0020: unknown main item tag 0x0 [ 1312.155453][T17426] 9p: Bad value for 'wfdno' [ 1312.186235][ T24] lenovo 0003:17EF:6047.0020: unknown main item tag 0x0 [ 1312.214749][ T24] lenovo 0003:17EF:6047.0020: unknown main item tag 0x0 [ 1312.241512][ T24] lenovo 0003:17EF:6047.0020: unknown main item tag 0x0 [ 1312.280988][ T24] lenovo 0003:17EF:6047.0020: unknown main item tag 0x0 [ 1312.302274][ T24] lenovo 0003:17EF:6047.0020: unknown main item tag 0x0 [ 1312.330303][ T24] lenovo 0003:17EF:6047.0020: unknown main item tag 0x0 [ 1312.361804][ T24] lenovo 0003:17EF:6047.0020: unknown main item tag 0x0 [ 1312.413567][ T24] lenovo 0003:17EF:6047.0020: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1313.572978][ T24] usb 5-1: USB disconnect, device number 17 [ 1313.790094][T17440] loop5: detected capacity change from 0 to 64 [ 1316.878785][T17465] vlan0: entered allmulticast mode [ 1316.894178][T17465] veth0_to_bond: entered allmulticast mode [ 1318.464248][T17482] loop4: detected capacity change from 0 to 128 [ 1318.769306][T17482] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1318.892138][T17482] ext4 filesystem being mounted at /449/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1319.697714][ T9703] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1320.940867][T17499] loop4: detected capacity change from 0 to 128 [ 1321.152413][T17499] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1321.190592][T17499] ext4 filesystem being mounted at /450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.283126][T17505] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3419'. [ 1322.456109][ T9703] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1324.220328][T17532] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3428'. [ 1324.887033][T17540] raw_sendmsg: syz.4.3431 forgot to set AF_INET. Fix it! [ 1324.903314][T17542] fuse: fd is not a fuse device [ 1326.044550][T17555] loop4: detected capacity change from 0 to 512 [ 1326.279349][T17555] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1326.350426][T17555] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1326.401327][T17555] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1326.500362][T17555] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1326.603064][T17555] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1326.722843][T17555] EXT4-fs (loop4): 1 orphan inode deleted [ 1326.792311][T17555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1327.688554][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.435230][T17602] : renamed from bond0 [ 1335.102706][T17642] netlink: 'syz.6.3468': attribute type 1 has an invalid length. [ 1335.127227][T17642] netlink: 1323 bytes leftover after parsing attributes in process `syz.6.3468'. [ 1336.416338][T17652] loop5: detected capacity change from 0 to 512 [ 1336.462091][T17652] EXT4-fs: Ignoring removed i_version option [ 1336.495577][T17652] EXT4-fs: Ignoring removed bh option [ 1336.653230][T17652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1336.761904][T17652] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1337.246073][T15274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.262580][T17701] netlink: 'syz.5.3489': attribute type 10 has an invalid length. [ 1341.419569][T17701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.535091][T17701] bond0: (slave team0): Enslaving as an active interface with an up link [ 1341.577388][T17704] : renamed from bond0 (while UP) [ 1342.338889][T17716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3495'. [ 1344.138858][T17738] netlink: 'syz.3.3503': attribute type 1 has an invalid length. [ 1344.178705][T17738] netlink: 1323 bytes leftover after parsing attributes in process `syz.3.3503'. [ 1345.077182][T17752] netlink: 'syz.9.3506': attribute type 10 has an invalid length. [ 1345.264191][T17753] : renamed from bond0 (while UP) [ 1346.777452][T17768] overlayfs: failed to clone upperpath [ 1347.316724][T17777] netlink: 'syz.9.3519': attribute type 1 has an invalid length. [ 1347.352859][T17777] netlink: 1323 bytes leftover after parsing attributes in process `syz.9.3519'. [ 1348.124367][T17784] : renamed from bond0 [ 1349.213576][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1349.388872][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1349.440179][ T24] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1349.470079][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.502958][ T24] usb 5-1: Product: syz [ 1349.519462][ T24] usb 5-1: Manufacturer: syz [ 1349.540080][ T24] usb 5-1: SerialNumber: syz [ 1349.571154][ T24] usb 5-1: config 0 descriptor?? [ 1349.646556][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1349.673810][ T24] usb 5-1: Detected FT-X [ 1349.841403][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1350.337071][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1350.517587][ T24] usb 5-1: USB disconnect, device number 18 [ 1350.659332][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1350.713572][ T24] ftdi_sio 5-1:0.0: device disconnected [ 1355.343624][ T7583] Process accounting resumed [ 1355.558937][T17859] fuse: fd is not a fuse device [ 1356.096564][T17865] gretap2: entered promiscuous mode [ 1356.266939][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1356.267025][ T29] audit: type=1800 audit(1781286901.411:171): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3556" name="nullb0" dev="tmpfs" ino=3510 res=0 errno=0 [ 1356.548724][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1356.729800][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1356.790778][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1356.833111][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.900025][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1356.934260][ T24] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1356.951863][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.983321][ T24] usb 5-1: Product: syz [ 1356.998809][ T24] usb 5-1: Manufacturer: syz [ 1357.017298][ T24] usb 5-1: SerialNumber: syz [ 1357.055433][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3558'. [ 1357.405719][ T24] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1357.454155][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1357.583011][T17875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.636680][T17875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.908424][ T24] usb 5-1: 2:1 : invalid Cluster Descriptor size [ 1358.228018][ T24] usb 5-1: USB disconnect, device number 19 [ 1358.845507][T15711] udevd[15711]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1359.930186][T17908] overlayfs: failed to resolve './cgroup': -2 [ 1360.501636][T17911] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3567'. [ 1361.209506][ T29] audit: type=1800 audit(1781286906.361:172): pid=17918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3572" name="nullb0" dev="tmpfs" ino=3353 res=0 errno=0 [ 1365.216107][T17952] loop4: detected capacity change from 0 to 4096 [ 1365.312132][T17952] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1365.526917][T17952] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1365.576182][T17952] ntfs3(loop4): ino=19, mi_enum_attr [ 1365.743345][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3586'. [ 1366.017710][T17960] : renamed from bond0 (while UP) [ 1367.127278][T17967] netlink: 'syz.9.3590': attribute type 1 has an invalid length. [ 1367.177519][T17967] netlink: 'syz.9.3590': attribute type 4 has an invalid length. [ 1367.244343][T17967] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.3590'. [ 1367.642789][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 1368.336093][T17979] loop4: detected capacity change from 0 to 128 [ 1370.118985][ T7583] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1370.345271][ T7583] usb 6-1: Using ep0 maxpacket: 16 [ 1370.362488][ T7583] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1370.393738][ T7583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1370.451670][ T7583] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1370.488721][ T7583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.505924][ T7583] usb 6-1: Product: syz [ 1370.513774][ T7583] usb 6-1: Manufacturer: syz [ 1370.530098][ T7583] usb 6-1: SerialNumber: syz [ 1370.554906][ T7583] usb 6-1: config 0 descriptor?? [ 1370.633712][ T7583] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1370.678770][ T7583] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1371.295739][ T7583] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1371.324890][ T7583] em28xx 6-1:0.0: Config register raw data: 0xea [ 1371.345768][ T7583] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 1371.369527][ T7583] em28xx 6-1:0.0: No AC97 audio processor [ 1371.984388][ T7583] usb 6-1: USB disconnect, device number 8 [ 1372.096789][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.104255][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1374.367171][T18037] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3619'. [ 1374.591446][ T29] audit: type=1800 audit(1781286919.741:173): pid=18035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3615" name="file1" dev="tmpfs" ino=3394 res=0 errno=0 [ 1376.285349][T18063] loop4: detected capacity change from 0 to 256 [ 1376.440550][T18063] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba999a5, utbl_chksum : 0xe619d30d) [ 1376.567187][ T29] audit: type=1800 audit(1781286921.711:174): pid=18063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3628" name="file1" dev="loop4" ino=1048714 res=0 errno=0 [ 1378.150754][T18083] loop4: detected capacity change from 0 to 1024 [ 1378.912230][T18088] netlink: 'syz.6.3638': attribute type 10 has an invalid length. [ 1379.025607][T18089] netlink: 'syz.6.3638': attribute type 10 has an invalid length. [ 1379.201156][T18088] team0: Failed to send options change via netlink (err -105) [ 1379.274867][T18088] team0: Port device dummy0 added [ 1379.357464][T18089] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1379.532948][T18089] team0: Failed to send options change via netlink (err -105) [ 1379.580881][T18089] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1379.618727][ T11] IPVS: starting estimator thread 0... [ 1379.642946][T18089] team0: Port device dummy0 removed [ 1379.729024][T18097] IPVS: using max 192 ests per chain, 9600 per kthread [ 1379.861289][T18089] dummy0: entered promiscuous mode [ 1379.916381][T18089] : (slave dummy0): Enslaving as an active interface with an up link [ 1383.791590][ T5679] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1383.976842][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 1384.013717][ T5679] usb 5-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1384.094838][ T5679] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1384.125634][ T5679] usb 5-1: New USB device found, idVendor=227d, idProduct=0a19, bcdDevice= 0.40 [ 1384.154034][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.192662][ T5679] usb 5-1: Product: syz [ 1384.215801][ T5679] usb 5-1: Manufacturer: syz [ 1384.232122][ T5679] usb 5-1: SerialNumber: syz [ 1384.515013][ T29] audit: type=1800 audit(1781286929.661:175): pid=18172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3650" name="file1" dev="tmpfs" ino=3627 res=0 errno=0 [ 1384.646739][ T5679] usb 5-1: USB disconnect, device number 20 [ 1386.430277][T18191] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 1386.988687][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1387.187476][ T24] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 1387.230596][ T24] usb 6-1: config 128 has no interface number 0 [ 1387.253831][ T24] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1387.276621][ T24] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1387.310519][ T24] usb 6-1: config 128 interface 148 has no altsetting 0 [ 1387.355774][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1387.393585][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.424703][ T24] usb 6-1: Product: syz [ 1387.437934][ T24] usb 6-1: Manufacturer: syz [ 1387.462590][ T24] usb 6-1: SerialNumber: syz [ 1387.903542][ T24] usb 6-1: USB disconnect, device number 9 [ 1388.010101][T15711] udevd[15711]: setting mode of /dev/bus/usb/006/009 to 020664 failed: No such file or directory [ 1388.070013][T15711] udevd[15711]: setting owner of /dev/bus/usb/006/009 to uid=0, gid=0 failed: No such file or directory [ 1388.367313][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3677'. [ 1388.409277][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1388.598862][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1388.612601][ T29] audit: type=1800 audit(1781286933.761:176): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3667" name="file1" dev="tmpfs" ino=3241 res=0 errno=0 [ 1388.677733][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1388.699613][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1388.743422][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1388.783636][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1388.813394][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1388.862467][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1388.892255][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.176286][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 1389.211879][ T24] usbtmc 6-1:16.0: can't read capabilities [ 1389.402671][ T24] usb 6-1: USB disconnect, device number 10 [ 1390.824879][T18229] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 1391.817148][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3680'. [ 1392.679759][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1392.863016][T18253] fuse: fd is not a fuse device [ 1392.867151][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1392.914494][ T24] usb 6-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1392.950248][ T24] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1393.027186][ T24] usb 6-1: New USB device found, idVendor=227d, idProduct=0a19, bcdDevice= 0.40 [ 1393.074753][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.113891][ T24] usb 6-1: Product: syz [ 1393.135095][ T24] usb 6-1: Manufacturer: syz [ 1393.146467][ T24] usb 6-1: SerialNumber: syz [ 1393.561662][ T24] usb 6-1: USB disconnect, device number 11 [ 1394.942735][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3694'. [ 1395.948037][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3706'. [ 1397.270632][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3702'. [ 1397.347311][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3702'. [ 1401.964630][T18351] loop5: detected capacity change from 0 to 16 [ 1402.024335][T18351] erofs (device loop5): mounted with root inode @ nid 36. [ 1402.169386][T18351] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 1402.198655][T18351] syz.5.3723: attempt to access beyond end of device [ 1402.198655][T18351] loop5: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 1402.221106][T18351] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1402.240085][T18351] erofs (device loop5): read error -117 @ 0 of nid 89 [ 1402.249134][ T29] audit: type=1800 audit(1781286947.391:177): pid=18351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3723" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1403.628602][ T5679] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1403.820452][ T5679] usb 6-1: Using ep0 maxpacket: 8 [ 1403.856796][ T5679] usb 6-1: config 0 has no interfaces? [ 1403.893774][ T5679] usb 6-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 1403.923306][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=1, SerialNumber=3 [ 1403.959443][ T5679] usb 6-1: Product: syz [ 1403.965798][ T5679] usb 6-1: Manufacturer: syz [ 1403.978001][ T5679] usb 6-1: SerialNumber: syz [ 1404.019065][ T5679] usb 6-1: config 0 descriptor?? [ 1404.296962][ T5679] usb 6-1: USB disconnect, device number 12 [ 1405.713520][T18386] netlink: 'syz.3.3737': attribute type 1 has an invalid length. [ 1406.036268][T18386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.310789][T18388] bond0: (slave gretap3): making interface the new active one [ 1406.383562][T18388] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 1407.288802][T18403] netlink: 'syz.4.3744': attribute type 83 has an invalid length. [ 1407.538301][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3746'. [ 1407.578742][T18408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.820732][T18408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.281569][T18416] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3749'. [ 1410.115684][T18432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1410.164483][T18432] bridge0: port 3(bond5) entered blocking state [ 1410.181270][T18432] bridge0: port 3(bond5) entered disabled state [ 1410.199632][T18432] bond5: entered allmulticast mode [ 1410.224729][T18432] bond5: entered promiscuous mode [ 1410.242532][T18432] bridge0: port 3(bond5) entered blocking state [ 1410.249641][T18432] bridge0: port 3(bond5) entered forwarding state [ 1412.042447][T16639] bridge0: port 3(bond5) entered disabled state [ 1415.419964][T18489] fuse: fd is not a fuse device [ 1419.382921][T18525] fuse: fd is not a fuse device [ 1419.572938][T18533] overlayfs: failed to clone upperpath [ 1425.421179][T18577] netlink: 'syz.3.3813': attribute type 5 has an invalid length. [ 1426.029092][ T7583] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1426.250170][ T7583] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1426.268266][ T7583] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1426.301631][ T7583] usb 5-1: Product: syz [ 1426.353799][ T7583] usb 5-1: config 0 descriptor?? [ 1426.391897][ T7583] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1426.454450][ T7583] usb 5-1: Detected FT232H [ 1426.644500][ T7583] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1427.132094][ T7583] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1427.341262][ T7583] usb 5-1: USB disconnect, device number 21 [ 1427.445788][ T7583] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1427.486934][ T7583] ftdi_sio 5-1:0.0: device disconnected [ 1427.780265][T18593] fuse: fd is not a fuse device [ 1428.422821][ T7829] kworker/1:7 (7829) used greatest stack depth: 2584 bytes left [ 1429.324540][T18605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3823'. [ 1430.427507][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3832'. [ 1430.475147][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3832'. [ 1430.518016][T18623] netlink: 240 bytes leftover after parsing attributes in process `syz.9.3832'. [ 1430.543216][T18623] netlink: 240 bytes leftover after parsing attributes in process `syz.9.3832'. [ 1430.978260][T18625] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3833'. [ 1431.017474][T18625] netlink: 'syz.5.3833': attribute type 3 has an invalid length. [ 1431.056692][T18625] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3833'. [ 1431.111566][T18625] netlink: 'syz.5.3833': attribute type 3 has an invalid length. [ 1432.992950][T18643] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 1433.194127][T14749] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.235193][T14749] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.481682][T14749] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.520031][T14749] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.563414][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.572531][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.780462][T14749] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.819748][T14749] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.014107][T14749] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1434.051741][T14749] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.514878][T14749] bridge_slave_1: left allmulticast mode [ 1434.540307][T14749] bridge_slave_1: left promiscuous mode [ 1434.567181][T14749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.589329][T14749] bridge_slave_0: left allmulticast mode [ 1434.608353][T14749] bridge_slave_0: left promiscuous mode [ 1434.616765][T14749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.412762][T14749] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1435.987044][T14749]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.089880][T14749]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.183639][T14749]  (unregistering): (slave team0): Releasing backup interface [ 1436.353801][T14749]  (unregistering): Released all slaves [ 1436.473545][T14749] bond1 (unregistering): Released all slaves [ 1436.790281][T18651] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1436.994237][T18669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1437.004857][T18669] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1437.021309][T18669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1437.042010][T18669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1437.060407][T18669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1437.251667][T18651] bond0 (unregistering): Released all slaves [ 1438.606773][T14749] hsr_slave_0: left promiscuous mode [ 1438.654254][T14749] hsr_slave_1: left promiscuous mode [ 1438.683745][T14749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1438.769383][T14749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.813598][T14749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.822487][T14749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.952890][T14749] veth1_macvtap: left promiscuous mode [ 1438.974982][T14749] veth0_macvtap: left promiscuous mode [ 1438.995173][T14749] veth1_vlan: left promiscuous mode [ 1439.016058][T14749] veth0_vlan: left promiscuous mode [ 1439.129623][T14381] Bluetooth: hci0: command tx timeout [ 1441.247853][T14381] Bluetooth: hci0: command tx timeout [ 1441.413536][T14749] team0 (unregistering): Port device team_slave_1 removed [ 1441.486983][T14749] team0 (unregistering): Port device team_slave_0 removed [ 1442.919166][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1443.128980][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.205568][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1443.246743][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.288543][ T24] usb 5-1: Product: syz [ 1443.300453][T14381] Bluetooth: hci0: command tx timeout [ 1443.316665][ T24] usb 5-1: Manufacturer: syz [ 1443.362822][ T24] usb 5-1: SerialNumber: syz [ 1443.606923][T14749] IPVS: stop unused estimator thread 0... [ 1444.560302][ T24] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1444.590590][ T24] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1444.614706][ T24] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1444.996756][ T24] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 1445.081991][ T24] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1445.181487][ T24] usb 5-1: USB disconnect, device number 22 [ 1445.226633][ T24] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1445.369083][T14381] Bluetooth: hci0: command tx timeout [ 1445.677859][T18755] Driver unsupported XDP return value 0 on prog (id 115) dev N/A, expect packet loss! [ 1447.555767][T18780] fuse: fd is not a fuse device [ 1447.741722][ T5230] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1448.306592][T18786] tipc: Failed to remove unknown binding: 66,1,1/0:3794539517/3794539519 [ 1449.045947][T18799] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1449.715988][T18668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.759980][T18668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.806201][T18668] bridge_slave_0: entered allmulticast mode [ 1449.868796][T18668] bridge_slave_0: entered promiscuous mode [ 1449.934126][T18668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.969845][T18668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.995509][T18668] bridge_slave_1: entered allmulticast mode [ 1450.009024][T18668] bridge_slave_1: entered promiscuous mode [ 1450.453662][T18818] fuse: fd is not a fuse device [ 1450.481560][T18668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.559375][T18668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.919511][T18668] team0: Port device team_slave_0 added [ 1450.992606][T18668] team0: Port device team_slave_1 added [ 1451.394314][T18668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.415648][T18668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.463282][T18829] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1451.490819][T18668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.514613][T18829] overlayfs: failed to set xattr on upper [ 1451.544111][T18668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.562746][T18829] overlayfs: ...falling back to redirect_dir=nofollow. [ 1451.574166][T18668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.595416][T18829] overlayfs: ...falling back to metacopy=off. [ 1451.668369][T18829] overlayfs: ...falling back to index=off. [ 1451.681849][T18829] overlayfs: ...falling back to uuid=null. [ 1451.695377][T18668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.114202][T18836] fuse: fd is not a fuse device [ 1452.374879][T18668] hsr_slave_0: entered promiscuous mode [ 1452.417144][T18668] hsr_slave_1: entered promiscuous mode [ 1452.454465][T18668] debugfs: 'hsr0' already exists in 'hsr' [ 1452.481811][T18668] Cannot create hsr debugfs directory [ 1452.526069][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3898'. [ 1453.804448][T18854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1453.817663][ T5230] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1453.978301][ T29] audit: type=1326 audit(1781286999.121:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1454.065790][ T29] audit: type=1326 audit(1781286999.131:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1454.094878][ T29] audit: type=1326 audit(1781286999.161:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1454.143469][T18858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1454.176204][ T29] audit: type=1326 audit(1781286999.131:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1454.265424][T18861] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1454.309376][ T29] audit: type=1326 audit(1781286999.181:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1454.442022][ T29] audit: type=1326 audit(1781286999.271:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1454.544533][ T29] audit: type=1326 audit(1781286999.271:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1454.684206][ T29] audit: type=1326 audit(1781286999.281:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1454.840379][ T29] audit: type=1326 audit(1781286999.281:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1454.953362][ T29] audit: type=1326 audit(1781286999.281:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.3903" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf71a9510 code=0x7ffc0000 [ 1456.281635][T18883] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.3911'. [ 1456.294137][T18668] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1456.353482][T18883] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3911'. [ 1456.390042][T18668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1456.415922][T18668] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1456.486035][T18668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1456.545229][T18668] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1456.650947][T18668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1456.703912][T18668] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1456.841529][T18668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1458.007504][T18902] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 1458.474026][T18668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.770904][T18668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.897847][T14759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.905796][T14759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.957406][T18917] gfs2: gfs2 mount does not exist [ 1459.067002][T14759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.075505][T14759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.746461][T18940] loop4: detected capacity change from 0 to 1024 [ 1460.819659][T18940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1461.100559][T18940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1461.328530][ T5230] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1462.503452][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.995915][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1462.995998][ T29] audit: type=1326 audit(1781287008.141:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1463.162633][ T29] audit: type=1326 audit(1781287008.141:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1463.301879][ T29] audit: type=1326 audit(1781287008.231:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1463.442088][ T29] audit: type=1326 audit(1781287008.231:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1463.583555][ T29] audit: type=1326 audit(1781287008.231:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1463.732475][ T29] audit: type=1326 audit(1781287008.231:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1463.871477][ T29] audit: type=1326 audit(1781287008.251:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1464.001646][ T29] audit: type=1326 audit(1781287008.251:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1464.147993][ T29] audit: type=1326 audit(1781287008.251:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1464.290829][ T29] audit: type=1326 audit(1781287008.251:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.4.3935" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 1465.009163][T18668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.019665][T18995] netlink: 'syz.4.3939': attribute type 10 has an invalid length. [ 1465.158741][T18997] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3941'. [ 1465.172758][T18995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.200537][T18995] : (slave team0): Enslaving as an active interface with an up link [ 1466.336006][T18668] veth0_vlan: entered promiscuous mode [ 1466.494330][T18668] veth1_vlan: entered promiscuous mode [ 1467.047117][T18668] veth0_macvtap: entered promiscuous mode [ 1467.144055][T18668] veth1_macvtap: entered promiscuous mode [ 1467.208455][ T5230] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1467.611024][T18668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.873100][T18668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1468.109742][ T7697] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.161504][ T7697] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.202724][T14759] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.222357][T14759] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.825321][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1469.153198][T19040] l2tp_ppp: sess 2/0: no socket in recv [ 1470.823019][T19062] fuse: fd is not a fuse device [ 1472.306525][T19083] fuse: fd is not a fuse device [ 1473.633574][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3970'. [ 1475.886815][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3976'. [ 1476.931825][T14735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.984315][T14735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.316360][ T7697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.350620][ T7697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.975396][T19154] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1478.027505][T19154] overlayfs: failed to set xattr on upper [ 1478.058482][T19154] overlayfs: ...falling back to index=off. [ 1478.095488][T19154] overlayfs: ...falling back to uuid=null. [ 1478.517795][T19161] fuse: fd is not a fuse device [ 1478.616170][T19161] fuse: fd is not a fuse device [ 1481.661908][T19199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3994'. [ 1481.723672][T19199] netlink: 'syz.3.3994': attribute type 7 has an invalid length. [ 1481.774429][T19199] netlink: 'syz.3.3994': attribute type 8 has an invalid length. [ 1481.838979][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3994'. [ 1482.575600][T19215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1486.355300][T19264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1493.019466][T19334] loop2: detected capacity change from 0 to 256 [ 1493.226647][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4034'. [ 1494.408743][T19345] ===================================================== [ 1494.416266][T19345] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 [ 1494.428824][T19345] _copy_to_iter+0xef3/0x3400 [ 1494.434947][T19345] __skb_datagram_iter+0x7ce/0x12b0 [ 1494.441049][T19345] skb_copy_datagram_iter+0x5b/0x210 [ 1494.446611][T19345] tcp_peek_sndq+0x12b/0x570 [ 1494.451736][T19345] tcp_recvmsg_locked+0x578e/0x5830 [ 1494.457193][T19345] tcp_recvmsg+0x2b6/0xad0 [ 1494.462024][T19345] inet_recvmsg+0x11a/0x570 [ 1494.466725][T19345] sock_recvmsg+0x22d/0x310 [ 1494.471775][T19345] ____sys_recvmsg+0x193/0x620 [ 1494.476845][T19345] ___sys_recvmsg+0x20b/0x850 [ 1494.481926][T19345] do_recvmmsg+0x50b/0xdf0 [ 1494.486521][T19345] __sys_recvmmsg+0xf3/0x450 [ 1494.491493][T19345] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1494.498255][T19345] ia32_sys_call+0x3ec3/0x4360 [ 1494.503303][T19345] __do_fast_syscall_32+0x195/0x470 [ 1494.509587][T19345] do_fast_syscall_32+0x37/0x80 [ 1494.514716][T19345] do_SYSENTER_32+0x1f/0x30 [ 1494.519580][T19345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1494.526165][T19345] [ 1494.528776][T19345] Uninit was created at: [ 1494.533326][T19345] __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 1494.540833][T19345] alloc_pages_mpol+0x328/0x860 [ 1494.545939][T19345] alloc_pages_noprof+0x101/0x290 [ 1494.551725][T19345] skb_page_frag_refill+0x141/0x5e0 [ 1494.557112][T19345] sk_page_frag_refill+0x59/0x190 [ 1494.562480][T19345] tcp_sendmsg_locked+0x30d7/0x80b0 [ 1494.567912][T19345] tcp_sendmsg+0x4b/0x90 [ 1494.572548][T19345] inet_sendmsg+0x134/0x290 [ 1494.577216][T19345] __sys_sendto+0x8bc/0xae0 [ 1494.582138][T19345] __ia32_sys_sendto+0x12f/0x200 [ 1494.587303][T19345] ia32_sys_call+0x372f/0x4360 [ 1494.592595][T19345] __do_fast_syscall_32+0x195/0x470 [ 1494.598249][T19345] do_fast_syscall_32+0x37/0x80 [ 1494.603388][T19345] do_SYSENTER_32+0x1f/0x30 [ 1494.608254][T19345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1494.614805][T19345] [ 1494.617224][T19345] Bytes 0-535 of 536 are uninitialized [ 1494.622962][T19345] Memory access of size 536 starts at ffff88802e448000 [ 1494.630100][T19345] Data copied to user address 0000000080001d40 [ 1494.636371][T19345] [ 1494.640138][T19345] CPU: 1 UID: 0 PID: 19345 Comm: syz.4.4035 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1494.651831][T19345] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1494.656293][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1494.667396][T19345] ===================================================== [ 1494.674669][T19345] Disabling lock debugging due to kernel taint [ 1494.908383][T19345] Kernel panic - not syncing: kmsan.panic set ... [ 1494.915052][T19345] CPU: 1 UID: 0 PID: 19345 Comm: syz.4.4035 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 1494.926248][T19345] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1494.931948][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1494.942192][T19345] Call Trace: [ 1494.945601][T19345] [ 1494.948643][T19345] __dump_stack+0x26/0x30 [ 1494.953207][T19345] dump_stack_lvl+0x50/0x1c0 [ 1494.958001][T19345] ? dump_stack+0x12/0x25 [ 1494.962551][T19345] dump_stack+0x1e/0x25 [ 1494.966902][T19345] vpanic+0x7b4/0x1430 [ 1494.971235][T19345] panic+0x15d/0x160 [ 1494.975409][T19345] kmsan_report+0x31a/0x320 [ 1494.980156][T19345] ? kmsan_internal_check_memory+0x1e8/0x240 [ 1494.986366][T19345] ? kmsan_copy_to_user+0xef/0x190 [ 1494.991708][T19345] ? _copy_to_iter+0xef3/0x3400 [ 1494.996820][T19345] ? __skb_datagram_iter+0x7ce/0x12b0 [ 1495.002453][T19345] ? skb_copy_datagram_iter+0x5b/0x210 [ 1495.008167][T19345] ? tcp_peek_sndq+0x12b/0x570 [ 1495.013129][T19345] ? tcp_recvmsg_locked+0x578e/0x5830 [ 1495.018756][T19345] ? tcp_recvmsg+0x2b6/0xad0 [ 1495.023576][T19345] ? inet_recvmsg+0x11a/0x570 [ 1495.028447][T19345] ? sock_recvmsg+0x22d/0x310 [ 1495.033329][T19345] ? ____sys_recvmsg+0x193/0x620 [ 1495.038509][T19345] ? ___sys_recvmsg+0x20b/0x850 [ 1495.043695][T19345] ? do_recvmmsg+0x50b/0xdf0 [ 1495.048463][T19345] ? __sys_recvmmsg+0xf3/0x450 [ 1495.053402][T19345] ? __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1495.060126][T19345] ? ia32_sys_call+0x3ec3/0x4360 [ 1495.065310][T19345] ? __do_fast_syscall_32+0x195/0x470 [ 1495.070885][T19345] ? do_fast_syscall_32+0x37/0x80 [ 1495.076117][T19345] ? do_SYSENTER_32+0x1f/0x30 [ 1495.080986][T19345] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1495.087761][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.093849][T19345] ? ktime_get+0x545/0x5a0 [ 1495.098571][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.103963][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.109328][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.115412][T19345] kmsan_internal_check_memory+0x1e8/0x240 [ 1495.121573][T19345] kmsan_copy_to_user+0xef/0x190 [ 1495.126757][T19345] _copy_to_iter+0xef3/0x3400 [ 1495.131691][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.137105][T19345] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1495.143689][T19345] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1495.150012][T19345] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1495.156135][T19345] ? __mod_timer+0x1640/0x1e20 [ 1495.161184][T19345] __skb_datagram_iter+0x7ce/0x12b0 [ 1495.166646][T19345] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1495.172571][T19345] skb_copy_datagram_iter+0x5b/0x210 [ 1495.178148][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.184228][T19345] tcp_peek_sndq+0x12b/0x570 [ 1495.189037][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.195136][T19345] tcp_recvmsg_locked+0x578e/0x5830 [ 1495.200614][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.205993][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.212062][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.217424][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.222829][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.228196][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.234291][T19345] ? __rcu_read_unlock+0x6c/0xd0 [ 1495.239463][T19345] ? is_module_text_address+0x1f4/0x240 [ 1495.245202][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.250591][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.256640][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.262016][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.268094][T19345] ? tcp_recvmsg+0x71/0xad0 [ 1495.272836][T19345] ? filter_irq_stacks+0x49/0x190 [ 1495.278086][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.283508][T19345] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1495.289822][T19345] ? lock_sock_nested+0x80/0x130 [ 1495.294991][T19345] tcp_recvmsg+0x2b6/0xad0 [ 1495.299649][T19345] ? aa_sk_perm+0x841/0xc90 [ 1495.304434][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.309774][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.315814][T19345] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1495.320983][T19345] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1495.326141][T19345] inet_recvmsg+0x11a/0x570 [ 1495.330802][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.336170][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.342208][T19345] ? __pfx_inet_recvmsg+0x10/0x10 [ 1495.347405][T19345] sock_recvmsg+0x22d/0x310 [ 1495.352099][T19345] ____sys_recvmsg+0x193/0x620 [ 1495.357086][T19345] ? import_iovec+0xaf/0xe0 [ 1495.361777][T19345] ? get_compat_msghdr+0x673/0x740 [ 1495.367141][T19345] ___sys_recvmsg+0x20b/0x850 [ 1495.372047][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.378099][T19345] ? __fget_files+0x3b4/0x4a0 [ 1495.382994][T19345] ? __fget_files+0x3b9/0x4a0 [ 1495.387850][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.393192][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.399248][T19345] do_recvmmsg+0x50b/0xdf0 [ 1495.403845][T19345] ? stack_depot_save_flags+0x35/0x790 [ 1495.409612][T19345] ? kmsan_get_metadata+0xf1/0x160 [ 1495.414973][T19345] __sys_recvmmsg+0xf3/0x450 [ 1495.419727][T19345] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.425780][T19345] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 1495.432324][T19345] ia32_sys_call+0x3ec3/0x4360 [ 1495.437316][T19345] __do_fast_syscall_32+0x195/0x470 [ 1495.442707][T19345] do_fast_syscall_32+0x37/0x80 [ 1495.447731][T19345] do_SYSENTER_32+0x1f/0x30 [ 1495.452411][T19345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1495.458982][T19345] RIP: 0023:0xf7f7501c [ 1495.463197][T19345] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1495.483000][T19345] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1495.491606][T19345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d00 [ 1495.499722][T19345] RDX: 0000000000000256 RSI: 0000000000010022 RDI: 0000000000000000 [ 1495.507828][T19345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1495.515933][T19345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1495.524038][T19345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1495.532207][T19345] [ 1495.535976][T19345] Kernel Offset: disabled [ 1495.540373][T19345] Rebooting in 86400 seconds..