last executing test programs: 4m34.898489707s ago: executing program 2 (id=3): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000280)=0x8b, 0x1000004ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f0000000a80)="$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") r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000007c0)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6001044800203aff20010000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb020136dad83aea8da01846da9c63a69bc530a3c60b226cda5d00b81dc5abf72fa711161c3b0274a8b7318355014003a3ad0ed27c7cfeba0b6f6d1040cbd3e20ed3cfa88f4d2e4b951b17871f7199cbd824809bf4e888ee588c42878ebda99c8c"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010003000000008b00"/27], 0x0, 0x1b, 0x0, 0x800, 0x3, 0x10000}, 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f00000002c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 4m30.62745724s ago: executing program 2 (id=19): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 4m29.945279759s ago: executing program 2 (id=22): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) write(r0, &(0x7f0000000b40)="15aa50c5", 0x4) 4m28.580961003s ago: executing program 2 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000004}}], 0x2, 0x0) 4m27.843318434s ago: executing program 2 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x9}, 0x0) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x86dd}, @val={0x2, 0x3, 0x5, 0x9, 0xa, 0x40}, @mpls={[], @ipv6=@generic={0x8, 0x6, "3739ed", 0x28, 0x89, 0xff, @empty, @mcast2, {[], "59c0ac5a142dbdbec6b7f2b65327cfd00f8bd3acba38414fcc35f63d64902ea8bb580250f9fdb4ec"}}}}, 0x5e) 4m25.364450556s ago: executing program 32 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x9}, 0x0) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x86dd}, @val={0x2, 0x3, 0x5, 0x9, 0xa, 0x40}, @mpls={[], @ipv6=@generic={0x8, 0x6, "3739ed", 0x28, 0x89, 0xff, @empty, @mcast2, {[], "59c0ac5a142dbdbec6b7f2b65327cfd00f8bd3acba38414fcc35f63d64902ea8bb580250f9fdb4ec"}}}}, 0x5e) 1m31.577533459s ago: executing program 0 (id=636): syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0xb00, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1m22.739450963s ago: executing program 0 (id=664): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x1ac, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0xf, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x17c, 0x2, [@TCA_BASIC_EMATCHES={0x170, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xc295}, {0x2, 0x5, 0x401, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x7, 0x80000000, 0x2, 0x7, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xac, 0x3, 0x0, 0x0, {{0xdb, 0x9, 0x151}, [@TCA_EM_IPT_MATCH_DATA={0x9d, 0x5, "895f788f8d9807b0ac27998b7e1d250b668b5f45d00cc0d54c7434b880beaaa4ee53ed66c9f21cb39aca2a39c7079a67a2817613f3fedba358b842797d0fa292d02bbfde8d87707bf564b640396e496be00153e391e08a73d7cfe2a18e620e4aad3d7bb6d554645dbd3b95ea3561482a9887787e8c7ea5e1cfd68e71c13aba084ec7dbfafb8ced693b8d667d32a9752213b602d9d6fc0bf97f"}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{}, {0x5, 0x5, 0x2, "55b04e12a1"}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0x8}, "8b1166457a264998ad3e427117253bc7e25f2b88ea8bc788adf0c5dc54e449e8b9b68b3bbe944fde370e8fdcd934fa8ccf0cc5f740f8ed728ecc0964b1f4669a6087ecd0d8b63e021af69a6955e2532927df"}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m22.148518952s ago: executing program 0 (id=668): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000440)='./file0\x00', 0x8) 1m21.162109331s ago: executing program 0 (id=671): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82400, 0x1a4) lseek(r0, 0x12, 0x1) getdents(r0, 0x0, 0x40) 1m20.794787397s ago: executing program 1 (id=673): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x14) fsopen(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x60009c0e, 0x200}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x32302, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48005) r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @string=&(0x7f0000000180)=0xa3}}) process_madvise(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000000)="9458a15424ceccce471645f1c6647d84b3eea76f7915d32cebfe6f612f8d6fead6a7d6c1decab82b7709dc65c72c18c13b2d2bb89569f275", 0x38}, {&(0x7f0000000040)="89e0cf95625a1ae2f782582fe0", 0xd}, {&(0x7f0000000080)="89f0df", 0x3}, {&(0x7f00000000c0)="fd592fd96934215cd7170c0df6b3e00facf21a888da299e928ae40b7fefb30abb470314be56b15d2d50e53200018dc17166808a84586cb62757fc429b7a3e19968eb08e8d20783f34293118cd6912db2f50c42", 0x53}, {&(0x7f0000000140)="aa5461fb9ac4090568581a0f108fd71ab162d7c80174ee459351c9edbe70f014dd03bac72e1fbc841ea38d3935997619bf95cf164236876d49732a8d4bdbd6c97692b34b7a6ef0319580288e63ef345d39eedd4e6e448fee21436aaf267cd8f07aedab2f6cd530194a2fc557f3f986147f8542538f53caa4ff066b7a361eab745e21cc706401fc9d3e18", 0x8a}, {&(0x7f0000000200)}, {&(0x7f0000000300)}], 0x7, 0x3, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) 1m20.153652481s ago: executing program 0 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x10, 0x2, "6f28cae7e763e81067d4ceb8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 1m19.68302297s ago: executing program 1 (id=678): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x1ac, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0xf, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x17c, 0x2, [@TCA_BASIC_EMATCHES={0x170, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xc295}, {0x2, 0x5, 0x401, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x7, 0x80000000, 0x2, 0x7, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xac, 0x3, 0x0, 0x0, {{0xdb, 0x9, 0x151}, [@TCA_EM_IPT_MATCH_DATA={0x9d, 0x5, "895f788f8d9807b0ac27998b7e1d250b668b5f45d00cc0d54c7434b880beaaa4ee53ed66c9f21cb39aca2a39c7079a67a2817613f3fedba358b842797d0fa292d02bbfde8d87707bf564b640396e496be00153e391e08a73d7cfe2a18e620e4aad3d7bb6d554645dbd3b95ea3561482a9887787e8c7ea5e1cfd68e71c13aba084ec7dbfafb8ced693b8d667d32a9752213b602d9d6fc0bf97f"}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{}, {0x5, 0x5, 0x2, "55b04e12a1"}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0x8}, "8b1166457a264998ad3e427117253bc7e25f2b88ea8bc788adf0c5dc54e449e8b9b68b3bbe944fde370e8fdcd934fa8ccf0cc5f740f8ed728ecc0964b1f4669a6087ecd0d8b63e021af69a6955e2532927df"}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m19.260455771s ago: executing program 0 (id=680): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x10c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0xf, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xdc, 0x2, [@TCA_BASIC_EMATCHES={0xd0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xc295}, {0x2, 0x5, 0x401, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x7, 0x80000000, 0x2, 0x7, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0xdb, 0x9, 0x151}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{}, {0x5, 0x5, 0x2, "55b04e12a1"}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0x8}, "8b1166457a264998ad3e427117253bc7e25f2b88ea8bc788adf0c5dc54e449e8b9b68b3bbe944fde370e8fdcd934fa8ccf0cc5f740f8ed728ecc0964b1f4669a6087ecd0d8b63e021af69a6955e2532927df"}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m16.062644251s ago: executing program 33 (id=680): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x10c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0xf, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xdc, 0x2, [@TCA_BASIC_EMATCHES={0xd0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xc295}, {0x2, 0x5, 0x401, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x7, 0x80000000, 0x2, 0x7, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0xdb, 0x9, 0x151}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{}, {0x5, 0x5, 0x2, "55b04e12a1"}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0x8}, "8b1166457a264998ad3e427117253bc7e25f2b88ea8bc788adf0c5dc54e449e8b9b68b3bbe944fde370e8fdcd934fa8ccf0cc5f740f8ed728ecc0964b1f4669a6087ecd0d8b63e021af69a6955e2532927df"}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m16.019026624s ago: executing program 1 (id=683): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r1 = syz_io_uring_setup(0x1205, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x3, 0xffffffff}, 0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x8, 0x0, 0x0) 1m15.2591984s ago: executing program 1 (id=686): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82400, 0x1a4) lseek(r0, 0x12, 0x1) getdents(r0, 0x0, 0x40) 1m12.17219848s ago: executing program 1 (id=688): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000002180)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '!Y\x00'}) chown(0x0, 0x0, 0x0) 1m10.474464111s ago: executing program 1 (id=691): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, 0x0, 0x0, 0xfecc) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="a0", 0x1}], 0x1, 0x7ffd, 0xffffffff, 0x5) 1m7.730763653s ago: executing program 34 (id=691): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, 0x0, 0x0, 0xfecc) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="a0", 0x1}], 0x1, 0x7ffd, 0xffffffff, 0x5) 10.324966464s ago: executing program 4 (id=857): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x82, 0x1, '7'}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0}) 7.661112619s ago: executing program 5 (id=865): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_redirect(r3, 0x0, 0x0, 0x0, 0x0) 7.481274581s ago: executing program 4 (id=866): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x2fc}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902"], 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 7.049265049s ago: executing program 5 (id=867): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 6.924455339s ago: executing program 3 (id=868): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 6.544643481s ago: executing program 7 (id=870): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.922017994s ago: executing program 5 (id=871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0011022, 0x0, 0x800000000038f}]}) 5.667407103s ago: executing program 7 (id=872): socket$inet(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 5.5711696s ago: executing program 3 (id=873): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) 5.409454358s ago: executing program 4 (id=874): socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$eJzs28FrHFUcB/BfkqapW5ONWqstiA+9VJChycGLvQRJQbqgtI3QCsLUbHTJuBsyS2BFjJ68+neIIKI3QbzpJRf/A8FbLh4riCPJatvIrrJm7Zby+VzyI+99Z3+Pt7swy5v9S5++t7lRZht5N6anpmJ6KyLdTpFiOv7yUbzw8vc/PHPtxs0rK43G6tWULq9cX3oppbTw7LdvfvD5c991T7/x9cI3c7G3+Nb+L8s/753dO7f/+/V3W2Vqland6aY83ep0uvmtopnWW+VmltLrRTMvm6nVLpvbR8Y3is7WVi/l7fX52tZ2syxT3u6lzWYvdTupu91L+Tt5q52yLEvztWB0J+5Ua5/drqoqoqpm42RUVVU9ErU4HY/GfCxEPRbjsXg8nogz8WScjafi6fjypy96BwkAAAAAAAAAAAAAAAAAAABgfEZ9/v/c4axJdw0AAAAAAAAAAAAAAAAAAAAPl2s3bl5ZaTRWr6Z0KqL4ZGdtZ63/tz++shGtKKIZF6Mev8Xh0/99/fryq43Vi+nQYnxc7P6Z391ZmzmaX4p6vDg4v9TPp6P5uajdm1+OepwZlJ+N5YH5U3Hh+XvyWdTjx7ejE0Wsx0H27ut/uJTSK681/pY/fzhvuJn7sT0AAAAwFlm6Y+D9e5YNG+/nR/h94Mj99UH2/ImJLp2IKHvvb+ZF0dx+SIvZY17nwvHbuBQRY1nOyWFD1W5/M0e54GxEjNbGr1VVPRB7euyiNnpq+CdlLiL+cz9T43pvjL+Y9DcT98PdTR86Zf2rwf+f/v+6AgAAAAAAAAAA4N8MPQY4908nBGdGOk446TUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrAAAA///SHczP") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r0, 0x2000009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) 5.205032788s ago: executing program 6 (id=875): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.013627071s ago: executing program 5 (id=876): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) 4.967084337s ago: executing program 7 (id=877): socket(0x80000000000000a, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_create_resource$binfmt(0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$caif_seqpacket(0x25, 0x5, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) fadvise64(r4, 0xfcff, 0x20000, 0x3) 4.864689495s ago: executing program 3 (id=878): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x88f, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) shutdown(r0, 0x1) 3.556595946s ago: executing program 3 (id=879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) 2.820738094s ago: executing program 7 (id=880): r0 = syz_io_uring_setup(0x24fe, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x100c}}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 2.738522871s ago: executing program 6 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 2.434052942s ago: executing program 3 (id=882): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.23389752s ago: executing program 6 (id=883): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000340)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 1.344673782s ago: executing program 5 (id=888): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.17500493s ago: executing program 4 (id=889): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x168, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0xf, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x138, 0x2, [@TCA_BASIC_EMATCHES={0x12c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xc295}, {0x2, 0x5, 0x401, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x7, 0x80000000, 0x2, 0x7, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc4, 0x3, 0x0, 0x0, {{0xdb, 0x9, 0x151}, [@TCA_EM_IPT_MATCH_DATA={0xb5, 0x5, "895f788f8d9807b0ac27998b7e1d250b668b5f45d00cc0d54c7434b880beaaa4ee53ed66c9f21cb39aca2a39c7079a67a2817613f3fedba358b842797d0fa292d02bbfde8d87707bf564b640396e496be00153e391e08a73d7cfe2a18e620e4aad3d7bb6d554645dbd3b95ea3561482a9887787e8c7ea5e1cfd68e71c13aba084ec7dbfafb8ced693b8d667d32a9752213b602d9d6fc0bf97f6f04cf11b01ad475a705273cbeffb952efa04e10a8018de4"}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{}, {0x5, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 689.54142ms ago: executing program 6 (id=890): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)=ANY=[@ANYBLOB="1800007f000000000020"]) 560.150319ms ago: executing program 5 (id=891): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 456.037462ms ago: executing program 7 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) 436.847535ms ago: executing program 4 (id=893): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xfffffffc, 0x10, "ba00"}) r1 = syz_open_pts(r0, 0x20800) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000200)={0x24d, 0x3, 0x1, 0x5, 0xf3, "3b2e4acfb6c0991c7a4706da15a6c3a488faeb", 0x8, 0x7ff}) 0s ago: executing program 6 (id=894): socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$eJzs28FrHFUcB/BfkqapW5ONWqstiA+9VJChycGLvQRJQbqgtI3QCsLUbHTJuBsyS2BFjJ68+neIIKI3QbzpJRf/A8FbLh4riCPJatvIrrJm7Zby+VzyI+99Z3+Pt7swy5v9S5++t7lRZht5N6anpmJ6KyLdTpFiOv7yUbzw8vc/PHPtxs0rK43G6tWULq9cX3oppbTw7LdvfvD5c991T7/x9cI3c7G3+Nb+L8s/753dO7f/+/V3W2Vqland6aY83ep0uvmtopnWW+VmltLrRTMvm6nVLpvbR8Y3is7WVi/l7fX52tZ2syxT3u6lzWYvdTupu91L+Tt5q52yLEvztWB0J+5Ua5/drqoqoqpm42RUVVU9ErU4HY/GfCxEPRbjsXg8nogz8WScjafi6fjypy96BwkAAAAAAAAAAAAAAAAAAABgfEZ9/v/c4axJdw0AAAAAAAAAAAAAAAAAAAAPl2s3bl5ZaTRWr6Z0KqL4ZGdtZ63/tz++shGtKKIZF6Mev8Xh0/99/fryq43Vi+nQYnxc7P6Z391ZmzmaX4p6vDg4v9TPp6P5uajdm1+OepwZlJ+N5YH5U3Hh+XvyWdTjx7ejE0Wsx0H27ut/uJTSK681/pY/fzhvuJn7sT0AAAAwFlm6Y+D9e5YNG+/nR/h94Mj99UH2/ImJLp2IKHvvb+ZF0dx+SIvZY17nwvHbuBQRY1nOyWFD1W5/M0e54GxEjNbGr1VVPRB7euyiNnpq+CdlLiL+cz9T43pvjL+Y9DcT98PdTR86Zf2rwf+f/v+6AgAAAAAAAAAA4N8MPQY4908nBGdGOk446TUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrAAAA///SHczP") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r0, 0x2000009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) kernel console output (not intermixed with test programs): netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.748323][ T4005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.799370][ T6078] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.24: Directory hole found for htree leaf block 0 [ 203.989632][ T4005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.040344][ T6093] netlink: 'syz.1.31': attribute type 10 has an invalid length. [ 204.085891][ T6093] syz_tun: entered promiscuous mode [ 204.122796][ T6093] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 204.465745][ T4005] bridge_slave_1: left allmulticast mode [ 204.471814][ T4005] bridge_slave_1: left promiscuous mode [ 204.478729][ T4005] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.551085][ T4005] bridge_slave_0: left allmulticast mode [ 204.558731][ T4005] bridge_slave_0: left promiscuous mode [ 204.565308][ T4005] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.043396][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.260059][ T4005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.296077][ T4005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.333069][ T4005] bond0 (unregistering): Released all slaves [ 205.887394][ T4005] hsr_slave_0: left promiscuous mode [ 205.913967][ T4005] hsr_slave_1: left promiscuous mode [ 205.922908][ T4005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.930778][ T4005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.982389][ T4005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.990300][ T4005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.127070][ T4005] veth1_macvtap: left promiscuous mode [ 206.132904][ T4005] veth0_macvtap: left promiscuous mode [ 206.139332][ T4005] veth1_vlan: left promiscuous mode [ 206.144871][ T4005] veth0_vlan: left promiscuous mode [ 207.252041][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.277189][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.307045][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.325388][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.393343][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.474605][ T6117] loop3: detected capacity change from 0 to 8192 [ 207.961902][ T4005] team0 (unregistering): Port device team_slave_1 removed [ 208.073385][ T4005] team0 (unregistering): Port device team_slave_0 removed [ 209.497838][ T5822] Bluetooth: hci2: command tx timeout [ 209.633000][ T6150] loop3: detected capacity change from 0 to 512 [ 209.721787][ T6150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 209.865451][ T6119] chnl_net:caif_netlink_parms(): no params data found [ 209.892260][ T6150] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.42: Unimplemented hash flags: 0x0001 [ 209.905753][ T6150] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.42: Corrupt directory, running e2fsck is recommended [ 209.952654][ T6150] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.42: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 210.662955][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.576692][ T5822] Bluetooth: hci2: command tx timeout [ 211.888063][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 211.960030][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.967916][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.975585][ T6119] bridge_slave_0: entered allmulticast mode [ 211.984997][ T6119] bridge_slave_0: entered promiscuous mode [ 212.018410][ T6177] netlink: 'syz.0.54': attribute type 12 has an invalid length. [ 212.026347][ T6177] netlink: 'syz.0.54': attribute type 29 has an invalid length. [ 212.036793][ T6177] netlink: 148 bytes leftover after parsing attributes in process `syz.0.54'. [ 212.046215][ T6177] netlink: 'syz.0.54': attribute type 2 has an invalid length. [ 212.054148][ T6177] netlink: 23 bytes leftover after parsing attributes in process `syz.0.54'. [ 212.131710][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.141666][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.149632][ T6119] bridge_slave_1: entered allmulticast mode [ 212.159116][ T6119] bridge_slave_1: entered promiscuous mode [ 212.191463][ T6166] loop1: detected capacity change from 0 to 8192 [ 212.704000][ T6119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.773409][ T6186] overlayfs: failed lookup in lower (newroot/16, name='file0', err=-40): overlapping layers [ 212.822253][ T6119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.837680][ T6186] overlayfs: failed lookup in lower (newroot/16, name='file0', err=-40): overlapping layers [ 212.927193][ T6188] overlayfs: failed lookup in lower (newroot/16, name='file0', err=-40): overlapping layers [ 212.989787][ T6190] overlayfs: failed lookup in lower (newroot/16, name='file0', err=-40): overlapping layers [ 213.075748][ T6186] overlayfs: failed lookup in lower (newroot/16, name='file0', err=-40): overlapping layers [ 213.292546][ T6119] team0: Port device team_slave_0 added [ 213.347239][ T1867] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 213.373263][ T6119] team0: Port device team_slave_1 added [ 213.543061][ T1867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.554418][ T1867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.564755][ T1867] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 213.574426][ T1867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.676177][ T5822] Bluetooth: hci2: command tx timeout [ 213.698183][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.705303][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.720950][ T1867] usb 4-1: config 0 descriptor?? [ 213.732124][ T6119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.890339][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.897818][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.924987][ T6119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.254275][ T1867] usbhid 4-1:0.0: can't add hid device: -71 [ 214.261051][ T1867] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 214.343341][ T1867] usb 4-1: USB disconnect, device number 2 [ 214.449646][ T6119] hsr_slave_0: entered promiscuous mode [ 214.462055][ T6119] hsr_slave_1: entered promiscuous mode [ 214.470724][ T6119] debugfs: 'hsr0' already exists in 'hsr' [ 214.476827][ T6119] Cannot create hsr debugfs directory [ 215.736916][ T5106] Bluetooth: hci2: command tx timeout [ 216.302701][ T6119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.438263][ T6119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.542433][ T6119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.621165][ T6119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.703116][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 216.717964][ T6231] veth0_to_hsr: entered promiscuous mode [ 216.723821][ T6231] veth0_to_hsr: entered allmulticast mode [ 217.251583][ T6228] loop4: detected capacity change from 0 to 8192 [ 217.393960][ T6240] syz.3.70 (6240): /proc/6238/oom_adj is deprecated, please use /proc/6238/oom_score_adj instead. [ 218.007487][ T6119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.131713][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 218.219034][ T6119] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.368207][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.375688][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.435484][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.443049][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.536789][ T1867] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 218.738549][ T1867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.750175][ T1867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.765141][ T1867] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 218.775727][ T1867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.801959][ T1867] usb 2-1: config 0 descriptor?? [ 219.385029][ T1867] usbhid 2-1:0.0: can't add hid device: -71 [ 219.393649][ T1867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 219.458413][ T1867] usb 2-1: USB disconnect, device number 2 [ 221.200325][ T6119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.839200][ T6297] nftables ruleset with unbound chain [ 221.970289][ T6300] vlan2: entered promiscuous mode [ 221.975534][ T6300] bridge0: entered promiscuous mode [ 222.450661][ T6290] loop3: detected capacity change from 0 to 8192 [ 224.247841][ T6119] veth0_vlan: entered promiscuous mode [ 224.275859][ T6330] loop4: detected capacity change from 0 to 512 [ 224.363078][ T6119] veth1_vlan: entered promiscuous mode [ 224.575888][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.582801][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.701860][ T6330] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #15: comm syz.4.93: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 224.837401][ T6339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.96'. [ 224.892401][ T6339] netlink: 'syz.0.96': attribute type 10 has an invalid length. [ 224.906649][ T6330] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.93: couldn't read orphan inode 15 (err -117) [ 224.960539][ T6330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.961976][ T6119] veth0_macvtap: entered promiscuous mode [ 224.992931][ T6339] syz_tun: entered promiscuous mode [ 225.025974][ T6339] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 225.164080][ T6119] veth1_macvtap: entered promiscuous mode [ 225.443340][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.556336][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.806871][ T1126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.877727][ T4005] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.927757][ T4005] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.984959][ T4005] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.481200][ T6370] loop3: detected capacity change from 0 to 2048 [ 227.781747][ T6376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.797039][ T6360] loop1: detected capacity change from 0 to 8192 [ 228.091634][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.344511][ T6379] loop0: detected capacity change from 0 to 512 [ 229.155918][ T6379] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #15: comm syz.0.105: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 229.317728][ T6379] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.105: couldn't read orphan inode 15 (err -117) [ 229.639198][ T6379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.558604][ T6425] overlayfs: failed lookup in lower (newroot/22, name='file0', err=-40): overlapping layers [ 231.598579][ T6425] overlayfs: failed lookup in lower (newroot/22, name='file0', err=-40): overlapping layers [ 231.637872][ T6425] overlayfs: failed lookup in lower (newroot/22, name='file0', err=-40): overlapping layers [ 231.704673][ T6427] overlayfs: failed lookup in lower (newroot/22, name='file0', err=-40): overlapping layers [ 231.868899][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.093732][ T6430] loop1: detected capacity change from 0 to 2048 [ 232.209544][ T6434] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.398590][ T6440] capability: warning: `syz.3.118' uses deprecated v2 capabilities in a way that may be insecure [ 233.277316][ T6436] loop0: detected capacity change from 0 to 8192 [ 234.538865][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.547099][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.064282][ T4698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.072566][ T4698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.121459][ T6490] Bluetooth: MGMT ver 1.23 [ 237.113714][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 237.286161][ T6497] loop5: detected capacity change from 0 to 8192 [ 239.228678][ T6530] vlan2: entered promiscuous mode [ 239.240265][ T6530] bridge0: entered promiscuous mode [ 241.491327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 242.106691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 242.716747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 243.691596][ T6523] Set syz1 is full, maxelem 65536 reached [ 243.957148][ T6549] Zero length message leads to an empty skb [ 244.137932][ T6551] loop5: detected capacity change from 0 to 512 [ 244.723950][ T6551] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #15: comm syz.5.149: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 244.918932][ T6551] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.149: couldn't read orphan inode 15 (err -117) [ 244.931577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 245.024645][ T6551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.443035][ T6567] loop4: detected capacity change from 0 to 512 [ 245.655341][ T6567] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #15: comm syz.4.154: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 245.803139][ T6567] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.154: couldn't read orphan inode 15 (err -117) [ 245.922805][ T6567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.928766][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.462913][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.044400][ T6616] vlan2: entered allmulticast mode [ 250.049997][ T6616] batadv0: entered allmulticast mode [ 250.158059][ T6614] loop3: detected capacity change from 0 to 512 [ 250.971251][ T6614] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #15: comm syz.3.169: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 251.737493][ T6614] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.169: couldn't read orphan inode 15 (err -117) [ 252.138611][ T6614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.349453][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.495342][ T6591] Set syz1 is full, maxelem 65536 reached [ 255.657905][ T6660] vlan2: entered allmulticast mode [ 255.663285][ T6660] batadv0: entered allmulticast mode [ 256.309292][ T6669] loop4: detected capacity change from 0 to 512 [ 256.500154][ T6655] loop1: detected capacity change from 0 to 8192 [ 256.573423][ T6655] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.608323][ T6669] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #15: comm syz.4.185: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 256.742757][ T6669] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.185: couldn't read orphan inode 15 (err -117) [ 256.906191][ T6669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.230509][ T30] audit: type=1326 audit(1756346218.432:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca618ebe9 code=0x7ffc0000 [ 258.253644][ T30] audit: type=1326 audit(1756346218.432:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca618ebe9 code=0x7ffc0000 [ 258.276834][ T30] audit: type=1326 audit(1756346218.442:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca618ebe9 code=0x7ffc0000 [ 258.648743][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.657416][ T30] audit: type=1326 audit(1756346218.512:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca618ebe9 code=0x7ffc0000 [ 258.657631][ T30] audit: type=1326 audit(1756346218.512:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca618ebe9 code=0x7ffc0000 [ 258.657840][ T30] audit: type=1326 audit(1756346218.522:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca618ebe9 code=0x7ffc0000 [ 258.658041][ T30] audit: type=1326 audit(1756346218.532:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca618ebe9 code=0x7ffc0000 [ 258.658237][ T30] audit: type=1326 audit(1756346218.542:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca618ebe9 code=0x7ffc0000 [ 258.658441][ T30] audit: type=1326 audit(1756346218.542:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca618ebe9 code=0x7ffc0000 [ 258.658635][ T30] audit: type=1326 audit(1756346218.552:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efca618d550 code=0x7ffc0000 [ 258.896056][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.050311][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.414831][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.399099][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 263.619660][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 263.619731][ T30] audit: type=1326 audit(1756346223.832:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 263.876933][ T30] audit: type=1326 audit(1756346223.872:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 263.877140][ T30] audit: type=1326 audit(1756346223.872:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 263.877343][ T30] audit: type=1326 audit(1756346223.872:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 263.877540][ T30] audit: type=1326 audit(1756346223.892:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 263.877743][ T30] audit: type=1326 audit(1756346223.892:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 263.877934][ T30] audit: type=1326 audit(1756346223.892:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 263.878133][ T30] audit: type=1326 audit(1756346223.892:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 263.878344][ T30] audit: type=1326 audit(1756346223.902:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5f638d550 code=0x7ffc0000 [ 263.878545][ T30] audit: type=1326 audit(1756346223.902:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 264.499774][ T6739] loop1: detected capacity change from 0 to 8192 [ 264.536119][ T6739] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.926437][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.962234][ T6775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 265.962375][ T6775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 265.976740][ T6775] bond0: entered promiscuous mode [ 265.976843][ T6775] bond_slave_0: entered promiscuous mode [ 265.977820][ T6775] bond_slave_1: entered promiscuous mode [ 266.079511][ T6775] bond0: left promiscuous mode [ 266.079612][ T6775] bond_slave_0: left promiscuous mode [ 266.080780][ T6775] bond_slave_1: left promiscuous mode [ 267.558915][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.5.224'. [ 267.661543][ T6797] vlan3: entered allmulticast mode [ 267.667283][ T6797] batadv0: entered allmulticast mode [ 268.887132][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.230'. [ 268.896248][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.230'. [ 268.919794][ T6815] bond0: entered promiscuous mode [ 268.925208][ T6815] bond_slave_0: entered promiscuous mode [ 268.941207][ T6815] bond_slave_1: entered promiscuous mode [ 269.017297][ T6815] bond0: left promiscuous mode [ 269.022444][ T6815] bond_slave_0: left promiscuous mode [ 269.029632][ T6815] bond_slave_1: left promiscuous mode [ 269.412263][ T6806] loop0: detected capacity change from 0 to 8192 [ 269.519674][ T6806] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.886969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 271.037438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 271.469610][ T6844] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 271.608986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 272.377358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 272.706956][ T5467] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 272.879596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 272.972764][ T5467] usb 6-1: Using ep0 maxpacket: 16 [ 272.991830][ T5467] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.049961][ T6863] warning: `syz.0.243' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 273.121016][ T5467] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 273.132569][ T5467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.141287][ T5467] usb 6-1: Product: syz [ 273.145643][ T5467] usb 6-1: Manufacturer: syz [ 273.153157][ T5467] usb 6-1: SerialNumber: syz [ 273.258010][ T5467] usb 6-1: config 0 descriptor?? [ 273.278071][ T5467] hub 6-1:0.0: bad descriptor, ignoring hub [ 273.284325][ T5467] hub 6-1:0.0: probe with driver hub failed with error -5 [ 273.301399][ T5467] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5 [ 273.578472][ T5467] usb 6-1: USB disconnect, device number 2 [ 274.295412][ T6867] loop3: detected capacity change from 0 to 8192 [ 274.440359][ T6867] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.717453][ T6910] virtio-fs: tag not found [ 277.963494][ T6918] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 277.972460][ T6918] bridge1: entered allmulticast mode [ 278.132408][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.259'. [ 278.624167][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 278.624215][ T30] audit: type=1326 audit(1756346238.832:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efca618ebe9 code=0x0 [ 280.707016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 282.285661][ T6958] tipc: Started in network mode [ 282.290932][ T6958] tipc: Node identity 4, cluster identity 4711 [ 282.297653][ T6958] tipc: Node number set to 4 [ 283.390532][ T6971] loop7: detected capacity change from 0 to 7 [ 283.453849][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.463389][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.503593][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.513638][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.542524][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.552192][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.567292][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.577106][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.631499][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.641391][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.653566][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.663308][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.677927][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.687578][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.697254][ T6971] ldm_validate_partition_table(): Disk read failed. [ 283.745119][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.754673][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.774399][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.783879][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.808130][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.817845][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 283.853904][ T6971] Dev loop7: unable to read RDB block 0 [ 283.977848][ T6971] loop7: unable to read partition table [ 284.027735][ T6971] loop7: partition table beyond EOD, truncated [ 284.034317][ T6971] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 284.864396][ T6988] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 284.967123][ T6987] syzkaller0: entered promiscuous mode [ 284.972958][ T6987] syzkaller0: entered allmulticast mode [ 285.269005][ T6989] loop7: detected capacity change from 0 to 7 [ 285.560656][ T6989] ldm_validate_partition_table(): Disk read failed. [ 285.609806][ T6989] Dev loop7: unable to read RDB block 0 [ 285.710864][ T6989] loop7: unable to read partition table [ 285.770513][ T6989] loop7: partition table beyond EOD, truncated [ 285.777372][ T6989] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 285.999343][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.006090][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.556702][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 286.779983][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 286.838150][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 286.888864][ T5873] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 286.898636][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.906982][ T5873] usb 1-1: Product: syz [ 286.911475][ T5873] usb 1-1: Manufacturer: syz [ 286.916247][ T5873] usb 1-1: SerialNumber: syz [ 286.937354][ T5873] usb 1-1: config 0 descriptor?? [ 286.996070][ T5873] hub 1-1:0.0: bad descriptor, ignoring hub [ 287.002358][ T5873] hub 1-1:0.0: probe with driver hub failed with error -5 [ 287.019320][ T5873] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 287.487811][ T5873] usb 1-1: USB disconnect, device number 2 [ 288.228245][ T7027] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 288.235877][ T7027] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 289.774555][ T7049] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 290.329095][ T7049] infiniband syz0: set down [ 290.339392][ T7049] infiniband syz0: added ipvlan1 [ 290.576711][ T7053] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 290.585614][ T7053] bridge1: entered allmulticast mode [ 290.680804][ T7049] RDS/IB: syz0: added [ 290.685059][ T7049] smc: adding ib device syz0 with port count 1 [ 290.692503][ T7049] smc: ib device syz0 port 1 has pnetid [ 296.634104][ T7071] syzkaller0: entered promiscuous mode [ 296.640006][ T7071] syzkaller0: entered allmulticast mode [ 298.299581][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 298.305638][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 298.306310][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 298.312736][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 298.479692][ T7088] loop5: detected capacity change from 0 to 2048 [ 298.481296][ T7085] loop0: detected capacity change from 0 to 4096 [ 298.503963][ T7085] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 298.621129][ T7092] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.916679][ T7085] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 299.277830][ T7095] tipc: Started in network mode [ 299.282967][ T7095] tipc: Node identity 4, cluster identity 4711 [ 299.289569][ T7095] tipc: Node number set to 4 [ 299.386157][ T7089] loop4: detected capacity change from 0 to 8192 [ 299.540991][ T7089] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.827912][ T7092] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 299.839044][ T7092] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 299.940518][ T7092] Remounting filesystem read-only [ 300.008066][ T6119] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 300.378459][ T7099] tipc: Started in network mode [ 300.383664][ T7099] tipc: Node identity 4, cluster identity 4711 [ 300.390254][ T7099] tipc: Node number set to 4 [ 301.794713][ T7113] tipc: Enabling of bearer rejected, failed to enable media [ 301.819165][ T7115] loop5: detected capacity change from 0 to 256 [ 301.865861][ T7111] loop1: detected capacity change from 0 to 2048 [ 302.030772][ T7115] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.120192][ T7120] syzkaller0: entered promiscuous mode [ 302.128407][ T7120] syzkaller0: entered allmulticast mode [ 302.141939][ T7118] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.575757][ T7115] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 303.674801][ T7118] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 303.687132][ T7118] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 303.755326][ T7118] Remounting filesystem read-only [ 303.773222][ T5824] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 304.044031][ T7134] loop5: detected capacity change from 0 to 128 [ 304.297414][ T7140] loop1: detected capacity change from 0 to 512 [ 304.320892][ T7140] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 304.335123][ T7140] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 304.410065][ T7140] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 304.486057][ T7140] EXT4-fs (loop1): 1 truncate cleaned up [ 304.494212][ T7140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.847689][ T7140] EXT4-fs (loop1): shut down requested (1) [ 304.863826][ T7144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.341'. [ 305.220290][ T7139] loop4: detected capacity change from 0 to 8192 [ 305.311346][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.350270][ T7139] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.906761][ T7154] tipc: Enabling of bearer rejected, failed to enable media [ 306.018868][ T7154] syzkaller0: entered promiscuous mode [ 306.024549][ T7154] syzkaller0: entered allmulticast mode [ 307.110622][ T7169] binder: Unknown parameter 'context' [ 307.133599][ T7167] loop1: detected capacity change from 0 to 64 [ 308.014091][ T7177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.354'. [ 308.720596][ T7187] loop3: detected capacity change from 0 to 2048 [ 308.902852][ T7190] tipc: Enabling of bearer rejected, failed to enable media [ 308.917080][ T7192] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.998952][ T7190] syzkaller0: entered promiscuous mode [ 309.004727][ T7190] syzkaller0: entered allmulticast mode [ 309.178040][ T30] audit: type=1800 audit(1756346269.342:39): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.358" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 310.112672][ T7202] loop0: detected capacity change from 0 to 128 [ 310.177959][ T7202] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 310.260782][ T7202] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 310.910360][ T7208] loop1: detected capacity change from 0 to 512 [ 311.114019][ T7208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.131791][ T7208] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.636668][ T30] audit: type=1800 audit(1756346271.832:40): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.358" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 311.669184][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.703558][ T7217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.369'. [ 311.967014][ T7192] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 311.979023][ T7192] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 312.024910][ T7192] Remounting filesystem read-only [ 312.035817][ T5820] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 312.426040][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.374'. [ 313.063227][ T7231] loop0: detected capacity change from 0 to 1024 [ 313.205692][ T7231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 313.219645][ T7231] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.307020][ T7231] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.376: lblock 3 mapped to illegal pblock 3 (length 3) [ 313.351956][ T7231] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 313.365137][ T7231] EXT4-fs (loop0): This should not happen!! Data will be lost [ 313.365137][ T7231] [ 313.426998][ T7241] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm syz.0.376: lblock 8 mapped to illegal pblock 8 (length 8) [ 313.458957][ T7241] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 313.472143][ T7241] EXT4-fs (loop0): This should not happen!! Data will be lost [ 313.472143][ T7241] [ 313.638721][ T7241] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.376: lblock 0 mapped to illegal pblock 0 (length 3) [ 313.713406][ T7241] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 313.726316][ T7241] EXT4-fs (loop0): This should not happen!! Data will be lost [ 313.726316][ T7241] [ 314.210526][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 314.223402][ T7249] loop5: detected capacity change from 0 to 256 [ 314.281120][ T7249] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.450538][ T7249] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 314.620447][ T7246] loop3: detected capacity change from 0 to 4096 [ 314.662016][ T7246] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 315.191099][ T7252] loop1: detected capacity change from 0 to 8192 [ 315.930834][ T7266] loop5: detected capacity change from 0 to 128 [ 316.018699][ T7266] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 316.151177][ T7266] UDF-fs: warning (device loop5): udf_fill_super: No fileset found [ 316.516916][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 316.712730][ T5873] usb 5-1: device descriptor read/64, error -71 [ 316.934654][ T5817] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 316.976646][ T5873] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 317.144859][ T5873] usb 5-1: device descriptor read/64, error -71 [ 317.278576][ T7284] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 317.287793][ T7284] bridge2: entered allmulticast mode [ 317.388931][ T5873] usb usb5-port1: attempt power cycle [ 317.870107][ T5873] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 317.938307][ T5873] usb 5-1: device descriptor read/8, error -71 [ 318.197214][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 318.221583][ T7292] loop5: detected capacity change from 0 to 1024 [ 318.247575][ T7296] input: syz0 as /devices/virtual/input/input7 [ 318.300234][ T5873] usb 5-1: device descriptor read/8, error -71 [ 318.414650][ T7292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 318.426504][ T5873] usb usb5-port1: unable to enumerate USB device [ 318.428970][ T7292] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.584409][ T7292] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.399: lblock 3 mapped to illegal pblock 3 (length 3) [ 318.709186][ T7292] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 318.722027][ T7292] EXT4-fs (loop5): This should not happen!! Data will be lost [ 318.722027][ T7292] [ 318.748266][ T7300] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 318.827753][ T7303] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm syz.5.399: lblock 8 mapped to illegal pblock 8 (length 8) [ 318.847495][ T7302] loop3: detected capacity change from 0 to 764 [ 318.876591][ T7303] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 318.890187][ T7303] EXT4-fs (loop5): This should not happen!! Data will be lost [ 318.890187][ T7303] [ 318.940933][ T7302] rock: directory entry would overflow storage [ 318.947522][ T7302] rock: sig=0x4654, size=5, remaining=4 [ 319.042439][ T7303] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.399: lblock 0 mapped to illegal pblock 0 (length 3) [ 319.082335][ T7303] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 319.095370][ T7303] EXT4-fs (loop5): This should not happen!! Data will be lost [ 319.095370][ T7303] [ 319.585958][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 319.898998][ T7308] loop3: detected capacity change from 0 to 128 [ 319.996001][ T7308] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 320.168194][ T7308] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 320.220908][ T7314] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 320.431947][ T5817] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 321.120916][ T30] audit: type=1326 audit(1756346281.312:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 321.143870][ T30] audit: type=1326 audit(1756346281.312:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 321.168010][ T30] audit: type=1326 audit(1756346281.332:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 321.191725][ T30] audit: type=1326 audit(1756346281.332:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 321.214466][ T30] audit: type=1326 audit(1756346281.332:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 321.237599][ T5467] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 321.290526][ T30] audit: type=1326 audit(1756346281.502:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 321.318906][ T30] audit: type=1326 audit(1756346281.522:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 321.350329][ T30] audit: type=1326 audit(1756346281.552:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 321.374486][ T30] audit: type=1326 audit(1756346281.552:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638ebe9 code=0x7ffc0000 [ 321.374707][ T30] audit: type=1326 audit(1756346281.572:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.0.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5f638d550 code=0x7ffc0000 [ 321.454879][ T5467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.455043][ T5467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.455232][ T5467] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 321.455379][ T5467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.464082][ T5467] usb 4-1: config 0 descriptor?? [ 321.575439][ T7332] loop5: detected capacity change from 0 to 764 [ 321.584397][ T7332] rock: directory entry would overflow storage [ 321.584447][ T7332] rock: sig=0x4654, size=5, remaining=4 [ 322.045422][ T7336] tipc: Enabled bearer , priority 0 [ 322.054436][ T7336] syzkaller0: entered promiscuous mode [ 322.054536][ T7336] syzkaller0: entered allmulticast mode [ 322.155736][ T7337] tipc: Resetting bearer [ 322.203078][ T5467] hid-led 0003:1D34:0004.0001: probe with driver hid-led failed with error -71 [ 322.230082][ T5467] usb 4-1: USB disconnect, device number 3 [ 322.257372][ T7335] tipc: Resetting bearer [ 322.301853][ T7335] tipc: Disabling bearer [ 323.827401][ T7350] loop0: detected capacity change from 0 to 4096 [ 323.849014][ T7350] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 324.822489][ T7363] loop5: detected capacity change from 0 to 764 [ 324.924779][ T7363] rock: directory entry would overflow storage [ 324.931515][ T7363] rock: sig=0x4654, size=5, remaining=4 [ 324.949204][ T7369] loop3: detected capacity change from 0 to 128 [ 325.727436][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.434'. [ 325.748193][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 325.958254][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.974153][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.977134][ T7384] loop4: detected capacity change from 0 to 128 [ 325.986687][ T5873] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 326.000517][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.115464][ T7384] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 326.187651][ T7384] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 326.239620][ T5873] usb 1-1: config 0 descriptor?? [ 326.975398][ T5873] hid-led 0003:1D34:0004.0002: probe with driver hid-led failed with error -71 [ 327.035204][ T5873] usb 1-1: USB disconnect, device number 3 [ 327.208513][ T7392] loop5: detected capacity change from 0 to 256 [ 327.264901][ T7392] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 327.523794][ T7392] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 327.939762][ T7399] loop4: detected capacity change from 0 to 512 [ 328.218934][ T7399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.238478][ T7399] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.490952][ T7404] loop0: detected capacity change from 0 to 764 [ 328.598012][ T7404] rock: directory entry would overflow storage [ 328.604599][ T7404] rock: sig=0x4654, size=5, remaining=4 [ 329.186018][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.427847][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 330.126850][ T5873] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 330.321705][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.333482][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.343889][ T5873] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 330.353475][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.470549][ T5873] usb 4-1: config 0 descriptor?? [ 331.136606][ T5873] hid-led 0003:1D34:0004.0003: probe with driver hid-led failed with error -71 [ 331.168599][ T5873] usb 4-1: USB disconnect, device number 4 [ 331.376790][ T5467] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 331.628039][ T5467] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.640195][ T5467] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.650501][ T5467] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.664075][ T5467] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.673530][ T5467] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.871438][ T5467] usb 6-1: config 0 descriptor?? [ 332.390052][ T5467] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 334.139514][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 334.454360][ T1867] usb 6-1: USB disconnect, device number 3 [ 334.666739][ T5467] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 334.848560][ T7493] loop5: detected capacity change from 0 to 1024 [ 334.895586][ T5467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.907020][ T5467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.917203][ T5467] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 334.926672][ T5467] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.057839][ T5467] usb 5-1: config 0 descriptor?? [ 335.063191][ T7493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 335.077092][ T7493] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.430909][ T7493] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.481: lblock 3 mapped to illegal pblock 3 (length 3) [ 335.631450][ T7493] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 335.644319][ T7493] EXT4-fs (loop5): This should not happen!! Data will be lost [ 335.644319][ T7493] [ 335.799995][ T5467] hid-led 0003:1D34:0004.0005: probe with driver hid-led failed with error -71 [ 335.878296][ T5467] usb 5-1: USB disconnect, device number 6 [ 336.219596][ T1126] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 336.269431][ T1126] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 336.282644][ T1126] EXT4-fs (loop5): This should not happen!! Data will be lost [ 336.282644][ T1126] [ 336.313231][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 336.626728][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.487'. [ 336.682432][ T7519] netlink: 'syz.3.489': attribute type 12 has an invalid length. [ 336.690673][ T7519] netlink: 'syz.3.489': attribute type 29 has an invalid length. [ 336.699618][ T7519] netlink: 148 bytes leftover after parsing attributes in process `syz.3.489'. [ 336.839229][ T7520] loop5: detected capacity change from 0 to 512 [ 337.070644][ T7520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.083862][ T7520] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.121882][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.471579][ T7543] syz_tun: entered allmulticast mode [ 339.243650][ T7533] Set syz1 is full, maxelem 65536 reached [ 339.838704][ T5467] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 340.039021][ T7556] netlink: 'syz.4.502': attribute type 12 has an invalid length. [ 340.047173][ T7556] netlink: 'syz.4.502': attribute type 29 has an invalid length. [ 340.054618][ T5467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.055183][ T7556] netlink: 148 bytes leftover after parsing attributes in process `syz.4.502'. [ 340.067336][ T5467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.086733][ T5467] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 340.096259][ T5467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.129294][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.503'. [ 340.207004][ T5467] usb 4-1: config 0 descriptor?? [ 340.897459][ T5467] hid-led 0003:1D34:0004.0006: probe with driver hid-led failed with error -71 [ 340.943754][ T7566] loop0: detected capacity change from 0 to 512 [ 340.957871][ T5467] usb 4-1: USB disconnect, device number 5 [ 341.055129][ T7566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.069490][ T7566] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.302382][ T30] audit: type=1800 audit(1756346301.512:51): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.507" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 341.980992][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.455226][ T7579] syz_tun: entered allmulticast mode [ 342.981887][ T7573] loop4: detected capacity change from 0 to 8192 [ 343.383693][ T7573] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 343.881292][ T7585] loop3: detected capacity change from 0 to 2048 [ 343.980819][ T7578] Set syz1 is full, maxelem 65536 reached [ 344.123770][ T7591] netlink: 'syz.5.516': attribute type 12 has an invalid length. [ 344.132043][ T7591] netlink: 'syz.5.516': attribute type 29 has an invalid length. [ 344.141758][ T7591] netlink: 148 bytes leftover after parsing attributes in process `syz.5.516'. [ 344.232440][ T7592] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.423206][ T30] audit: type=1800 audit(1756346304.582:52): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.515" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 345.269655][ T7606] loop0: detected capacity change from 0 to 512 [ 345.569471][ T7606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.583297][ T7606] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.740650][ T5467] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 345.747136][ T30] audit: type=1800 audit(1756346305.942:53): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.521" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 345.970864][ T5467] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.982390][ T5467] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.992713][ T5467] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 346.002398][ T5467] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.024294][ T7615] loop3: detected capacity change from 0 to 2048 [ 346.169284][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.191844][ T5467] usb 6-1: config 0 descriptor?? [ 346.300250][ T7618] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.031703][ T5467] hid-led 0003:1D34:0004.0007: probe with driver hid-led failed with error -71 [ 347.108053][ T5467] usb 6-1: USB disconnect, device number 4 [ 347.206273][ T7618] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 347.217885][ T7618] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 347.389194][ T7618] Remounting filesystem read-only [ 347.398268][ T5820] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 347.528252][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.534958][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.168978][ T7634] netlink: 'syz.5.529': attribute type 12 has an invalid length. [ 349.177684][ T7634] netlink: 'syz.5.529': attribute type 29 has an invalid length. [ 349.185971][ T7634] netlink: 148 bytes leftover after parsing attributes in process `syz.5.529'. [ 349.700438][ T7636] loop0: detected capacity change from 0 to 2048 [ 349.935806][ T7637] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.279442][ T7629] Set syz1 is full, maxelem 65536 reached [ 353.355532][ T7649] loop5: detected capacity change from 0 to 512 [ 353.750801][ T7645] loop0: detected capacity change from 0 to 8192 [ 353.991061][ T7645] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.099988][ T7649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.113400][ T7649] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.117217][ T7657] loop3: detected capacity change from 0 to 256 [ 354.144365][ T7657] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.247060][ T30] audit: type=1800 audit(1756346314.422:54): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.535" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 354.329155][ T7658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.538'. [ 354.357775][ T7657] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 354.923151][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.785395][ T7669] netlink: 'syz.3.542': attribute type 12 has an invalid length. [ 355.793626][ T7669] netlink: 'syz.3.542': attribute type 29 has an invalid length. [ 355.801912][ T7669] netlink: 148 bytes leftover after parsing attributes in process `syz.3.542'. [ 356.940189][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 356.953574][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.547'. [ 357.881081][ T7691] virtio-fs: tag not found [ 357.943007][ T7693] loop1: detected capacity change from 0 to 256 [ 358.138858][ T7693] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.333990][ T5821] Bluetooth: Unexpected start frame (len 12) [ 358.367649][ T7693] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 358.421950][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 359.202667][ T7701] netlink: 'syz.5.555': attribute type 12 has an invalid length. [ 359.210913][ T7701] netlink: 'syz.5.555': attribute type 29 has an invalid length. [ 359.219132][ T7701] netlink: 148 bytes leftover after parsing attributes in process `syz.5.555'. [ 360.455786][ T7715] syz_tun: entered allmulticast mode [ 360.847006][ T5873] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 361.046853][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 361.077806][ T5873] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 361.087408][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.159600][ T5873] usb 6-1: config 0 descriptor?? [ 361.482229][ T5873] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 361.540269][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.620098][ T5873] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 361.627667][ T5873] usb 6-1: media controller created [ 361.735076][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.165708][ T7727] loop0: detected capacity change from 0 to 256 [ 362.210607][ T5873] az6027: usb out operation failed. (-71) [ 362.226880][ T5873] az6027: usb out operation failed. (-71) [ 362.232798][ T5873] stb0899_attach: Driver disabled by Kconfig [ 362.239272][ T5873] az6027: no front-end attached [ 362.239272][ T5873] [ 362.248437][ T5873] az6027: usb out operation failed. (-71) [ 362.254342][ T5873] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 362.265239][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 362.309604][ T5873] dvb-usb: schedule remote query interval to 400 msecs. [ 362.313655][ T7727] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.316960][ T5873] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 362.519656][ T5873] usb 6-1: USB disconnect, device number 5 [ 362.557832][ T7727] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 362.899902][ T7733] netlink: 'syz.4.568': attribute type 12 has an invalid length. [ 362.908649][ T7733] netlink: 'syz.4.568': attribute type 29 has an invalid length. [ 362.917476][ T7733] netlink: 148 bytes leftover after parsing attributes in process `syz.4.568'. [ 362.976276][ T7735] loop5: detected capacity change from 0 to 1024 [ 363.029621][ T7735] EXT4-fs: Ignoring removed nobh option [ 363.039666][ T7735] EXT4-fs: Ignoring removed bh option [ 363.132515][ T5873] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 363.274764][ T7735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.573053][ T7735] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 364.150741][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.121104][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 366.531409][ T7765] netlink: 136 bytes leftover after parsing attributes in process `syz.0.579'. [ 366.540687][ T7765] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 366.909680][ T7768] netlink: 'syz.1.581': attribute type 12 has an invalid length. [ 366.917929][ T7768] netlink: 'syz.1.581': attribute type 29 has an invalid length. [ 366.925817][ T7768] netlink: 148 bytes leftover after parsing attributes in process `syz.1.581'. [ 367.198113][ T7771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.349087][ T7772] tipc: Started in network mode [ 367.354242][ T7772] tipc: Node identity 62fd99d5b86e, cluster identity 4711 [ 367.362612][ T7772] tipc: Enabled bearer , priority 0 [ 367.382604][ T7774] loop3: detected capacity change from 0 to 1024 [ 367.431685][ T7774] EXT4-fs: Ignoring removed nobh option [ 367.437785][ T7774] EXT4-fs: Ignoring removed bh option [ 367.447774][ T7777] syzkaller0: entered promiscuous mode [ 367.453440][ T7777] syzkaller0: entered allmulticast mode [ 367.551975][ T7769] tipc: Resetting bearer [ 367.641383][ T7769] tipc: Disabling bearer [ 367.698124][ T7774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.948829][ T7774] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 368.724646][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.256127][ T7794] vlan3: entered promiscuous mode [ 369.261682][ T7794] bridge0: entered promiscuous mode [ 370.154878][ T7805] netlink: 136 bytes leftover after parsing attributes in process `syz.0.594'. [ 370.164494][ T7805] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 370.283927][ T7807] netlink: 'syz.1.595': attribute type 12 has an invalid length. [ 370.292568][ T7807] netlink: 'syz.1.595': attribute type 29 has an invalid length. [ 370.300835][ T7807] netlink: 148 bytes leftover after parsing attributes in process `syz.1.595'. [ 370.426892][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 370.728141][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.739486][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.750092][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 370.759714][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.969518][ T9] usb 4-1: config 0 descriptor?? [ 371.481895][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 371.489526][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 371.497105][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 371.504487][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 371.512159][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 371.519573][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 371.527172][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 371.538315][ T7816] loop5: detected capacity change from 0 to 1024 [ 371.585939][ T7816] EXT4-fs: Ignoring removed nobh option [ 371.592102][ T7816] EXT4-fs: Ignoring removed bh option [ 371.688701][ T9] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 371.741777][ T7816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.794714][ T9] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 372.002067][ T9] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 372.058679][ T9] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -32 [ 372.084693][ T7816] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 372.182677][ T9] usb 4-1: USB disconnect, device number 6 [ 372.331017][ T7822] fido_id[7822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 372.671927][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.159191][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.604'. [ 373.314776][ T7844] netlink: 'syz.0.607': attribute type 12 has an invalid length. [ 373.323182][ T7844] netlink: 'syz.0.607': attribute type 29 has an invalid length. [ 373.331746][ T7844] netlink: 148 bytes leftover after parsing attributes in process `syz.0.607'. [ 373.363124][ T7845] netlink: 136 bytes leftover after parsing attributes in process `syz.3.606'. [ 373.372660][ T7845] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 375.479094][ T7876] loop1: detected capacity change from 0 to 2048 [ 375.544175][ T7876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.667624][ T7882] netlink: 136 bytes leftover after parsing attributes in process `syz.0.621'. [ 375.676986][ T7882] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 376.458486][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 376.675797][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.687878][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.698473][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 376.707889][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.867245][ T9] usb 2-1: config 0 descriptor?? [ 377.357362][ T9] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 377.364714][ T9] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 377.373137][ T9] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 377.382548][ T9] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 377.390046][ T9] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 377.397511][ T9] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 377.404741][ T9] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 377.501928][ T9] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 377.569893][ T9] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 378.182165][ T7888] cp2112 0003:10C4:EA90.0009: Error starting transaction: -38 [ 378.196876][ T9] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 378.218644][ T7908] loop4: detected capacity change from 0 to 2048 [ 378.266677][ T9] usb 2-1: USB disconnect, device number 3 [ 378.345347][ T7903] fido_id[7903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 378.463423][ T7916] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.745401][ T7925] loop1: detected capacity change from 0 to 2048 [ 379.845007][ T7925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.011398][ T7916] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 380.023155][ T7916] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 380.140429][ T7916] Remounting filesystem read-only [ 380.158465][ T5813] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 383.017271][ T5873] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 383.238598][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 383.249990][ T5873] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 383.259394][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.436206][ T5873] usb 5-1: config 0 descriptor?? [ 383.444002][ T7959] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 383.714515][ T7965] loop1: detected capacity change from 0 to 2048 [ 384.011656][ T7967] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.139643][ T5873] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 384.311249][ T7959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.321119][ T7959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.361191][ T7968] loop3: detected capacity change from 0 to 2048 [ 384.522028][ T7968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.054607][ T9] usb 5-1: USB disconnect, device number 7 [ 385.557943][ T7967] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 385.569359][ T7967] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 385.592146][ T7967] Remounting filesystem read-only [ 385.607332][ T5824] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 386.934513][ T7989] loop5: detected capacity change from 0 to 512 [ 386.984531][ T7989] EXT4-fs (loop5): Test dummy encryption mode enabled [ 386.991978][ T7989] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 387.061710][ T7989] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.657: bad orphan inode 131083 [ 387.088872][ T7989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.598195][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.285187][ T8004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 388.304560][ T8002] loop5: detected capacity change from 0 to 2048 [ 388.503298][ T8008] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 389.017344][ T8008] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 389.028384][ T8008] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 389.082875][ T8008] Remounting filesystem read-only [ 389.095370][ T6119] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 389.750683][ T8020] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 389.758419][ T8020] macvtap1: entered promiscuous mode [ 390.493476][ T8030] loop0: detected capacity change from 0 to 512 [ 390.566856][ T8030] EXT4-fs (loop0): Test dummy encryption mode enabled [ 390.574047][ T8030] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.598999][ T8030] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.671: bad orphan inode 131083 [ 390.613113][ T8030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.380021][ T8041] loop4: detected capacity change from 0 to 1024 [ 391.428416][ T8041] EXT4-fs: Ignoring removed nobh option [ 391.434256][ T8041] EXT4-fs: Ignoring removed bh option [ 391.470640][ T5812] syz_tun (unregistering): left allmulticast mode [ 391.488808][ T5812] bond0: (slave syz_tun): Releasing backup interface [ 391.578398][ T8042] loop3: detected capacity change from 0 to 2048 [ 391.646913][ T8041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.757764][ T8047] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.772313][ T4094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.802268][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.051425][ T4094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.332255][ T4094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.407901][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.493731][ T4094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.025219][ T4094] bridge_slave_1: left allmulticast mode [ 393.031414][ T4094] bridge_slave_1: left promiscuous mode [ 393.044533][ T4094] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.184383][ T4094] bridge_slave_0: left allmulticast mode [ 393.190988][ T4094] bridge_slave_0: left promiscuous mode [ 393.197547][ T4094] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.942545][ T4094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.997811][ T4094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.023303][ T4094] bond0 (unregistering): Released all slaves [ 394.229178][ T4094] tipc: Left network mode [ 395.109141][ T4094] hsr_slave_0: left promiscuous mode [ 395.127178][ T4094] hsr_slave_1: left promiscuous mode [ 395.142788][ T4094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.153243][ T4094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.258232][ T4094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.265821][ T4094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.427034][ T4094] veth1_macvtap: left promiscuous mode [ 395.432759][ T4094] veth0_macvtap: left promiscuous mode [ 395.438905][ T4094] veth1_vlan: left promiscuous mode [ 395.444417][ T4094] veth0_vlan: left promiscuous mode [ 396.155997][ T4158] smc: removing ib device syz0 [ 396.452873][ T8072] loop1: detected capacity change from 0 to 512 [ 396.546721][ T8072] EXT4-fs (loop1): Test dummy encryption mode enabled [ 396.553932][ T8072] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 396.718021][ T8072] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.686: bad orphan inode 131083 [ 396.919259][ T8072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.190772][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 397.268303][ T4094] team0 (unregistering): Port device team_slave_1 removed [ 397.375703][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 397.385184][ T4094] team0 (unregistering): Port device team_slave_0 removed [ 397.517112][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 397.579398][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 397.593951][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.088937][ T5821] Bluetooth: hci1: command tx timeout [ 400.459525][ T5824] syz_tun (unregistering): left allmulticast mode [ 400.469113][ T5824] bond0: (slave syz_tun): Releasing backup interface [ 400.536742][ T1867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 400.620747][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.708470][ T4094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.751471][ T1867] usb 4-1: Using ep0 maxpacket: 16 [ 400.777408][ T1867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.788123][ T1867] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.820677][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 400.862259][ T1867] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 400.871987][ T1867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.880492][ T1867] usb 4-1: Product: syz [ 400.884845][ T1867] usb 4-1: Manufacturer: syz [ 400.889613][ T1867] usb 4-1: SerialNumber: syz [ 400.906200][ T4094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.971974][ T1867] usb 4-1: config 0 descriptor?? [ 401.009489][ T1867] hub 4-1:0.0: bad descriptor, ignoring hub [ 401.015812][ T1867] hub 4-1:0.0: probe with driver hub failed with error -5 [ 401.122656][ T4094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.400643][ T1867] usb 4-1: USB disconnect, device number 7 [ 401.442713][ T4094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.976915][ T4094] bridge_slave_1: left allmulticast mode [ 401.982871][ T4094] bridge_slave_1: left promiscuous mode [ 401.989583][ T4094] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.068663][ T4094] bridge_slave_0: left allmulticast mode [ 402.074536][ T4094] bridge_slave_0: left promiscuous mode [ 402.081078][ T4094] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.148128][ T5821] Bluetooth: hci1: command tx timeout [ 402.694118][ T4094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.742767][ T4094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.771903][ T4094] bond0 (unregistering): Released all slaves [ 403.048538][ T4094] tipc: Left network mode [ 403.639281][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.647848][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.655336][ T8081] bridge_slave_0: entered allmulticast mode [ 403.664944][ T8081] bridge_slave_0: entered promiscuous mode [ 403.749091][ T4094] hsr_slave_0: left promiscuous mode [ 403.795420][ T4094] hsr_slave_1: left promiscuous mode [ 403.803392][ T4094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.811194][ T4094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.894444][ T4094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.902609][ T4094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.955836][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 404.027204][ T4094] veth1_macvtap: left promiscuous mode [ 404.033060][ T4094] veth0_macvtap: left promiscuous mode [ 404.040215][ T4094] veth1_vlan: left promiscuous mode [ 404.045756][ T4094] veth0_vlan: left promiscuous mode [ 404.217635][ T5821] Bluetooth: hci1: command tx timeout [ 404.739644][ T4094] team0 (unregistering): Port device team_slave_1 removed [ 404.944181][ T4094] team0 (unregistering): Port device team_slave_0 removed [ 405.083184][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.093787][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.104815][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.218724][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.226726][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.234443][ T8081] bridge_slave_1: entered allmulticast mode [ 405.244271][ T8081] bridge_slave_1: entered promiscuous mode [ 405.305754][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.317564][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.636161][ T8125] syz_tun: entered allmulticast mode [ 405.661858][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.864939][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.474579][ T8081] team0: Port device team_slave_0 added [ 406.517140][ T5821] Bluetooth: hci1: command tx timeout [ 407.209592][ T8137] vlan3: entered allmulticast mode [ 407.228595][ T8081] team0: Port device team_slave_1 added [ 407.579809][ T5817] Bluetooth: hci4: command tx timeout [ 407.641875][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.649147][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.676081][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.751289][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.759460][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.785961][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.097701][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 408.480075][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 408.553327][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 408.593587][ T8081] hsr_slave_0: entered promiscuous mode [ 408.605790][ T8081] hsr_slave_1: entered promiscuous mode [ 408.614487][ T8081] debugfs: 'hsr0' already exists in 'hsr' [ 408.620630][ T8081] Cannot create hsr debugfs directory [ 408.719032][ T5875] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 408.728528][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.736964][ T5875] usb 4-1: Product: syz [ 408.741356][ T5875] usb 4-1: Manufacturer: syz [ 408.746113][ T5875] usb 4-1: SerialNumber: syz [ 408.812789][ T8119] chnl_net:caif_netlink_parms(): no params data found [ 408.902446][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.909278][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.918201][ T5875] usb 4-1: config 0 descriptor?? [ 408.986200][ T5875] hub 4-1:0.0: bad descriptor, ignoring hub [ 408.992995][ T5875] hub 4-1:0.0: probe with driver hub failed with error -5 [ 409.308416][ T5873] usb 4-1: USB disconnect, device number 8 [ 409.657014][ T5817] Bluetooth: hci4: command tx timeout [ 409.689171][ T8161] loop5: detected capacity change from 0 to 2048 [ 409.878870][ T8161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.589085][ T8081] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 410.659142][ T8081] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 410.751397][ T8081] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 410.861293][ T8081] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 410.947564][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 411.197015][ T5873] usb 4-1: device descriptor read/64, error -71 [ 411.228027][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.235547][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.244039][ T8119] bridge_slave_0: entered allmulticast mode [ 411.252307][ T8119] bridge_slave_0: entered promiscuous mode [ 411.338784][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.346475][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.354016][ T8119] bridge_slave_1: entered allmulticast mode [ 411.362797][ T8119] bridge_slave_1: entered promiscuous mode [ 411.467097][ T5873] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 411.617182][ T5873] usb 4-1: device descriptor read/64, error -71 [ 411.738391][ T5817] Bluetooth: hci4: command tx timeout [ 411.745124][ T5873] usb usb4-port1: attempt power cycle [ 411.908636][ T8119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.011061][ T8119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.180229][ T5873] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 412.239476][ T5873] usb 4-1: device descriptor read/8, error -71 [ 412.441708][ T8119] team0: Port device team_slave_0 added [ 412.497318][ T8119] team0: Port device team_slave_1 added [ 412.507249][ T5873] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 412.573999][ T5873] usb 4-1: device descriptor read/8, error -71 [ 412.775857][ T5873] usb usb4-port1: unable to enumerate USB device [ 412.822254][ T8081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.833153][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.841906][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.869017][ T8119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.990138][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.052685][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.060038][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.086858][ T8119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.145931][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.153500][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.169367][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.177040][ T4698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.802163][ T8119] hsr_slave_0: entered promiscuous mode [ 413.812080][ T8119] hsr_slave_1: entered promiscuous mode [ 413.820815][ T8119] debugfs: 'hsr0' already exists in 'hsr' [ 413.822892][ T5817] Bluetooth: hci4: command tx timeout [ 413.829597][ T8119] Cannot create hsr debugfs directory [ 413.860875][ T8081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.636117][ T5875] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 414.876936][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 414.899922][ T8208] loop3: detected capacity change from 0 to 2048 [ 414.917667][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 414.976436][ T5875] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 414.985729][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.994988][ T5875] usb 5-1: Product: syz [ 415.000343][ T5875] usb 5-1: Manufacturer: syz [ 415.002686][ T8208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.005099][ T5875] usb 5-1: SerialNumber: syz [ 415.185922][ T5875] usb 5-1: config 0 descriptor?? [ 415.247266][ T5875] hub 5-1:0.0: bad descriptor, ignoring hub [ 415.253394][ T5875] hub 5-1:0.0: probe with driver hub failed with error -5 [ 415.530263][ T5875] usb 5-1: USB disconnect, device number 8 [ 415.734274][ T8081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.866045][ T8119] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 416.026212][ T8119] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 416.421491][ T8119] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 416.527877][ T8119] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 417.565613][ T8239] vlan2: entered allmulticast mode [ 417.571353][ T8239] batadv0: entered allmulticast mode [ 417.928512][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.164678][ T8119] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.290379][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.297808][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.427603][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.435206][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.173524][ T8081] veth0_vlan: entered promiscuous mode [ 419.344028][ T8081] veth1_vlan: entered promiscuous mode [ 419.769493][ T8081] veth0_macvtap: entered promiscuous mode [ 419.856897][ T8081] veth1_macvtap: entered promiscuous mode [ 420.265165][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.349920][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.532826][ T8264] loop4: detected capacity change from 0 to 2048 [ 420.596859][ T4158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.668619][ T4005] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.691900][ T8264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.736031][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.851007][ T1877] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.208330][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.456607][ T1867] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 421.716908][ T1867] usb 6-1: Using ep0 maxpacket: 16 [ 421.780635][ T1867] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.858884][ T1867] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 421.868442][ T1867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.877632][ T1867] usb 6-1: Product: syz [ 421.882046][ T1867] usb 6-1: Manufacturer: syz [ 421.886920][ T1867] usb 6-1: SerialNumber: syz [ 421.999412][ T1867] usb 6-1: config 0 descriptor?? [ 422.039902][ T1867] hub 6-1:0.0: bad descriptor, ignoring hub [ 422.046030][ T1867] hub 6-1:0.0: probe with driver hub failed with error -5 [ 422.437514][ T5873] usb 6-1: USB disconnect, device number 6 [ 424.204108][ T8119] veth0_vlan: entered promiscuous mode [ 424.351546][ T8119] veth1_vlan: entered promiscuous mode [ 424.753463][ T8119] veth0_macvtap: entered promiscuous mode [ 424.898464][ T8119] veth1_macvtap: entered promiscuous mode [ 425.254042][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.390970][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.570761][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.628287][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.728269][ T1877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.792602][ T1877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.228746][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 426.447601][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 426.492676][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 426.597557][ T9] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 426.607138][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.615393][ T9] usb 6-1: Product: syz [ 426.620517][ T9] usb 6-1: Manufacturer: syz [ 426.625295][ T9] usb 6-1: SerialNumber: syz [ 426.728934][ T9] usb 6-1: config 0 descriptor?? [ 426.753447][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 426.759908][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 426.778860][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input9 [ 427.392094][ T5873] usb 6-1: USB disconnect, device number 7 [ 427.894823][ T8357] loop4: detected capacity change from 0 to 2048 [ 428.082115][ T8357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.226191][ T8357] overlayfs: missing 'lowerdir' [ 429.221595][ T4094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.230972][ T4094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.357717][ T8377] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 429.553382][ T4698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.561960][ T4698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.186598][ T5873] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 431.363123][ T8407] loop5: detected capacity change from 0 to 2048 [ 431.396852][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 431.457608][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 431.504741][ T5873] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 431.514535][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.522908][ T5873] usb 4-1: Product: syz [ 431.527420][ T5873] usb 4-1: Manufacturer: syz [ 431.532191][ T5873] usb 4-1: SerialNumber: syz [ 431.635112][ T8407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.700079][ T5873] usb 4-1: config 0 descriptor?? [ 431.799057][ T5873] hub 4-1:0.0: bad descriptor, ignoring hub [ 431.805352][ T5873] hub 4-1:0.0: probe with driver hub failed with error -5 [ 431.807693][ T8407] overlayfs: missing 'lowerdir' [ 431.821530][ T5873] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 432.078193][ T5873] usb 4-1: USB disconnect, device number 13 [ 432.821244][ T8426] loop5: detected capacity change from 0 to 512 [ 433.150172][ T8426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.164170][ T8426] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.542551][ T4094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.550972][ T4094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.782311][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.855688][ T4005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.864303][ T4005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.557095][ T5873] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 434.752525][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 434.811971][ T5873] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 434.824301][ T5873] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 434.836198][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.978693][ T5873] usb 5-1: string descriptor 0 read error: -22 [ 434.985603][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.995314][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.198853][ T5873] usb 5-1: 0:2 : does not exist [ 435.271753][ T8458] loop6: detected capacity change from 0 to 2048 [ 435.307004][ T5874] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 435.376724][ T5873] usb 5-1: USB disconnect, device number 9 [ 435.478282][ T8458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.506586][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 435.542627][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 435.597194][ T5874] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 435.606817][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.615192][ T5874] usb 4-1: Product: syz [ 435.620083][ T5874] usb 4-1: Manufacturer: syz [ 435.624955][ T5874] usb 4-1: SerialNumber: syz [ 435.641981][ T8458] overlayfs: missing 'lowerdir' [ 435.732462][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.809785][ T5874] usb 4-1: config 0 descriptor?? [ 435.855275][ T5874] hub 4-1:0.0: bad descriptor, ignoring hub [ 435.861955][ T5874] hub 4-1:0.0: probe with driver hub failed with error -5 [ 435.880273][ T5874] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 436.057234][ T8470] loop7: detected capacity change from 0 to 512 [ 436.396233][ T8470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.409838][ T8470] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.143974][ T8119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.070137][ T8496] loop7: detected capacity change from 0 to 4096 [ 438.303169][ T8504] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.650915][ T8503] loop5: detected capacity change from 0 to 2048 [ 438.771730][ T8503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.987626][ T8503] overlay: Unknown parameter '/' [ 439.647902][ T5874] usb 4-1: USB disconnect, device number 14 [ 439.706685][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 439.956931][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 439.980912][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.039531][ T9] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 440.051530][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.060974][ T9] usb 8-1: Product: syz [ 440.065333][ T9] usb 8-1: Manufacturer: syz [ 440.070415][ T9] usb 8-1: SerialNumber: syz [ 440.260153][ T9] usb 8-1: config 0 descriptor?? [ 440.302275][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 440.308790][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 440.353901][ T5875] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 440.391916][ T9] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input12 [ 440.615664][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 440.627352][ T5875] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 440.637294][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.720980][ T9] usb 8-1: USB disconnect, device number 2 [ 440.788222][ T5875] usb 6-1: config 0 descriptor?? [ 440.796226][ T8526] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 441.106751][ T8528] loop6: detected capacity change from 0 to 4096 [ 441.217737][ T8528] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 441.449504][ T5875] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 441.627814][ T5873] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 441.659282][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.669511][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.882926][ T8528] ntfs3(loop6): ino=1a, mi_enum_attr [ 441.888134][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 441.892807][ T8528] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 441.975627][ T5873] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 441.986251][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.999745][ T5873] usb 4-1: Product: syz [ 442.004119][ T5873] usb 4-1: Manufacturer: syz [ 442.009647][ T5873] usb 4-1: SerialNumber: syz [ 442.180550][ T5873] usb 4-1: config 0 descriptor?? [ 442.361605][ T8544] loop7: detected capacity change from 0 to 2048 [ 442.442295][ T5873] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 442.449378][ T5875] usb 6-1: USB disconnect, device number 8 [ 442.563936][ T8544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.790498][ T30] audit: type=1800 audit(1756346402.982:55): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.803" name="bus" dev="loop7" ino=1367 res=0 errno=0 [ 443.710919][ T8555] loop7: detected capacity change from 0 to 512 [ 443.738397][ T5873] gspca_sunplus: reg_w_riv err -71 [ 443.744290][ T5873] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 443.778214][ T8555] EXT4-fs (loop7): Test dummy encryption mode enabled [ 443.785433][ T8555] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 443.835985][ T5873] usb 4-1: USB disconnect, device number 15 [ 443.883888][ T8555] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.806: bad orphan inode 131083 [ 443.964476][ T8555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.055195][ T8555] overlayfs: missing 'lowerdir' [ 444.065463][ T5875] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 444.252871][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.265326][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.275760][ T5875] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 444.285519][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.529322][ T5875] usb 6-1: config 0 descriptor?? [ 444.810015][ T8119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.022656][ T5875] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 445.030107][ T5875] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 445.037570][ T5875] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 445.044786][ T5875] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 445.052244][ T5875] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 445.063285][ T5875] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 445.072165][ T5875] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 445.318743][ T5875] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 445.394070][ T5875] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 445.494477][ T5873] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 445.557261][ T1867] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 445.796806][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 445.805675][ T1867] usb 8-1: Using ep0 maxpacket: 8 [ 445.837475][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.892893][ T1867] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.903300][ T1867] usb 8-1: config 0 interface 0 has no altsetting 0 [ 446.008443][ T5873] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 446.018267][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.028040][ T5873] usb 5-1: Product: syz [ 446.032461][ T5873] usb 5-1: Manufacturer: syz [ 446.037477][ T5873] usb 5-1: SerialNumber: syz [ 446.047103][ T5875] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 446.159248][ T5875] usb 6-1: USB disconnect, device number 9 [ 446.577268][ T1867] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 446.587588][ T1867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.599229][ T1867] usb 8-1: Product: syz [ 446.603596][ T1867] usb 8-1: Manufacturer: syz [ 446.610340][ T1867] usb 8-1: SerialNumber: syz [ 446.709623][ T5873] usb 5-1: config 0 descriptor?? [ 446.739405][ T5873] hub 5-1:0.0: bad descriptor, ignoring hub [ 446.745676][ T5873] hub 5-1:0.0: probe with driver hub failed with error -5 [ 446.759805][ T5873] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 446.787741][ T1867] usb 8-1: config 0 descriptor?? [ 446.840325][ T1867] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 447.012551][ T8576] fido_id[8576]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 447.069383][ T1867] snd_usb_toneport 8-1:0.0: cannot get proper max packet size [ 447.077764][ T1867] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 447.092904][ T1867] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 447.168576][ T5873] usb 5-1: USB disconnect, device number 10 [ 447.411450][ T5875] usb 8-1: USB disconnect, device number 3 [ 448.111473][ T8587] loop3: detected capacity change from 0 to 2048 [ 448.395874][ T8587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.556776][ T30] audit: type=1800 audit(1756346408.742:56): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.816" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 449.027138][ T8591] loop4: detected capacity change from 0 to 4096 [ 449.111383][ T8591] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 449.687751][ T8601] netlink: 16 bytes leftover after parsing attributes in process `syz.7.821'. [ 449.800338][ T8607] loop3: detected capacity change from 0 to 512 [ 449.863807][ T8607] EXT4-fs (loop3): Test dummy encryption mode enabled [ 449.874272][ T8607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 449.918335][ T30] audit: type=1804 audit(1756346410.112:57): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.817" name="/newroot/151/file1/bus" dev="loop4" ino=33 res=1 errno=0 [ 450.017666][ T8607] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.820: bad orphan inode 131083 [ 450.157367][ T8607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.348612][ T8607] overlayfs: missing 'lowerdir' [ 450.677212][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 450.825657][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.902861][ T9] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 450.912267][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.922874][ T9] usb 8-1: config 0 has no interface number 0 [ 451.044106][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 451.053677][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.062401][ T9] usb 8-1: Product: syz [ 451.067170][ T9] usb 8-1: Manufacturer: syz [ 451.072060][ T9] usb 8-1: SerialNumber: syz [ 451.246209][ T9] usb 8-1: config 0 descriptor?? [ 451.517739][ T5467] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 451.595908][ T9] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 451.604604][ T9] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 82 [ 451.619453][ T9] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 451.628910][ T9] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 451.637389][ T9] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 451.679190][ T5873] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 451.766857][ T5467] usb 4-1: Using ep0 maxpacket: 16 [ 451.789113][ T5467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 451.843315][ T9] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 451.861215][ T5467] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 451.870998][ T5467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.879851][ T5467] usb 4-1: Product: syz [ 451.884286][ T5467] usb 4-1: Manufacturer: syz [ 451.889397][ T5467] usb 4-1: SerialNumber: syz [ 451.912475][ T9] usb 8-1: USB disconnect, device number 4 [ 451.934501][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 451.945714][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 451.958664][ T9] keyspan 8-1:0.133: device disconnected [ 451.975906][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 452.011918][ T5467] usb 4-1: config 0 descriptor?? [ 452.046430][ T5873] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 452.056193][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.064586][ T5873] usb 6-1: Product: syz [ 452.069150][ T5873] usb 6-1: Manufacturer: syz [ 452.074056][ T5873] usb 6-1: SerialNumber: syz [ 452.079256][ T5467] hub 4-1:0.0: bad descriptor, ignoring hub [ 452.085822][ T5467] hub 4-1:0.0: probe with driver hub failed with error -5 [ 452.110634][ T5873] usb 6-1: config 0 descriptor?? [ 452.167961][ T5467] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 452.995186][ T8641] loop7: detected capacity change from 0 to 2048 [ 453.118282][ T8641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.272348][ T30] audit: type=1800 audit(1756346413.462:58): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.830" name="bus" dev="loop7" ino=1367 res=0 errno=0 [ 454.399304][ T8662] loop7: detected capacity change from 0 to 512 [ 454.450322][ T8662] EXT4-fs (loop7): Test dummy encryption mode enabled [ 454.458843][ T8662] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 454.540940][ T8662] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.837: bad orphan inode 131083 [ 454.566189][ T8662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.894582][ T8662] overlay: Unknown parameter '/' [ 455.109675][ T9] usb 6-1: USB disconnect, device number 10 [ 455.466983][ T5873] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 455.568961][ T8119] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.655703][ T5873] usb 7-1: Using ep0 maxpacket: 16 [ 455.692831][ T5873] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 455.705282][ T5467] usb 4-1: USB disconnect, device number 16 [ 455.776673][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.821350][ T5869] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 455.832767][ T6544] udevd[6544]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 455.888657][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.949444][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.039781][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.068326][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 456.088994][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.113206][ T5869] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 456.124525][ T5869] usb 5-1: config 0 has no interface number 0 [ 456.132712][ T5869] usb 5-1: config 0 interface 184 has no altsetting 0 [ 456.162087][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.210960][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.282390][ T5869] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 456.292249][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.300692][ T5869] usb 5-1: Product: syz [ 456.305043][ T5869] usb 5-1: Manufacturer: syz [ 456.310063][ T5869] usb 5-1: SerialNumber: syz [ 456.336855][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.373991][ T5873] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 456.383695][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 456.392139][ T5873] usb 7-1: SerialNumber: syz [ 456.439219][ T5869] usb 5-1: config 0 descriptor?? [ 456.476724][ T5869] smsc75xx v1.0.0 [ 456.497866][ T5873] usb 7-1: config 0 descriptor?? [ 456.602579][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input15 [ 456.621966][ T8682] loop3: detected capacity change from 0 to 2048 [ 456.805829][ T5151] bcm5974 7-1:0.0: could not read from device [ 456.949222][ T5151] bcm5974 7-1:0.0: could not read from device [ 456.967984][ T5873] usb 7-1: USB disconnect, device number 2 [ 456.976142][ T8682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.048636][ T5151] bcm5974 7-1:0.0: could not read from device [ 457.256652][ T30] audit: type=1800 audit(1756346417.452:59): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.843" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 457.708896][ T5869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 457.720058][ T5869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 457.828980][ T5869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 457.840364][ T5869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 457.850550][ T5869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 457.866035][ T5869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 457.878421][ T5869] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 458.160841][ T5869] usb 5-1: USB disconnect, device number 11 [ 458.174975][ T8700] netlink: 136 bytes leftover after parsing attributes in process `syz.7.849'. [ 458.184894][ T8700] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 459.504381][ T8711] loop4: detected capacity change from 0 to 512 [ 459.762108][ T8711] EXT4-fs (loop4): Test dummy encryption mode enabled [ 459.769392][ T8711] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 459.868061][ T8718] fuse: Bad value for 'fd' [ 460.052738][ T8711] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.852: bad orphan inode 131083 [ 460.199393][ T8711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.432283][ T8711] overlay: Unknown parameter '/' [ 460.587623][ T5869] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 460.862819][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.874107][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.884349][ T5869] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 460.893920][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.945811][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.982376][ T5869] usb 7-1: config 0 descriptor?? [ 461.507693][ T5869] usbhid 7-1:0.0: can't add hid device: -71 [ 461.514127][ T5869] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 461.585600][ T5869] usb 7-1: USB disconnect, device number 3 [ 461.777812][ T5875] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 462.002569][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.014204][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 462.026497][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 462.037762][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 462.047923][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.215259][ T8728] loop7: detected capacity change from 0 to 8192 [ 462.313721][ T5875] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 462.324398][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 462.333575][ T5875] usb 5-1: Product: syz [ 462.339028][ T5875] usb 5-1: Manufacturer: syz [ 462.343896][ T5875] usb 5-1: SerialNumber: syz [ 462.487493][ T5875] usb 5-1: config 0 descriptor?? [ 462.775149][ T5875] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 462.785762][ T5875] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 462.937949][ T5875] usb 5-1: USB disconnect, device number 12 [ 462.967435][ T6544] udevd[6544]: setting owner of /dev/bus/usb/005/012 to uid=0, gid=0 failed: No such file or directory [ 463.494701][ T8743] loop6: detected capacity change from 0 to 4096 [ 464.326885][ T5875] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 464.486613][ T8760] loop5: detected capacity change from 0 to 128 [ 464.578289][ T5875] usb 5-1: config 0 has no interfaces? [ 464.584109][ T5875] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 464.593891][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.655068][ T5875] usb 5-1: config 0 descriptor?? [ 464.706836][ T8760] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 464.797708][ T8760] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.891097][ T9] usb 5-1: USB disconnect, device number 13 [ 465.300978][ T6119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.750741][ T8790] loop7: detected capacity change from 0 to 16 [ 466.777545][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 466.833493][ T8790] erofs (device loop7): mounted with root inode @ nid 36. [ 466.955625][ T8795] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 466.975005][ T9] usb 6-1: device descriptor read/64, error -71 [ 466.987787][ T8795] erofs (device loop7): failed to decompress -29 in[58, 4038] out[1851] [ 466.996867][ T8795] erofs (device loop7): read error -117 @ 43 of nid 36 [ 467.037628][ T8798] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 467.046913][ T8798] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 467.055560][ T8798] erofs (device loop7): readahead error at folio 42 @ nid 36 [ 467.063467][ T8798] erofs (device loop7): bogus lookback distance 774 @ lcn 40 of nid 36 [ 467.072129][ T8798] erofs (device loop7): readahead error at folio 41 @ nid 36 [ 467.082387][ T8798] erofs (device loop7): bogus lookback distance 774 @ lcn 40 of nid 36 [ 467.091996][ T8798] erofs (device loop7): readahead error at folio 40 @ nid 36 [ 467.099837][ T8798] erofs (device loop7): readahead error at folio 39 @ nid 36 [ 467.107659][ T8798] erofs (device loop7): readahead error at folio 38 @ nid 36 [ 467.115607][ T8798] erofs (device loop7): readahead error at folio 36 @ nid 36 [ 467.124025][ T8798] erofs (device loop7): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 467.132852][ T8798] erofs (device loop7): readahead error at folio 31 @ nid 36 [ 467.141164][ T8798] erofs (device loop7): readahead error at folio 25 @ nid 36 [ 467.149150][ T8798] erofs (device loop7): readahead error at folio 24 @ nid 36 [ 467.157306][ T8798] erofs (device loop7): readahead error at folio 19 @ nid 36 [ 467.166105][ T8798] syz.7.877: attempt to access beyond end of device [ 467.166105][ T8798] loop7: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 467.183072][ T8798] syz.7.877: attempt to access beyond end of device [ 467.183072][ T8798] loop7: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 467.199097][ T8798] syz.7.877: attempt to access beyond end of device [ 467.199097][ T8798] loop7: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 467.215837][ T8798] erofs (device loop7): failed to decompress -29 in[58, 4038] out[2639] [ 467.225137][ T8798] erofs (device loop7): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 467.233892][ T8798] erofs (device loop7): readahead error at folio 47 @ nid 36 [ 467.241817][ T8798] erofs (device loop7): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 467.250701][ T8798] erofs (device loop7): readahead error at folio 46 @ nid 36 [ 467.260614][ T8798] erofs (device loop7): readahead error at folio 45 @ nid 36 [ 467.268798][ T8798] syz.7.877: attempt to access beyond end of device [ 467.268798][ T8798] loop7: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 467.285693][ T8798] erofs (device loop7): failed to decompress -29 in[58, 4038] out[3537] [ 468.164187][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 468.221721][ T8784] loop4: detected capacity change from 0 to 8192 [ 468.608241][ T9] usb 6-1: device descriptor read/64, error -71 [ 468.755160][ T9] usb usb6-port1: attempt power cycle [ 469.148504][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 469.230601][ T9] usb 6-1: device descriptor read/8, error -71 [ 469.506632][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 469.742810][ T9] usb 6-1: device descriptor read/8, error -71 [ 469.872340][ T9] usb usb6-port1: unable to enumerate USB device [ 470.335732][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.343150][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.531139][ T8820] loop3: detected capacity change from 0 to 4096 [ 471.294892][ T8820] ===================================================== [ 471.302351][ T8820] BUG: KMSAN: uninit-value in longest_match_std+0x588/0xee0 [ 471.310437][ T8820] longest_match_std+0x588/0xee0 [ 471.315596][ T8820] compress_lznt+0x4a0/0xe90 [ 471.320721][ T8820] ni_write_frame+0xff4/0x1f10 [ 471.325671][ T8820] ntfs_compress_write+0x2768/0x3950 [ 471.331520][ T8820] ntfs_file_write_iter+0xf39/0x10d0 [ 471.337273][ T8820] vfs_write+0xbe2/0x15d0 [ 471.341764][ T8820] __x64_sys_write+0x1fb/0x4d0 [ 471.347114][ T8820] x64_sys_call+0x3014/0x3e20 [ 471.351985][ T8820] do_syscall_64+0xd9/0x210 [ 471.357250][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.363314][ T8820] [ 471.365712][ T8820] Uninit was created at: [ 471.370451][ T8820] __alloc_frozen_pages_noprof+0x689/0xf00 [ 471.379137][ T8820] alloc_pages_mpol+0x328/0x860 [ 471.384182][ T8820] folio_alloc_noprof+0x109/0x360 [ 471.390353][ T8820] filemap_alloc_folio_noprof+0x9d/0x420 [ 471.396179][ T8820] __filemap_get_folio+0xb45/0x1930 [ 471.401826][ T8820] ntfs_get_frame_pages+0xdc/0x5f0 [ 471.408654][ T8820] ntfs_compress_write+0x1cf4/0x3950 [ 471.414138][ T8820] ntfs_file_write_iter+0xf39/0x10d0 [ 471.420191][ T8820] vfs_write+0xbe2/0x15d0 [ 471.424798][ T8820] __x64_sys_write+0x1fb/0x4d0 [ 471.430141][ T8820] x64_sys_call+0x3014/0x3e20 [ 471.435039][ T8820] do_syscall_64+0xd9/0x210 [ 471.440290][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.446989][ T8820] [ 471.449435][ T8820] CPU: 0 UID: 0 PID: 8820 Comm: syz.3.885 Not tainted syzkaller #0 PREEMPT(none) [ 471.459388][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.469862][ T8820] ===================================================== [ 471.479770][ T8820] Disabling lock debugging due to kernel taint [ 471.486134][ T8820] Kernel panic - not syncing: kmsan.panic set ... [ 471.492705][ T8820] CPU: 0 UID: 0 PID: 8820 Comm: syz.3.885 Tainted: G B syzkaller #0 PREEMPT(none) [ 471.503744][ T8820] Tainted: [B]=BAD_PAGE [ 471.507988][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.518355][ T8820] Call Trace: [ 471.521834][ T8820] [ 471.524857][ T8820] __dump_stack+0x26/0x30 [ 471.529385][ T8820] dump_stack_lvl+0x53/0x270 [ 471.534176][ T8820] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 471.540196][ T8820] dump_stack+0x1e/0x25 [ 471.544530][ T8820] vpanic+0x361/0xc50 [ 471.548693][ T8820] panic+0x15d/0x160 [ 471.552881][ T8820] kmsan_report+0x31c/0x320 [ 471.557629][ T8820] ? __msan_warning+0x1b/0x30 [ 471.562451][ T8820] ? longest_match_std+0x588/0xee0 [ 471.567741][ T8820] ? compress_lznt+0x4a0/0xe90 [ 471.572686][ T8820] ? ni_write_frame+0xff4/0x1f10 [ 471.577776][ T8820] ? ntfs_compress_write+0x2768/0x3950 [ 471.583399][ T8820] ? ntfs_file_write_iter+0xf39/0x10d0 [ 471.589117][ T8820] ? vfs_write+0xbe2/0x15d0 [ 471.593896][ T8820] ? __x64_sys_write+0x1fb/0x4d0 [ 471.598995][ T8820] ? x64_sys_call+0x3014/0x3e20 [ 471.604038][ T8820] ? do_syscall_64+0xd9/0x210 [ 471.608878][ T8820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.615206][ T8820] ? get_page_from_freelist+0x176d/0x1820 [ 471.621095][ T8820] ? kmsan_get_metadata+0xfb/0x160 [ 471.626448][ T8820] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 471.632441][ T8820] ? kmsan_get_metadata+0xfb/0x160 [ 471.637701][ T8820] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 471.643662][ T8820] ? kmsan_get_metadata+0xfb/0x160 [ 471.648912][ T8820] ? kmsan_get_metadata+0x150/0x160 [ 471.654264][ T8820] __msan_warning+0x1b/0x30 [ 471.658903][ T8820] longest_match_std+0x588/0xee0 [ 471.664123][ T8820] compress_lznt+0x4a0/0xe90 [ 471.668934][ T8820] ? __pfx_longest_match_std+0x10/0x10 [ 471.674609][ T8820] ni_write_frame+0xff4/0x1f10 [ 471.679704][ T8820] ntfs_compress_write+0x2768/0x3950 [ 471.685340][ T8820] ntfs_file_write_iter+0xf39/0x10d0 [ 471.690837][ T8820] vfs_write+0xbe2/0x15d0 [ 471.695348][ T8820] ? __pfx_ntfs_file_write_iter+0x10/0x10 [ 471.701260][ T8820] __x64_sys_write+0x1fb/0x4d0 [ 471.706500][ T8820] x64_sys_call+0x3014/0x3e20 [ 471.711436][ T8820] do_syscall_64+0xd9/0x210 [ 471.716099][ T8820] ? irqentry_exit+0x16/0x60 [ 471.720845][ T8820] ? clear_bhb_loop+0x40/0x90 [ 471.725667][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.731706][ T8820] RIP: 0033:0x7efca618ebe9 [ 471.736395][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.756249][ T8820] RSP: 002b:00007efca6fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.764917][ T8820] RAX: ffffffffffffffda RBX: 00007efca63b5fa0 RCX: 00007efca618ebe9 [ 471.773012][ T8820] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 0000000000000004 [ 471.781092][ T8820] RBP: 00007efca6211e19 R08: 0000000000000000 R09: 0000000000000000 [ 471.789258][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.797509][ T8820] R13: 00007efca63b6038 R14: 00007efca63b5fa0 R15: 00007ffd9a82c698 [ 471.805640][ T8820] [ 471.809219][ T8820] Kernel Offset: disabled [ 471.813617][ T8820] Rebooting in 86400 seconds..