last executing test programs: 2m53.433685477s ago: executing program 1 (id=7): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000001540)='./file0\x00', 0xc04, &(0x7f0000000380)={[{@numtail}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8no}, {@utf8no}, {@uni_xlateno}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@rodir}, {@uni_xlateno}, {@uni_xlate}]}, 0x15, 0x2ae, &(0x7f0000000900)="$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") syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0xa40c10, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="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"], 0x6, 0x647, &(0x7f0000001580)="$eJzs3c1vHGcdB/DvrNeOnUqp2yZtQJWwGqkgLBK/yAVzaUAI+VChqhw4W4nTWNm4le0it0Lg8io4cegfUA6+cULiHqmc4darj5WQuPTkm9HMztobe+36Jcmu4fOJnn2eZ5+ZZ57ntzOzO7uxJsD/rYXJNB+lyMLkWxtlfXtrtrW9NXupbm4lKcuNpNnOUqwkxWfJ7bRTvlY+WS9fHLWdT5bn3/n8y+0v2rVmnarlG8etdzKbdcpEkqE6P2DkT6fpb7hdKPu507u/Uyj2ZlgG7EYncNBvu4dsnmb1cx63wCAo2u+bh4wnl5OM1p8DUp8dGs92dE/eqc5yAAAAcEE9v5OdbORKv8cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF0l9//+iTo1OeSJF5/7/I/VzqcrP9XnA5/So3wMAAAAAAAAAgCfgGzvZyUaudOq7RfWb/2tV5Wr1+Fw+yFqWspqb2chi1rOe1UwnGe/qaGRjcX19dfoEa870XHPm2cwXAAAAAAAAAP5H/ToL+7//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAPw3VedEuFnW62imPp9FMMppkpFxuM/lXp3xBFL2efPTsxwEAAADnMnqGdZ7fyU42cqVT3y2qa/6Xq+vl0XyQlaxnOetpZSl362vo8qq/sb0129remn1YpsP9/uA/pxpG1ePe1xC9tny9WmIs97JcPXMzd6rB3E2jWrN0vTOe3uP6uBxT8WbthCO7W+flxv581LcIfTFeRWR4LyJT9djKaLxwfCS+8tVpHrul6TT2vvm5+hRifrnOy/n8fjBj3kgViZmuve/l4yORfPPvf/3Z/VY5mbXJwZnSGR3cJ2a7IvHKySKx8uD+vQGMRPOUy09Vkbi2V1/Ij/PTTGYib2c1y/l5FrOepezW7Yv1/lw+jh8fqduP1d7+qpGM1K9L+yx6kjFN5EdVaTGvVeteyXKKvJe7Wcob1b+ZTOe7mctc5rte4WtHjruaW3XUN0531N/4Vl0YS/KHOu+39ltqGdcXuuLafc4dr9q6n9mP0otP/tzY/HpdKLfxmzofDAcjMd0ViZeOj8RfqmNjrbXyYPX+4vtH9L95oP56nZd73O8G6l2i3F9ezGh9Jnl87yjbXto7yzwer5H6F5d2W+NQ27WqrSg6R+pPjjxSR+rPcId7mqnaXunZNlu1Xe9qe+zzVt5La+/zEAAD7PK3L4+M/Xvsn2Ofjv127P7YW6M/vPS9S6+OZPgfw99vTg293ni1+Fs+zS/3r/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICzW/vwoweLrdbSau9C4+imJ1so6hv5PIttKfS70LmJ4Lk7vD0Q07nQhaEkvZrql+gsNxcFLoRb6w/fv7X24UffWX64+O7Su0srw3Nz81Pzc2/M3rq33Fqaaj/2e5TA07D/pt+7vRioG2wCAAAAAAAAAAAAOdnf2+zW///vzH9p0O85AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfbwmSaj1JkeurmVFnf3pptlalT3l+ymaTRSIpfJMVnye20U8a7uivePGI7nyzPv/P5l9tf7PfVrJYvO63zc9isUyaSDNX5AR+ftb87Pfv7469O3l2xN8MyYDc6gYN++28AAAD//3jpANE=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x0, {0x400}}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 2m52.938466326s ago: executing program 1 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2m52.584563703s ago: executing program 1 (id=11): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x3, 0x10000, 0x3, 0x7, 0x4, 0x7ff, 0xf, 0xe11d}, 0x0, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0x100000001, 0x5, 0x100000000, 0x4, 0x262}, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 2m51.572772122s ago: executing program 1 (id=19): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 2m51.043341443s ago: executing program 1 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='tlb_flush\x00', r2}, 0x18) 2m50.533650452s ago: executing program 1 (id=25): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2m50.038805492s ago: executing program 32 (id=25): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2m20.903045865s ago: executing program 4 (id=190): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x8001}]}, 0x24}}, 0x42094) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 2m19.961426723s ago: executing program 4 (id=202): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES16], 0x46) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) 2m19.890114024s ago: executing program 4 (id=203): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x50cf}}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 2m19.626895339s ago: executing program 4 (id=206): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000140)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@utf8}, {@shortname_winnt}, {@fat=@showexec}, {@shortname_win95}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x28b, &(0x7f0000000a80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 2m19.389773563s ago: executing program 4 (id=209): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a) 2m19.028327531s ago: executing program 4 (id=211): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1}, 0x0) 2m18.668239327s ago: executing program 33 (id=211): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1}, 0x0) 2m3.531804164s ago: executing program 2 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xf, 0xa1, 0x4}}, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x9ef7, 0xfffb, 0x5, 0x1, 0x36f, 0x9]}}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2m3.23350013s ago: executing program 2 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m2.74067016s ago: executing program 2 (id=310): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x1, 0x300, 0x5, {0x77359400}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x1}, 0x0, 0x1, 0x0, 0x0, "2b784cc8f76d7d76"}}, 0x48}, 0x1, 0x0, 0x0, 0x20048090}, 0x8000) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 2m2.470253715s ago: executing program 2 (id=313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140), 0xfc, 0x474, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8c) write$P9_RLERRORu(r0, &(0x7f0000000000)={0x14, 0x7, 0x2, {{0x7, '\x99($-:-['}, 0x3}}, 0x14) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000001, 0x0, 0x0, {0xffffffffff7ffffe, 0x1, 0xffffffffbfffffff, 0x10, 0xffffffffffff592c, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x78) 2m1.963347664s ago: executing program 2 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=@base={0x12, 0x2, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 2m1.678193169s ago: executing program 2 (id=322): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unshare(0x28000600) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300001, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0x83) fsync(r0) 2m1.178232619s ago: executing program 34 (id=322): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unshare(0x28000600) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300001, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0x83) fsync(r0) 11.477663932s ago: executing program 5 (id=1260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 11.330197654s ago: executing program 5 (id=1263): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x21f, &(0x7f0000000940)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x2, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) 11.07539s ago: executing program 5 (id=1267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffd) r1 = eventfd2(0x0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x7, 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) shutdown(r0, 0x0) 10.089745908s ago: executing program 3 (id=1283): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x400}, 0x90) 9.944895161s ago: executing program 5 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2001080, 0x0) 9.931985811s ago: executing program 3 (id=1287): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9.745144404s ago: executing program 5 (id=1288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="660fd4cf360f01d1b8bf02f09f0f23c00f21f835020006000f23f826df80008000000f20c035000004003e0f01c9f30f7fc92e0fa7c036640f6e340ccdf30fa6c8c8017c3300", 0x46}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.560560288s ago: executing program 3 (id=1290): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="c2923b18c0d96e9b8b4c9f210ee20ad2cfeb7a1e7f193d9c1b01cfa77004af642732a2b92da1172f49e20339888c46c57cf45981203d0be9a3e921ccffe9f40c336be4149b0c891dc63b02b58b35d7223111e05cf2a7fb15189e1a3d0cd582291f0cf5e7e4d9da4b34a605dea0659a508b951003e6b13ae20877ee7b63d1221aa2f3e3d18cd441fd8e9c5e84fe216a59631830fe3cb10a11068fa8c9609d4ac22967681a1b8d5362e6d0de160739ca3f834b6a573e299ae8f429d25f406cdf9bebe584fc13bbd77624bc6f0eb430bc502148bfbbb363e7828698076039052fe09c1e2b4588e366", @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX, @ANYRESHEX=0x0], 0x5, 0x6fe, &(0x7f0000000b00)="$eJzs3TtsG+cdAPD/URQluoAjJ36kRYAQMZAWFWpLFpRWXeoWRaEhKIJ06EzYckyYlgNJKWSjqJU+9g6ZOqWDtqBDke4G2rlBiiKrxgAFsmTSVBZ3vONDpEjKliU1+f2E43133+O++x/vjuRB+AL42lqdj/KTSGJ1/s3tdHlvd6k5tbs0k2c3I6ISEaWIcnsWyXpkuTfzKb6ZrszLJ52G/9W/nQ8aK29/9uXe5+2lcj5l5ZO+euNVBlft5FPUImIqnw+aPqTFjw9uvq+9W4e2N6nuHqYBu1oELv70TK3CM2sN2OnkffTv7HWgzsVzneRRzlvgjEra980BcxHp2T4b0b7r51eH0sn27vjtnHYHAAAA4KiqR6/ywn7sx3acfx7dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK+qfPz/JJ9KRboWSTH+fyVfF3n6DBo/EOKnM+35k+ffGQAAAAAAAAB47l7dj/3YjvPFcivJnvm/1vOM/xvxXmzGWmzEtdiOemzFVmzEYkTM9TRU2a5vbW0sZjUjLo6oeSM+GVLzxuF9vHnM+wwAAAAAAAAAZ9zsmPx704Prfhur3ef/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwFiQRU+1ZNl0s0nNRKkfEbFFuJ+KTiKicbm+PJBm28snJ9wMAAACeyWz/YjI7QZ0XHsd+bMf5YrmVZN/5L2ffl2fjvViPrWjEVjRjLW7n36HTb/2lvd2l5t7u0v10Gmz3x18cqetZi9H+7WH4ll/OSlTjTjSyNdfiViTRypTyVl7e211K5/eH9+v9tE/Jj3IjejPVk76dvlz5OEv/sf9XhPKRdvEplQ7NmctypzsRWcj7lta4UERgeCT6js6wt0l55JYWo9T55efigS21+n9mGR7z90fv87kDpYb+cnMqDkbiRpQ6R+jy6JhHfPtvH/3ybnP93t07m/NnZ5eGejy2xMFILPVE4spXKBLjLWSRuNRZXo2fxS9iPr6YeSs2ohG/inpsxVqtyK/n7+f0dW50pD4917v01riepOdkrXP9GtanWvT1KWrx0yxVj9eyY/rfViOSeBARa/FG9ncjFjtXg+4RvjS639lZX5rgStvj6neyWSdMUT287F8ma/K4pHG90BPX3mvuXJbXu6YbpReHRqm4101+P+pR/laeSFv43cj7w0k7GInFnki8dNj7pR3SP2d3k83m+r2Nu/V3J9ze6/k8PY/+MPwucUrXlnRvXozZfOcuFF1pPc7zXurcYfvjVcmfuLSVBvIuderNxfloxM/jQdzuO1O/H8uxHCtZ6ctZ6emBO1aad6XTUv81PM1LP2mVOw92ej9vPYhm+/MQAGfbue+eq1T/U/1n9cPq76t3q2/O/mTmBzOvVGL6H9M/LC9MvV56JflrfBi/6X7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt7mw0f36s3m2sbwRGl4VjK6Vr3ZKgYSG1GmL5Hko/ZMUDjZfPioNbbB0YmZvHtPWf04E8UwfOML10a2U36mbiQ7B4/X7PhjUYzyNMEmkoGAp5WfOnTFlrtrps/AoTyYqI0uU5ksdFmieMP2ZB393VsddrymImJY4TEXjqnjuPoAp+n61v13r28+fPS9xv36O2vvrK1PLy+vLKwsv7F0/U6jubbQfu2pcCKD3wInoffjREf6weTVgaID47KOGKgVAAAAAAAAAAAAeI5O4n8hTnsfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9vq/NRfhJJLC5cW0iX93aXmulUpLslyxFRiojk1xHJ3yNuRnuKuZ7mksO280Fj5e3Pvtz7vNtWuShfitg5tN5kdvIpahExlc+Pq71b49urdJMzQ7KTTmTSgF0tAgen7X8BAAD//5CS7ds=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 9.331852192s ago: executing program 5 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f0000000240)=r2}, 0x20) syz_clone(0x2500001f, 0x0, 0x0, 0x0, 0x0, 0x0) 8.811467212s ago: executing program 35 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f0000000240)=r2}, 0x20) syz_clone(0x2500001f, 0x0, 0x0, 0x0, 0x0, 0x0) 6.106596194s ago: executing program 3 (id=1307): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) personality(0x8) uname(&(0x7f0000002280)=""/4096) 5.544944654s ago: executing program 3 (id=1302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/198, 0xc6}], 0x1}, 0x18eccf73}], 0x1, 0x102, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 5.24498188s ago: executing program 3 (id=1305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 4.936923086s ago: executing program 7 (id=1314): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 4.69790692s ago: executing program 7 (id=1317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x18a3c85) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.460228585s ago: executing program 7 (id=1319): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfe, {0xa, 0x40, 0xc0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8, 0x8, 0x243}]}, 0x34}}, 0x400c0c0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 3.865201996s ago: executing program 6 (id=1322): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x2, 0x800}}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4, 0x3}, {0x0, 0x4}, @time=@tick=0x5}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @time={0x9, 0x7}, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {0xa, 0x20}, @note={0x9, 0x1e, 0xf, 0x8, 0x7}}, {0x7, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x49}, @addr={0x1, 0x7f}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) read$char_usb(r1, 0x0, 0x0) 3.637705191s ago: executing program 6 (id=1324): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_getanyicast={0x14, 0x3e, 0x5b148a9c0365d643, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000014) 3.63057037s ago: executing program 0 (id=1325): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 3.434773774s ago: executing program 7 (id=1326): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x7f, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) 3.277686947s ago: executing program 0 (id=1327): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x8919, 0x0) 3.178812239s ago: executing program 7 (id=1328): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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") recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.265585907s ago: executing program 6 (id=1329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) 2.234629307s ago: executing program 0 (id=1330): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000a00)=""/252, 0xfc}], 0x1}, 0x10032) 1.945611202s ago: executing program 0 (id=1331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x80, 0xe3, 0x72, 0x20, 0x108c, 0x168, 0x84b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xf8, 0xfd}}]}}]}}, 0x0) shutdown(r0, 0x1) 1.945258573s ago: executing program 6 (id=1332): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x10000000}) 1.764327056s ago: executing program 6 (id=1333): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x26, &(0x7f0000002080)={{0x12, 0x1, 0x310, 0xf3, 0x27, 0xef, 0x8, 0x781, 0x1, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0xe1, 0x7, 0xd0, 0xf7, [{{0x9, 0x4, 0xf9, 0x7, 0x0, 0xf, 0x75, 0xc4, 0xd, [@generic={0x2, 0x5}]}}]}}]}}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, 0x0, 0x40801, 0x0) prlimit64(0x0, 0x5, 0x0, &(0x7f0000003f40)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getpgid(0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) 1.283451725s ago: executing program 0 (id=1334): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x891) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.0287279s ago: executing program 7 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000005c0), &(0x7f00000006c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7ec}}, 0x0, 0x83, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 281.658044ms ago: executing program 0 (id=1336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 0s ago: executing program 6 (id=1337): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb0}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) kernel console output (not intermixed with test programs): config 0 has an invalid interface number: 1 but max is 0 [ 121.562390][ T9] usb 1-1: config 0 has no interface number 0 [ 121.589256][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.647764][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.657575][ T6274] BTRFS info (device loop4): balance: start -sdrange=128..234881024,vrange=18446744073709551614..18446744073709551613,limit=9223372036854775807,limit=4294967295..2147483647 [ 121.693559][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 121.713733][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.726707][ T6274] BTRFS info (device loop4): balance: ended with status: 0 [ 121.737331][ T9] usb 1-1: config 0 descriptor?? [ 121.785728][ T6278] input: syz1 as /devices/virtual/input/input5 [ 122.069615][ T5963] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 122.468494][ T9] uclogic 0003:28BD:0071.0001: pen parameters not found [ 122.492097][ T9] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 122.759558][ T23] usb 1-1: USB disconnect, device number 7 [ 123.044915][ T6305] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.086658][ T6305] netlink: 'syz.2.97': attribute type 12 has an invalid length. [ 123.111413][ T6305] netlink: 'syz.2.97': attribute type 29 has an invalid length. [ 123.140686][ T6305] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 123.148950][ T6305] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 123.167088][ T6305] netlink: 'syz.2.97': attribute type 2 has an invalid length. [ 123.188515][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 123.478470][ T6315] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 123.694790][ T6324] loop2: detected capacity change from 0 to 512 [ 123.762181][ T6295] loop3: detected capacity change from 0 to 32768 [ 123.766407][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.812493][ T6324] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.944029][ T6295] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.980376][ T6324] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.102: corrupted inode contents [ 124.056689][ T6324] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.102: mark_inode_dirty error [ 124.078661][ T6324] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.102: corrupted inode contents [ 124.094941][ T5157] udevd[5157]: worker [5788] terminated by signal 33 (Unknown signal 33) [ 124.138828][ T6324] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.102: mark_inode_dirty error [ 124.212314][ T6295] XFS (loop3): Ending clean mount [ 124.279054][ T6295] XFS (loop3): Quotacheck needed: Please wait. [ 124.365499][ T6350] loop0: detected capacity change from 0 to 256 [ 124.373965][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.441091][ T6295] XFS (loop3): Quotacheck: Done. [ 124.533399][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.560941][ T5787] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.597030][ T6354] loop2: detected capacity change from 0 to 7 [ 124.619291][ T6354] Dev loop2: unable to read RDB block 7 [ 124.636742][ T6354] loop2: unable to read partition table [ 124.643492][ T6354] loop2: partition table beyond EOD, truncated [ 124.667548][ T6354] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.857607][ T6357] @0Ù: renamed from bond_slave_1 (while UP) [ 125.204948][ T6371] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 125.287428][ T6371] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.885890][ T6387] kvm: Disabled LAPIC found during irq injection [ 125.937233][ T6371] syz.2.114 (6371) used greatest stack depth: 20936 bytes left [ 126.440078][ T6397] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 126.471255][ T6397] overlayfs: overlapping lowerdir path [ 126.903932][ T6406] netlink: 48 bytes leftover after parsing attributes in process `syz.0.130'. [ 126.961688][ T6408] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.983124][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 127.001444][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.203445][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.371246][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.411652][ T5854] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.581641][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 127.590805][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 127.599424][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.609716][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.619697][ T5854] usb 5-1: Using ep0 maxpacket: 8 [ 127.625559][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.638358][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.660182][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.669916][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.678683][ T5854] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 127.687409][ T5854] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.700498][ T5854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.712373][ T5854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.726435][ T5854] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.739864][ T5854] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.749306][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.946393][ T23] usb 1-1: usb_control_msg returned -32 [ 127.958350][ T23] usbtmc 1-1:16.0: can't read capabilities [ 127.990292][ T5854] usb 5-1: usb_control_msg returned -32 [ 128.001149][ T5854] usbtmc 5-1:16.0: can't read capabilities [ 128.582868][ T6428] overlayfs: upper fs does not support file handles, falling back to index=off. [ 128.662877][ T5854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.851361][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 128.871070][ T5854] usb 3-1: config 0 has an invalid interface number: 236 but max is 1 [ 128.880363][ T5854] usb 3-1: config 0 has an invalid interface number: 129 but max is 1 [ 128.889830][ T5833] IPVS: starting estimator thread 0... [ 128.898201][ T5854] usb 3-1: config 0 has no interface number 0 [ 128.905384][ T6433] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 128.909392][ T5854] usb 3-1: config 0 has no interface number 1 [ 128.919728][ T5854] usb 3-1: config 0 interface 236 has no altsetting 0 [ 128.926920][ T5854] usb 3-1: config 0 interface 129 has no altsetting 0 [ 128.939379][ T5854] usb 3-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 128.952506][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.961994][ T5854] usb 3-1: Product: syz [ 128.966346][ T5854] usb 3-1: Manufacturer: syz [ 128.971015][ T5854] usb 3-1: SerialNumber: syz [ 128.980520][ T5854] usb 3-1: config 0 descriptor?? [ 128.981641][ T6434] IPVS: using max 18 ests per chain, 43200 per kthread [ 129.215402][ T5854] ir_usb 3-1:0.236: required endpoints missing [ 129.237287][ T5854] usb 3-1: selecting invalid altsetting 0 [ 129.268000][ T5854] usb 3-1: selecting invalid altsetting 0 [ 129.289706][ T5854] usb 3-1: Found UVC 2.26 device syz (1ace:e9b2) [ 129.298622][ T5854] usb 3-1: No valid video chain found. [ 129.315433][ T5854] usb 3-1: USB disconnect, device number 2 [ 129.395124][ T6436] loop3: detected capacity change from 0 to 32768 [ 129.417446][ T6436] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.485894][ T6436] XFS (loop3): Ending clean mount [ 129.497353][ T6436] XFS (loop3): Quotacheck needed: Please wait. [ 129.538003][ T6436] XFS (loop3): Quotacheck: Done. [ 129.649620][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.850258][ T6446] loop2: detected capacity change from 0 to 128 [ 130.140207][ T5833] usb 1-1: USB disconnect, device number 8 [ 130.225169][ T5778] usb 5-1: USB disconnect, device number 2 [ 130.308841][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 131.019876][ T6455] loop2: detected capacity change from 0 to 32768 [ 131.070009][ T6455] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 131.231591][ T6455] XFS (loop2): Ending clean mount [ 131.392837][ T6498] netlink: 'syz.3.158': attribute type 5 has an invalid length. [ 131.408098][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 131.481040][ T6455] syz.2.145 (6455) used greatest stack depth: 20360 bytes left [ 131.563998][ T5789] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 131.768860][ T6510] loop4: detected capacity change from 0 to 512 [ 131.816337][ T6510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.831388][ T5833] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.839570][ T6510] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.970621][ T6518] netlink: 104 bytes leftover after parsing attributes in process `syz.0.164'. [ 132.000277][ T5963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.053570][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 132.082565][ T5833] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.106312][ T5833] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 132.126641][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.172423][ T5833] usb 4-1: Product: syz [ 132.176720][ T5833] usb 4-1: Manufacturer: syz [ 132.186190][ T5833] usb 4-1: SerialNumber: syz [ 132.194373][ T5833] usb 4-1: config 0 descriptor?? [ 132.254677][ T6527] loop2: detected capacity change from 0 to 8 [ 132.329575][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 132.532686][ T6533] loop0: detected capacity change from 0 to 8192 [ 132.541628][ T966] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.549174][ T6533] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.549312][ T6533] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 132.549566][ T6533] REISERFS (device loop0): using ordered data mode [ 132.579376][ T6533] reiserfs: using flush barriers [ 132.587035][ T6533] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.604497][ T6533] REISERFS (device loop0): checking transaction log (loop0) [ 132.620710][ T5833] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 132.703343][ T6533] REISERFS (device loop0): Using tea hash to sort names [ 132.714244][ T6533] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 132.794173][ T966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.810208][ T966] usb 5-1: config 0 has no interfaces? [ 132.816244][ T966] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.836149][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.865298][ T966] usb 5-1: config 0 descriptor?? [ 133.030350][ T5833] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 133.086425][ T966] usb 5-1: USB disconnect, device number 3 [ 133.106610][ T5833] gs_usb: probe of 4-1:0.0 failed with error -32 [ 133.141047][ T6539] block device autoloading is deprecated and will be removed. [ 133.299182][ T23] usb 4-1: USB disconnect, device number 4 [ 133.591342][ T5778] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.801471][ T5778] usb 3-1: Using ep0 maxpacket: 16 [ 133.809712][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.821551][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.831977][ T5778] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 133.845597][ T5778] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 133.881373][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.894801][ T5778] usb 3-1: config 0 descriptor?? [ 133.931954][ T6546] 9pnet: p9_errstr2errno: server reported unknown error 01777777 [ 134.340615][ T5778] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0002/input/input6 [ 134.473154][ T5778] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 134.647531][ T5778] usb 3-1: USB disconnect, device number 3 [ 134.653750][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.712487][ T6569] Dead loop on virtual device ip6_vti0, fix it urgently! [ 134.726390][ T6569] Dead loop on virtual device ip6_vti0, fix it urgently! [ 134.734701][ T6569] Dead loop on virtual device ip6_vti0, fix it urgently! [ 134.747121][ T6569] Dead loop on virtual device ip6_vti0, fix it urgently! [ 134.756055][ T6569] Dead loop on virtual device ip6_vti0, fix it urgently! [ 134.769307][ T6569] Dead loop on virtual device ip6_vti0, fix it urgently! [ 134.856784][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 134.873367][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.891954][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.917459][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.929517][ T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.939774][ T23] usb 1-1: Manufacturer: syz [ 134.947776][ T23] usb 1-1: config 0 descriptor?? [ 134.972079][ T6575] Bluetooth: MGMT ver 1.22 [ 135.066590][ T6579] netlink: 'syz.4.189': attribute type 4 has an invalid length. [ 135.146075][ T6579] netlink: 'syz.4.189': attribute type 4 has an invalid length. [ 135.343055][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.357760][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.380293][ T6586] netlink: 'syz.2.191': attribute type 7 has an invalid length. [ 135.476698][ T5778] usb 1-1: USB disconnect, device number 9 [ 135.645566][ T6596] process 'syz.2.194' launched './file0' with NULL argv: empty string added [ 136.113471][ T6610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.297633][ T6619] loop4: detected capacity change from 0 to 1024 [ 136.305270][ T6619] EXT4-fs: Ignoring removed orlov option [ 136.320634][ T6619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.390632][ T6619] EXT4-fs: Ignoring sb option on remount [ 136.399317][ T6619] EXT4-fs: Ignoring removed orlov option [ 136.408151][ T6619] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 136.428507][ T6619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.445091][ T6619] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 136.516118][ T5963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.578414][ T6627] loop4: detected capacity change from 0 to 128 [ 136.992556][ T6629] loop2: detected capacity change from 0 to 32768 [ 137.002726][ T6629] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.207 (6629) [ 137.051049][ T6629] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 137.063942][ T6629] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 137.080891][ T6629] BTRFS info (device loop2): using free space tree [ 137.130115][ T6629] BTRFS info (device loop2): enabling ssd optimizations [ 137.143938][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.158000][ T6629] BTRFS info (device loop2): auto enabling async discard [ 137.250599][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.462474][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.607599][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.812419][ T5789] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 138.275160][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.285948][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.301990][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.331234][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.354721][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.363366][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.456383][ T6664] loop0: detected capacity change from 0 to 512 [ 138.557773][ T6664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.582989][ T6664] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.753707][ T6660] loop3: detected capacity change from 0 to 40427 [ 138.769625][ T6660] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 138.778603][ T6660] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.821516][ T6660] F2FS-fs (loop3): heap/no_heap options were deprecated [ 138.863917][ T6660] F2FS-fs (loop3): invalid crc value [ 138.902917][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.930566][ T6660] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.201857][ T6660] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 139.209785][ T6660] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.288794][ T6661] chnl_net:caif_netlink_parms(): no params data found [ 139.357202][ T6687] loop0: detected capacity change from 0 to 2048 [ 139.384673][ T6687] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 139.482082][ T5787] syz-executor: attempt to access beyond end of device [ 139.482082][ T5787] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.484508][ T6691] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.518307][ T5787] F2FS-fs (loop3): Remounting filesystem read-only [ 139.692861][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.709886][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.719152][ T6661] bridge_slave_0: entered allmulticast mode [ 139.743715][ T6661] bridge_slave_0: entered promiscuous mode [ 139.764983][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.782847][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.790464][ T6661] bridge_slave_1: entered allmulticast mode [ 139.806443][ T6661] bridge_slave_1: entered promiscuous mode [ 139.946543][ T6661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.012818][ T6661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.090767][ T48] hsr_slave_0: left promiscuous mode [ 140.107344][ T48] hsr_slave_1: left promiscuous mode [ 140.139716][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.151311][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.180806][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.194215][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.206070][ T48] bridge_slave_1: left allmulticast mode [ 140.216780][ T48] bridge_slave_1: left promiscuous mode [ 140.226777][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.239255][ T48] bridge_slave_0: left allmulticast mode [ 140.247751][ T48] bridge_slave_0: left promiscuous mode [ 140.253914][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.304962][ T48] veth1_macvtap: left promiscuous mode [ 140.316979][ T48] veth0_macvtap: left promiscuous mode [ 140.325430][ T48] veth1_vlan: left promiscuous mode [ 140.330870][ T48] veth0_vlan: left promiscuous mode [ 140.452197][ T50] Bluetooth: hci0: command tx timeout [ 140.649675][ T6707] loop3: detected capacity change from 0 to 2048 [ 140.747513][ T6707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.363830][ T48] team0 (unregistering): Port device team_slave_1 removed [ 141.435394][ T48] team0 (unregistering): Port device team_slave_0 removed [ 141.518430][ T48] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 141.606435][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.962814][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.167215][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 142.199090][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 142.224729][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.244519][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.253027][ T9] usb 4-1: Product: syz [ 142.257342][ T9] usb 4-1: Manufacturer: syz [ 142.262333][ T9] usb 4-1: SerialNumber: syz [ 142.280956][ T9] usb 4-1: config 0 descriptor?? [ 142.287349][ T6714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.302621][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 142.308963][ T9] hub: probe of 4-1:0.0 failed with error -5 [ 142.367388][ T48] bond0 (unregistering): Released all slaves [ 142.531602][ T50] Bluetooth: hci0: command tx timeout [ 142.614336][ T6661] team0: Port device team_slave_0 added [ 142.651746][ T6661] team0: Port device team_slave_1 added [ 142.715843][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.756026][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.789233][ T966] usb 4-1: USB disconnect, device number 5 [ 142.814717][ T6661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.846727][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.855483][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.910445][ T6661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.030652][ T6661] hsr_slave_0: entered promiscuous mode [ 143.038665][ T6661] hsr_slave_1: entered promiscuous mode [ 143.047379][ T6661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.055657][ T6661] Cannot create hsr debugfs directory [ 143.373103][ T6661] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.385248][ T6661] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.392310][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.416952][ T6661] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.438792][ T6661] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.466680][ T6718] loop2: detected capacity change from 0 to 40427 [ 143.478972][ T6718] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 143.491551][ T6718] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.496878][ T6732] trusted_key: syz.3.238 sent an empty control message without MSG_MORE. [ 143.524907][ T6718] F2FS-fs (loop2): invalid crc value [ 143.556525][ T6718] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.601340][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 143.620753][ T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.642060][ T6661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.648331][ T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.670314][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.681056][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.692639][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.697964][ T6718] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 143.703244][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.723618][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.725607][ T6661] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.743843][ T6718] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.751607][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.774631][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.782318][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.794693][ T23] usb 1-1: config 0 descriptor?? [ 143.813883][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.822287][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.849569][ T28] audit: type=1804 audit(1759333368.562:5): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.236" name="/newroot/61/file1/file0" dev="loop2" ino=10 res=1 errno=0 [ 143.908635][ T6661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.922984][ T6661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.000706][ T5789] syz-executor: attempt to access beyond end of device [ 144.000706][ T5789] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 144.022616][ T5789] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 144.030273][ T5789] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 144.043270][ T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 144.059758][ T23] usb 1-1: USB disconnect, device number 10 [ 144.082133][ T23] usblp0: removed [ 144.265624][ T6661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.611424][ T50] Bluetooth: hci0: command tx timeout [ 144.651251][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.673085][ T6661] veth0_vlan: entered promiscuous mode [ 144.692137][ T6661] veth1_vlan: entered promiscuous mode [ 144.747926][ T6661] veth0_macvtap: entered promiscuous mode [ 144.773499][ T6661] veth1_macvtap: entered promiscuous mode [ 144.806539][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.820017][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.833297][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.844525][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.851256][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 144.854990][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.870467][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.881424][ T968] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.890024][ T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 144.897576][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.910912][ T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 144.927173][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.930229][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 144.954328][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.967271][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.970207][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.987941][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 145.002741][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.008377][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.018928][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.046422][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 145.060996][ T6661] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.067001][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.077996][ T6661] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.088192][ T6661] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.090359][ T23] usb 1-1: config 0 descriptor?? [ 145.106470][ T6661] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.121375][ T968] usb 3-1: Using ep0 maxpacket: 32 [ 145.136301][ T968] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 145.145274][ T968] usb 3-1: config 0 has no interface number 0 [ 145.152661][ T968] usb 3-1: config 0 interface 184 has no altsetting 0 [ 145.172092][ T968] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 145.183441][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.192827][ T968] usb 3-1: Product: syz [ 145.201206][ T968] usb 3-1: Manufacturer: syz [ 145.206997][ T968] usb 3-1: SerialNumber: syz [ 145.240126][ T968] usb 3-1: config 0 descriptor?? [ 145.258675][ T968] smsc75xx v1.0.0 [ 145.280485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.290184][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.321051][ T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 145.355387][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.369970][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.494635][ T6765] "syz.5.212" (6765) uses obsolete ecb(arc4) skcipher [ 146.688923][ T968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 146.701697][ T50] Bluetooth: hci0: command tx timeout [ 146.709221][ T6794] syzkaller1: entered promiscuous mode [ 146.715052][ T968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 146.721663][ T968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 146.733614][ T6794] syzkaller1: entered allmulticast mode [ 146.744649][ T968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 146.758340][ T968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 146.771520][ T968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 146.784718][ T968] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 146.796009][ T968] usb 3-1: USB disconnect, device number 4 [ 146.824890][ T9] usb 1-1: USB disconnect, device number 11 [ 146.841571][ T9] usblp0: removed [ 147.066381][ T6802] loop0: detected capacity change from 0 to 512 [ 147.083644][ T6802] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.257: bad orphan inode 15 [ 147.104927][ T6802] ext4_test_bit(bit=14, block=5) = 0 [ 147.108779][ T6806] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 147.118428][ T6802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.169038][ T6802] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.257: reserved inode found cleared - inode=1 [ 147.242633][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.343348][ T6812] Bluetooth: MGMT ver 1.22 [ 147.763248][ T6818] loop2: detected capacity change from 0 to 32768 [ 147.779725][ T6818] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 147.815910][ T6818] XFS (loop2): Ending clean mount [ 147.871751][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.918477][ T5789] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 148.074003][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 148.083436][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.097797][ T23] usb 4-1: config 0 descriptor?? [ 148.107752][ T23] gspca_main: spca508-2.14.0 probing 8086:0110 [ 148.325089][ T23] gspca_spca508: reg_read err -32 [ 148.331547][ T23] gspca_spca508: reg_read err -32 [ 148.343871][ T23] gspca_spca508: reg_read err -32 [ 148.350429][ T23] gspca_spca508: reg_read err -32 [ 148.361568][ T23] gspca_spca508: reg_read err -32 [ 148.548358][ T6841] loop0: detected capacity change from 0 to 16 [ 148.568873][ T23] gspca_spca508: reg write: error -71 [ 148.569875][ T6841] erofs: (device loop0): mounted with root inode @ nid 36. [ 148.575356][ T23] spca508: probe of 4-1:0.0 failed with error -71 [ 148.591791][ T23] usb 4-1: USB disconnect, device number 6 [ 149.305115][ T6856] loop3: detected capacity change from 0 to 64 [ 149.321789][ T6856] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 149.400764][ T6859] loop2: detected capacity change from 0 to 512 [ 149.421617][ T6859] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.277: bad orphan inode 15 [ 149.435465][ T6859] ext4_test_bit(bit=14, block=5) = 0 [ 149.442899][ T6859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.486448][ T6859] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.277: reserved inode found cleared - inode=1 [ 149.576433][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.760832][ T6867] syzkaller0: entered allmulticast mode [ 149.777838][ T6867] syzkaller0: entered promiscuous mode [ 149.827517][ T6867] syzkaller0 (unregistering): left promiscuous mode [ 149.842190][ T6867] syzkaller0 (unregistering): left allmulticast mode [ 150.191366][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.391229][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 150.400081][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.412721][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.419561][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 150.429173][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.441214][ T9] usb 3-1: config 0 descriptor?? [ 150.618383][ T6891] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 150.892763][ T9] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 151.401780][ T8] usb 3-1: USB disconnect, device number 5 [ 151.871909][ T6902] loop3: detected capacity change from 0 to 32768 [ 151.881627][ T6902] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.295 (6902) [ 151.900253][ T6902] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 151.911593][ T6902] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 151.921689][ T6902] BTRFS info (device loop3): force zlib compression, level 3 [ 151.941316][ T6902] BTRFS info (device loop3): force clearing of disk cache [ 151.952039][ T6902] BTRFS info (device loop3): setting nodatasum [ 151.966267][ T6902] BTRFS info (device loop3): allowing degraded mounts [ 151.988781][ T6902] BTRFS info (device loop3): enabling disk space caching [ 152.024101][ T6902] BTRFS info (device loop3): disk space caching is enabled [ 152.109174][ T6902] BTRFS info (device loop3): auto enabling async discard [ 152.151662][ T6902] BTRFS info (device loop3): rebuilding free space tree [ 152.226596][ T6902] BTRFS info (device loop3): disabling free space tree [ 152.260835][ T6902] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.283247][ T6902] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.543982][ T6945] BTRFS info (device loop3): balance: start -sdrange=128..234881024,vrange=18446744073709551614..18446744073709551613,limit=9223372036854775807,limit=4294967295..2147483647 [ 152.620319][ T6945] BTRFS info (device loop3): balance: ended with status: 0 [ 152.921956][ T6902] syz.3.295 (6902) used greatest stack depth: 16720 bytes left [ 152.947767][ T5787] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 153.025542][ T6936] loop0: detected capacity change from 0 to 40427 [ 153.075297][ T6936] F2FS-fs (loop0): heap/no_heap options were deprecated [ 153.079893][ T6953] loop5: detected capacity change from 0 to 8192 [ 153.111916][ T6936] F2FS-fs (loop0): invalid crc value [ 153.148968][ T6936] F2FS-fs (loop0): Found nat_bits in checkpoint [ 153.202993][ T6953] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.248051][ T6953] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 153.267451][ T6953] REISERFS (device loop5): using ordered data mode [ 153.274756][ T6953] reiserfs: using flush barriers [ 153.296028][ T6936] F2FS-fs (loop0): Start checkpoint disabled! [ 153.326412][ T6953] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.376820][ T6953] REISERFS (device loop5): checking transaction log (loop5) [ 153.405544][ T6953] REISERFS (device loop5): Using r5 hash to sort names [ 153.414523][ T6936] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 153.418267][ T6953] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 153.458025][ T6936] F2FS-fs (loop0): heap/no_heap options were deprecated [ 153.538536][ T6953] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 153.557217][ T6953] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 153.569770][ T6953] REISERFS (device loop5): Remounting filesystem read-only [ 153.594326][ T6953] REISERFS error (device loop5): vs-2100 add_save_link: search_by_key ([-1 2 0x1 IND]) returned -2 [ 153.614190][ T6953] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 153.633425][ T6953] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 153.644811][ T6953] REISERFS error (device loop5): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 2 0xffffffff DIRECT] [ 153.686754][ T6953] REISERFS warning (device loop5): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS [ 153.773746][ T6963] loop2: detected capacity change from 0 to 512 [ 153.823852][ T6963] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.313: invalid block [ 153.895058][ T6963] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.313: invalid indirect mapped block 10 (level 1) [ 153.918537][ T6963] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.313: invalid indirect mapped block 8 (level 1) [ 153.944366][ T6963] EXT4-fs (loop2): 1 truncate cleaned up [ 153.960037][ T6963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.046032][ T6963] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.313: bg 0: bad block bitmap checksum [ 154.166233][ T5789] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz-executor: bad inode number: 11 [ 154.195566][ T6979] raw_sendmsg: syz.3.319 forgot to set AF_INET. Fix it! [ 154.208307][ T5789] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz-executor: bad inode number: 11 [ 154.339069][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.536487][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.739541][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.860980][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.960116][ T6975] loop0: detected capacity change from 0 to 32768 [ 155.053305][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.079456][ T6975] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.291221][ T6975] XFS (loop0): Ending clean mount [ 155.351492][ T6986] loop3: detected capacity change from 0 to 40427 [ 155.354478][ T6975] XFS (loop0): Quotacheck needed: Please wait. [ 155.383203][ T6986] F2FS-fs (loop3): heap/no_heap options were deprecated [ 155.405337][ T6986] F2FS-fs (loop3): invalid crc value [ 155.444275][ T6986] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.456424][ T6975] XFS (loop0): Quotacheck: Done. [ 155.577339][ T6986] F2FS-fs (loop3): Start checkpoint disabled! [ 155.628950][ T6986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 155.735154][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.769639][ T6983] F2FS-fs (loop3): heap/no_heap options were deprecated [ 155.882381][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.896259][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.905604][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.916136][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.928302][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.938583][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.668678][ T7012] loop5: detected capacity change from 0 to 256 [ 156.799974][ T28] audit: type=1804 audit(1759333381.482:6): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.333" name="/newroot/26/file0/bus" dev="loop5" ino=1048601 res=1 errno=0 [ 157.041125][ C1] sched: RT throttling activated [ 157.336890][ T7008] loop0: detected capacity change from 0 to 131072 [ 157.350083][ T7008] F2FS-fs (loop0): invalid crc value [ 157.370619][ T7008] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.435243][ T7008] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 157.533141][ T7003] chnl_net:caif_netlink_parms(): no params data found [ 157.649686][ T48] bond0: (slave wlan1): Releasing backup interface [ 157.905000][ T7038] loop3: detected capacity change from 0 to 512 [ 157.977635][ T7038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.042564][ T7038] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.053275][ T5798] Bluetooth: hci2: command tx timeout [ 158.173162][ T7038] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.340: corrupted inode contents [ 158.226330][ T7038] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #2: comm syz.3.340: mark_inode_dirty error [ 158.258305][ T48] hsr_slave_0: left promiscuous mode [ 158.267423][ T48] hsr_slave_1: left promiscuous mode [ 158.267970][ T7038] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.340: corrupted inode contents [ 158.293249][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.311230][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.313835][ T7038] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.340: mark_inode_dirty error [ 158.335891][ T48] bridge_slave_1: left allmulticast mode [ 158.337323][ T7035] loop5: detected capacity change from 0 to 32768 [ 158.341825][ T48] bridge_slave_1: left promiscuous mode [ 158.358775][ T7035] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.338 (7035) [ 158.383704][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.400004][ T7046] EXT4-fs error (device loop3): ext4_get_first_dir_block:3595: inode #18: comm syz.3.340: directory missing '.' [ 158.428087][ T7035] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 158.441067][ T7035] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 158.460262][ T48] bridge_slave_0: left allmulticast mode [ 158.466224][ T7035] BTRFS info (device loop5): force zlib compression, level 3 [ 158.481421][ T7035] BTRFS info (device loop5): force clearing of disk cache [ 158.486147][ T48] bridge_slave_0: left promiscuous mode [ 158.498482][ T7035] BTRFS info (device loop5): setting nodatasum [ 158.501957][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.505250][ T7035] BTRFS info (device loop5): allowing degraded mounts [ 158.539916][ T7035] BTRFS info (device loop5): enabling disk space caching [ 158.557671][ T7035] BTRFS info (device loop5): disk space caching is enabled [ 158.612760][ T48] veth1_macvtap: left promiscuous mode [ 158.618497][ T48] veth0_macvtap: left promiscuous mode [ 158.627697][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.638329][ T48] veth1_vlan: left promiscuous mode [ 158.666947][ T48] veth0_vlan: left promiscuous mode [ 158.733128][ T7035] BTRFS info (device loop5): auto enabling async discard [ 158.763883][ T7035] BTRFS info (device loop5): rebuilding free space tree [ 158.839133][ T7035] BTRFS info (device loop5): disabling free space tree [ 158.870509][ T7035] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.911074][ T7035] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.239413][ T7066] BTRFS info (device loop5): balance: start -sdrange=128..234881024,vrange=18446744073709551614..18446744073709551613,limit=9223372036854775807,limit=4294967295..2147483647 [ 159.279576][ T7066] BTRFS info (device loop5): balance: ended with status: 0 [ 159.485058][ T6661] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 160.145628][ T5798] Bluetooth: hci2: command tx timeout [ 160.365857][ T48] team0 (unregistering): Port device team_slave_1 removed [ 160.448566][ T48] team0 (unregistering): Port device team_slave_0 removed [ 160.546918][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.630309][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.618297][ T48] bond0 (unregistering): Released all slaves [ 161.754589][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.771314][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.778664][ T7003] bridge_slave_0: entered allmulticast mode [ 161.792755][ T7003] bridge_slave_0: entered promiscuous mode [ 161.809318][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.819122][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.836966][ T7003] bridge_slave_1: entered allmulticast mode [ 161.846296][ T7003] bridge_slave_1: entered promiscuous mode [ 161.877571][ T7070] veth1_macvtap: left promiscuous mode [ 161.891334][ T7070] macsec0: entered promiscuous mode [ 162.016021][ T7003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.040211][ T7003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.155897][ T7072] team_slave_0: entered promiscuous mode [ 162.162154][ T7072] team_slave_1: entered promiscuous mode [ 162.181643][ T7072] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.212006][ T5798] Bluetooth: hci2: command tx timeout [ 162.405032][ T7075] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 162.439316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.848794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.858668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 162.951580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 163.206174][ T7003] team0: Port device team_slave_0 added [ 163.308960][ T7003] team0: Port device team_slave_1 added [ 163.526034][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.555710][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.616550][ T7003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.631458][ T7083] syzkaller1: entered promiscuous mode [ 163.642120][ T7083] syzkaller1: entered allmulticast mode [ 163.662357][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.670419][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.712103][ T7003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.991069][ T7003] hsr_slave_0: entered promiscuous mode [ 164.014866][ T7003] hsr_slave_1: entered promiscuous mode [ 164.021915][ T7003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.029826][ T7003] Cannot create hsr debugfs directory [ 164.116073][ T7094] loop0: detected capacity change from 0 to 8 [ 164.123596][ T7094] squashfs: Unknown parameter '01777777777777777777777' [ 164.221265][ T968] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 164.292145][ T5798] Bluetooth: hci2: command tx timeout [ 164.362059][ T7003] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.376039][ T7003] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.389009][ T7003] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.400146][ T7003] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.411423][ T968] usb 6-1: Using ep0 maxpacket: 16 [ 164.427054][ T968] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.441250][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 164.445448][ T968] usb 6-1: config 0 interface 0 has no altsetting 0 [ 164.465551][ T968] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 164.495470][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.520578][ T968] usb 6-1: config 0 descriptor?? [ 164.631060][ T7003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.641061][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 164.661243][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.679234][ T7003] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.698688][ T9] usb 1-1: config 0 descriptor?? [ 164.719282][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.726670][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.765650][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.772968][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.997739][ T968] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 165.265536][ T7003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.497709][ T968] usb 6-1: USB disconnect, device number 2 [ 165.708710][ T7112] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 165.802065][ T7003] veth0_vlan: entered promiscuous mode [ 165.836786][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.353'. [ 165.899302][ T7003] veth1_vlan: entered promiscuous mode [ 165.955624][ T9] pegasus 1-1:0.0: can't reset MAC [ 165.967324][ T7003] veth0_macvtap: entered promiscuous mode [ 165.973805][ T9] pegasus: probe of 1-1:0.0 failed with error -5 [ 165.984687][ T9] usb 1-1: USB disconnect, device number 12 [ 165.997169][ T7003] veth1_macvtap: entered promiscuous mode [ 166.055630][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.077131][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.095950][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.118214][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.139475][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.163933][ T7116] loop3: detected capacity change from 0 to 4096 [ 166.171310][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.186519][ T7116] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 166.198714][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.224908][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.258048][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.269200][ T7116] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 166.286222][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.298255][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.313801][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.326253][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.354086][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.469553][ T7003] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.479090][ T7003] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.488377][ T7003] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.498129][ T7003] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.781345][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'. [ 166.795592][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.821688][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.907975][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.920700][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.503266][ T28] audit: type=1326 audit(1759333392.212:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 167.548026][ T28] audit: type=1326 audit(1759333392.242:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 167.629661][ T28] audit: type=1326 audit(1759333392.242:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 167.693682][ T28] audit: type=1326 audit(1759333392.252:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 167.718439][ T28] audit: type=1326 audit(1759333392.252:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 167.724124][ T7160] loop6: detected capacity change from 0 to 256 [ 167.748360][ T28] audit: type=1326 audit(1759333392.252:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 167.789555][ T28] audit: type=1326 audit(1759333392.252:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 167.820452][ T28] audit: type=1326 audit(1759333392.252:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 167.876936][ T28] audit: type=1326 audit(1759333392.252:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 167.908701][ T28] audit: type=1326 audit(1759333392.252:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.6.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f298eec9 code=0x7ffc0000 [ 168.023444][ T7165] loop6: detected capacity change from 0 to 8 [ 168.037897][ T7165] squashfs: Unknown parameter '01777777777777777777777' [ 168.351440][ T6761] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 168.516023][ T7173] loop0: detected capacity change from 0 to 4096 [ 168.525157][ T7173] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 168.543953][ T6761] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 168.566696][ T6761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.594030][ T6761] usb 7-1: config 0 descriptor?? [ 168.600148][ T7173] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 168.638500][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.5.377'. [ 168.974383][ T7182] loop5: detected capacity change from 0 to 16 [ 168.989248][ T7182] erofs: (device loop5): mounted with root inode @ nid 36. [ 169.013479][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 169.028301][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 169.049262][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 169.065755][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 83 @ nid 36 [ 169.078387][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 169.092196][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 169.123597][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 169.144640][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 169.163676][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 169.186872][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 169.208578][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 169.231021][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 75 @ nid 36 [ 169.250506][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 169.276543][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 169.286876][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 169.296613][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 169.307019][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 169.324393][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 169.340383][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 169.356914][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 169.371652][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 169.388800][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 169.398641][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 169.413357][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 169.429024][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 50 @ nid 36 [ 169.448754][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 169.462586][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 169.479724][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 169.499314][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 169.516757][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 169.528142][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 169.545801][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 169.556667][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 169.577773][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 169.596062][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 169.615459][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 169.626224][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 169.642821][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 169.657890][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 169.669504][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 169.686132][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 169.697923][ T7182] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 169.720070][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 169.730373][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 169.747224][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 169.758418][ T7182] erofs: (device loop5): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 169.774551][ T7182] syz.5.381: attempt to access beyond end of device [ 169.774551][ T7182] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 169.789930][ T7182] syz.5.381: attempt to access beyond end of device [ 169.789930][ T7182] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 169.850359][ T7182] syz.5.381: attempt to access beyond end of device [ 169.850359][ T7182] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 169.879992][ T6761] pegasus 7-1:0.0: can't reset MAC [ 169.890265][ T6761] pegasus: probe of 7-1:0.0 failed with error -5 [ 169.900416][ T7182] syz.5.381: attempt to access beyond end of device [ 169.900416][ T7182] loop5: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 169.926886][ T7182] syz.5.381: attempt to access beyond end of device [ 169.926886][ T7182] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 169.927862][ T6761] usb 7-1: USB disconnect, device number 2 [ 169.950751][ T7182] syz.5.381: attempt to access beyond end of device [ 169.950751][ T7182] loop5: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 170.077280][ T7202] veth1_macvtap: left promiscuous mode [ 170.091283][ T7202] macsec0: entered promiscuous mode [ 170.618839][ T7221] netlink: 76 bytes leftover after parsing attributes in process `syz.5.398'. [ 171.045364][ T7240] fuse: Bad value for 'fd' [ 171.091650][ T5895] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.301227][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 171.329661][ T5895] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 171.339645][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.358750][ T5895] usb 6-1: Product: syz [ 171.376042][ T5895] usb 6-1: Manufacturer: syz [ 171.381292][ T5895] usb 6-1: SerialNumber: syz [ 171.405214][ T5895] usb 6-1: config 0 descriptor?? [ 171.645491][ T5895] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 173.078295][ T5895] usb write operation failed. (-71) [ 173.094353][ T5895] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 173.105863][ T5895] dvbdev: DVB: registering new adapter (Terratec H7) [ 173.113337][ T5895] usb 6-1: media controller created [ 173.119048][ T5895] usb read operation failed. (-71) [ 173.124911][ T5895] usb write operation failed. (-71) [ 173.136446][ T5895] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5 [ 173.146663][ T5895] usb 6-1: USB disconnect, device number 3 [ 173.861396][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.417'. [ 173.968874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 173.987685][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 173.994367][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 174.000950][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.008891][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.017011][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.024939][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.033084][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.041131][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.049702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.057776][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.065828][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.073888][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.082275][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.091282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.099452][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.107462][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.115766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.124035][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.132320][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.140283][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.148617][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.156784][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.164801][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.172785][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.180866][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.188853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.197788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.206305][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.214302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.222423][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.230644][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.239035][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.247239][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.256047][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.264031][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.271947][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.280142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.288221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.296526][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.304637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.312782][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.320723][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.328720][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.336683][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.344731][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.352661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.361042][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.369143][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.377835][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.385887][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.394148][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.402123][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.410164][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.418164][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.426312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.434381][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.442606][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.450718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.458925][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.466941][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.474947][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.482923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.491259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.499108][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.507208][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.515086][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.523181][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.531023][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.539032][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.546932][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.554886][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.562748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.570838][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.578746][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.586851][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.595012][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.603093][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.610938][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.619085][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.627000][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.634970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.642914][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.650978][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.658886][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.666892][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.674971][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.683443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.691475][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.699396][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.707292][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.715366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.723260][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.731283][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.739144][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.747333][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.755203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.763237][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.771255][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.779300][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.787289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.795461][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.803562][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.811737][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.819565][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.827543][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.835411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.843351][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.851324][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.859921][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.868508][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.876613][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.884540][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 174.892945][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 174.901258][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 175.368493][ T7284] capability: warning: `syz.0.426' uses 32-bit capabilities (legacy support in use) [ 175.514606][ T7286] loop6: detected capacity change from 0 to 2048 [ 175.561619][ T7286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.311231][ T968] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 176.501220][ T968] usb 7-1: Using ep0 maxpacket: 8 [ 176.517892][ T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.529622][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 176.531810][ T968] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.551424][ T968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.563569][ T968] usb 7-1: config 0 descriptor?? [ 176.779672][ T7333] vlan2: entered promiscuous mode [ 176.790913][ T7333] bridge0: entered promiscuous mode [ 176.797048][ T968] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 176.799458][ T7333] vlan2: entered allmulticast mode [ 176.820061][ T7333] bridge0: entered allmulticast mode [ 176.843998][ T7335] bridge_slave_0: left allmulticast mode [ 176.849828][ T7335] bridge_slave_0: left promiscuous mode [ 176.861935][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.898577][ T7335] bridge_slave_1: left allmulticast mode [ 176.906543][ T7335] bridge_slave_1: left promiscuous mode [ 176.917471][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.932734][ T7335] bond0: (slave bond_slave_0): Releasing backup interface [ 176.955699][ T7335] bond0: (slave bond_slave_1): Releasing backup interface [ 176.989353][ T7335] team_slave_0: left promiscuous mode [ 177.029965][ T968] usb 7-1: USB disconnect, device number 3 [ 177.042865][ T7335] team0: Port device team_slave_0 removed [ 177.054053][ T7335] team_slave_1: left promiscuous mode [ 177.076214][ T7335] team0: Port device team_slave_1 removed [ 177.096871][ T7335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.108835][ T7335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.120449][ T7335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.134523][ T7335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.731720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.026399][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 180.639816][ T7444] fuse: root generation should be zero [ 181.311871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 181.771641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.990897][ T7496] fuse: Bad value for 'fd' [ 183.549430][ T7507] vlan2: entered promiscuous mode [ 183.597415][ T7507] bridge0: entered promiscuous mode [ 183.616234][ T7507] vlan2: entered allmulticast mode [ 183.626197][ T7507] bridge0: entered allmulticast mode [ 183.680590][ T7510] bridge_slave_0: left allmulticast mode [ 183.709936][ T7510] bridge_slave_0: left promiscuous mode [ 183.731852][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.773740][ T7510] bridge_slave_1: left allmulticast mode [ 183.791635][ T7510] bridge_slave_1: left promiscuous mode [ 183.797659][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.840049][ T7510] bond0: (slave bond_slave_0): Releasing backup interface [ 183.913683][ T7510] bond0: (slave bond_slave_1): Releasing backup interface [ 184.008561][ T7510] team0: Port device team_slave_0 removed [ 184.044788][ T7510] team0: Port device team_slave_1 removed [ 184.085815][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.124150][ T7510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.148925][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.184250][ T7510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.016094][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 185.882171][ T7549] loop6: detected capacity change from 0 to 32768 [ 185.977042][ T7549] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.069689][ T7549] XFS (loop6): Ending clean mount [ 186.092074][ T7549] XFS (loop6): Quotacheck needed: Please wait. [ 186.159422][ T7549] XFS (loop6): Quotacheck: Done. [ 186.558220][ T7003] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.454669][ T7595] warning: `syz.3.532' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 187.911560][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 190.420402][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.557'. [ 190.441069][ T7651] netlink: 'syz.5.557': attribute type 29 has an invalid length. [ 190.463970][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.557'. [ 190.582780][ T7657] netlink: 'syz.5.559': attribute type 1 has an invalid length. [ 190.615631][ T7657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.680962][ T7657] bond1: (slave gretap1): making interface the new active one [ 190.701829][ T7657] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 191.491386][ T5798] Bluetooth: hci2: command tx timeout [ 192.081968][ T7688] loop5: detected capacity change from 0 to 32768 [ 192.109455][ T7688] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.570 (7688) [ 192.154472][ T7688] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 192.173008][ T7688] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 192.184062][ T7697] overlayfs: failed to clone upperpath [ 192.190532][ T7688] BTRFS info (device loop5): enabling auto defrag [ 192.197714][ T7688] BTRFS info (device loop5): force clearing of disk cache [ 192.207197][ T7688] BTRFS info (device loop5): enabling disk space caching [ 192.246282][ T7688] BTRFS info (device loop5): max_inline at 0 [ 192.261226][ T7688] BTRFS info (device loop5): disk space caching is enabled [ 192.414940][ T7688] BTRFS info (device loop5): enabling ssd optimizations [ 192.422591][ T7688] BTRFS info (device loop5): auto enabling async discard [ 192.431696][ T7688] BTRFS info (device loop5): rebuilding free space tree [ 192.456849][ T7688] BTRFS info (device loop5): disabling free space tree [ 192.465425][ T7688] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.476681][ T7688] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.598518][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 192.618674][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 192.660595][ T7718] gretap0: entered promiscuous mode [ 192.681545][ T7718] macsec1: entered promiscuous mode [ 192.703862][ T7718] macsec1: entered allmulticast mode [ 192.722365][ T7718] gretap0: entered allmulticast mode [ 192.976683][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 192.976700][ T28] audit: type=1804 audit(1759333417.692:45): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.570" name="/newroot/78/file0/file1" dev="loop5" ino=260 res=1 errno=0 [ 193.290739][ T6661] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 194.112241][ T7740] sctp: [Deprecated]: syz.0.586 (pid 7740) Use of int in max_burst socket option. [ 194.112241][ T7740] Use struct sctp_assoc_value instead [ 194.311057][ T7744] loop5: detected capacity change from 0 to 8192 [ 195.011614][ T6761] IPVS: starting estimator thread 0... [ 195.111873][ T7759] IPVS: using max 20 ests per chain, 48000 per kthread [ 195.535002][ T7752] loop5: detected capacity change from 0 to 40427 [ 195.560301][ T7752] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 195.571278][ T7752] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 195.600700][ T7752] F2FS-fs (loop5): invalid crc value [ 195.625346][ T7752] F2FS-fs (loop5): Found nat_bits in checkpoint [ 195.740725][ T7752] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 195.758493][ T7752] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 195.883765][ T7751] syz.5.592: attempt to access beyond end of device [ 195.883765][ T7751] loop5: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 195.928866][ T7752] syz.5.592: attempt to access beyond end of device [ 195.928866][ T7752] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 196.229899][ T7362] kworker/u4:16: attempt to access beyond end of device [ 196.229899][ T7362] loop5: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 196.778281][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.785129][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.117541][ T28] audit: type=1326 audit(1759333421.832:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df258eec9 code=0x7ffc0000 [ 197.167247][ T28] audit: type=1326 audit(1759333421.852:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df258eec9 code=0x7ffc0000 [ 197.237158][ T28] audit: type=1326 audit(1759333421.882:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9df258eec9 code=0x7ffc0000 [ 197.280634][ T28] audit: type=1326 audit(1759333421.882:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df258eec9 code=0x7ffc0000 [ 197.329021][ T28] audit: type=1326 audit(1759333421.882:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df258eec9 code=0x7ffc0000 [ 197.418117][ T28] audit: type=1326 audit(1759333421.882:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9df258eec9 code=0x7ffc0000 [ 197.493468][ T28] audit: type=1326 audit(1759333421.882:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df258eec9 code=0x7ffc0000 [ 197.528557][ T28] audit: type=1326 audit(1759333421.882:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df258eec9 code=0x7ffc0000 [ 197.578869][ T28] audit: type=1326 audit(1759333421.912:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9df258eec9 code=0x7ffc0000 [ 197.709141][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 198.871543][ T7798] netlink: 'syz.0.611': attribute type 2 has an invalid length. [ 199.321389][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 199.533547][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 199.549037][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 199.586313][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.601244][ T7831] netlink: 'syz.6.620': attribute type 2 has an invalid length. [ 199.612563][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.624676][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.6.620'. [ 199.645753][ T9] usb 6-1: config 0 descriptor?? [ 199.912403][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 199.919867][ T9] usbhid: probe of 6-1:0.0 failed with error -71 [ 199.964761][ T9] usb 6-1: USB disconnect, device number 4 [ 200.491207][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 200.681429][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 200.708710][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 200.746040][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 200.768371][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 200.798047][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.828946][ T9] usb 6-1: config 0 descriptor?? [ 200.853888][ T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 200.906202][ T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 202.501646][ T9] usb 6-1: USB disconnect, device number 5 [ 202.537099][ T9] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 203.745966][ T7921] loop6: detected capacity change from 0 to 1024 [ 203.828653][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 204.196660][ T7376] hfsplus: b-tree write err: -5, ino 3 [ 205.615938][ T7961] capability: warning: `syz.5.671' uses deprecated v2 capabilities in a way that may be insecure [ 206.796717][ T7990] netlink: 'syz.5.683': attribute type 1 has an invalid length. [ 206.808053][ T7990] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.683'. [ 208.232507][ T8040] netlink: 'syz.5.702': attribute type 10 has an invalid length. [ 208.250974][ T8040] netlink: 'syz.5.702': attribute type 10 has an invalid length. [ 208.261772][ T8040] netlink: 209216 bytes leftover after parsing attributes in process `syz.5.702'. [ 208.272915][ T8040] openvswitch: netlink: Message has 4 unknown bytes. [ 208.722504][ T8061] "syz.6.711" (8061) uses obsolete ecb(arc4) skcipher [ 209.191642][ T8080] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 209.355954][ T8080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.409647][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.472878][ T8085] bond1: (slave batadv1): making interface the new active one [ 209.485259][ T8085] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 209.524003][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 209.546146][ T8090] overlayfs: failed to clone upperpath [ 210.296040][ T8080] bond1 (unregistering): (slave batadv1): Releasing active interface [ 210.358265][ T8080] bond1 (unregistering): Released all slaves [ 210.531870][ T8118] netlink: 'syz.5.732': attribute type 10 has an invalid length. [ 210.611983][ T8118] team0: Port device dummy0 added [ 211.900453][ T8159] loop5: detected capacity change from 0 to 32768 [ 211.989755][ T8159] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 212.165664][ T8159] (syz.5.748,8159,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -14 [ 212.421843][ T6661] (syz-executor,6661,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 212.533355][ T6661] ocfs2: Unmounting device (7,5) on (node local) [ 213.865312][ T8220] netlink: 84 bytes leftover after parsing attributes in process `syz.0.772'. [ 214.359857][ T8231] netlink: 'syz.3.777': attribute type 10 has an invalid length. [ 214.421939][ T8231] team0: Port device dummy0 added [ 215.088866][ T8266] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 215.118809][ T8266] dummy0: entered promiscuous mode [ 215.141458][ T8266] team0: Port device dummy0 added [ 215.151350][ T6761] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 215.343477][ T6761] usb 6-1: Using ep0 maxpacket: 8 [ 215.353692][ T6761] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.365319][ T6761] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 215.375049][ T6761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.387101][ T6761] usb 6-1: config 0 descriptor?? [ 215.399361][ T6761] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 216.467967][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 216.478470][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 216.707027][ T8306] pim6reg: entered allmulticast mode [ 216.738322][ T8306] pim6reg: left allmulticast mode [ 216.844573][ T6761] gspca_vc032x: reg_w err -71 [ 216.864400][ T6761] vc032x: probe of 6-1:0.0 failed with error -71 [ 216.903319][ T8311] tipc: Started in network mode [ 216.911532][ T6761] usb 6-1: USB disconnect, device number 6 [ 216.922334][ T8311] tipc: Node identity fffffffa, cluster identity 4711 [ 216.939342][ T8311] tipc: Node number set to 4294967290 [ 217.549709][ T8330] netlink: 'syz.6.811': attribute type 10 has an invalid length. [ 217.611207][ T8330] team0: Port device dummy0 added [ 218.514860][ T8359] netlink: 84 bytes leftover after parsing attributes in process `syz.3.823'. [ 218.569976][ T8361] netlink: 'syz.5.824': attribute type 10 has an invalid length. [ 218.727693][ T8368] loop6: detected capacity change from 0 to 512 [ 218.757761][ T8368] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.828: casefold flag without casefold feature [ 218.810542][ T8368] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.828: couldn't read orphan inode 15 (err -117) [ 218.879676][ T8368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.128977][ T7003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.152047][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 219.313826][ T8388] loop6: detected capacity change from 0 to 512 [ 219.332179][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 219.338553][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 219.378492][ T8388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.391337][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 219.409695][ T9] usb 6-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 219.430274][ T9] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 219.440348][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 219.459511][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.548971][ T7003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.647076][ T8393] netlink: 84 bytes leftover after parsing attributes in process `syz.6.835'. [ 219.733292][ T9] usb 6-1: USB disconnect, device number 7 [ 221.281249][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 221.466192][ T23] usb 6-1: config 0 has no interfaces? [ 221.484551][ T23] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 221.494300][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.508111][ T23] usb 6-1: Product: syz [ 221.515753][ T23] usb 6-1: Manufacturer: syz [ 221.520471][ T23] usb 6-1: SerialNumber: syz [ 221.533828][ T23] usb 6-1: config 0 descriptor?? [ 221.778972][ T6761] usb 6-1: USB disconnect, device number 8 [ 222.821991][ T8431] team0: Port device team_slave_0 removed [ 223.817485][ T8463] netlink: 104 bytes leftover after parsing attributes in process `syz.5.865'. [ 224.062122][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.6.868'. [ 224.655271][ T8489] tipc: Started in network mode [ 224.660575][ T8489] tipc: Node identity 2, cluster identity 3142 [ 224.677433][ T8489] tipc: Node number set to 2 [ 224.690148][ T8489] tipc: Cannot configure node identity twice [ 225.636390][ T8509] tipc: Started in network mode [ 225.684273][ T8509] tipc: Node identity fffffffa, cluster identity 4711 [ 225.760778][ T8509] tipc: Node number set to 4294967290 [ 225.949492][ T8513] serio: Serial port ttyS3 [ 228.201434][ T8557] IPVS: Scheduler module ip_vs_sip not found [ 228.326044][ T8556] loop6: detected capacity change from 0 to 8192 [ 228.901482][ T8579] netlink: 'syz.6.910': attribute type 1 has an invalid length. [ 228.968661][ T8581] gretap1: entered allmulticast mode [ 228.979974][ T8581] bond1: (slave gretap1): making interface the new active one [ 228.989878][ T8581] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 229.512895][ T8591] serio: Serial port ttyS3 [ 230.160902][ T8605] netlink: 'syz.5.918': attribute type 39 has an invalid length. [ 230.307351][ T8607] loop6: detected capacity change from 0 to 512 [ 230.316092][ T8607] EXT4-fs: Ignoring removed oldalloc option [ 230.347173][ T8607] EXT4-fs (loop6): 1 truncate cleaned up [ 230.371942][ T8607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.709376][ T7003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.409529][ T8624] IPVS: Scheduler module ip_vs_sip not found [ 231.429282][ T8627] IPVS: length: 24 != 1272 [ 232.046928][ T8640] loop6: detected capacity change from 0 to 7 [ 232.057188][ T8640] Dev loop6: unable to read RDB block 7 [ 232.063288][ T8640] loop6: AHDI p1 p2 p3 [ 232.067732][ T8640] loop6: partition table partially beyond EOD, truncated [ 232.078696][ T8640] loop6: p1 start 926365495 is beyond EOD, truncated [ 232.086133][ T8640] loop6: p2 size 98 extends beyond EOD, truncated [ 232.365411][ T8643] loop6: detected capacity change from 0 to 4096 [ 232.381211][ T8643] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 234.325454][ T8695] syzkaller1: entered promiscuous mode [ 234.331706][ T8695] syzkaller1: entered allmulticast mode [ 234.639788][ T8706] netlink: 'syz.5.960': attribute type 4 has an invalid length. [ 234.797113][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 234.838961][ T8713] 8021q: adding VLAN 0 to HW filter on device team1 [ 235.397496][ T8743] overlayfs: failed to clone upperpath [ 235.593425][ T8749] overlayfs: failed to clone upperpath [ 236.050525][ T8770] netlink: 44 bytes leftover after parsing attributes in process `syz.3.987'. [ 236.811622][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.997'. [ 236.820832][ T8791] bridge_slave_1: left allmulticast mode [ 236.834532][ T8791] bridge_slave_1: left promiscuous mode [ 236.840515][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.866147][ T8791] bridge_slave_0: left allmulticast mode [ 236.886392][ T8791] bridge_slave_0: left promiscuous mode [ 236.931818][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.562881][ T8814] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 237.577216][ T8814] overlayfs: failed to set xattr on upper [ 237.591259][ T8814] overlayfs: ...falling back to redirect_dir=nofollow. [ 237.602033][ T8814] overlayfs: ...falling back to index=off. [ 237.613970][ T8814] overlayfs: ...falling back to uuid=null. [ 237.626449][ T8814] overlayfs: maximum fs stacking depth exceeded [ 238.230794][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 238.243241][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 238.631293][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 238.813276][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.813314][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 238.815837][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.815870][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.815891][ T9] usb 6-1: Product: syz [ 238.815907][ T9] usb 6-1: Manufacturer: syz [ 238.815922][ T9] usb 6-1: SerialNumber: syz [ 238.819796][ T8835] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 239.461657][ T8866] loop6: detected capacity change from 0 to 512 [ 239.469017][ T8866] EXT4-fs: Ignoring removed nobh option [ 239.501721][ T8866] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 239.698635][ T8866] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 239.876926][ T9] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 239.884900][ T9] cdc_ncm 6-1:1.0: setting tx_max = 16384 [ 240.315553][ T9] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 240.390741][ T9] usb 6-1: USB disconnect, device number 9 [ 240.414793][ T9] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 240.569550][ T8873] loop6: detected capacity change from 0 to 40427 [ 240.579975][ T8873] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 240.588211][ T8873] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 240.605901][ T8873] F2FS-fs (loop6): invalid crc value [ 240.622552][ T8873] F2FS-fs (loop6): Found nat_bits in checkpoint [ 240.666993][ T8873] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 240.679682][ T8873] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 240.706330][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 240.706347][ T28] audit: type=1800 audit(1759333465.422:65): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1028" name="file0" dev="loop6" ino=11 res=0 errno=0 [ 241.777531][ T8909] loop6: detected capacity change from 0 to 8192 [ 241.799619][ T8909] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.832491][ T8915] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 241.848008][ T8915] netlink: 'syz.0.1044': attribute type 2 has an invalid length. [ 241.898438][ T8915] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 241.924203][ T8915] netlink: 'syz.0.1044': attribute type 2 has an invalid length. [ 241.936965][ T8909] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 241.949440][ T8909] FAT-fs (loop6): Filesystem has been set read-only [ 241.959311][ T8909] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 241.970279][ T8909] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 242.634874][ T5833] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 242.841257][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 242.854249][ T5833] usb 6-1: config 0 has no interfaces? [ 242.873704][ T5833] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 242.891450][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.909897][ T5833] usb 6-1: Product: syz [ 242.914964][ T5833] usb 6-1: Manufacturer: syz [ 242.919732][ T5833] usb 6-1: SerialNumber: syz [ 242.942358][ T5833] usb 6-1: config 0 descriptor?? [ 243.219953][ T8935] tipc: Started in network mode [ 243.230974][ T8935] tipc: Node identity 7f000001, cluster identity 4711 [ 243.252646][ T8935] tipc: Enabled bearer , priority 10 [ 243.285832][ T5833] usb 6-1: USB disconnect, device number 10 [ 244.015959][ T8985] loop6: detected capacity change from 0 to 1024 [ 244.033293][ T8985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.046524][ T8985] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 244.061009][ T8985] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 244.077601][ T8985] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 244.094270][ T8985] EXT4-fs error (device loop6): ext4_get_journal_inode:5807: comm syz.6.1070: inode #1: comm syz.6.1070: iget: illegal inode # [ 244.115391][ T8985] EXT4-fs (loop6): no journal found [ 244.247840][ T5833] tipc: Node number set to 2130706433 [ 245.043268][ T9023] overlayfs: failed to clone upperpath [ 245.439602][ T9029] loop5: detected capacity change from 0 to 8192 [ 247.063683][ T7359] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.279763][ T9071] gtp0: entered promiscuous mode [ 247.534910][ T9078] netlink: 372 bytes leftover after parsing attributes in process `syz.6.1109'. [ 248.261827][ T5833] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 248.471137][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 248.492734][ T5833] usb 7-1: config 0 has no interfaces? [ 248.501561][ T5833] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 248.510998][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.531230][ T5833] usb 7-1: Product: syz [ 248.535533][ T5833] usb 7-1: Manufacturer: syz [ 248.540273][ T5833] usb 7-1: SerialNumber: syz [ 248.568234][ T5833] usb 7-1: config 0 descriptor?? [ 248.802418][ T9088] tipc: Enabled bearer , priority 10 [ 248.817240][ T9] usb 7-1: USB disconnect, device number 4 [ 248.855969][ T9099] loop5: detected capacity change from 0 to 32768 [ 248.874228][ T9099] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 248.913132][ T9099] XFS (loop5): Ending clean mount [ 248.930891][ T9099] XFS (loop5): Quotacheck needed: Please wait. [ 248.997840][ T9099] XFS (loop5): Quotacheck: Done. [ 249.128092][ T6661] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.073812][ T28] audit: type=1326 audit(1759333474.792:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.106597][ T9147] tipc: Enabled bearer , priority 10 [ 250.117917][ T28] audit: type=1326 audit(1759333474.822:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.150722][ T28] audit: type=1326 audit(1759333474.822:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.176416][ T28] audit: type=1326 audit(1759333474.822:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.203445][ T28] audit: type=1326 audit(1759333474.822:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.226474][ T28] audit: type=1326 audit(1759333474.822:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.258777][ T28] audit: type=1326 audit(1759333474.832:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.282216][ T28] audit: type=1326 audit(1759333474.832:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.306254][ T28] audit: type=1326 audit(1759333474.832:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.362515][ T28] audit: type=1326 audit(1759333474.832:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 250.508270][ T9144] loop5: detected capacity change from 0 to 32768 [ 250.524923][ T9144] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 250.591340][ T9144] XFS (loop5): Ending clean mount [ 250.760725][ T9166] geneve2: entered promiscuous mode [ 250.851325][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.951581][ T6661] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 252.111175][ T5833] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 252.317083][ T5833] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.335240][ T5833] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 252.353911][ T5833] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.364564][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.374180][ T5833] usb 7-1: Product: syz [ 252.379019][ T5833] usb 7-1: Manufacturer: syz [ 252.384624][ T5833] usb 7-1: SerialNumber: syz [ 252.393824][ T9200] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 253.451392][ T5833] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 253.458808][ T5833] cdc_ncm 7-1:1.0: setting tx_max = 16384 [ 253.872385][ T5833] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 253.890657][ T5833] usb 7-1: USB disconnect, device number 5 [ 253.899484][ T5833] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 258.219032][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.221766][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.241217][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.852993][ T9310] overlayfs: failed to clone upperpath [ 259.468491][ T9323] bond_slave_1: entered promiscuous mode [ 259.502700][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 259.633120][ T9323] bond_slave_1 (unregistering): left promiscuous mode [ 260.257850][ T9339] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 261.259983][ T9370] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 261.329675][ T9372] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1222'. [ 261.542743][ T9378] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1225'. [ 261.558508][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1225'. [ 261.821296][ T968] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 262.060522][ T968] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.097191][ T968] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.117038][ T968] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.146978][ T968] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 262.161875][ T968] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 262.176173][ T968] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.196662][ T968] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.208211][ T968] usb 7-1: Product: syz [ 262.231391][ T968] usb 7-1: Manufacturer: syz [ 262.251358][ T968] cdc_wdm 7-1:1.0: skipping garbage [ 262.256939][ T968] cdc_wdm 7-1:1.0: skipping garbage [ 262.293538][ T968] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 262.300199][ T968] cdc_wdm 7-1:1.0: Unknown control protocol [ 262.438609][ T9405] kvm: user requested TSC rate below hardware speed [ 262.457996][ T9405] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 262.522145][ T5833] usb 7-1: USB disconnect, device number 6 [ 262.689339][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 262.838393][ T9421] loop5: detected capacity change from 0 to 1024 [ 263.321828][ T7376] hfsplus: b-tree write err: -5, ino 4 [ 263.395529][ T9434] bond_slave_0: entered promiscuous mode [ 263.402099][ T9434] bond_slave_1: entered promiscuous mode [ 263.422418][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 263.422445][ T28] audit: type=1326 audit(1759333488.122:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 263.461711][ T9434] macvlan2: entered promiscuous mode [ 263.473451][ T9434] bond0: entered promiscuous mode [ 263.487427][ T28] audit: type=1326 audit(1759333488.122:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 263.490110][ T9434] macvlan2: entered allmulticast mode [ 263.550151][ T9434] bond0: entered allmulticast mode [ 263.562734][ T9434] bond_slave_0: entered allmulticast mode [ 263.573911][ T28] audit: type=1326 audit(1759333488.132:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 263.574764][ T9434] bond_slave_1: entered allmulticast mode [ 263.629862][ T28] audit: type=1326 audit(1759333488.132:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 263.668627][ T9434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 263.680479][ T9434] bond0: left allmulticast mode [ 263.686774][ T9434] bond_slave_0: left allmulticast mode [ 263.692815][ T9434] bond_slave_1: left allmulticast mode [ 263.699101][ T9434] bond0: left promiscuous mode [ 263.709914][ T9434] bond_slave_0: left promiscuous mode [ 263.715553][ T9434] bond_slave_1: left promiscuous mode [ 264.059776][ T9447] loop6: detected capacity change from 0 to 256 [ 264.086593][ T28] audit: type=1800 audit(1759333488.792:85): pid=9447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1254" name="file0" dev="loop6" ino=1048609 res=0 errno=0 [ 264.899275][ T9466] loop5: detected capacity change from 0 to 128 [ 265.421256][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 265.673809][ T9494] loop6: detected capacity change from 0 to 128 [ 265.681542][ T9494] ext4: Unknown parameter 'obj_user' [ 265.742567][ T9494] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1276'. [ 266.265371][ T9516] netlink: 'syz.3.1287': attribute type 4 has an invalid length. [ 266.336968][ T9521] netlink: 'syz.3.1287': attribute type 4 has an invalid length. [ 267.002394][ T28] audit: type=1326 audit(1759333491.712:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 267.049181][ T28] audit: type=1326 audit(1759333491.722:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 267.113301][ T28] audit: type=1326 audit(1759333491.742:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 267.174148][ T28] audit: type=1326 audit(1759333491.742:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 267.241197][ T28] audit: type=1326 audit(1759333491.742:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d38eec9 code=0x7ffc0000 [ 267.775674][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.786181][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.797225][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.806121][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.821155][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.829212][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.038575][ T9544] chnl_net:caif_netlink_parms(): no params data found [ 268.125035][ T9544] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.134037][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.141727][ T9544] bridge_slave_0: entered allmulticast mode [ 268.149051][ T9544] bridge_slave_0: entered promiscuous mode [ 268.158703][ T9544] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.166314][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.173802][ T9544] bridge_slave_1: entered allmulticast mode [ 268.182160][ T9544] bridge_slave_1: entered promiscuous mode [ 268.217576][ T9544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.231115][ T9544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.271423][ T9544] team0: Port device team_slave_0 added [ 268.281233][ T9544] team0: Port device team_slave_1 added [ 268.317898][ T9544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.325755][ T9544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.353327][ T9544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.367590][ T9544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.375002][ T9544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.401804][ T9544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.460364][ T9544] hsr_slave_0: entered promiscuous mode [ 268.467686][ T9544] hsr_slave_1: entered promiscuous mode [ 268.475730][ T9544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.483579][ T9544] Cannot create hsr debugfs directory [ 268.674761][ T9544] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 268.685362][ T9544] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 268.696583][ T9544] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 268.708355][ T9544] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 268.751950][ T9544] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.759262][ T9544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.766937][ T9544] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.774188][ T9544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.852068][ T9544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.874376][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.883407][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.907640][ T9544] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.926698][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.933965][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.950417][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.957795][ T7385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.217227][ T9544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.490176][ T9544] veth0_vlan: entered promiscuous mode [ 269.505797][ T9544] veth1_vlan: entered promiscuous mode [ 269.550787][ T9544] veth0_macvtap: entered promiscuous mode [ 269.563197][ T9544] veth1_macvtap: entered promiscuous mode [ 269.587139][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.598573][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.609455][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.619993][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.633163][ T9544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.655158][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.666165][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.677275][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.689372][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.705330][ T9544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.719241][ T9544] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.728420][ T9544] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.738308][ T9544] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.747226][ T9544] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.866082][ T7359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.879909][ T7359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.891703][ T50] Bluetooth: hci0: command tx timeout [ 269.920727][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.929789][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.121425][ T9572] loop7: detected capacity change from 0 to 4096 [ 271.971398][ T50] Bluetooth: hci0: command tx timeout [ 272.291370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.579129][ T9635] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 272.612086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 272.618116][ T9635] netlink: 'syz.0.1325': attribute type 4 has an invalid length. [ 272.640124][ T9635] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1325'. [ 273.031558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 274.005277][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1329'. [ 274.051384][ T50] Bluetooth: hci0: command tx timeout [ 274.198676][ T9644] loop7: detected capacity change from 0 to 32768 [ 274.312933][ T9644] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.552533][ T9644] XFS (loop7): Ending clean mount [ 274.585779][ T9644] XFS (loop7): Quotacheck needed: Please wait. [ 274.664204][ T9644] XFS (loop7): Quotacheck: Done. [ 274.751438][ T5778] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 274.945142][ T5778] usb 7-1: unable to get BOS descriptor or descriptor too short [ 274.961937][ T5778] usb 7-1: not running at top speed; connect to a high speed hub [ 274.977500][ T5778] usb 7-1: config 225 has an invalid interface number: 249 but max is 0 [ 274.991211][ T5778] usb 7-1: config 225 has no interface number 0 [ 275.007829][ T5778] usb 7-1: config 225 interface 249 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 275.008887][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 275.041196][ T5778] usb 7-1: config 225 interface 249 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 275.055015][ T9665] netlink: 'syz.0.1334': attribute type 15 has an invalid length. [ 275.063377][ T9665] netlink: 'syz.0.1334': attribute type 18 has an invalid length. [ 275.078223][ T5778] usb 7-1: config 225 interface 249 has no altsetting 0 [ 275.082562][ T9544] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.100813][ T5778] usb 7-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 275.119994][ T5778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.128610][ T5778] usb 7-1: Product: syz [ 275.133512][ T5778] usb 7-1: Manufacturer: syz [ 275.146029][ T5778] usb 7-1: SerialNumber: syz [ 275.393094][ T5778] usb-storage 7-1:225.249: USB Mass Storage device detected [ 275.427149][ T5778] usb-storage 7-1:225.249: Quirks match for vid 0781 pid 0001: 1 [ 275.502945][ T5778] usb 7-1: USB disconnect, device number 7 [ 276.131468][ T50] Bluetooth: hci0: command tx timeout [ 301.092110][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.611234][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.221188][ C0] ------------[ cut here ]------------ [ 386.229554][ C0] WARNING: CPU: 0 PID: 9668 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 386.240143][ C0] Modules linked in: [ 386.244066][ C0] CPU: 0 PID: 9668 Comm: syz.0.1336 Not tainted syzkaller #0 [ 386.251544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.261958][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 386.268964][ C0] Code: ff ff ff 48 c7 c7 a0 f4 ee 96 be 04 00 00 00 e8 ba ac 6c 00 48 89 df b8 01 00 00 00 87 05 ac bc 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 50 d3 8c 74 47 48 c7 c0 9c b4 4a 8e 48 c1 e8 03 [ 386.289232][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 386.295328][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35080 RCX: ffffffff817037e6 [ 386.303326][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35080 [ 386.311326][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 386.319520][ C0] R10: dffffc0000000000 R11: fffffbfff2ddde94 R12: 0000000000002904 [ 386.327789][ C0] R13: 1ffff110171c7a22 R14: 0000000000000a02 R15: dffffc0000000000 [ 386.336169][ C0] FS: 000055557b824500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 386.345284][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.352136][ C0] CR2: 0000200000baf030 CR3: 000000002e802000 CR4: 00000000003506f0 [ 386.360332][ C0] Call Trace: [ 386.363743][ C0] [ 386.366727][ C0] rcu_core+0x612/0x1720 [ 386.370998][ C0] ? ktime_get+0x7f/0x280 [ 386.375354][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 386.380736][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 386.386146][ C0] ? sched_clock+0x3f/0x60 [ 386.390608][ C0] ? sched_clock_cpu+0x75/0x430 [ 386.395913][ C0] ? ktime_get+0x7f/0x280 [ 386.400573][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 386.406771][ C0] ? lock_chain_count+0x20/0x20 [ 386.411784][ C0] handle_softirqs+0x280/0x820 [ 386.416791][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 386.422280][ C0] ? do_softirq+0x180/0x180 [ 386.426917][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 386.432289][ C0] __irq_exit_rcu+0xc7/0x190 [ 386.437015][ C0] ? irq_exit_rcu+0x20/0x20 [ 386.441765][ C0] irq_exit_rcu+0x9/0x20 [ 386.446499][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 386.452370][ C0] [ 386.455455][ C0] [ 386.458465][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.464477][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 386.470298][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a 90 ef f6 48 89 df e8 22 62 f0 f6 e8 6d 08 14 f7 fb bf 01 00 00 00 32 79 e3 f6 65 8b 05 43 c5 8b 75 85 c0 74 02 5b c3 e8 60 a9 88 [ 386.490003][ C0] RSP: 0018:ffffc90002eb7d40 EFLAGS: 00000286 [ 386.496430][ C0] RAX: 40907d14a1d3cb00 RBX: ffff88807adf8940 RCX: 40907d14a1d3cb00 [ 386.504503][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaabca0 RDI: 0000000000000001 [ 386.512582][ C0] RBP: 0000000000000000 R08: ffffffff8e4a7fef R09: 1ffffffff1c94ffd [ 386.521188][ C0] R10: dffffc0000000000 R11: fffffbfff1c94ffe R12: 0000000000000000 [ 386.529298][ C0] R13: 0000000100010000 R14: ffff88802c031e00 R15: 0000000000000010 [ 386.537483][ C0] signal_setup_done+0x189/0x310 [ 386.542703][ C0] arch_do_signal_or_restart+0x492/0x780 [ 386.548452][ C0] ? get_sigframe_size+0x20/0x20 [ 386.553513][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 386.558992][ C0] exit_to_user_mode_loop+0x70/0x110 [ 386.564344][ C0] exit_to_user_mode_prepare+0xf6/0x180 [ 386.570325][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 386.576046][ C0] do_syscall_64+0x61/0xb0 [ 386.580750][ C0] ? clear_bhb_loop+0x40/0x90 [ 386.585535][ C0] ? clear_bhb_loop+0x40/0x90 [ 386.590571][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.597216][ C0] RIP: 0033:0x7f360d24d9b0 [ 386.601928][ C0] Code: 44 24 20 0f 29 44 24 30 0f 29 44 24 40 48 8b 44 24 08 ff d0 48 83 c4 50 31 c0 5b 5d 41 5c 41 5d 41 5e c3 0f 1f 80 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f [ 386.622064][ C0] RSP: 002b:00007ffcf3eaabb8 EFLAGS: 00000206 [ 386.628343][ C0] RAX: 0000000000000000 RBX: 00007ffcf3eab2b0 RCX: 00007f360d385d67 [ 386.636618][ C0] RDX: 00007ffcf3eaabc0 RSI: 00007ffcf3eaacf0 RDI: 0000000000000011 [ 386.644804][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000745d1e [ 386.653141][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000004386b [ 386.661501][ C0] R13: 00007f360d5e6180 R14: ffffffffffffffff R15: 00007ffcf3eab8b0 [ 386.669705][ C0] [ 386.672856][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 386.680431][ C0] CPU: 0 PID: 9668 Comm: syz.0.1336 Not tainted syzkaller #0 [ 386.687982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.698294][ C0] Call Trace: [ 386.701607][ C0] [ 386.704591][ C0] dump_stack_lvl+0x16c/0x230 [ 386.709329][ C0] ? show_regs_print_info+0x20/0x20 [ 386.714746][ C0] ? load_image+0x3b0/0x3b0 [ 386.719269][ C0] panic+0x2c0/0x710 [ 386.723184][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 386.727751][ C0] __warn+0x2e0/0x470 [ 386.731862][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 386.737641][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 386.743718][ C0] report_bug+0x2be/0x4f0 [ 386.748167][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 386.754172][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 386.760110][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 386.766036][ C0] handle_bug+0xcf/0x120 [ 386.770546][ C0] exc_invalid_op+0x1a/0x50 [ 386.775131][ C0] asm_exc_invalid_op+0x1a/0x20 [ 386.780033][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 386.786478][ C0] Code: ff ff ff 48 c7 c7 a0 f4 ee 96 be 04 00 00 00 e8 ba ac 6c 00 48 89 df b8 01 00 00 00 87 05 ac bc 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 50 d3 8c 74 47 48 c7 c0 9c b4 4a 8e 48 c1 e8 03 [ 386.806483][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 386.812609][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35080 RCX: ffffffff817037e6 [ 386.820709][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35080 [ 386.828871][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 386.836943][ C0] R10: dffffc0000000000 R11: fffffbfff2ddde94 R12: 0000000000002904 [ 386.845109][ C0] R13: 1ffff110171c7a22 R14: 0000000000000a02 R15: dffffc0000000000 [ 386.853135][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 386.858912][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 386.864705][ C0] rcu_core+0x612/0x1720 [ 386.868981][ C0] ? ktime_get+0x7f/0x280 [ 386.873323][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 386.878620][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 386.884067][ C0] ? sched_clock+0x3f/0x60 [ 386.888494][ C0] ? sched_clock_cpu+0x75/0x430 [ 386.893372][ C0] ? ktime_get+0x7f/0x280 [ 386.897839][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 386.903977][ C0] ? lock_chain_count+0x20/0x20 [ 386.908997][ C0] handle_softirqs+0x280/0x820 [ 386.913783][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 386.918737][ C0] ? do_softirq+0x180/0x180 [ 386.923351][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 386.929099][ C0] __irq_exit_rcu+0xc7/0x190 [ 386.933797][ C0] ? irq_exit_rcu+0x20/0x20 [ 386.938339][ C0] irq_exit_rcu+0x9/0x20 [ 386.942679][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 386.948846][ C0] [ 386.952337][ C0] [ 386.955531][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.961645][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 386.967501][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a 90 ef f6 48 89 df e8 22 62 f0 f6 e8 6d 08 14 f7 fb bf 01 00 00 00 32 79 e3 f6 65 8b 05 43 c5 8b 75 85 c0 74 02 5b c3 e8 60 a9 88 [ 386.987597][ C0] RSP: 0018:ffffc90002eb7d40 EFLAGS: 00000286 [ 386.993777][ C0] RAX: 40907d14a1d3cb00 RBX: ffff88807adf8940 RCX: 40907d14a1d3cb00 [ 387.001869][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaabca0 RDI: 0000000000000001 [ 387.010135][ C0] RBP: 0000000000000000 R08: ffffffff8e4a7fef R09: 1ffffffff1c94ffd [ 387.018358][ C0] R10: dffffc0000000000 R11: fffffbfff1c94ffe R12: 0000000000000000 [ 387.026460][ C0] R13: 0000000100010000 R14: ffff88802c031e00 R15: 0000000000000010 [ 387.034582][ C0] signal_setup_done+0x189/0x310 [ 387.039934][ C0] arch_do_signal_or_restart+0x492/0x780 [ 387.045625][ C0] ? get_sigframe_size+0x20/0x20 [ 387.050604][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 387.056150][ C0] exit_to_user_mode_loop+0x70/0x110 [ 387.061717][ C0] exit_to_user_mode_prepare+0xf6/0x180 [ 387.067435][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 387.072967][ C0] do_syscall_64+0x61/0xb0 [ 387.077491][ C0] ? clear_bhb_loop+0x40/0x90 [ 387.082213][ C0] ? clear_bhb_loop+0x40/0x90 [ 387.086937][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.092969][ C0] RIP: 0033:0x7f360d24d9b0 [ 387.097464][ C0] Code: 44 24 20 0f 29 44 24 30 0f 29 44 24 40 48 8b 44 24 08 ff d0 48 83 c4 50 31 c0 5b 5d 41 5c 41 5d 41 5e c3 0f 1f 80 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f [ 387.117103][ C0] RSP: 002b:00007ffcf3eaabb8 EFLAGS: 00000206 [ 387.123472][ C0] RAX: 0000000000000000 RBX: 00007ffcf3eab2b0 RCX: 00007f360d385d67 [ 387.131695][ C0] RDX: 00007ffcf3eaabc0 RSI: 00007ffcf3eaacf0 RDI: 0000000000000011 [ 387.139703][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000745d1e [ 387.147697][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000004386b [ 387.155695][ C0] R13: 00007f360d5e6180 R14: ffffffffffffffff R15: 00007ffcf3eab8b0 [ 387.163726][ C0] [ 388.314126][ C0] Shutting down cpus with NMI [ 388.319257][ C0] Kernel Offset: disabled [ 388.325010][ C0] Rebooting in 86400 seconds..