last executing test programs: 12m37.280043646s ago: executing program 0 (id=272): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@bridge_getneigh={0x44, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x14e, 0x80000001, 0x88a8}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 12m36.190862849s ago: executing program 0 (id=278): timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r1, r2+60000000}, {0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180), &(0x7f00000012c0)) 12m35.477105626s ago: executing program 0 (id=280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44010) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @empty, 0xe5}, 0x1c) 12m34.589696471s ago: executing program 0 (id=284): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$eJzs3dFrLFcZAPBvJtmb5N7UpOqDFqzFVm6qdpM03jb4UBXEt4JS8fW6JpsQssmWZNPehGJT/AMEES34ok++CP4BgvTFdxEK+i4qitRbfVBoOzK7sybZu5uk3N0dSH4/OHfnzMzO953duyfn7Aw7AVxbT0TEQkRMRMTTETFXrE+LEsedku/37v3X1vKSRJa99E4SSbGue6yp4vFW8bQonv/d5MG4+4dH27VGo75X1BdbO8l7WXb0zNZObbO+Wd9dWVl+bvX51TurS0Np53xEvPC1v/74B7/4+gu/+cKrf7r794Xv5Wn9N8tej552DFOn6ZWYPrVuMiL2RhGsJJPtFnbcKTkXAADOl4/3PxoRn2mP/+dioj2aAwAAAK6S7Muz8V4SkQEAAABXVhoRs5Gk1eJ639lI02q1cw3vx+Nm2mjutz6/0TzYXc+3RcxHJd3YatSXimsH5qOS5PXl4hrbbv3ZnvpKRDwaET+am2nXq2vNxnrZX34AAADANXGrZ/7/77nO/L/tuOTkAAAAgOGZLzsBAAAAYOTM/wEAAODqM/8HAACAK+0bL76Yl6x7/+v1Vw4PtpuvPLNe39+u7hysVdeaey9XN5vNzUa9uja9c9HxGs3my1+M3YN7i636fmtx//Do7k7zYLd1d+vMLbABAACAMXr002/9MYmI4y/NtEvuRrGtEpFNnN55sowMgVFJP8zOfxldHsD4nf77PlNiHsD4GdLD9VUpOwGgdMkF2zsX7/QZLfxuNPkAAADDd/uTg8//v7NRamrAiBXn/5OL5v/A1TNxmZ2mRp8HMH6d838fZB1lZwOMU+W8EYBJAVx56aXP//dxcv7/gksJEx0KAACUbLZdkrRazANmI02r1YhH2rcFqCQbW436UkR8JCL+MFeZyuvL7WcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcElZlkQGAAAAXGkR6d+6d+a6PffUbO/3AzeS/8y1HyPi1Z++9JN7tVZrbzlf/8//r2+9Wax/toxvMAAAAIBe3Xl6dx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMP07v3X1rplnHH/8dWImI+YOZVHZ2kyptuP01GJiJv/SmLy1POSiJgYQvzjNyLiE/3an+RpxXyRxZn4NyLSOMn5oeP3ff3PiR+d+LeGEB+us7fy/ucr/T5/aTzRfuz/+ZssysPq9n/94nf7v4kB/d8jgw5aOVt97O1fLQ6M/0bEY5P9+59u/CQ/Xp/4T16yjd/51tHRoG3ZzyNu9+v/krOxFrud7dZObbO+Wd9dWVl+bvX51TurS4sbW4168W/fGD/81K8/OKm9/0D7b57T/7bbP+D1f+qcNk+dWn7/7Xv3P9ZZ7HlnohI/y7KFJ/u//22fezB+92/fZ4u98nr+GqZvfrtvLo//8vePD8ozb//6gPZPX9D+hXPaf9rT3/z+ny+5KwAwBvuHR9u1RqO+Z6HkhaQY8T7McbrfiIw+53zcWfYrVk8iie1aYyrObKqVn1hn4fXi3ag1up+2IR35t8V/lVEmP+6OCAAAGLmTQX/vlpMTMM4zAwAAAAAAAAAAAAAAAAAAwGhd+DNggzalEXHJnxPrjXlcTlMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM71vwAAAP//7pvFXQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') lstat(&(0x7f0000005a00)='./file2\x00', 0x0) 12m32.838313547s ago: executing program 0 (id=291): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000000), 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0x2, 0x4e27, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="862ddfae000000020000000000000074c07ab1c6de0dc945", 0x18}], 0x1}}], 0x1, 0x8004) 12m31.712518294s ago: executing program 0 (id=295): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 12m29.616915938s ago: executing program 32 (id=295): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 7m0.6135784s ago: executing program 4 (id=1462): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) 6m58.732339544s ago: executing program 4 (id=1469): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x0) getdents64(r0, 0x0, 0x0) 6m57.305491947s ago: executing program 4 (id=1472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r0) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) 6m55.845498565s ago: executing program 4 (id=1478): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) 6m54.122062743s ago: executing program 4 (id=1482): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 6m52.637714205s ago: executing program 4 (id=1488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x38, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) 6m49.944144134s ago: executing program 33 (id=1488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x38, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) 4m56.874476119s ago: executing program 6 (id=1757): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 4m55.806142394s ago: executing program 6 (id=1762): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 4m54.610907245s ago: executing program 6 (id=1767): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) 4m53.557715635s ago: executing program 6 (id=1772): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x50f, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) 4m51.786936514s ago: executing program 6 (id=1776): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P'], 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 4m50.45919018s ago: executing program 6 (id=1780): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x5, 0x0, 0xe3]}}, 0x5c) 4m34.954297541s ago: executing program 34 (id=1780): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x5, 0x0, 0xe3]}}, 0x5c) 4m26.174421009s ago: executing program 3 (id=1851): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x40, 0x10, 0xcf1}}}}]}, 0x44}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 4m23.70684726s ago: executing program 3 (id=1858): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$setpipe(r0, 0x407, 0x9602) 4m22.753042949s ago: executing program 3 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x1800}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffc83, 0x7, 0x8000}]}}]}, 0x48}}, 0x0) 4m19.948510875s ago: executing program 3 (id=1869): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 4m17.336513302s ago: executing program 3 (id=1877): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x254081, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 4m15.770605338s ago: executing program 3 (id=1879): socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020600) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000000400)=""/73, 0x49}], 0x1, 0x0, 0x0) 4m12.893381946s ago: executing program 35 (id=1879): socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020600) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000000400)=""/73, 0x49}], 0x1, 0x0, 0x0) 1m25.08406363s ago: executing program 8 (id=2373): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m23.569207704s ago: executing program 8 (id=2378): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000380)={0x0, 0x2, [{r1, 0x0, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000, 0x2000}]}) 1m22.575345524s ago: executing program 8 (id=2384): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20) 1m21.343590207s ago: executing program 8 (id=2388): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 1m20.395943792s ago: executing program 8 (id=2393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) 1m18.467473055s ago: executing program 8 (id=2401): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000002300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_lock}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x1ea}}, {@jqfmt_vfsold}, {@nolazytime}, {@noinit_itable, 0x2e}, {@journal_async_commit}, {@resuid}, {@nogrpid}, {@grpid}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_user={'obj_user', 0x3d, 'dioread_lock'}}, {@subj_type={'subj_type', 0x3d, '(:^.a\'\']]'}}], 0x2c}, 0x84, 0x506, &(0x7f0000003300)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0gLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerJmJh48qIXTdSoFzVe9W5IiMEDqImpmd2Zdttut7NtocJ+Psm2z/PMs/PMd2ae2Zl9ZieAltWX/UkiuiPil4joqWbnVuir/rt+9fzon1fPjyYxPf3870ml3rWr50eLqsX7NuaZ/jQifSuJnXXanTh77sTI+PjYmTw/OHny1cGJs+cePn5y5NjYsbFTw4cOHdg/9OgjwwdLxXFhielZXNd2vHF61/bDL777zOh0vPTdx9nydufTa+Oo6i3VbiN90RfTudnSjsrf+1c89/+WTRHRmaeTdWu8MJTWFhHZ5mqv9P+eaIvZjdcTT785k/lqjRYQuGGyz6YtC0rb8v/pzOcXcDtK9HFoUcUnfnb9W7xu5vnHWrvyRPZ3rBL/9fz1w7PVdZNm17K91Sv2tkXe//86ZV2zyemeJdrvjogjU3+9l72i7vcQDSSlawIAzPgiO/95qN75Xzrn3GZzPobSGxF7I2JrRPwvIrZFOlPnjoi4s8n2++blF57//LS+yVk2JTv/eywf2ype1SlFXMlMblMl/vbk5ePjY/vyddIf7Z1ZfqhBG18+9fM7i03rqzn/y15Z+8W5YL4cl9d1zn3P0ZHJkRWEPMeVi5HEunrxJzMjAdka2B4RO/J8MxskW2fHH/xoV5bevHHh9KXjb2AVxpmmP4h4oLr9p2Je/IWk2lK98ck/Lg8fHOyK8bF9g8VesdD3P156rjbfXpOeE39XuZi6lhtsHVcuRmyou//n8RfdoBivncjzX3eXbuPSr28XfXpBdAu3fxJHpmpr5Pv/+tnVlu3/HckLlXRHXvb6yOTkmaGIz/OCOeXDs3Mr8kX9LP7+PXPjr14Xp9kx7p/38/ftjIhsJ74rIu6OiN35st8TEfdGxJ4G8X/75H2vNF5Dy9z/V0EW/9FG2z+iN6kdr19Gou3EN58t1n6549+BSqo/L6k9/nUsMt9SC9jVObHS9QcAAAC3grQyBp2kAzX3bxe2xYZ0/PTE5N6+eO3U0epYdW+0p8U3XT0134cO5d8NF/nhefn9EbGlcqfR+kp+YPT0+KY1ihmo2ljT/6vHgjQdGKhO+22xm16A20dT42i1N5198unqLwxwU/m9JrQu/R9al/4PrUv/h9ZVr/9fiLi+BosC3GTL/fyff8MAcMvxGAloYa7/oXXp/9CSFv42Pn+6R3ZMWP5P/se3Hl7JEwNWI9HWsM50z/LnHItPmmp+hm3lKhdPvyg953KVs2u/vCRtEFedRKSzJX/nT5OslLRX63TUa/3Dso9muMGJdMk6jy+1NtqbeiZGV521sTtPdEZE2flcKL8DrDBRHCESXw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3tH8DAAD//7tt5is=") 1m15.375695445s ago: executing program 36 (id=2401): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000002300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_lock}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x1ea}}, {@jqfmt_vfsold}, {@nolazytime}, {@noinit_itable, 0x2e}, {@journal_async_commit}, {@resuid}, {@nogrpid}, {@grpid}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_user={'obj_user', 0x3d, 'dioread_lock'}}, {@subj_type={'subj_type', 0x3d, '(:^.a\'\']]'}}], 0x2c}, 0x84, 0x506, &(0x7f0000003300)="$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") 11.723193159s ago: executing program 5 (id=2578): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 10.60472192s ago: executing program 5 (id=2583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 9.732036092s ago: executing program 5 (id=2588): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\trrm'], 0xa) 8.714124113s ago: executing program 5 (id=2592): r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x7f) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 8.301034877s ago: executing program 1 (id=2595): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 7.731429461s ago: executing program 2 (id=2597): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x2008010, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0xc32, &(0x7f000001fd40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) getdents(r0, 0x0, 0x0) fsync(r0) 7.355514824s ago: executing program 7 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000000800034000000001"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 6.403464779s ago: executing program 1 (id=2599): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@deltaction={0x25c, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x4f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.965079378s ago: executing program 2 (id=2600): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/213, 0xd5}], 0x1, 0x3a, 0x5) 5.888975979s ago: executing program 7 (id=2601): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5.798701241s ago: executing program 5 (id=2602): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) 4.784293872s ago: executing program 9 (id=2603): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) 4.738515571s ago: executing program 2 (id=2604): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x4048820) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4.709935259s ago: executing program 7 (id=2605): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f0000000480)=""/61, 0x3d, 0x5) pread64(r0, &(0x7f00000000c0)=""/149, 0x95, 0x180f) 4.645363616s ago: executing program 1 (id=2606): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) write$UHID_INPUT(r0, &(0x7f0000001d00)={0x8, {"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", 0x1000}}, 0x1006) 4.070016875s ago: executing program 9 (id=2607): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x2, 0x1, 0x7, 0xffff, 0x1, 0x5}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.599594226s ago: executing program 7 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 3.557003564s ago: executing program 2 (id=2609): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x260840, 0x2c4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 3.427898096s ago: executing program 1 (id=2610): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1ff}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.108674321s ago: executing program 9 (id=2611): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='P'], 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0xffffffff, 0x0, 0x0, 0x800, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xa6a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x0, 0x0, 0x2, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 2.689906773s ago: executing program 2 (id=2612): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r0, 0x2007ffb) 2.57950264s ago: executing program 7 (id=2613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.301266868s ago: executing program 9 (id=2614): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6f, r1}) 1.818568373s ago: executing program 1 (id=2615): syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r0, 0xc76ed000) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.3387742s ago: executing program 9 (id=2616): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file5\x00', 0x200, 0xfffff801) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x4a20, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x2) 739.687558ms ago: executing program 2 (id=2617): r0 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x400, 0x1000000}) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) 694.648779ms ago: executing program 7 (id=2618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x121881, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) 435.865144ms ago: executing program 1 (id=2619): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="29c726bd7000fedbc8251900000008000300", @ANYRES64=r2], 0x1c}}, 0x0) 181.79081ms ago: executing program 9 (id=2620): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x7, 0x4) 0s ago: executing program 5 (id=2621): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x1, 0xdb9, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f0000000540)={@desc={0x1, 0x0, @desc4}}) kernel console output (not intermixed with test programs): ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 746.553835][T10328] loop2: detected capacity change from 0 to 256 [ 746.740013][T10328] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 746.801357][T10316] ntfs3(loop3): ino=1f, "file2" ni_find_attr [ 747.143044][T10314] loop5: detected capacity change from 0 to 4096 [ 747.374378][T10314] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 748.019711][T10314] ntfs3(loop5): Failed to read $UpCase (-4). [ 749.172273][T10344] loop3: detected capacity change from 0 to 512 [ 749.464772][T10344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.501044][T10348] loop6: detected capacity change from 0 to 256 [ 749.518177][T10344] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.307468][ T5575] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.113861][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1718'. [ 752.131694][T10376] loop6: detected capacity change from 0 to 512 [ 752.367510][T10385] gre0: entered promiscuous mode [ 752.378078][T10385] gre0: entered allmulticast mode [ 752.384880][T10376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.401671][T10386] sctp: [Deprecated]: syz.3.1711 (pid 10386) Use of int in maxseg socket option. [ 752.401671][T10386] Use struct sctp_assoc_value instead [ 752.486639][T10376] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.138728][ T9606] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.994945][ T29] audit: type=1326 audit(2000000144.987:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f00c code=0x7ffc0000 [ 754.184527][ T29] audit: type=1326 audit(2000000144.987:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f00c code=0x7ffc0000 [ 754.311816][T10399] loop5: detected capacity change from 0 to 256 [ 754.373067][ T29] audit: type=1326 audit(2000000145.047:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf706f00c code=0x7ffc0000 [ 754.585693][ T29] audit: type=1326 audit(2000000145.047:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f00c code=0x7ffc0000 [ 754.768172][ T29] audit: type=1326 audit(2000000145.097:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f00c code=0x7ffc0000 [ 754.841107][T10399] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 754.968175][ T29] audit: type=1326 audit(2000000145.097:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf706f00c code=0x7ffc0000 [ 755.121196][ T29] audit: type=1326 audit(2000000145.107:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706f00c code=0x7ffc0000 [ 755.235457][ T29] audit: type=1326 audit(2000000145.117:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71a616b code=0x7ffc0000 [ 755.270638][T10410] loop2: detected capacity change from 0 to 256 [ 755.338199][ T5673] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 755.403520][ T29] audit: type=1326 audit(2000000145.257:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf706f00c code=0x7ffc0000 [ 755.516716][ T29] audit: type=1326 audit(2000000145.297:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.5.1715" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a616b code=0x7ffc0000 [ 755.584645][ T5673] usb 2-1: Using ep0 maxpacket: 32 [ 755.632864][ T5673] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 755.690469][ T5673] usb 2-1: config 0 has no interface number 0 [ 755.720406][ T5673] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 755.808691][ T5673] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 755.847483][ T5673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.916277][ T5673] usb 2-1: Product: syz [ 755.948205][ T5673] usb 2-1: Manufacturer: syz [ 755.976328][ T5673] usb 2-1: SerialNumber: syz [ 756.054581][ T5673] usb 2-1: config 0 descriptor?? [ 756.126439][T10408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.472791][T10408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.923284][T10420] gre0: entered promiscuous mode [ 756.946095][T10420] gre0: entered allmulticast mode [ 757.088083][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.094812][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.184827][ T5673] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 757.279882][ T5673] asix 2-1:0.188: probe with driver asix failed with error -71 [ 757.405167][ T5673] usb 2-1: USB disconnect, device number 9 [ 758.060907][T10428] loop3: detected capacity change from 0 to 512 [ 758.369079][T10428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.408310][T10433] sctp: [Deprecated]: syz.2.1728 (pid 10433) Use of int in maxseg socket option. [ 758.408310][T10433] Use struct sctp_assoc_value instead [ 758.427390][T10428] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 759.196599][ T5575] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.128898][ T48] Bluetooth: hci4: link tx timeout [ 760.135202][ T48] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.149037][ T5583] Bluetooth: hci4: link tx timeout [ 760.154440][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.175310][ T5583] Bluetooth: hci4: link tx timeout [ 760.183639][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.191784][ T5583] Bluetooth: hci4: link tx timeout [ 760.197154][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.227136][ T5583] Bluetooth: hci4: link tx timeout [ 760.232704][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.242682][ T5583] Bluetooth: hci4: link tx timeout [ 760.248339][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.258610][ T5583] Bluetooth: hci4: link tx timeout [ 760.263976][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.272094][ T5583] Bluetooth: hci4: link tx timeout [ 760.278232][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.310309][ T5583] Bluetooth: hci4: link tx timeout [ 760.315817][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.323950][ T5583] Bluetooth: hci4: link tx timeout [ 760.329447][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.337316][ T5583] Bluetooth: hci4: link tx timeout [ 760.344742][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.355297][ T5583] Bluetooth: hci4: link tx timeout [ 760.360796][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.375298][ T5583] Bluetooth: hci4: link tx timeout [ 760.380995][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.421750][ T5583] Bluetooth: hci4: link tx timeout [ 760.427361][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.435703][ T5583] Bluetooth: hci4: link tx timeout [ 760.442447][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.450503][ T5583] Bluetooth: hci4: link tx timeout [ 760.455785][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.464519][ T5583] Bluetooth: hci4: link tx timeout [ 760.469974][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.483895][ T5583] Bluetooth: hci4: link tx timeout [ 760.492013][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.500285][ T5583] Bluetooth: hci4: link tx timeout [ 760.505656][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.529414][ T5583] Bluetooth: hci4: link tx timeout [ 760.534794][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.551300][ T5583] Bluetooth: hci4: link tx timeout [ 760.556763][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.564858][ T5583] Bluetooth: hci4: link tx timeout [ 760.570263][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.583078][ T5583] Bluetooth: hci4: link tx timeout [ 760.588593][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.599084][ T5583] Bluetooth: hci4: link tx timeout [ 760.604354][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.624870][ T5583] Bluetooth: hci4: link tx timeout [ 760.631541][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.640088][ T5583] Bluetooth: hci4: link tx timeout [ 760.646752][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.663960][ T5583] Bluetooth: hci4: link tx timeout [ 760.669889][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.677979][ T5583] Bluetooth: hci4: link tx timeout [ 760.683631][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.697220][ T5583] Bluetooth: hci4: link tx timeout [ 760.703033][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.711301][ T5583] Bluetooth: hci4: link tx timeout [ 760.716671][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.736328][ T5583] Bluetooth: hci4: link tx timeout [ 760.741874][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.751709][ T5583] Bluetooth: hci4: link tx timeout [ 760.757060][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.765293][ T5583] Bluetooth: hci4: link tx timeout [ 760.771002][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.779266][ T5583] Bluetooth: hci4: link tx timeout [ 760.784743][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.793301][ T5583] Bluetooth: hci4: link tx timeout [ 760.801208][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.809855][ T5583] Bluetooth: hci4: link tx timeout [ 760.815215][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.855444][ T5583] Bluetooth: hci4: link tx timeout [ 760.860932][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.869387][ T5583] Bluetooth: hci4: link tx timeout [ 760.875005][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.928355][ T5583] Bluetooth: hci4: link tx timeout [ 760.933765][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.943424][ T5583] Bluetooth: hci4: link tx timeout [ 760.949270][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.973023][ T5583] Bluetooth: hci4: link tx timeout [ 760.978676][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.987307][ T5583] Bluetooth: hci4: link tx timeout [ 760.993188][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.003917][ T5583] Bluetooth: hci4: link tx timeout [ 761.009381][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.023421][ T5583] Bluetooth: hci4: link tx timeout [ 761.030647][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.038735][ T5583] Bluetooth: hci4: link tx timeout [ 761.044029][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.072531][ T5583] Bluetooth: hci4: link tx timeout [ 761.083025][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.108898][ T5583] Bluetooth: hci4: link tx timeout [ 761.114287][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.122361][ T5583] Bluetooth: hci4: link tx timeout [ 761.127767][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.162969][ T5583] Bluetooth: hci4: link tx timeout [ 761.168820][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.176787][ T5583] Bluetooth: hci4: link tx timeout [ 761.182250][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.209979][ T5583] Bluetooth: hci4: link tx timeout [ 761.215405][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.223858][ T5583] Bluetooth: hci4: link tx timeout [ 761.229364][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.313329][ T5583] Bluetooth: hci4: link tx timeout [ 761.322116][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.330292][ T5583] Bluetooth: hci4: link tx timeout [ 761.335590][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.353315][ T5583] Bluetooth: hci4: link tx timeout [ 761.358833][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.367947][ T5583] Bluetooth: hci4: link tx timeout [ 761.373240][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.399486][ T5583] Bluetooth: hci4: link tx timeout [ 761.404888][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.449536][ T5583] Bluetooth: hci4: link tx timeout [ 761.454941][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.467098][ T5583] Bluetooth: hci4: link tx timeout [ 761.473305][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.484706][ T5583] Bluetooth: hci4: link tx timeout [ 761.494133][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.502458][ T5583] Bluetooth: hci4: link tx timeout [ 761.508047][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.538303][ T5583] Bluetooth: hci4: link tx timeout [ 761.543760][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.555142][ T5583] Bluetooth: hci4: link tx timeout [ 761.561379][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.570924][ T5583] Bluetooth: hci4: link tx timeout [ 761.576270][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.596981][T10453] Bluetooth: hci4: link tx timeout [ 761.602575][T10453] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.633754][T10453] Bluetooth: hci4: link tx timeout [ 761.639801][T10453] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 762.000064][T10457] loop5: detected capacity change from 0 to 128 [ 762.073287][T10457] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 762.193090][T10453] Bluetooth: hci4: command 0x0406 tx timeout [ 762.431752][T10461] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 763.088949][ T1109] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 763.854994][T10464] loop1: detected capacity change from 0 to 2048 [ 763.890265][T10469] gre0: entered promiscuous mode [ 763.908150][T10469] gre0: entered allmulticast mode [ 764.048063][T10470] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 764.169089][T10470] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 764.257258][T10470] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 764.298252][T10470] Remounting filesystem read-only [ 764.320943][T10464] NILFS (loop1): mounting fs with errors [ 764.344804][T10464] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 764.413369][T10464] Remounting filesystem read-only [ 764.470210][T10467] loop3: detected capacity change from 0 to 4096 [ 764.816372][ T5579] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 765.258383][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 765.258463][ T29] audit: type=1800 audit(2000000156.237:79): pid=10467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1743" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 765.640269][T10481] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 766.729783][T10489] loop5: detected capacity change from 0 to 1024 [ 767.058471][T10489] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 767.112826][T10489] hfsplus: xattr search failed [ 767.204109][T10497] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 767.270884][T10497] hfsplus: xattr search failed [ 767.753103][T10501] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 767.830398][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1756'. [ 768.541779][T10510] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1760'. [ 769.041131][T10514] loop6: detected capacity change from 0 to 512 [ 769.255009][T10516] loop3: detected capacity change from 0 to 512 [ 769.309576][T10516] EXT4-fs: Ignoring removed oldalloc option [ 769.489375][T10523] loop5: detected capacity change from 0 to 256 [ 769.502697][T10523] exfat: Deprecated parameter 'utf8' [ 769.508718][T10523] exfat: Deprecated parameter 'utf8' [ 769.542802][T10516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.580020][T10516] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 769.672875][T10523] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 769.717409][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'. [ 769.831700][T10516] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1763: bg 0: block 217: padding at end of block bitmap is not set [ 769.915495][T10516] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 770.425208][ T5575] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.405478][T10538] loop6: detected capacity change from 0 to 512 [ 771.413866][T10531] syz.2.1769 (10531) used greatest stack depth: 1224 bytes left [ 771.686260][T10538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.750209][T10538] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.489623][ T9606] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.950087][T10555] loop5: detected capacity change from 0 to 2048 [ 774.133674][T10555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 774.331033][ T29] audit: type=1800 audit(2000000165.327:80): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1779" name="file1" dev="loop5" ino=1415 res=0 errno=0 [ 774.963045][T10562] loop1: detected capacity change from 0 to 1024 [ 775.010815][T10562] EXT4-fs: Ignoring removed orlov option [ 775.243724][T10562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.401916][ T29] audit: type=1800 audit(2000000166.377:81): pid=10562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1783" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 775.645758][T10567] loop5: detected capacity change from 0 to 256 [ 775.806376][T10570] loop2: detected capacity change from 0 to 1024 [ 775.907185][T10570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 776.046156][T10570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 776.070558][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.112898][T10570] System zones: 0-1, 3-36 [ 776.234707][T10570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.958987][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.048813][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1798'. [ 777.838387][ T5679] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 778.084372][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.110583][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.140104][ T5679] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 778.172969][ T5679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.243865][ T5679] usb 3-1: config 0 descriptor?? [ 778.813751][ T5679] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 778.903488][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'. [ 778.916231][ T5679] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 779.028886][ T5679] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 779.233699][ T5679] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 779.372718][ T5679] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -71 [ 779.480754][ T5679] usb 3-1: USB disconnect, device number 12 [ 779.731654][T10594] fido_id[10594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 781.287353][T10607] loop3: detected capacity change from 0 to 4096 [ 781.317470][T10607] EXT4-fs: Ignoring removed bh option [ 781.425874][T10607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.478154][ T5673] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 781.651122][ T5679] kernel read not supported for file / (pid: 5679 comm: kworker/0:4) [ 781.698449][ T5673] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 781.747250][ T5673] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 781.796871][ T5673] usb 6-1: config 1 interface 0 has no altsetting 0 [ 781.837125][ T5673] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 781.882097][ T5673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.943391][ T5673] usb 6-1: Product: syz [ 781.973358][ T5673] usb 6-1: Manufacturer: syz [ 782.001223][ T5673] usb 6-1: SerialNumber: syz [ 782.065095][T10611] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 782.119126][T10611] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 782.162326][ T5575] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.583809][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.622368][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.765010][ T48] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 782.765165][ T48] Bluetooth: hci0: adv larger than maximum supported [ 782.772735][ T48] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 782.779801][ T48] Bluetooth: hci0: Malformed LE Event: 0x0d [ 782.930174][ T5673] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 783.086322][ T5673] usb 6-1: USB disconnect, device number 11 [ 784.696702][T10634] veth1_to_bond: entered allmulticast mode [ 784.763655][T10633] veth1_to_bond: left allmulticast mode [ 786.892934][T10654] loop3: detected capacity change from 0 to 1024 [ 787.057559][T10654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.099852][T10654] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.840212][ T5575] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 788.418609][ T5679] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 788.452286][T10668] loop2: detected capacity change from 0 to 256 [ 788.660005][ T5679] usb 2-1: config 246 has an invalid interface number: 166 but max is 0 [ 788.713178][ T5679] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 788.749938][ T5679] usb 2-1: config 246 has no interface number 0 [ 788.773753][ T5679] usb 2-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 788.822894][ T5679] usb 2-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.857143][ T5679] usb 2-1: config 246 interface 166 has no altsetting 0 [ 788.916259][ T5679] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 788.988220][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.042839][ T5679] usb 2-1: Product: syz [ 789.064937][ T5679] usb 2-1: Manufacturer: syz [ 789.095653][ T5679] usb 2-1: SerialNumber: syz [ 789.970028][ T5679] usb 2-1: Limiting number of CPorts to U8_MAX [ 790.032769][ T5679] usb 2-1: Not enough endpoints found in device, aborting! [ 790.272270][ T5679] usb 2-1: USB disconnect, device number 10 [ 791.366920][T10453] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 791.382377][T10453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 791.393877][T10453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 791.429763][T10453] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 791.446036][T10453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.101476][T10691] loop2: detected capacity change from 0 to 1024 [ 792.270775][T10691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.390420][T10691] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.440944][T10701] loop5: detected capacity change from 0 to 512 [ 792.484853][T10701] EXT4-fs: Ignoring removed oldalloc option [ 792.544341][T10701] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 792.724896][T10701] EXT4-fs (loop5): 1 truncate cleaned up [ 792.770818][T10701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.014725][T10701] EXT4-fs (loop5): Online defrag not supported for non-extent files [ 793.336151][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 793.548702][ T48] Bluetooth: hci5: command tx timeout [ 793.655323][ T6558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.911646][T10708] loop3: detected capacity change from 0 to 256 [ 794.346545][ T48] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 794.369710][T10712] loop2: detected capacity change from 0 to 512 [ 794.479208][T10716] ALSA: mixer_oss: invalid OSS volume '' [ 794.679930][T10712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 794.733519][T10712] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.476002][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 795.515064][T10723] loop1: detected capacity change from 0 to 512 [ 795.539783][T10727] loop3: detected capacity change from 0 to 128 [ 795.597811][T10723] EXT4-fs: Ignoring removed oldalloc option [ 795.620174][ T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.636132][ T48] Bluetooth: hci5: command tx timeout [ 795.911570][T10723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.937283][T10723] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 795.953712][T10727] syz.3.1842: attempt to access beyond end of device [ 795.953712][T10727] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 796.013359][ T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.103060][T10732] syz.3.1842: attempt to access beyond end of device [ 796.103060][T10732] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 796.144207][T10723] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1844: bg 0: block 217: padding at end of block bitmap is not set [ 796.184534][T10732] buffer_io_error: 10 callbacks suppressed [ 796.184609][T10732] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 796.215178][T10723] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 796.521303][ T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.866682][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.097223][ T56] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.708338][ T48] Bluetooth: hci5: command tx timeout [ 798.592723][ T56] bridge_slave_1: left allmulticast mode [ 798.607936][ T56] bridge_slave_1: left promiscuous mode [ 798.646410][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.712566][ T56] bridge_slave_0: left allmulticast mode [ 798.731093][ T56] bridge_slave_0: left promiscuous mode [ 798.775581][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.690918][T10762] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1855'. [ 799.788217][ T48] Bluetooth: hci5: command tx timeout [ 800.101589][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.132930][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.154825][ T56] bond0 (unregistering): Released all slaves [ 801.151023][T10776] loop2: detected capacity change from 0 to 512 [ 801.328106][T10776] EXT4-fs (loop2): 1 truncate cleaned up [ 801.440831][T10776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.669873][T10776] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1868: invalid indirect mapped block 234881024 (level 0) [ 801.768762][ T56] hsr_slave_0: left promiscuous mode [ 801.839967][ T56] hsr_slave_1: left promiscuous mode [ 801.883881][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.904534][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.926520][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.946270][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.014267][ T56] veth1_macvtap: left promiscuous mode [ 802.029542][ T56] veth0_macvtap: left promiscuous mode [ 802.215631][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.324054][ T56] team0 (unregistering): Port device team_slave_1 removed [ 803.427023][ T56] team0 (unregistering): Port device team_slave_0 removed [ 805.431971][T10800] loop3: detected capacity change from 0 to 4096 [ 805.530826][T10800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 805.916163][T10800] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 805.948834][T10800] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 806.034358][T10800] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1869: Failed to acquire dquot type 1 [ 806.125062][T10800] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 806.338141][T10240] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 806.585412][T10240] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 806.642266][T10240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.732680][ T5575] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 806.734000][T10240] usb 3-1: config 0 descriptor?? [ 806.773835][ T5575] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 806.870509][T10240] cp210x 3-1:0.0: cp210x converter detected [ 807.116796][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.164206][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.216010][T10686] bridge_slave_0: entered allmulticast mode [ 807.262736][T10686] bridge_slave_0: entered promiscuous mode [ 807.392629][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.426240][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.464240][T10686] bridge_slave_1: entered allmulticast mode [ 807.519647][T10686] bridge_slave_1: entered promiscuous mode [ 807.605257][T10240] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 807.665072][T10240] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 807.771929][T10240] usb 3-1: cp210x converter now attached to ttyUSB0 [ 807.851825][T10240] usb 3-1: USB disconnect, device number 13 [ 807.946391][T10240] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 807.996365][T10240] cp210x 3-1:0.0: device disconnected [ 808.376739][T10686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.731433][T10686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.953937][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'. [ 809.033096][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'. [ 809.134621][T10451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.546691][T10451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.725269][T10686] team0: Port device team_slave_0 added [ 809.839514][T10451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.022936][T10686] team0: Port device team_slave_1 added [ 810.108924][T10451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.507490][ T5227] 8021q: adding VLAN 0 to HW filter on device eth9 [ 810.547205][T10686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.584164][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.630131][T10686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.658619][T10686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.683816][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.713217][T10686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.010820][T10686] hsr_slave_0: entered promiscuous mode [ 811.022790][T10686] hsr_slave_1: entered promiscuous mode [ 811.033959][T10686] debugfs: 'hsr0' already exists in 'hsr' [ 811.042110][T10686] Cannot create hsr debugfs directory [ 811.439840][T10451] bridge_slave_1: left allmulticast mode [ 811.458775][T10451] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.521621][T10451] bridge_slave_0: left allmulticast mode [ 811.530841][T10451] bridge_slave_0: left promiscuous mode [ 811.549311][T10451] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.261704][T10852] loop5: detected capacity change from 0 to 4096 [ 812.346544][T10852] EXT4-fs (loop5): Test dummy encryption mode enabled [ 812.486676][T10852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.569363][T10453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 812.579508][T10453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 812.589109][T10453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 812.603205][T10453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 812.621476][T10453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 813.695574][T10451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.792822][T10451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.849907][T10451] bond0 (unregistering): Released all slaves [ 813.876665][T10852] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 814.341078][T10451] IPVS: stopping master sync thread 10200 ... [ 814.449324][ T6558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.750598][ T48] Bluetooth: hci1: command tx timeout [ 815.613973][T10451] hsr_slave_0: left promiscuous mode [ 815.651253][T10451] hsr_slave_1: left promiscuous mode [ 815.676969][T10451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.703214][T10451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.738813][T10451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.761448][T10451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.797216][T10451] batman_adv: batadv0: Removing interface: virt_wifi0 [ 815.821426][T10451] batman_adv: batadv0: Interface deactivated: dummy0 [ 815.837997][T10451] batman_adv: batadv0: Removing interface: dummy0 [ 815.892173][T10451] veth1_macvtap: left promiscuous mode [ 815.914346][T10451] veth0_macvtap: left promiscuous mode [ 816.436027][T10451] team0 (unregistering): Port device team_slave_1 removed [ 816.464184][T10451] team0 (unregistering): Port device team_slave_0 removed [ 816.832076][ T5227] 8021q: adding VLAN 0 to HW filter on device eth10 [ 816.839150][ T48] Bluetooth: hci1: command tx timeout [ 817.105609][T10451] IPVS: stop unused estimator thread 0... [ 817.234924][T10686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 817.295102][T10686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.313407][T10686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 817.366966][T10686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.402949][T10686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 817.479878][T10686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.501832][T10686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 817.541844][T10686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.531386][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.539640][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.721420][T10686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.841961][T10686] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.904004][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.911663][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.926402][ T48] Bluetooth: hci1: command tx timeout [ 819.134118][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.141801][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.489284][ T5227] 8021q: adding VLAN 0 to HW filter on device eth11 [ 820.053579][T10862] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.070701][T10862] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.096507][T10862] bridge_slave_0: entered allmulticast mode [ 820.117075][T10862] bridge_slave_0: entered promiscuous mode [ 820.143550][T10862] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.158940][T10862] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.166725][T10862] bridge_slave_1: entered allmulticast mode [ 820.203475][T10862] bridge_slave_1: entered promiscuous mode [ 820.433940][T10862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.465533][T10862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.643596][T10862] team0: Port device team_slave_0 added [ 820.684325][T10862] team0: Port device team_slave_1 added [ 820.990598][ T48] Bluetooth: hci1: command tx timeout [ 821.075274][T10862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.086200][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.145996][T10862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.203074][T10862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.217329][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.280148][T10862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.575340][T10862] hsr_slave_0: entered promiscuous mode [ 821.612292][T10862] hsr_slave_1: entered promiscuous mode [ 821.626063][T10862] debugfs: 'hsr0' already exists in 'hsr' [ 821.648063][T10862] Cannot create hsr debugfs directory [ 822.300114][ T5227] 8021q: adding VLAN 0 to HW filter on device eth12 [ 822.349544][T10686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.659826][T10862] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 822.733138][T10862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.759590][T10862] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 822.815125][T10862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.845600][T10862] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 822.912610][T10862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.946248][T10862] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 823.005057][T10862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.991575][T10686] veth0_vlan: entered promiscuous mode [ 824.086551][T10862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.167098][T10686] veth1_vlan: entered promiscuous mode [ 824.274432][T10862] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.346736][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.354405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.467028][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.474702][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.730328][T10686] veth0_macvtap: entered promiscuous mode [ 824.825899][T10686] veth1_macvtap: entered promiscuous mode [ 824.874913][ T5227] 8021q: adding VLAN 0 to HW filter on device eth13 [ 825.138462][T10686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.231896][T10686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.304285][ T77] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.337499][ T77] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.388647][ T77] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.413448][ T77] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.623921][T10862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.366414][ T5227] 8021q: adding VLAN 0 to HW filter on device eth14 [ 829.179314][T10862] veth0_vlan: entered promiscuous mode [ 829.240640][T10862] veth1_vlan: entered promiscuous mode [ 829.551765][T10862] veth0_macvtap: entered promiscuous mode [ 829.618395][T10862] veth1_macvtap: entered promiscuous mode [ 829.876566][T10862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.978618][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.991596][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.007386][T10862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.242192][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.254071][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.300189][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.316036][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.317227][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.357444][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.322256][ T5227] 8021q: adding VLAN 0 to HW filter on device eth15 [ 834.506883][T11073] loop1: detected capacity change from 0 to 256 [ 834.599015][T11073] exfat: Deprecated parameter 'utf8' [ 834.668057][ T5681] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 834.797062][T11073] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 834.868442][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 834.916374][ T5681] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 834.969989][ T5681] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 835.005849][ T29] audit: type=1800 audit(2000000225.997:82): pid=11073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1895" name="file1" dev="loop1" ino=1048717 res=0 errno=0 [ 835.042779][ T5681] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.096506][ T5681] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.181080][ T5681] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 835.228203][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.734403][ T5681] usb 3-1: GET_CAPABILITIES returned 2f [ 835.783769][ T5681] usbtmc 3-1:16.0: can't read capabilities [ 836.054260][ T5681] usb 3-1: USB disconnect, device number 14 [ 836.352214][T11088] ALSA: mixer_oss: invalid OSS volume 'o' [ 838.288540][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.315564][T11099] loop7: detected capacity change from 0 to 4096 [ 838.347427][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.525578][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 838.635089][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 838.662154][ T9304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.695973][ T9304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.910406][T11113] loop5: detected capacity change from 0 to 64 [ 838.991715][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.240174][T11113] hfs: request for non-existent node 131072 in B*Tree [ 839.248432][ T5227] 8021q: adding VLAN 0 to HW filter on device eth16 [ 839.301815][T11113] hfs: request for non-existent node 131072 in B*Tree [ 840.961084][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1915'. [ 841.782733][T11134] veth1_macvtap: left promiscuous mode [ 842.110228][T10453] Bluetooth: hci1: command 0x0405 tx timeout [ 842.494242][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 842.608741][T11144] netlink: 190 bytes leftover after parsing attributes in process `syz.1.1922'. [ 843.175108][ T29] audit: type=1326 audit(2000000234.167:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.8.1924" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdf00c code=0x0 [ 844.154755][T11156] loop1: detected capacity change from 0 to 2048 [ 844.428413][T11156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.497025][T11156] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 844.839722][T11158] loop5: detected capacity change from 0 to 4096 [ 845.139105][T11169] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 845.345436][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.238002][T10981] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 847.489008][T10981] usb 3-1: Using ep0 maxpacket: 32 [ 847.554182][T10981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.623057][T10981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.706994][T10981] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 847.743813][T11192] loop1: detected capacity change from 0 to 256 [ 847.765706][T10981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.825951][T11192] exfat: Deprecated parameter 'namecase' [ 847.875882][T10981] usb 3-1: config 0 descriptor?? [ 848.036718][T10981] hub 3-1:0.0: USB hub found [ 848.112696][T11192] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 848.261938][T11196] loop5: detected capacity change from 0 to 512 [ 848.417985][T10981] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 848.940493][T10981] hid-generic 0003:046D:C31C.000D: item fetching failed at offset 0/1 [ 849.012793][T10981] hid-generic 0003:046D:C31C.000D: probe with driver hid-generic failed with error -22 [ 849.190753][T10981] usb 3-1: USB disconnect, device number 15 [ 851.433908][T11219] loop5: detected capacity change from 0 to 256 [ 851.686294][T11219] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 851.944738][ T29] audit: type=1800 audit(2000000242.937:84): pid=11219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1948" name="file1" dev="loop5" ino=1048725 res=0 errno=0 [ 853.847955][T10981] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 854.115957][T10981] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 854.226785][T11250] overlayfs: upper fs does not support tmpfile. [ 854.246550][T10981] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 854.327156][T10981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 854.377390][T10981] usb 9-1: SerialNumber: syz [ 854.840837][T11246] loop2: detected capacity change from 0 to 2048 [ 855.209633][T11254] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 855.244918][T11255] loop7: detected capacity change from 0 to 64 [ 855.280069][T10981] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 855.453460][T11255] syz.7.1959: attempt to access beyond end of device [ 855.453460][T11255] loop7: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 855.532220][T10981] usb 9-1: USB disconnect, device number 2 [ 856.476598][T11254] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 856.476763][T11254] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 856.484785][T11254] Remounting filesystem read-only [ 856.490397][ T5585] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 857.950877][T11271] loop7: detected capacity change from 0 to 2048 [ 858.199581][T11271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.288809][T11271] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.028718][T10686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.521012][T11297] loop8: detected capacity change from 0 to 128 [ 860.601230][T11297] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 860.711785][T11297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 861.922100][T11307] loop1: detected capacity change from 0 to 128 [ 862.141664][T11307] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 862.236085][T11307] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.875318][ T5579] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 864.713745][T11335] loop1: detected capacity change from 0 to 256 [ 865.078038][T11339] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1988'. [ 865.135567][T11340] loop7: detected capacity change from 0 to 128 [ 865.170151][T11335] FAT-fs (loop1): Directory bread(block 64) failed [ 865.215050][T11335] FAT-fs (loop1): Directory bread(block 65) failed [ 865.237088][T11340] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 865.297140][T11335] FAT-fs (loop1): Directory bread(block 66) failed [ 865.349416][T11335] FAT-fs (loop1): Directory bread(block 67) failed [ 865.369580][T11340] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 865.438628][T11335] FAT-fs (loop1): Directory bread(block 68) failed [ 865.467512][T11335] FAT-fs (loop1): Directory bread(block 69) failed [ 865.514314][T11335] FAT-fs (loop1): Directory bread(block 70) failed [ 865.555090][T11335] FAT-fs (loop1): Directory bread(block 71) failed [ 865.630014][T11335] FAT-fs (loop1): Directory bread(block 72) failed [ 865.672830][T11335] FAT-fs (loop1): Directory bread(block 73) failed [ 866.234616][T10451] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 867.100923][T11355] loop7: detected capacity change from 0 to 512 [ 867.799179][T11363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1994'. [ 867.869659][T11363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1994'. [ 868.750426][T11370] loop7: detected capacity change from 0 to 764 [ 868.854573][T11370] rock: directory entry would overflow storage [ 868.896129][T11370] rock: sig=0x4654, size=5, remaining=4 [ 869.063825][T11374] netlink: 'syz.1.1998': attribute type 9 has an invalid length. [ 869.581666][T11377] loop8: detected capacity change from 0 to 2048 [ 869.723315][T11377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.186574][T11392] loop8: detected capacity change from 0 to 256 [ 871.370062][T11392] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 871.610807][T11392] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 872.106147][T11397] loop1: detected capacity change from 0 to 2048 [ 872.356604][T11397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.559360][T11397] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.2008: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 872.698561][T11397] EXT4-fs (loop1): Remounting filesystem read-only [ 873.267242][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.218859][T11419] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2012'. [ 874.742357][T11414] vivid-000: kernel_thread() failed [ 875.267941][T10980] kernel read not supported for file /dsp1 (pid: 10980 comm: kworker/0:2) [ 876.657436][T11442] loop1: detected capacity change from 0 to 256 [ 876.936194][T11442] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 877.047808][T11442] FAT-fs (loop1): Filesystem has been set read-only [ 877.090218][T11442] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 877.153376][T11442] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 877.918300][T11449] loop5: detected capacity change from 0 to 2048 [ 878.064207][T11453] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 878.723334][T11453] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 878.776250][T11453] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 878.838759][T11453] Remounting filesystem read-only [ 878.872212][ T6558] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 879.104678][T11461] loop2: detected capacity change from 0 to 1024 [ 879.247341][T11461] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 879.965937][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.976997][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.027730][T11494] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 882.154645][T11496] loop7: detected capacity change from 0 to 512 [ 887.512701][ T48] Bluetooth: hci1: unexpected event for opcode 0x0406 [ 888.907393][T11566] loop7: detected capacity change from 0 to 512 [ 889.046603][T11566] EXT4-fs (loop7): 1 truncate cleaned up [ 889.133658][T11566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.218231][ T29] audit: type=1800 audit(2000000280.207:85): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2060" name="file1" dev="loop7" ino=13 res=0 errno=0 [ 889.625523][T10686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.135905][T11586] loop1: detected capacity change from 0 to 512 [ 891.177248][T11586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 891.317470][T11586] EXT4-fs (loop1): 1 truncate cleaned up [ 891.434962][T11586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.548385][ T48] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 891.563411][ T48] Bluetooth: hci1: Injecting HCI hardware error event [ 891.571137][T10453] Bluetooth: hci1: hardware error 0x00 [ 891.680948][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2069'. [ 892.283131][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.715978][T10453] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 893.924106][T11612] loop5: detected capacity change from 0 to 256 [ 893.987185][T11612] exfat: Deprecated parameter 'utf8' [ 894.010687][T11612] exfat: Deprecated parameter 'namecase' [ 894.047809][T11612] exfat: Deprecated parameter 'namecase' [ 894.132181][T11612] exfat: Deprecated parameter 'namecase' [ 894.158713][T11612] exfat: Deprecated parameter 'namecase' [ 894.417162][T11612] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 894.998633][T11619] loop1: detected capacity change from 0 to 512 [ 895.281124][T11619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.388997][T11619] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.642216][T11625] loop8: detected capacity change from 0 to 2048 [ 895.771048][T11625] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 895.839531][T11625] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 895.897208][T11625] UDF-fs: Scanning with blocksize 512 failed [ 895.947930][T10453] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 895.956897][T10453] Bluetooth: hci0: Injecting HCI hardware error event [ 895.966694][ T48] Bluetooth: hci0: hardware error 0x00 [ 896.074835][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.240926][T11625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 898.118060][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 898.503156][T11653] ieee802154 phy0 wpan0: encryption failed: -22 [ 898.527729][ T5686] kernel read not supported for file /822/stack (pid: 5686 comm: kworker/1:5) [ 898.969378][T11638] loop2: detected capacity change from 0 to 4096 [ 899.212609][T11638] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 900.055982][T11638] ntfs3(loop2): ino=19, mi_enum_attr [ 900.131640][T11638] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 901.735911][T11681] input: syz0 as /devices/virtual/input/input18 [ 902.045156][T11683] loop1: detected capacity change from 0 to 1024 [ 902.180381][T11683] EXT4-fs: Ignoring removed orlov option [ 902.325628][T11683] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 902.394421][T11683] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 902.479215][T11683] EXT4-fs (loop1): invalid journal inode [ 902.542084][T11683] EXT4-fs (loop1): can't get journal size [ 902.639651][T11683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 903.364699][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.048680][T11711] loop7: detected capacity change from 0 to 64 [ 905.204630][T11712] loop8: detected capacity change from 0 to 512 [ 905.277722][T11712] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 905.335098][T11711] overlayfs: upper fs needs to support d_type. [ 905.464674][T11712] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2110: Invalid block bitmap block 0 in block_group 0 [ 905.535594][T11712] loop8: lost filesystem error report for type 5 error -117 [ 905.537699][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 905.552453][ C0] EXT4-fs (loop8): initial error at time 2000000296: ext4_read_block_bitmap_nowait:483 [ 905.562503][ C0] EXT4-fs (loop8): last error at time 2000000296: ext4_read_block_bitmap_nowait:483 [ 905.670524][T11712] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 905.701711][T11711] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 905.729038][T11712] loop8: lost filesystem error report for type 5 error -117 [ 905.730738][T11712] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.2110: attempt to clear invalid blocks 983261 len 1 [ 905.772694][T11711] overlayfs: failed to set xattr on upper [ 905.840185][T11712] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 905.842548][T11712] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz.8.2110: Invalid inode table block 0 in block_group 0 [ 905.883425][T11711] overlayfs: ...falling back to redirect_dir=nofollow. [ 905.911526][T11711] overlayfs: ...falling back to index=off. [ 905.935525][T11711] overlayfs: ...falling back to uuid=null. [ 905.969426][T11712] loop8: lost filesystem error report for type 5 error -117 [ 905.975982][T11712] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 906.080275][T11712] loop8: lost filesystem error report for type 5 error -117 [ 906.083635][T11712] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 906.208328][T11712] loop8: lost filesystem error report for type 5 error -117 [ 906.213700][T11712] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz.8.2110: Invalid inode table block 0 in block_group 0 [ 906.437054][T11712] loop8: lost filesystem error report for type 5 error -117 [ 906.438883][T11712] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 906.518753][T11712] loop8: lost filesystem error report for type 5 error -117 [ 906.537420][T11712] EXT4-fs error (device loop8): ext4_truncate:4690: inode #11: comm syz.8.2110: mark_inode_dirty error [ 906.632993][T11712] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 906.659601][T11712] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 906.772967][T11712] loop8: lost filesystem error report for type 5 error -117 [ 906.789193][T11712] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz.8.2110: Invalid inode table block 0 in block_group 0 [ 906.824691][T11712] loop8: lost filesystem error report for type 5 error -117 [ 906.836799][T11712] EXT4-fs (loop8): 1 truncate cleaned up [ 907.005734][T11712] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.270829][T11712] EXT4-fs (loop8): shut down requested (2) [ 907.846171][T10862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.728337][T11746] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 909.879661][T11758] loop8: detected capacity change from 0 to 512 [ 909.969538][T11758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 910.026656][T11758] EXT4-fs (loop8): Test dummy encryption mode enabled [ 910.185023][T11758] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2125: invalid indirect mapped block 4294967295 (level 1) [ 910.326421][T11758] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 910.327691][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 910.343944][ C0] EXT4-fs (loop8): initial error at time 2000000301: ext4_free_branches:1023: inode 11 [ 910.354038][ C0] EXT4-fs (loop8): last error at time 2000000301: ext4_free_branches:1023: inode 11 [ 910.368059][T11758] EXT4-fs (loop8): Remounting filesystem read-only [ 910.381600][T11758] EXT4-fs (loop8): 2 truncates cleaned up [ 910.412162][T11758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.059938][T10862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.349223][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2129'. [ 912.289746][T11772] loop8: detected capacity change from 0 to 2048 [ 912.444437][T11772] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 912.492044][T11778] loop7: detected capacity change from 0 to 1024 [ 912.543667][T11772] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 912.643700][T11772] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 912.730693][T11778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.335821][T11785] netlink: 'syz.5.2134': attribute type 1 has an invalid length. [ 913.402335][T11785] netlink: 'syz.5.2134': attribute type 2 has an invalid length. [ 913.449035][T10686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.506449][T11786] netlink: 'syz.5.2134': attribute type 1 has an invalid length. [ 913.593330][T11786] netlink: 'syz.5.2134': attribute type 2 has an invalid length. [ 914.328120][ T5681] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 914.540744][ T5681] usb 8-1: Using ep0 maxpacket: 16 [ 914.577630][ T5681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 914.589020][T11795] loop1: detected capacity change from 0 to 512 [ 914.634391][ T5681] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 914.648376][T11795] EXT4-fs: Ignoring removed oldalloc option [ 914.694080][T11795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 914.696914][ T5681] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.751904][ T5681] usb 8-1: Product: syz [ 914.765033][T11795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 914.769302][ T5681] usb 8-1: Manufacturer: syz [ 914.811046][ T5681] usb 8-1: SerialNumber: syz [ 914.834818][T11795] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 914.845937][ T5681] usb 8-1: config 0 descriptor?? [ 914.884587][ T5681] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 914.894871][ T5681] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 914.902403][T11795] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e041e118, mo2=0002] [ 914.915110][T11795] System zones: 0-1, 15-15, 18-18, 34-34 [ 914.923344][T11795] EXT4-fs (loop1): orphan cleanup on readonly fs [ 914.932339][T11795] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 914.943280][T11795] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 914.970105][T11795] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 915.070546][T11795] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2138: bg 0: block 40: padding at end of block bitmap is not set [ 915.144210][T11795] loop1: lost filesystem error report for type 5 error -117 [ 915.147880][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 915.162067][ C0] EXT4-fs (loop1): initial error at time 2000000306: ext4_validate_block_bitmap:441 [ 915.171808][ C0] EXT4-fs (loop1): last error at time 2000000306: ext4_validate_block_bitmap:441 [ 915.207098][T11795] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 915.258242][T11795] loop1: lost filesystem error report for type 5 error -117 [ 915.261521][T11795] EXT4-fs (loop1): 1 truncate cleaned up [ 915.388831][T11795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 915.721329][ T5681] em28xx 8-1:0.0: chip ID is em2828X [ 915.935514][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.086255][ T5681] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 916.164482][ T5681] em28xx 8-1:0.0: board has no eeprom [ 916.289780][ T5681] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 916.338826][ T5681] em28xx 8-1:0.0: dvb set to bulk mode. [ 916.391411][T10980] em28xx 8-1:0.0: Binding DVB extension [ 916.486281][ T5681] usb 8-1: USB disconnect, device number 2 [ 916.534114][ T5681] em28xx 8-1:0.0: Disconnecting em28xx [ 916.944673][T10980] em28xx 8-1:0.0: Registering input extension [ 916.993576][ T5681] em28xx 8-1:0.0: Closing input extension [ 917.191020][ T5681] em28xx 8-1:0.0: Freeing device [ 917.669086][ T5681] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 917.764104][ T5681] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 917.812987][T11817] loop1: detected capacity change from 0 to 512 [ 917.873296][T10453] Bluetooth: hci5: command 0x0406 tx timeout [ 920.869500][T11839] fido_id[11839]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 922.936980][T11860] program syz.8.2167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.786687][T11869] loop1: detected capacity change from 0 to 512 [ 923.862566][T11869] EXT4-fs (loop1): Test dummy encryption mode enabled [ 923.907447][T11869] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 924.028753][T11869] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2169: bad orphan inode 131083 [ 924.100306][T11869] loop1: lost filesystem error report for type 5 error -117 [ 924.171328][T11869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.998682][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.013479][T11885] loop7: detected capacity change from 0 to 128 [ 925.386952][ T5686] kernel write not supported for file /sg0 (pid: 5686 comm: kworker/1:5) [ 928.033656][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2188'. [ 928.314635][T11916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.610276][ T5681] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 928.813405][ T5681] usb 8-1: Using ep0 maxpacket: 8 [ 928.826413][T11918] loop8: detected capacity change from 0 to 512 [ 928.877398][ T5681] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.907880][ T5681] usb 8-1: config 0 has no interfaces? [ 928.953124][ T5681] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 929.010651][ T5681] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.058267][ T5681] usb 8-1: Product: syz [ 929.085878][ T5681] usb 8-1: Manufacturer: syz [ 929.104592][ T5681] usb 8-1: SerialNumber: syz [ 929.160121][ T5681] usb 8-1: config 0 descriptor?? [ 929.191891][ T29] audit: type=1800 audit(2000000320.177:86): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2193" name="file2" dev="loop8" ino=1048740 res=0 errno=0 [ 929.260502][T11918] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 929.306931][T11918] FAT-fs (loop8): Filesystem has been set read-only [ 929.369012][T11918] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 929.429622][T11918] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 929.467119][ T5681] usb 8-1: USB disconnect, device number 3 [ 929.568668][T11918] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 929.640570][T11918] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 929.755760][T11918] syz.8.2193: attempt to access beyond end of device [ 929.755760][T11918] loop8: rw=2049, sector=17179852706, nr_sectors = 40 limit=512 [ 930.398176][ T5681] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 930.594566][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 930.686236][ T5681] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 930.726614][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.893858][ T5681] pvrusb2: Hardware description: Terratec Grabster AV400 [ 930.927947][ T5681] pvrusb2: ********** [ 930.954711][ T5681] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 931.017218][ T5681] pvrusb2: Important functionality might not be entirely working. [ 931.079349][ T5681] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 931.180914][ T5681] pvrusb2: ********** [ 931.233855][ T2352] pvrusb2: Invalid write control endpoint [ 931.522404][T11927] pvrusb2: Invalid write control endpoint [ 931.587996][ T5681] usb 2-1: USB disconnect, device number 11 [ 931.659299][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 931.784414][ T2352] pvrusb2: Invalid write control endpoint [ 931.829250][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 931.914071][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 931.965907][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 932.026938][ T2352] pvrusb2: Device being rendered inoperable [ 932.062064][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 932.106867][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 932.192453][ T2352] pvrusb2: Attached sub-driver cx25840 [ 932.232237][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 932.303110][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 933.082121][T11951] loop1: detected capacity change from 0 to 128 [ 933.591980][T11956] ALSA: mixer_oss: invalid OSS volume 'MONITO' [ 933.672101][T11957] netlink: 'syz.8.2209': attribute type 1 has an invalid length. [ 934.690609][ T29] audit: type=1326 audit(2000000325.687:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11964 comm="syz.8.2213" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdf00c code=0x0 [ 935.435887][T11973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.566792][T11973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.859105][T11976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2217'. [ 936.171319][T11973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.238308][T11973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.285151][ T5681] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 936.516152][ T5681] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 936.564701][ T5681] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.606164][ T5681] usb 8-1: Product: syz [ 936.618725][T11973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.643592][ T5681] usb 8-1: Manufacturer: syz [ 936.664430][ T5681] usb 8-1: SerialNumber: syz [ 936.683824][T11973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.746002][ T5681] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 936.961814][T10980] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 937.105380][T11973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.239117][T11973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.933361][ T5686] usb 8-1: USB disconnect, device number 4 [ 938.249623][ T55] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.290229][ T55] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.446470][ T77] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.470097][ T77] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.527349][T10980] usb 8-1: Service connection timeout for: 256 [ 938.580333][T10980] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 938.629392][T10980] ath9k_htc: Failed to initialize the device [ 938.641056][ T1109] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.650052][ T5686] usb 8-1: ath9k_htc: USB layer deinitialized [ 938.684762][ T1109] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.727985][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 938.853966][ T1109] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.897109][ T1109] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.919761][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 939.013657][ T9] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 939.057862][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.095555][ T9] usb 9-1: Product: syz [ 939.118184][ T9] usb 9-1: Manufacturer: syz [ 939.151782][ T9] usb 9-1: SerialNumber: syz [ 939.216585][ T9] usb 9-1: config 0 descriptor?? [ 939.314937][ T9] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 939.738772][ T9] usb 9-1: clie_3_5_startup: get interface number bad return length: 0 [ 939.780667][ T9] visor 9-1:0.0: probe with driver visor failed with error -5 [ 940.002344][ T5686] usb 9-1: USB disconnect, device number 3 [ 940.748517][T12011] loop2: detected capacity change from 0 to 256 [ 941.108510][T12012] loop1: detected capacity change from 0 to 2048 [ 941.315674][T12018] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 941.403034][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.414033][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.486389][T12012] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 941.575389][T12012] Remounting filesystem read-only [ 944.096200][T12041] binder: 12040:12041 ioctl c0306201 80000640 returned -22 [ 944.594808][ T29] audit: type=1326 audit(2000000591.589:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 944.743552][ T29] audit: type=1326 audit(2000000591.619:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 944.891056][ T29] audit: type=1326 audit(2000000591.619:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 945.005575][ T29] audit: type=1326 audit(2000000591.629:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 945.128077][ T29] audit: type=1326 audit(2000000591.629:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 945.212403][ T29] audit: type=1326 audit(2000000591.639:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 945.378012][ T29] audit: type=1326 audit(2000000591.629:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf71494d0 code=0x7ffc0000 [ 945.520138][ T29] audit: type=1326 audit(2000000591.639:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 945.662091][ T29] audit: type=1326 audit(2000000591.649:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 945.808051][ T29] audit: type=1326 audit(2000000591.649:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.8.2247" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 947.126544][T12072] loop7: detected capacity change from 0 to 64 [ 948.387381][T12082] netlink: 'syz.1.2262': attribute type 2 has an invalid length. [ 948.568435][ T5686] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 948.804784][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.850053][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.910346][ T5686] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.965669][ T5686] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.998656][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.084012][ T5686] usb 3-1: config 0 descriptor?? [ 949.161116][T12087] loop8: detected capacity change from 0 to 2048 [ 949.301873][T12087] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 949.472848][T12084] loop7: detected capacity change from 0 to 4096 [ 949.536863][T12093] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 949.669160][ T5686] plantronics 0003:047F:FFFF.000F: unbalanced collection at end of report description [ 949.807289][ T5686] plantronics 0003:047F:FFFF.000F: parse failed [ 949.876014][ T5686] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 950.110555][ T5686] usb 3-1: USB disconnect, device number 16 [ 951.371728][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2270'. [ 951.941550][T12113] loop7: detected capacity change from 0 to 256 [ 952.169164][T12113] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 952.578762][T12110] loop2: detected capacity change from 0 to 4096 [ 953.302744][T12118] loop8: detected capacity change from 0 to 4096 [ 953.443800][T12123] erspan0: entered promiscuous mode [ 953.662400][T12118] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 953.711429][T12125] loop7: detected capacity change from 0 to 512 [ 953.766522][T12118] ntfs3(loop8): Failed to load $Extend (-22). [ 953.802107][T12125] EXT4-fs: Ignoring removed oldalloc option [ 953.808700][T12118] ntfs3(loop8): Failed to initialize $Extend. [ 953.894730][T12125] EXT4-fs (loop7): Test dummy encryption mode enabled [ 954.063939][T12125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.973534][T10686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.663147][T12141] loop7: detected capacity change from 0 to 4096 [ 957.212380][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2289'. [ 957.519411][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 957.519493][ T29] audit: type=1800 audit(2000000604.499:112): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2284" name="file1" dev="loop7" ino=33 res=0 errno=0 [ 957.594686][ T5686] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 957.797981][ T5686] usb 9-1: Using ep0 maxpacket: 32 [ 957.833060][ T5686] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 957.882395][ T5686] usb 9-1: config 0 has no interface number 0 [ 957.901016][ T5686] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 957.931655][ T5686] usb 9-1: config 0 interface 85 has no altsetting 0 [ 957.984485][ T5686] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 958.038527][ T5686] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.087295][ T5686] usb 9-1: Product: syz [ 958.108510][ T5686] usb 9-1: Manufacturer: syz [ 958.140155][ T5686] usb 9-1: SerialNumber: syz [ 958.191142][ T5686] usb 9-1: config 0 descriptor?? [ 958.986683][ T5686] appletouch 9-1:0.85: Geyser mode initialized. [ 959.059449][ T5686] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input21 [ 959.120959][T12157] loop2: detected capacity change from 0 to 8192 [ 959.277128][T12157] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 959.308082][ T5686] usb 9-1: USB disconnect, device number 4 [ 959.314578][ C0] appletouch 9-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 959.483419][ T5686] appletouch 9-1:0.85: input: appletouch disconnected [ 959.839255][T12169] loop7: detected capacity change from 0 to 256 [ 960.245066][T12171] loop1: detected capacity change from 0 to 128 [ 968.399847][T12231] loop8: detected capacity change from 0 to 4096 [ 968.464445][T12231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 968.598903][T12231] EXT4-fs (loop8): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 968.710920][T12231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.578667][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2332'. [ 970.064963][T10862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.449316][T12272] loop1: detected capacity change from 0 to 64 [ 971.510232][T12272] hfs: Bad value for 'gid' [ 974.015611][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 975.357030][T12314] loop7: detected capacity change from 0 to 256 [ 975.994863][T12317] loop8: detected capacity change from 0 to 1024 [ 976.047369][T12317] EXT4-fs: inline encryption not supported [ 976.191456][T12317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 976.253609][T12317] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.371980][T12317] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.2362: lblock 3 mapped to illegal pblock 3 (length 3) [ 976.443030][T12317] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 976.456948][T12326] EXT4-fs error (device loop8): ext4_ext_remove_space:2969: inode #15: comm syz.8.2362: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 976.525715][T12326] EXT4-fs error (device loop8) in ext4_setattr:6120: Corrupt filesystem [ 976.558301][ T5681] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 976.636378][T12317] EXT4-fs (loop8): This should not happen!! Data will be lost [ 976.636378][T12317] [ 976.787674][ T5681] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 976.827121][ T5681] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 976.884508][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.980859][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 977.083732][ T5681] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 977.181249][ T13] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 977.219193][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 977.329375][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 977.360689][ T13] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 977.393854][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.427067][ T13] EXT4-fs (loop8): This should not happen!! Data will be lost [ 977.427067][ T13] [ 977.448703][ T9] usb 8-1: Product: syz [ 977.464523][ T9] usb 8-1: Manufacturer: syz [ 977.487349][ T9] usb 8-1: SerialNumber: syz [ 977.512281][T10862] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 977.538387][ T9] usb 8-1: config 0 descriptor?? [ 977.593107][T10862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 977.870245][ T9] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 978.224961][ T5681] stv0680 2-1:4.0: Could not get descriptor 0200 [ 978.457853][ T5681] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 978.493633][ T5681] stv0680 2-1:4.0: last error: 34, command = 0xd [ 978.505079][ T9] usb write operation failed. (-71) [ 978.551233][ T5681] usb 2-1: USB disconnect, device number 12 [ 978.579319][ T9] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 978.644822][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 978.687406][ T9] usb 8-1: media controller created [ 978.698858][ T9] usb read operation failed. (-71) [ 978.719957][ T9] usb write operation failed. (-71) [ 978.753050][ T9] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 978.787305][ T9] usb 8-1: USB disconnect, device number 5 [ 979.639481][T12346] loop2: detected capacity change from 0 to 1024 [ 979.723066][T12346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 979.752128][T12346] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.886685][T12349] batman_adv: batadv0: Adding interface: macvtap1 [ 979.966384][T12349] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.014476][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2375'. [ 980.039071][T12346] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.2372: lblock 3 mapped to illegal pblock 3 (length 3) [ 980.091891][T12349] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 980.122433][T12346] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 980.163671][T12346] EXT4-fs (loop2): This should not happen!! Data will be lost [ 980.163671][T12346] [ 980.234724][T12359] EXT4-fs (loop2): re-mounted 00000000-0000-0006-0000-000000000000. [ 980.714470][ T55] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 980.800711][ T55] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 980.863424][ T55] EXT4-fs (loop2): This should not happen!! Data will be lost [ 980.863424][ T55] [ 980.940646][ T5585] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 981.003321][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 982.042654][T12375] loop7: detected capacity change from 0 to 256 [ 982.078538][T12375] exfat: Deprecated parameter 'utf8' [ 982.101806][T12375] exfat: Deprecated parameter 'namecase' [ 982.128717][T12375] exfat: Deprecated parameter 'namecase' [ 982.155768][T12375] exfat: Deprecated parameter 'utf8' [ 982.195315][T12378] netlink: 64947 bytes leftover after parsing attributes in process `syz.1.2385'. [ 982.276715][T12375] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 982.360332][T12375] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 983.627281][T12393] vcan0: tx address claim with dest, not broadcast [ 984.147186][T12396] loop1: detected capacity change from 0 to 1024 [ 984.259111][T12396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 984.289806][T12396] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.584178][T12396] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.2391: lblock 3 mapped to illegal pblock 3 (length 3) [ 984.693266][T12396] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 984.741820][T12396] EXT4-fs (loop1): This should not happen!! Data will be lost [ 984.741820][T12396] [ 984.779031][T12406] EXT4-fs (loop1): re-mounted 00000000-0000-0006-0000-000000000000. [ 985.220728][ T55] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 985.324152][ T55] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 985.394738][ T55] EXT4-fs (loop1): This should not happen!! Data will be lost [ 985.394738][ T55] [ 985.473965][ T5579] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 985.545385][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 985.876136][T12416] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 986.053671][ T1109] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.172111][ T9] team_slave_0: entered promiscuous mode [ 986.178216][ T9] team_slave_1: entered promiscuous mode [ 986.407993][ T1109] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.571990][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 986.669480][ T1109] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.757920][ T5681] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 986.847979][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 986.870262][ T1109] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.880879][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.881019][ T9] usb 2-1: Product: syz [ 986.881128][ T9] usb 2-1: Manufacturer: syz [ 986.925013][ T9] usb 2-1: SerialNumber: syz [ 986.959489][ T5681] usb 8-1: config 246 has an invalid interface number: 166 but max is 0 [ 986.977460][ T9] usb 2-1: config 0 descriptor?? [ 987.003313][ T5681] usb 8-1: config 246 has no interface number 0 [ 987.023654][ T5681] usb 8-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 987.042823][ T5681] usb 8-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0 [ 987.066426][ T5681] usb 8-1: config 246 interface 166 has no altsetting 0 [ 987.108717][ T5681] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 987.137045][ T5681] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.169745][ T5681] usb 8-1: Product: syz [ 987.174368][ T5681] usb 8-1: Manufacturer: syz [ 987.190062][ T5681] usb 8-1: SerialNumber: syz [ 987.454958][ T9] usb 2-1: Firmware: major: 0, minor: 76, hardware type: UNKNOWN (238) [ 987.678354][ T9] usb 2-1: failed to fetch extended address, random address set [ 987.714769][ T9] usb 2-1: atusb_probe: initialization failed, error = -524 [ 987.727409][ T9] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 987.738031][ T1109] bridge_slave_1: left allmulticast mode [ 987.818903][ T1109] bridge_slave_1: left promiscuous mode [ 987.839782][ T9] usb 2-1: USB disconnect, device number 13 [ 987.847150][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.901613][ T1109] bridge_slave_0: left allmulticast mode [ 987.923907][ T1109] bridge_slave_0: left promiscuous mode [ 987.939674][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.047164][ T5681] usb 8-1: Limiting number of CPorts to U8_MAX [ 988.078453][ T5681] usb 8-1: Unknown endpoint type found, address 0x0b [ 988.085485][ T5681] usb 8-1: Not enough endpoints found in device, aborting! [ 988.307870][T10981] usb 8-1: USB disconnect, device number 6 [ 989.035174][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.122838][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.175645][ T1109] bond0 (unregistering): Released all slaves [ 989.984540][ T1109] batman_adv: batadv0: Removing interface: macvtap1 [ 990.111633][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'. [ 990.846095][T10453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 990.862285][T10453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 990.881374][T10453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 990.907743][T10453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 990.933839][T10453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 990.961624][T12440] loop7: detected capacity change from 0 to 1024 [ 990.988063][ T1109] hsr_slave_0: left promiscuous mode [ 991.047150][ T1109] hsr_slave_1: left promiscuous mode [ 991.056655][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.065663][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.089950][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.169597][T12440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 991.199161][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.248267][T12440] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.393149][ T1109] veth0_macvtap: left promiscuous mode [ 991.426172][ T1109] veth1_vlan: left promiscuous mode [ 991.464147][ T1109] veth0_vlan: left promiscuous mode [ 991.470183][T12447] loop2: detected capacity change from 0 to 2048 [ 991.570543][T12440] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.2409: lblock 3 mapped to illegal pblock 3 (length 3) [ 991.690656][T12452] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 991.754104][T12440] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 991.855743][T12440] EXT4-fs (loop7): This should not happen!! Data will be lost [ 991.855743][T12440] [ 991.943592][T12450] EXT4-fs (loop7): re-mounted 00000000-0000-0006-0000-000000000000. [ 991.984425][T12447] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 992.111352][T12447] Remounting filesystem read-only [ 992.152291][T12457] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 992.610130][T10451] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 992.725722][T10451] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 992.814332][T10451] EXT4-fs (loop7): This should not happen!! Data will be lost [ 992.814332][T10451] [ 992.939280][T10686] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 993.002249][T10453] Bluetooth: hci1: command tx timeout [ 993.019988][T10686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 995.068282][T10453] Bluetooth: hci1: command tx timeout [ 995.220292][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 995.364969][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 996.075150][ T5227] 8021q: adding VLAN 0 to HW filter on device eth17 [ 996.992826][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 997.148256][T10453] Bluetooth: hci1: command tx timeout [ 997.653514][ T29] audit: type=1326 audit(2000000644.649:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.7.2421" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f9500c code=0x0 [ 997.705342][T12502] program syz.2.2422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.228042][T10453] Bluetooth: hci1: command tx timeout [ 999.430729][T12518] loop7: detected capacity change from 0 to 2048 [ 999.531153][T12518] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 999.566866][ T13] tipc: Subscription rejected, illegal request [ 999.603722][T12518] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 999.643935][T12518] UDF-fs: Scanning with blocksize 512 failed [ 999.805014][T12518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 999.984518][ T29] audit: type=1800 audit(2000000646.979:114): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2428" name="file1" dev="loop7" ino=838 res=0 errno=0 [ 1001.649515][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 1002.149148][T12553] loop7: detected capacity change from 0 to 1024 [ 1002.221183][T12553] EXT4-fs: Ignoring removed bh option [ 1002.266192][T12553] EXT4-fs: Ignoring removed bh option [ 1002.401114][T12553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.555689][ T29] audit: type=1800 audit(2000000649.549:115): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2439" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1002.793860][ T5227] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1002.840718][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.851453][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.385744][T10686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.904506][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2445'. [ 1004.871179][T12441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.907311][T12441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.921764][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 1004.961658][T12441] bridge_slave_0: entered allmulticast mode [ 1005.001014][T12441] bridge_slave_0: entered promiscuous mode [ 1005.125699][T12441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.159524][T12441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.200210][T12441] bridge_slave_1: entered allmulticast mode [ 1005.266849][T12441] bridge_slave_1: entered promiscuous mode [ 1005.648490][T12441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.711972][T12441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.896218][T12441] team0: Port device team_slave_0 added [ 1005.916284][T12441] team0: Port device team_slave_1 added [ 1006.046471][T12441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.053959][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.081708][T12441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.106791][T12441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.118066][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.160641][T12441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.346557][T12441] hsr_slave_0: entered promiscuous mode [ 1006.365711][T12441] hsr_slave_1: entered promiscuous mode [ 1006.375215][T12441] debugfs: 'hsr0' already exists in 'hsr' [ 1006.387319][T12441] Cannot create hsr debugfs directory [ 1006.978299][ T5227] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1007.088415][T12441] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1007.120005][T12441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.136708][T12441] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1007.166047][T12441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.181550][T12441] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1007.234484][T12441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1007.255728][T12441] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1007.312385][T12441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1007.893121][T12441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.004994][T12441] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.070363][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.078131][T10451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.123524][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.131225][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.307224][ T5227] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1010.026082][T12441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.090232][T12441] veth0_vlan: entered promiscuous mode [ 1011.126212][T12441] veth1_vlan: entered promiscuous mode [ 1011.276856][T12441] veth0_macvtap: entered promiscuous mode [ 1011.316293][T12441] veth1_macvtap: entered promiscuous mode [ 1011.373337][T12441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.425970][T12441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.500880][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.536497][ T1109] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.570588][ T1109] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.592549][ T1109] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.640921][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.668464][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.804268][T10451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.815246][T10451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.325738][T12673] loop7: detected capacity change from 0 to 512 [ 1014.360710][T12673] EXT4-fs: Ignoring removed mblk_io_submit option [ 1014.517026][T12673] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.630802][T12673] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.874439][ T29] audit: type=1800 audit(2000000661.869:116): pid=12673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2463" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1015.210057][T10686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.447573][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2451'. [ 1018.633442][T12719] loop9: detected capacity change from 0 to 512 [ 1018.787239][T12719] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1018.820263][T12719] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.079758][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2469'. [ 1019.122828][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2469'. [ 1019.525966][T12441] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.239061][T12739] Bluetooth: MGMT ver 1.23 [ 1023.840145][ T5673] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1024.048755][ T5673] usb 3-1: Using ep0 maxpacket: 8 [ 1024.200425][ T5673] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1024.262549][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.307197][ T5673] usb 3-1: Product: syz [ 1024.367939][ T5673] usb 3-1: Manufacturer: syz [ 1024.397386][ T5673] usb 3-1: SerialNumber: syz [ 1024.467053][ T5673] usb 3-1: config 0 descriptor?? [ 1024.803489][ T5673] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1025.458720][ T5673] usb write operation failed. (-71) [ 1025.547294][ T5673] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1025.589065][ T5673] dvbdev: DVB: registering new adapter (Terratec H7) [ 1025.601669][ T5673] usb 3-1: media controller created [ 1025.622793][ T5673] usb read operation failed. (-71) [ 1025.635783][ T5673] usb write operation failed. (-71) [ 1025.740121][ T5673] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1025.844051][ T5673] usb 3-1: USB disconnect, device number 17 [ 1028.616923][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2496'. [ 1028.942467][T12808] loop9: detected capacity change from 0 to 256 [ 1029.009307][T12808] exfat: Deprecated parameter 'namecase' [ 1029.056736][T12808] exfat: Deprecated parameter 'namecase' [ 1029.086292][T12808] exfat: Deprecated parameter 'utf8' [ 1029.229336][T12808] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1029.562912][ T29] audit: type=1800 audit(2000000676.549:117): pid=12808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2497" name="file1" dev="loop9" ino=1048763 res=0 errno=0 [ 1030.907895][T10453] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1030.916606][T10453] Bluetooth: hci1: Injecting HCI hardware error event [ 1030.925874][T10453] Bluetooth: hci1: hardware error 0x00 [ 1031.048391][T12830] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2504'. [ 1031.139867][T12830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.148581][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.206863][T12843] tun0: tun_chr_ioctl cmd 1074025675 [ 1032.268564][T12843] tun0: persist disabled [ 1032.291351][ T5673] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1032.514226][ T5673] usb 8-1: Using ep0 maxpacket: 32 [ 1032.598397][ T5673] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1032.646704][ T5673] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1032.694490][ T5673] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1032.761401][ T5673] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1032.805316][ T5673] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.851795][ T5673] usb 8-1: Product: syz [ 1032.872107][ T5673] usb 8-1: Manufacturer: syz [ 1032.893791][ T5673] usb 8-1: SerialNumber: syz [ 1032.965911][ T5673] usb 8-1: config 0 descriptor?? [ 1033.068317][T10453] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1033.535471][ T5673] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1033.775148][ T5673] gs_usb 8-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1033.826036][ T5673] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -22 [ 1033.987941][ T5673] usb 8-1: USB disconnect, device number 7 [ 1034.738091][ T5673] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1034.973120][ T5673] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.040718][ T5673] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1035.108873][ T5673] usb 3-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 1035.172410][ T5673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.642446][ T5673] usb 3-1: USB disconnect, device number 18 [ 1037.364632][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'. [ 1037.408295][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2527'. [ 1037.449072][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'. [ 1037.538910][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2527'. [ 1037.663501][T12896] netlink: 'syz.2.2527': attribute type 6 has an invalid length. [ 1038.139428][T12904] loop1: detected capacity change from 0 to 256 [ 1038.383779][T12904] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1040.003999][T12917] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2534'. [ 1042.656779][T12950] loop7: detected capacity change from 0 to 512 [ 1042.855919][T12950] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2546: inode has both inline data and extents flags [ 1042.930393][T12950] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1042.937666][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1042.953850][ C1] EXT4-fs (loop7): initial error at time 2000000689: ext4_orphan_get:1397: inode 15 [ 1042.963737][ C1] EXT4-fs (loop7): last error at time 2000000689: ext4_orphan_get:1397: inode 15 [ 1042.981248][T12950] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2546: couldn't read orphan inode 15 (err -117) [ 1043.018103][T12950] loop7: lost filesystem error report for type 5 error -117 [ 1043.040571][T12950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.224812][ T29] audit: type=1800 audit(2000000690.219:118): pid=12950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2546" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 1043.452969][T12948] loop9: detected capacity change from 0 to 2048 [ 1043.618762][ T5096] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1043.839646][ T5096] usb 3-1: Using ep0 maxpacket: 8 [ 1043.897086][T10686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.991098][ T5096] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1044.025840][ T5096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.092223][ T5096] usb 3-1: Product: syz [ 1044.143336][ T5096] usb 3-1: Manufacturer: syz [ 1044.180811][ T5096] usb 3-1: SerialNumber: syz [ 1044.251772][ T5096] usb 3-1: config 0 descriptor?? [ 1044.387363][ T5096] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1044.437283][T12966] loop1: detected capacity change from 0 to 8 [ 1045.328346][ T5096] gspca_sq930x: ucbus_write failed -71 [ 1045.589984][ T5096] gspca_sq930x: Sensor ov9630 not yet treated [ 1045.618731][ T5096] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 1045.691246][ T5096] usb 3-1: USB disconnect, device number 19 [ 1046.281943][T12980] loop9: detected capacity change from 0 to 256 [ 1046.368389][T12980] exfat: Deprecated parameter 'namecase' [ 1046.395757][T12980] exfat: Deprecated parameter 'namecase' [ 1046.603358][T12980] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1051.148085][T13026] sch_tbf: burst 20480 is lower than device lo mtu (65550) ! [ 1052.152127][T13035] loop7: detected capacity change from 0 to 256 [ 1052.648640][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2577'. [ 1052.721704][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2577'. [ 1053.371876][T13048] netlink: 'syz.7.2580': attribute type 4 has an invalid length. [ 1054.281965][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2584'. [ 1056.204122][T13082] netlink: 'syz.7.2594': attribute type 4 has an invalid length. [ 1056.262712][T13082] netlink: 4168 bytes leftover after parsing attributes in process `syz.7.2594'. [ 1057.002790][ T9468] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1057.174102][T13089] loop2: detected capacity change from 0 to 2048 [ 1057.203110][ T9468] usb 10-1: Using ep0 maxpacket: 32 [ 1057.251536][ T9468] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1057.281007][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2598'. [ 1057.288291][ T9468] usb 10-1: config 0 has no interface number 0 [ 1057.371442][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2598'. [ 1057.376207][ T9468] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1057.454913][ T9468] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.479486][ T9468] usb 10-1: Product: syz [ 1057.491759][ T9468] usb 10-1: Manufacturer: syz [ 1057.522152][ T9468] usb 10-1: SerialNumber: syz [ 1057.576345][ T9468] usb 10-1: config 0 descriptor?? [ 1057.669652][ T9468] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1057.962629][ T9468] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1058.139768][ T9468] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1058.355900][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1058.380363][ T5096] usb 10-1: USB disconnect, device number 2 [ 1058.478564][ T5096] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1058.639090][ T5096] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1058.736018][ T5096] quatech2 10-1:0.51: device disconnected [ 1060.073646][T13106] loop1: detected capacity change from 0 to 256 [ 1062.289235][T13121] loop2: detected capacity change from 0 to 2048 [ 1062.365608][T13121] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 1062.449866][T13121] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1062.504872][T13121] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1062.555873][T13121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1062.780605][T13127] loop1: detected capacity change from 0 to 16 [ 1062.866216][T13127] erofs (device loop1): mounted with root inode @ nid 36. [ 1063.018524][T13127] syz.1.2615: attempt to access beyond end of device [ 1063.018524][T13127] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1063.112442][T13127] syz.1.2615: attempt to access beyond end of device [ 1063.112442][T13127] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1063.205593][ T29] audit: type=1800 audit(2000000710.199:119): pid=13127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2615" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1064.285590][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.309716][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.330686][ T1301] ------------[ cut here ]------------ [ 1064.336416][ T1301] WARNING: ./include/linux/skbuff.h:3242 at lowpan_xmit+0xa0e/0x1d00, CPU#0: aoe_tx0/1301 [ 1064.346799][ T1301] Modules linked in: [ 1064.351050][ T1301] CPU: 0 UID: 0 PID: 1301 Comm: aoe_tx0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1064.362079][ T1301] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1064.367556][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.377900][ T1301] RIP: 0010:lowpan_xmit+0xa0e/0x1d00 [ 1064.383469][ T1301] Code: fb 8b 7d d4 e8 03 a3 26 f2 48 89 df e9 35 fd ff ff 44 89 f7 e8 f3 a2 26 f2 66 41 83 fd ff 0f 85 7f fd ff ff e8 93 86 78 f1 90 <0f> 0b 90 80 7d c0 00 0f 84 3b 12 00 00 48 8b bd 00 ff ff ff 0f b7 [ 1064.403439][ T1301] RSP: 0018:ffff888108a7b960 EFLAGS: 00010293 [ 1064.409862][ T1301] RAX: ffffffff9087eaed RBX: 0000000000000000 RCX: ffff88810d27c280 [ 1064.418150][ T1301] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 1064.426331][ T1301] RBP: ffff888108a7bac0 R08: ffffea000000000f R09: 0000000000000000 [ 1064.434650][ T1301] R10: ffff88810827b8d8 R11: ffff88811960f790 R12: ffff88810d27ce38 [ 1064.442271][T13134] tap0: tun_chr_ioctl cmd 1074025677 [ 1064.442947][ T1301] R13: 000000000000ffff R14: 0000000000000000 R15: ffff888054901300 [ 1064.456409][ T1301] FS: 0000000000000000(0000) GS:ffff8881aa615000(0000) knlGS:0000000000000000 [ 1064.465690][ T1301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1064.472571][ T1301] CR2: 00000000f5434ff4 CR3: 0000000107062000 CR4: 00000000003526f0 [ 1064.480842][ T1301] Call Trace: [ 1064.484292][ T1301] [ 1064.487389][ T1301] ? validate_xmit_xfrm+0x84/0x19e0 [ 1064.492929][ T1301] ? netif_skb_features+0x1bd3/0x1ea0 [ 1064.498729][ T1301] ? kmsan_get_shadow_origin_ptr+0x10/0xb0 [ 1064.504881][ T1301] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1064.511631][ T1301] ? __pfx_lowpan_xmit+0x10/0x10 [ 1064.516833][ T1301] dev_hard_start_xmit+0x22f/0xa80 [ 1064.522393][ T1301] __dev_queue_xmit+0x2990/0x5a00 [ 1064.527786][ T1301] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1064.534226][ T1301] ? kmsan_get_metadata+0xf1/0x160 [ 1064.539724][ T1301] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1064.546351][ T1301] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1064.552796][ T1301] ? __dev_queue_xmit+0x2d4/0x5a00 [ 1064.558251][ T1301] ? kmsan_get_metadata+0xf1/0x160 [ 1064.563704][ T1301] tx+0xb6/0x440 [ 1064.567621][ T1301] ? __pfx_tx+0x10/0x10 [ 1064.572060][ T1301] kthread+0x17d/0x370 [ 1064.576413][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 1064.582602][ T1301] kthread+0x53f/0x600 [ 1064.586990][ T1301] ? __pfx_kthread+0x10/0x10 [ 1064.591959][ T1301] ? __pfx_kthread+0x10/0x10 [ 1064.596882][ T1301] ret_from_fork+0x20f/0x8d0 [ 1064.601819][ T1301] ? __switch_to+0x573/0x7a0 [ 1064.606722][ T1301] ? __pfx_kthread+0x10/0x10 [ 1064.611705][ T1301] ret_from_fork_asm+0x1a/0x30 [ 1064.613540][T13134] tap0: linktype set to 6 [ 1064.621280][ T1301] [ 1064.624454][ T1301] ---[ end trace 0000000000000000 ]--- [ 1064.630151][ T1301] ===================================================== [ 1064.637306][ T1301] BUG: KMSAN: uninit-value in lowpan_xmit+0xa6b/0x1d00 [ 1064.644449][ T1301] lowpan_xmit+0xa6b/0x1d00 [ 1064.649194][ T1301] dev_hard_start_xmit+0x22f/0xa80 [ 1064.649332][ T1301] __dev_queue_xmit+0x2990/0x5a00 [ 1064.649461][ T1301] tx+0xb6/0x440 [ 1064.663335][ T1301] kthread+0x17d/0x370 [ 1064.667671][ T1301] kthread+0x53f/0x600 [ 1064.671969][ T1301] ret_from_fork+0x20f/0x8d0 [ 1064.676753][ T1301] ret_from_fork_asm+0x1a/0x30 [ 1064.681796][ T1301] [ 1064.684388][ T1301] Uninit was stored to memory at: [ 1064.689796][ T1301] lowpan_xmit+0x68f/0x1d00 [ 1064.694466][ T1301] dev_hard_start_xmit+0x22f/0xa80 [ 1064.699856][ T1301] __dev_queue_xmit+0x2990/0x5a00 [ 1064.705093][ T1301] tx+0xb6/0x440 [ 1064.708922][ T1301] kthread+0x17d/0x370 [ 1064.713204][ T1301] kthread+0x53f/0x600 [ 1064.717593][ T1301] ret_from_fork+0x20f/0x8d0 [ 1064.722468][ T1301] ret_from_fork_asm+0x1a/0x30 [ 1064.727980][ T1301] [ 1064.730411][ T1301] Uninit was created at: [ 1064.734924][ T1301] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 1064.741255][ T1301] __alloc_skb+0x855/0x1190 [ 1064.745935][ T1301] new_skb+0x4a/0x550 [ 1064.750213][ T1301] aoecmd_cfg+0x2c2/0xb70 [ 1064.754732][ T1301] discover_timer+0x64/0x80 [ 1064.759532][ T1301] call_timer_fn+0x4c/0x510 [ 1064.764240][ T1301] __run_timer_base+0x80a/0xdb0 [ 1064.769346][ T1301] run_timer_softirq+0x3a/0x70 [ 1064.774296][ T1301] handle_softirqs+0x171/0x7b0 [ 1064.779372][ T1301] __irq_exit_rcu+0x9a/0x1e0 [ 1064.784193][ T1301] irq_exit_rcu+0x12/0x20 [ 1064.788827][ T1301] sysvec_apic_timer_interrupt+0x84/0x90 [ 1064.794653][ T1301] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1064.800928][ T1301] [ 1064.803381][ T1301] CPU: 0 UID: 0 PID: 1301 Comm: aoe_tx0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1064.814295][ T1301] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1064.819678][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.829960][ T1301] ===================================================== [ 1064.837008][ T1301] Disabling lock debugging due to kernel taint [ 1064.843385][ T1301] Kernel panic - not syncing: kmsan.panic set ... [ 1064.849951][ T1301] CPU: 0 UID: 0 PID: 1301 Comm: aoe_tx0 Tainted: G B W L syzkaller #0 PREEMPT(full) [ 1064.860798][ T1301] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1064.867326][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.877516][ T1301] Call Trace: [ 1064.880907][ T1301] [ 1064.883947][ T1301] __dump_stack+0x26/0x30 [ 1064.888495][ T1301] dump_stack_lvl+0x50/0x1c0 [ 1064.893283][ T1301] ? dump_stack+0x12/0x25 [ 1064.897790][ T1301] dump_stack+0x1e/0x25 [ 1064.902120][ T1301] vpanic+0x7b4/0x1430 [ 1064.906485][ T1301] panic+0x15d/0x160 [ 1064.910611][ T1301] kmsan_report+0x31a/0x320 [ 1064.915317][ T1301] ? __msan_warning+0x1b/0x30 [ 1064.920196][ T1301] ? lowpan_xmit+0xa6b/0x1d00 [ 1064.925028][ T1301] ? dev_hard_start_xmit+0x22f/0xa80 [ 1064.930495][ T1301] ? __dev_queue_xmit+0x2990/0x5a00 [ 1064.935961][ T1301] ? tx+0xb6/0x440 [ 1064.939862][ T1301] ? kthread+0x17d/0x370 [ 1064.944290][ T1301] ? kthread+0x53f/0x600 [ 1064.948735][ T1301] ? ret_from_fork+0x20f/0x8d0 [ 1064.953682][ T1301] ? ret_from_fork_asm+0x1a/0x30 [ 1064.958845][ T1301] ? kmsan_get_metadata+0xf1/0x160 [ 1064.964177][ T1301] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1064.970706][ T1301] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1064.976976][ T1301] ? report_bug+0x196/0x1d0 [ 1064.981664][ T1301] ? lowpan_xmit+0xa10/0x1d00 [ 1064.986633][ T1301] ? lowpan_xmit+0xa0e/0x1d00 [ 1064.991482][ T1301] ? handle_bug+0xb2/0x230 [ 1064.996098][ T1301] ? exc_invalid_op+0x1f/0x50 [ 1065.001001][ T1301] ? kmsan_get_metadata+0xf1/0x160 [ 1065.006368][ T1301] __msan_warning+0x1b/0x30 [ 1065.011071][ T1301] lowpan_xmit+0xa6b/0x1d00 [ 1065.015747][ T1301] ? validate_xmit_xfrm+0x84/0x19e0 [ 1065.021115][ T1301] ? netif_skb_features+0x1bd3/0x1ea0 [ 1065.026687][ T1301] ? kmsan_get_shadow_origin_ptr+0x10/0xb0 [ 1065.032738][ T1301] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1065.039298][ T1301] ? __pfx_lowpan_xmit+0x10/0x10 [ 1065.044405][ T1301] dev_hard_start_xmit+0x22f/0xa80 [ 1065.049725][ T1301] __dev_queue_xmit+0x2990/0x5a00 [ 1065.054920][ T1301] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1065.061224][ T1301] ? kmsan_get_metadata+0xf1/0x160 [ 1065.066537][ T1301] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1065.073088][ T1301] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1065.079350][ T1301] ? __dev_queue_xmit+0x2d4/0x5a00 [ 1065.084668][ T1301] ? kmsan_get_metadata+0xf1/0x160 [ 1065.090062][ T1301] tx+0xb6/0x440 [ 1065.093846][ T1301] ? __pfx_tx+0x10/0x10 [ 1065.098206][ T1301] kthread+0x17d/0x370 [ 1065.102460][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 1065.108463][ T1301] kthread+0x53f/0x600 [ 1065.112737][ T1301] ? __pfx_kthread+0x10/0x10 [ 1065.117527][ T1301] ? __pfx_kthread+0x10/0x10 [ 1065.122340][ T1301] ret_from_fork+0x20f/0x8d0 [ 1065.127120][ T1301] ? __switch_to+0x573/0x7a0 [ 1065.131950][ T1301] ? __pfx_kthread+0x10/0x10 [ 1065.136754][ T1301] ret_from_fork_asm+0x1a/0x30 [ 1065.141756][ T1301] [ 1065.145509][ T1301] Kernel Offset: disabled [ 1065.149917][ T1301] Rebooting in 86400 seconds..