Warning: Permanently added '[localhost]:18915' (ECDSA) to the list of known hosts. 2020/10/11 23:21:18 fuzzer started 2020/10/11 23:21:19 dialing manager at 10.0.2.10:38889 2020/10/11 23:21:19 syscalls: 3440 2020/10/11 23:21:19 code coverage: enabled 2020/10/11 23:21:19 comparison tracing: enabled 2020/10/11 23:21:19 extra coverage: enabled 2020/10/11 23:21:19 setuid sandbox: enabled 2020/10/11 23:21:19 namespace sandbox: enabled 2020/10/11 23:21:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/11 23:21:19 fault injection: enabled 2020/10/11 23:21:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/11 23:21:19 net packet injection: enabled 2020/10/11 23:21:19 net device setup: enabled 2020/10/11 23:21:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/11 23:21:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/11 23:21:19 USB emulation: enabled 2020/10/11 23:21:19 hci packet injection: enabled 2020/10/11 23:21:19 wifi device emulation: enabled 23:22:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="069a", 0x2d2c}], 0x1}, 0x4) 23:22:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x2, 0x3c, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x4e, 0x39, 0xc3, 0x40, 0x1209, 0x1006, 0x55ef, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x41, 0xa8, 0x59, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x6, 0x5, "d4c72318"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff}}]}}]}}]}}, 0x0) 23:22:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) 23:22:39 executing program 3: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsync(r0) syzkaller login: [ 192.429481][ T8634] IPVS: ftp: loaded support on port[0] = 21 [ 192.429567][ T8635] IPVS: ftp: loaded support on port[0] = 21 [ 192.429582][ T8637] IPVS: ftp: loaded support on port[0] = 21 [ 192.492671][ T8638] IPVS: ftp: loaded support on port[0] = 21 [ 193.514153][ T8634] chnl_net:caif_netlink_parms(): no params data found [ 193.676055][ T8635] chnl_net:caif_netlink_parms(): no params data found [ 193.695333][ T8637] chnl_net:caif_netlink_parms(): no params data found [ 193.927102][ T8638] chnl_net:caif_netlink_parms(): no params data found [ 194.031538][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.057276][ T3275] Bluetooth: hci2: command 0x0409 tx timeout [ 194.058969][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.073805][ T1242] Bluetooth: hci1: command 0x0409 tx timeout [ 194.082583][ T3275] Bluetooth: hci0: command 0x0409 tx timeout [ 194.121528][ T8634] device bridge_slave_0 entered promiscuous mode [ 194.285260][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.313929][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.340074][ T8634] device bridge_slave_1 entered promiscuous mode [ 194.373976][ T1242] Bluetooth: hci3: command 0x0409 tx timeout [ 194.431140][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.464375][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.492649][ T8635] device bridge_slave_0 entered promiscuous mode [ 194.540212][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.564278][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.594941][ T8637] device bridge_slave_0 entered promiscuous mode [ 194.617590][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.641956][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.664896][ T8635] device bridge_slave_1 entered promiscuous mode [ 194.861913][ T8634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.901612][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.927371][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.966253][ T8637] device bridge_slave_1 entered promiscuous mode [ 195.029468][ T8634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.089826][ T8635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.129587][ T8635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.240282][ T8634] team0: Port device team_slave_0 added [ 195.267472][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.315637][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.351635][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.368222][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.385540][ T8638] device bridge_slave_0 entered promiscuous mode [ 195.400831][ T8634] team0: Port device team_slave_1 added [ 195.450818][ T8635] team0: Port device team_slave_0 added [ 195.516432][ T8635] team0: Port device team_slave_1 added [ 195.565282][ T8638] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.618268][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.646820][ T8638] device bridge_slave_1 entered promiscuous mode [ 195.736324][ T8637] team0: Port device team_slave_0 added [ 195.777061][ T8637] team0: Port device team_slave_1 added [ 195.823042][ T8638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.860071][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.885462][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.936414][ T8634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.962445][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.972559][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.025785][ T8634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.052389][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.064745][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.103956][ T8635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.125456][ T8638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.133505][ T28] Bluetooth: hci2: command 0x041b tx timeout [ 196.143313][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 196.173803][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.184906][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.223526][ T28] Bluetooth: hci0: command 0x041b tx timeout [ 196.223926][ T8635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.255816][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.267213][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.305028][ T8637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.348547][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.366115][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.416759][ T8637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.441663][ T8638] team0: Port device team_slave_0 added [ 196.453866][ T28] Bluetooth: hci3: command 0x041b tx timeout [ 196.498838][ T8634] device hsr_slave_0 entered promiscuous mode [ 196.516378][ T8634] device hsr_slave_1 entered promiscuous mode [ 196.554031][ T8638] team0: Port device team_slave_1 added [ 196.566677][ T8635] device hsr_slave_0 entered promiscuous mode [ 196.581260][ T8635] device hsr_slave_1 entered promiscuous mode [ 196.590077][ T8635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.607991][ T8635] Cannot create hsr debugfs directory [ 196.638352][ T8637] device hsr_slave_0 entered promiscuous mode [ 196.649945][ T8637] device hsr_slave_1 entered promiscuous mode [ 196.659074][ T8637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.670440][ T8637] Cannot create hsr debugfs directory [ 196.717447][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.730336][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.766476][ T8638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.819977][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.829295][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.893793][ T8638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.998408][ T8638] device hsr_slave_0 entered promiscuous mode [ 197.007522][ T8638] device hsr_slave_1 entered promiscuous mode [ 197.015946][ T8638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.025202][ T8638] Cannot create hsr debugfs directory [ 197.474379][ T8634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.518401][ T8634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.541232][ T8634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.601209][ T8634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.686150][ T8635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.707577][ T8635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.766526][ T8635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.799312][ T8637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 197.824650][ T8635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.849369][ T8637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 197.872293][ T8637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 197.883044][ T8637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 197.938116][ T8638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.950471][ T8638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.972759][ T8638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.986565][ T8638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.108408][ T8634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.141659][ T8635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.154343][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.196949][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.214754][ T3275] Bluetooth: hci2: command 0x040f tx timeout [ 198.214760][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 198.267261][ T8634] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.293823][ T3275] Bluetooth: hci0: command 0x040f tx timeout [ 198.305506][ T8637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.331490][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.349967][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.361195][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.369944][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.391451][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.407374][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.419254][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.436086][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.445699][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.462121][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.475742][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.504087][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.520510][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.534181][ T28] Bluetooth: hci3: command 0x040f tx timeout [ 198.566906][ T8635] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.591463][ T8637] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.616016][ T8638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.642027][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.664748][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.697793][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.728932][ T2435] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.762732][ T2435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.805783][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.858182][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.899675][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.942158][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.964379][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.002199][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.024517][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.043030][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.060727][ T3275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.085034][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.114172][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.150510][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.189538][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.219097][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.239727][ T3275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.261032][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.283606][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.299543][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.309971][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.324614][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.357521][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.382546][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.403337][ T3275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.421279][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.455356][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.493772][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.538711][ T8638] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.582493][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.610638][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.648225][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.678474][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.716965][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.745202][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.795693][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.867679][ T8637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.898918][ T8637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.940725][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.971122][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.994456][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.016159][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.043054][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.082608][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.122294][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.162032][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.224131][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.270602][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.294071][ T8668] Bluetooth: hci1: command 0x0419 tx timeout [ 200.318785][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.357421][ T8668] Bluetooth: hci2: command 0x0419 tx timeout [ 200.373911][ T8668] Bluetooth: hci0: command 0x0419 tx timeout [ 200.411345][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.535113][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.576465][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.612744][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.613727][ T3275] Bluetooth: hci3: command 0x0419 tx timeout [ 200.651786][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.717518][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.750505][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.818836][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.847545][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.868623][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.891180][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.915380][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.943821][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.977656][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.038052][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.075309][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.136290][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.166672][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.189060][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.210744][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.238507][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.266078][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.294623][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.318025][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.335517][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.377394][ T8637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.412382][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.432966][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.461613][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.484927][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.500159][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.518551][ T8634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.541843][ T8638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.620612][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.655207][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.678122][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.700335][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.727078][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.748760][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.776753][ T8638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.842401][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.870758][ T2435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.915983][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.955523][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.976255][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.011571][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.048578][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.089575][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.130083][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.165509][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.185688][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.216225][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.253078][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.300592][ T8634] device veth0_vlan entered promiscuous mode [ 202.338887][ T8637] device veth0_vlan entered promiscuous mode [ 202.395296][ T8638] device veth0_vlan entered promiscuous mode [ 202.429019][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.462227][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.508905][ T8634] device veth1_vlan entered promiscuous mode [ 202.558608][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.599179][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.632770][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.684387][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.743040][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.817398][ T8637] device veth1_vlan entered promiscuous mode [ 202.862803][ T8638] device veth1_vlan entered promiscuous mode [ 202.910100][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.948429][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.992210][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.024018][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.069746][ T8635] device veth0_vlan entered promiscuous mode [ 203.095596][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.113803][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.141722][ T8634] device veth0_macvtap entered promiscuous mode [ 203.178866][ T8634] device veth1_macvtap entered promiscuous mode [ 203.230985][ T8635] device veth1_vlan entered promiscuous mode [ 203.281164][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.315709][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.344980][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.370260][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.385810][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.405433][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.458439][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.504537][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.537826][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.561483][ T8638] device veth0_macvtap entered promiscuous mode [ 203.577424][ T8637] device veth0_macvtap entered promiscuous mode [ 203.616475][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.631515][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.647045][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.664940][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.697752][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.729318][ T8638] device veth1_macvtap entered promiscuous mode [ 203.759728][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.800293][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.844644][ T8637] device veth1_macvtap entered promiscuous mode [ 203.868744][ T8634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.887133][ T8634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.906113][ T8634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.928756][ T8634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.971166][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.002041][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.031322][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 204.051244][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.074993][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.100966][ T8635] device veth0_macvtap entered promiscuous mode [ 204.120176][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.138256][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.161434][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.273592][ T8635] device veth1_macvtap entered promiscuous mode [ 204.289079][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 204.312708][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.342156][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.364343][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 204.387472][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.410086][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 204.437333][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.469988][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.490873][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.508001][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.522850][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.549134][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.571186][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.614269][ T8638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.638420][ T8638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.663014][ T8638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.683456][ T8638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.708174][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 204.732716][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.752938][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 204.773961][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.798534][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.830862][ T8637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.851080][ T8637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.863214][ T8637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.875202][ T8637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.898480][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.920560][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.951187][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 204.969676][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.984053][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 204.997553][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.012715][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.033898][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.051311][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.081991][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.096711][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.136470][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 205.205415][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.260328][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 205.315386][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.381032][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 205.414482][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.441839][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.490814][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.516335][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.540385][ T8635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.577062][ T8635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.602072][ T8635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.628972][ T8635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.730321][ T8665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.758768][ T8665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.852163][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.961001][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.001431][ T8665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.002141][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.044234][ T8666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.091070][ T8655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.095234][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.103043][ T8671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.103064][ T8671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.106875][ T8671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.106895][ T8671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.108201][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.108767][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.109515][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.110410][ T8665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.111034][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.130486][ T8666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.138671][ T8655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.150173][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.160254][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.198561][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.546697][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.598712][ T8634] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 207.135320][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 207.135448][ T39] audit: type=1804 audit(1602458575.770:31): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir678374711/syzkaller.boJ5oj/0/bus/file0" dev="sda1" ino=16567 res=1 errno=0 [ 207.340793][ T8667] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 207.408934][ T39] audit: type=1804 audit(1602458575.960:32): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir678374711/syzkaller.boJ5oj/0/bus/bus/file0" dev="sda1" ino=16561 res=1 errno=0 23:22:56 executing program 3: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) fallocate(r0, 0x8, 0x0, 0xfff000) write$FUSE_BMAP(r0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:22:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="069a", 0x2d2c}], 0x1}, 0x4) 23:22:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="069a", 0x2d2c}], 0x5}, 0x4) [ 207.785147][ T8667] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 23:22:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) [ 207.827995][ T8667] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping 23:22:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="e2ea38", 0x3, 0x3f}], 0x0, &(0x7f0000000280)={[{@fsync_mode_posix='fsync_mode=posix'}, {@lazytime='lazytime'}, {@four_active_logs='active_logs=4'}, {@nouser_xattr='nouser_xattr'}, {@lfs_mode='mode=lfs'}, {@usrquota={'usrquota'}}, {@whint_mode_off='whint_mode=off'}], [{@subj_user={'subj_user', 0x3d, '\xa5-^'}}, {@subj_type={'subj_type'}}, {@subj_type={'subj_type', 0x3d, 'rcu_utilization\x00'}}, {@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}]}) [ 207.926365][ T8667] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 207.966640][ T8667] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.034608][ T8667] usb 6-1: New USB device found, idVendor=1209, idProduct=1006, bcdDevice=55.ef [ 208.064427][ T8667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.070684][ T8710] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 208.102699][ T8710] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 208.112996][ T8667] usb 6-1: config 0 descriptor?? [ 208.129697][ T8710] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 208.162250][ T8710] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 208.166609][ T8681] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 208.210630][ T8667] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 208.237671][ T8667] usb 6-1: Detected FT-X [ 208.312946][ T8714] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 208.332366][ T8714] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 208.352074][ T8714] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 208.371157][ T8714] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 208.448551][ T8667] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 208.534192][ T8667] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 208.567592][ T8667] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 208.598607][ T8667] usb 6-1: USB disconnect, device number 2 [ 208.661598][ T8667] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 208.698866][ T8667] ftdi_sio 6-1:0.0: device disconnected [ 208.851813][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.877230][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state 23:22:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:22:57 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2}) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup2(r2, r3) 23:22:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) [ 209.100963][ T8728] ldm_validate_privheads(): Disk read failed. [ 209.126768][ T8728] loop2: p1 < > p2 < > [ 209.142615][ T8728] loop2: partition table partially beyond EOD, truncated 23:22:57 executing program 3: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0xdce4f464eab6ce26) [ 209.167941][ T8728] loop2: p1 start 335741103 is beyond EOD, truncated [ 209.190214][ T8728] loop2: p2 size 2 extends beyond EOD, truncated 23:22:57 executing program 3: 23:22:57 executing program 3: [ 209.944241][ T8708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.020868][ T8708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.729137][ T8708] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.744663][ T8708] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.758656][ T8708] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.776087][ T8708] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.989091][ T8708] syz-executor.0 (8708) used greatest stack depth: 23208 bytes left 23:22:59 executing program 3: 23:22:59 executing program 1: 23:22:59 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:22:59 executing program 3: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x346a, 0x0, 0x0, 0x0, 0x0) 23:22:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) 23:22:59 executing program 1: [ 211.116097][ T8754] ldm_validate_privheads(): Disk read failed. 23:22:59 executing program 0: [ 211.131988][ T8754] loop2: p1 < > p2 < > [ 211.153780][ T8754] loop2: partition table partially beyond EOD, truncated 23:22:59 executing program 1: [ 211.183548][ T8754] loop2: p1 start 335741103 is beyond EOD, truncated 23:22:59 executing program 0: [ 211.219070][ T8754] loop2: p2 size 2 extends beyond EOD, truncated 23:22:59 executing program 1: 23:23:00 executing program 0: 23:23:00 executing program 1: 23:23:00 executing program 0: 23:23:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:00 executing program 3: 23:23:00 executing program 3: 23:23:00 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/572], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) tkill(r0, 0x6) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) 23:23:00 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000023c0)={0xffff0001}, 0x8) [ 211.551633][ T8787] ldm_validate_privheads(): Disk read failed. 23:23:00 executing program 3: [ 211.601683][ T8787] loop2: p1 < > p2 < > [ 211.607603][ T8800] ptrace attach of "/syz-executor.1"[8798] was attempted by "/syz-executor.1"[8800] 23:23:00 executing program 0: [ 211.620257][ T8787] loop2: partition table partially beyond EOD, truncated 23:23:00 executing program 3: [ 211.722578][ T8787] loop2: p1 start 335741103 is beyond EOD, truncated [ 211.754088][ T8787] loop2: p2 size 2 extends beyond EOD, truncated 23:23:00 executing program 0: 23:23:00 executing program 3: 23:23:00 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/572], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) tkill(r0, 0x6) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) 23:23:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:00 executing program 3: 23:23:00 executing program 0: [ 211.955699][ T8821] ptrace attach of "/syz-executor.1"[8819] was attempted by "/syz-executor.1"[8821] 23:23:00 executing program 3: 23:23:00 executing program 1: 23:23:00 executing program 0: 23:23:00 executing program 3: 23:23:00 executing program 1: [ 212.098455][ T8823] ldm_validate_privheads(): Disk read failed. [ 212.139801][ T8823] loop2: p1 < > p2 < > [ 212.162700][ T8823] loop2: partition table partially beyond EOD, truncated [ 212.198700][ T8823] loop2: p1 start 335741103 is beyond EOD, truncated [ 212.235726][ T8823] loop2: p2 size 2 extends beyond EOD, truncated 23:23:00 executing program 0: 23:23:00 executing program 3: 23:23:01 executing program 1: 23:23:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:01 executing program 3: 23:23:01 executing program 1: 23:23:01 executing program 0: 23:23:01 executing program 3: 23:23:01 executing program 0: 23:23:01 executing program 1: 23:23:01 executing program 3: [ 212.474123][ T8852] ldm_validate_privheads(): Disk read failed. [ 212.489955][ T8852] loop2: p1 < > p2 < > [ 212.509284][ T8852] loop2: partition table partially beyond EOD, truncated [ 212.546874][ T8852] loop2: p1 start 335741103 is beyond EOD, truncated [ 212.568299][ T8852] loop2: p2 size 2 extends beyond EOD, truncated 23:23:01 executing program 3: 23:23:01 executing program 0: 23:23:01 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='selinuxfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xfe822100, 0x0, 0x0, 0x0, 0x0) 23:23:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:01 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x20) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:23:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) [ 212.779646][ T8869] IPVS: ftp: loaded support on port[0] = 21 [ 212.803731][ T8873] ldm_validate_privheads(): Disk read failed. [ 212.838717][ T8873] loop2: p1 < > p2 < > [ 212.848588][ T8873] loop2: partition table partially beyond EOD, truncated 23:23:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) [ 212.866633][ T8873] loop2: p1 start 335741103 is beyond EOD, truncated [ 212.879194][ T8873] loop2: p2 size 2 extends beyond EOD, truncated 23:23:01 executing program 0: 23:23:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:01 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f", 0x5a, 0x8800}], 0x0, &(0x7f00000001c0)) [ 213.031496][ T8890] IPVS: ftp: loaded support on port[0] = 21 [ 213.065711][ T8898] ldm_validate_privheads(): Disk read failed. [ 213.079601][ T8898] loop2: p1 < > p2 < > [ 213.088930][ T8898] loop2: partition table partially beyond EOD, truncated [ 213.104714][ T8898] loop2: p1 start 335741103 is beyond EOD, truncated 23:23:01 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='selinuxfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xfe822100, 0x0, 0x0, 0x0, 0x0) [ 213.125185][ T8898] loop2: p2 size 2 extends beyond EOD, truncated [ 213.182451][ T8666] tipc: TX() has been purged, node left! 23:23:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 213.242630][ T8913] IPVS: ftp: loaded support on port[0] = 21 23:23:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000001000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize'}}]}) 23:23:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:02 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 213.624621][ T8927] ldm_validate_privheads(): Disk read failed. [ 213.645636][ T8932] EXT4-fs (loop3): Invalid want_extra_isize 0 [ 213.653614][ T8927] loop2: p1 < > p2 < > 23:23:02 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 213.660657][ T8927] loop2: partition table partially beyond EOD, truncated [ 213.682795][ T8927] loop2: p1 start 335741103 is beyond EOD, truncated [ 213.698047][ T8927] loop2: p2 size 2 extends beyond EOD, truncated 23:23:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 213.792260][ T8932] EXT4-fs (loop3): Invalid want_extra_isize 0 [ 213.862185][ T8942] ldm_validate_privheads(): Disk read failed. 23:23:02 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 213.895704][ T8942] loop2: p1 < > p2 < > [ 213.911521][ T8942] loop2: partition table partially beyond EOD, truncated [ 213.950798][ T8942] loop2: p1 start 335741103 is beyond EOD, truncated [ 213.985308][ T8942] loop2: p2 size 2 extends beyond EOD, truncated 23:23:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000001000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize'}}]}) 23:23:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000001000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b", 0x55, 0x400}], 0x0, &(0x7f0000000080)) 23:23:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 214.210358][ T8958] EXT4-fs (loop3): Invalid want_extra_isize 0 [ 214.247213][ T8962] EXT4-fs (loop0): unsupported inode size: 0 [ 214.272169][ T8962] EXT4-fs (loop0): blocksize: 4096 23:23:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x0) [ 214.365171][ T8967] ldm_validate_privheads(): Disk read failed. [ 214.382475][ T8967] loop2: p1 < > p2 < > [ 214.396913][ T8967] loop2: partition table partially beyond EOD, truncated [ 214.424040][ T8967] loop2: p1 start 335741103 is beyond EOD, truncated [ 214.460382][ T8967] loop2: p2 size 2 extends beyond EOD, truncated 23:23:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0xd0, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28, 'tcpmss\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) wait4(0x0, 0x0, 0x0, 0x0) [ 214.493748][ T8962] EXT4-fs (loop0): unsupported inode size: 0 [ 214.534248][ T8962] EXT4-fs (loop0): blocksize: 4096 23:23:03 executing program 2: exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000000c0)={[{@nodecompose='nodecompose'}]}) [ 214.733017][ T8994] hfsplus: unable to find HFS+ superblock [ 214.891528][ T8994] hfsplus: unable to find HFS+ superblock 23:23:03 executing program 2: exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x8c}) 23:23:03 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:23:03 executing program 2: exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000000c0)={[{@nodecompose='nodecompose'}]}) 23:23:03 executing program 0: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:23:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 215.055599][ T9014] hfsplus: unable to find HFS+ superblock 23:23:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 23:23:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x491282, 0x0) dup2(r1, r0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0xfffffee2) 23:23:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 215.246368][ T9034] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 215.288178][ T8666] tipc: TX() has been purged, node left! 23:23:04 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:23:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x0, 0x0) 23:23:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x491282, 0x0) dup2(r1, r0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0xfffffee2) 23:23:04 executing program 0: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 216.036967][ T9051] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 23:23:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x0, 0x0) 23:23:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x491282, 0x0) dup2(r1, r0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0xfffffee2) 23:23:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x0, 0x0) [ 216.345755][ T9074] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 23:23:05 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, 0x0, 0x0) 23:23:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000000)) 23:23:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 23:23:05 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:23:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000000)) 23:23:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000000)) 23:23:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x1c0}]) [ 217.357163][ T9113] Dev loop2: unable to read RDB block 1 [ 217.369404][ T9113] loop2: unable to read partition table [ 217.380006][ T9113] loop2: partition table beyond EOD, truncated [ 217.391659][ T9113] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:06 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x1c0}]) 23:23:06 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYRES64], 0x65) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 217.625773][ T9119] Dev loop2: unable to read RDB block 1 [ 217.652128][ T9119] loop2: unable to read partition table [ 217.678205][ T9119] loop2: partition table beyond EOD, truncated 23:23:06 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 23:23:06 executing program 0: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/235) [ 217.732658][ T9119] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 23:23:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x1c0}]) [ 219.129461][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:23:07 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYRES64], 0x65) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 23:23:07 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x5) [ 219.215428][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.264213][ T9145] Dev loop2: unable to read RDB block 1 [ 219.288096][ T9145] loop2: unable to read partition table [ 219.421392][ T9145] loop2: partition table beyond EOD, truncated [ 219.449563][ T9145] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:08 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(0x0, 0x0, 0x20) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:23:08 executing program 0: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 23:23:09 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 23:23:09 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:09 executing program 0: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 23:23:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af3010004000000000000000000000001", 0x39, 0x4400}], 0x0, &(0x7f00000000c0)) [ 220.745785][ T9179] Dev loop2: unable to read RDB block 1 [ 220.769933][ T9179] loop2: unable to read partition table 23:23:09 executing program 0: r0 = socket(0x21, 0x2, 0xa) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x9}]) [ 220.799292][ T9179] loop2: partition table beyond EOD, truncated [ 220.840249][ T9179] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 220.891975][ T9186] EXT4-fs error (device loop3): ext4_ext_check_inode:459: inode #2: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 220.929227][ T9186] EXT4-fs (loop3): get root inode failed [ 220.940728][ T9186] EXT4-fs (loop3): mount failed 23:23:09 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x0, 0x1c0}]) [ 221.127347][ T9186] EXT4-fs error (device loop3): ext4_ext_check_inode:459: inode #2: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 221.168325][ T9186] EXT4-fs (loop3): get root inode failed [ 221.178702][ T9186] EXT4-fs (loop3): mount failed [ 221.226512][ T9198] Dev loop2: unable to read RDB block 1 [ 221.245280][ T9198] loop2: unable to read partition table [ 221.255946][ T9198] loop2: partition table beyond EOD, truncated 23:23:09 executing program 3: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x41, 0x40000000, 0xffffffffffffffff, 0x0) 23:23:09 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0xc01047d0, 0x0) [ 221.289210][ T9198] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:10 executing program 0: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 23:23:10 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 23:23:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="78d50001004105e62000ffff8100341a0000", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 221.501809][ T9211] Dev loop2: unable to read RDB block 1 23:23:10 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 221.538567][ T9211] loop2: unable to read partition table [ 221.564569][ T9211] loop2: partition table beyond EOD, truncated 23:23:10 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 221.613088][ T9211] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:10 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f00000000000000000005000000", 0x20, 0x1c0}]) [ 221.815303][ T9233] Dev loop2: unable to read RDB block 1 [ 221.830034][ T9233] loop2: unable to read partition table [ 221.842339][ T9233] loop2: partition table beyond EOD, truncated [ 221.856897][ T9233] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:10 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f00000000000000000005000000", 0x20, 0x1c0}]) 23:23:11 executing program 0: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 222.427374][ T9245] Dev loop2: unable to read RDB block 1 [ 222.462495][ T9245] loop2: unable to read partition table 23:23:11 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 222.497877][ T9245] loop2: partition table beyond EOD, truncated [ 222.562053][ T9245] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:11 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:11 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/meminfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) 23:23:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000180)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0xce8f, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240), 0x0, 0x107}], 0x8, &(0x7f0000000340)={[{@utf8='utf8'}, {@map_normal='map=normal'}], [{@dont_appraise='dont_appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x64, 0x66, 0x37, 0x38, 0x65, 0x65], 0x2d, [0x64, 0x35, 0x33, 0x31], 0x2d, [0x66, 0x62, 0x32, 0x62], 0x2d, [0x37, 0x0, 0x5d, 0x65], 0x2d, [0x39, 0x39, 0x53, 0x39, 0x66, 0x36, 0x37, 0x34]}}}, {@dont_appraise='dont_appraise'}, {@fowner_gt={'fowner>'}}, {@seclabel='seclabel'}]}) 23:23:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f00000000000000000005000000", 0x20, 0x1c0}]) 23:23:11 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:11 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/meminfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) 23:23:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x0, 0x18}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 223.025973][ T9272] Dev loop2: unable to read RDB block 1 23:23:11 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000002280)=ANY=[@ANYBLOB="b3"]) [ 223.054820][ T9272] loop2: unable to read partition table [ 223.091369][ T9272] loop2: partition table beyond EOD, truncated 23:23:11 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r0, 0x1000000) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 223.116912][ T9272] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:11 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) 23:23:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5}, 0x40) 23:23:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200"/48, 0x30, 0x1c0}]) 23:23:11 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 23:23:11 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 23:23:11 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r0, 0x1000000) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x2, 0x0, 0x0, 0x0) 23:23:12 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 23:23:12 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r0, 0x1000000) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 223.430709][ T9311] Dev loop2: unable to read RDB block 1 23:23:12 executing program 3: [ 223.462563][ T9311] loop2: unable to read partition table [ 223.488528][ T9311] loop2: partition table beyond EOD, truncated [ 223.507669][ T9311] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 23:23:12 executing program 1: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f00000001c0)) 23:23:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x200}, 0x40) 23:23:12 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200"/48, 0x30, 0x1c0}]) 23:23:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:23:12 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="bd", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, r1) [ 223.783622][ T9349] Dev loop2: unable to read RDB block 1 [ 223.812232][ T9349] loop2: unable to read partition table [ 223.832391][ T9349] loop2: partition table beyond EOD, truncated [ 223.868273][ T9349] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x21, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1=0xe0000005}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) 23:23:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0}}], 0x2, 0xfe80) 23:23:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x21, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1=0xe0000005}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) 23:23:13 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200"/48, 0x30, 0x1c0}]) 23:23:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @broadcast}, @ethernet={0x0, @local}, 0x2ccf}) 23:23:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0x2, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0) 23:23:13 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000028c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 224.603373][ T9379] Dev loop2: unable to read RDB block 1 [ 224.630925][ T9379] loop2: unable to read partition table 23:23:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1b, 0x2}, 0x40) [ 224.657863][ T9379] loop2: partition table beyond EOD, truncated 23:23:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f00000001c0)={[{@session={'session'}}, {@mode={'mode'}}]}) [ 224.682783][ T9379] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200"/56, 0x38, 0x1c0}]) [ 224.905600][ T9404] Dev loop2: unable to read RDB block 1 [ 224.916347][ T9404] loop2: unable to read partition table [ 224.924904][ T9404] loop2: partition table beyond EOD, truncated [ 224.938121][ T9404] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 23:23:14 executing program 1: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:23:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x9}, 0x40) 23:23:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="03000f000314af0003140b000000000000000f0000000000000000000500000000204200"/56, 0x38, 0x1c0}]) 23:23:14 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f00000001c0)) [ 225.504580][ T9416] Dev loop2: unable to read RDB block 1 [ 225.515612][ T9416] loop2: unable to read partition table [ 225.530232][ T9416] loop2: partition table beyond EOD, truncated [ 225.549298][ T9416] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 316.384239][ T28] Bluetooth: hci1: command 0x0406 tx timeout [ 316.383402][ T1242] Bluetooth: hci0: command 0x0406 tx timeout [ 316.396405][ T2435] Bluetooth: hci2: command 0x0406 tx timeout [ 316.574461][ T2435] Bluetooth: hci3: command 0x0406 tx timeout [ 376.288911][ C0] hrtimer: interrupt took 39251915 ns [ 424.373619][ T8887] syz-executor.1: page allocation failure: order:0, mode:0x40a20(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 424.373619][ T8887] CPU: 0 PID: 8887 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 424.373619][ T8887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 424.373619][ T8887] Call Trace: [ 424.373619][ T8887] dump_stack+0x198/0x1fd [ 424.373619][ T8887] warn_alloc.cold+0x87/0x17a [ 424.373619][ T8887] ? zone_watermark_ok_safe+0x2a0/0x2a0 [ 424.373619][ T8887] ? find_held_lock+0x2d/0x110 [ 424.373619][ T8887] ? wakeup_kswapd+0x206/0x6a0 [ 424.373619][ T8887] ? __zone_watermark_ok+0x440/0x440 [ 424.373619][ T8887] ? wake_all_kswapds+0x143/0x2c0 [ 424.373619][ T8887] __alloc_pages_slowpath.constprop.0+0x22bd/0x28c0 [ 424.373619][ T8887] ? warn_alloc+0x120/0x120 [ 424.373619][ T8887] ? __zone_watermark_ok+0x440/0x440 [ 424.373619][ T8887] ? __zone_watermark_ok+0x440/0x440 [ 424.373619][ T8887] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 424.373619][ T8887] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 424.373619][ T8887] __alloc_pages_nodemask+0x62c/0x790 [ 424.373619][ T8887] ? lock_is_held_type+0xbb/0xf0 [ 424.373619][ T8887] ? __alloc_pages_slowpath.constprop.0+0x28c0/0x28c0 [ 424.373619][ T8887] ? lock_downgrade+0x830/0x830 [ 424.373619][ T8887] ? lock_downgrade+0x830/0x830 [ 424.373619][ T8887] cache_grow_begin+0x71/0x4a0 [ 424.373619][ T8887] fallback_alloc+0x1fb/0x2e0 [ 424.373619][ T8887] kmem_cache_alloc+0x2e3/0x3f0 [ 424.373619][ T8887] __sigqueue_alloc+0x236/0x550 [ 424.373619][ T8887] __send_signal+0x62d/0xf90 [ 424.373619][ T8887] force_sig_info_to_task+0x2a0/0x3a0 [ 424.373619][ T8887] force_sig_fault+0xb0/0xf0 [ 424.373619][ T8887] ? force_sig_fault_to_task+0xe0/0xe0 [ 424.373619][ T8887] ? arch_local_irq_disable+0x50/0x50 [ 424.373619][ T8887] ? _down_write_nest_lock+0x150/0x150 [ 424.373619][ T8887] __bad_area_nosemaphore+0x32a/0x4f0 [ 424.373619][ T8887] do_user_addr_fault+0x852/0xbf0 [ 424.373619][ T8887] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 424.373619][ T8887] exc_page_fault+0xa8/0x190 [ 424.373619][ T8887] ? asm_exc_page_fault+0x8/0x30 [ 424.373619][ T8887] asm_exc_page_fault+0x1e/0x30 [ 424.373619][ T8887] RIP: 0023:0x804d5ec [ 424.373619][ T8887] Code: ff 50 e8 d7 5d 01 00 83 c4 10 85 c0 0f 84 75 01 00 00 8b 5c 24 0c e8 93 03 01 00 65 f0 83 2d e4 ff ff ff 01 8b 54 24 10 8b 00 <83> 7a 50 ff 89 42 54 75 0b 85 c0 75 07 c7 42 54 16 00 00 00 6b 44 [ 424.373619][ T8887] RSP: 002b:00000000f55ba100 EFLAGS: 00010292 [ 424.373619][ T8887] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f55ba0f0 [ 424.373619][ T8887] RDX: 0000000000000000 RSI: 000000000818af60 RDI: 000000000815e000 [ 424.373619][ T8887] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 424.373619][ T8887] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 424.373619][ T8887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.373619][ T8887] Mem-Info: [ 424.373619][ T8887] active_anon:2822 inactive_anon:98182 isolated_anon:0 [ 424.373619][ T8887] active_file:68 inactive_file:1100 isolated_file:0 [ 424.373619][ T8887] unevictable:0 dirty:0 writeback:0 [ 424.373619][ T8887] slab_reclaimable:13727 slab_unreclaimable:155571 [ 424.373619][ T8887] mapped:35590 shmem:318 pagetables:884 bounce:0 [ 424.373619][ T8887] free:6796 free_pcp:1081 free_cma:0 [ 424.373619][ T8887] Node 0 active_anon:11276kB inactive_anon:193192kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 96256kB writeback_tmp:0kB kernel_stack:8032kB all_unreclaimable? yes [ 424.373619][ T8887] Node 1 active_anon:12kB inactive_anon:199536kB active_file:264kB inactive_file:4384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142348kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB kernel_stack:1696kB all_unreclaimable? yes [ 424.373619][ T8887] Node 0 DMA free:2236kB min:720kB low:900kB high:1080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:12852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.373619][ T8887] lowmem_reserve[]: 0 496 496 496 496 [ 424.373619][ T8887] Node 0 DMA32 free:8608kB min:57880kB low:63644kB high:69408kB reserved_highatomic:2048KB active_anon:11276kB inactive_anon:180340kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:0kB present:1032192kB managed:513812kB mlocked:0kB pagetables:1392kB bounce:0kB free_pcp:1680kB local_pcp:212kB free_cma:0kB [ 424.373619][ T8887] lowmem_reserve[]: 0 0 0 0 0 [ 424.373619][ T8887] Node 1 DMA32 free:16340kB min:56080kB low:67028kB high:77976kB reserved_highatomic:0KB active_anon:12kB inactive_anon:199536kB active_file:264kB inactive_file:4384kB unevictable:0kB writepending:0kB present:1048436kB managed:965484kB mlocked:0kB pagetables:2140kB bounce:0kB free_pcp:2644kB local_pcp:248kB free_cma:0kB [ 424.373619][ T8887] lowmem_reserve[]: 0 0 0 0 0 [ 424.373619][ T8887] Node 0 DMA: 7*4kB (E) 4*8kB (E) 6*16kB (E) 5*32kB (UE) 2*64kB (UE) 2*128kB (UE) 0*256kB 1*512kB (U) 1*1024kB (E) 0*2048kB 0*4096kB = 2236kB [ 424.373619][ T8887] Node 0 DMA32: 800*4kB (MEH) 402*8kB (UMEH) 115*16kB (UMH) 1*32kB (M) 1*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8608kB [ 424.373619][ T8887] Node 1 DMA32: 69*4kB (UME) 32*8kB (UME) 26*16kB (UME) 41*32kB (UME) 20*64kB (M) 16*128kB (M) 12*256kB (UM) 9*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 16340kB [ 424.373619][ T8887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 424.373619][ T8887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 424.373619][ T8887] 1502 total pagecache pages [ 424.373619][ T8887] 0 pages in swap cache [ 424.373619][ T8887] Swap cache stats: add 0, delete 0, find 0/0 [ 424.373619][ T8887] Free swap = 0kB [ 424.373619][ T8887] Total swap = 0kB [ 424.373619][ T8887] 524155 pages RAM [ 424.373619][ T8887] 0 pages HighMem/MovableOnly [ 424.373619][ T8887] 150354 pages reserved [ 424.373619][ T8887] 0 pages cma reserved [ 426.209419][ C1] ------------[ cut here ]------------ [ 426.245013][ C1] HSR: Could not send supervision frame [ 426.310467][ C1] WARNING: CPU: 1 PID: 0 at net/hsr/hsr_device.c:299 send_hsr_supervision_frame+0x889/0xb40 [ 426.402304][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 426.407659][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.9.0-rc8-syzkaller #0 [ 426.407659][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 426.407659][ C1] Call Trace: [ 426.407659][ C1] [ 426.407659][ C1] dump_stack+0x198/0x1fd [ 426.407659][ C1] panic+0x382/0x7fb [ 426.407659][ C1] ? __warn_printk+0xf3/0xf3 [ 426.769245][ C1] ? send_hsr_supervision_frame+0x889/0xb40 [ 426.769245][ C1] ? rdev_set_default_key.constprop.0+0x2eb/0x3a0 [ 426.769245][ C1] ? __warn.cold+0x5/0x4b [ 426.769245][ C1] ? __warn+0xd6/0x1f2 [ 426.769245][ C1] ? send_hsr_supervision_frame+0x889/0xb40 [ 426.769245][ C1] __warn.cold+0x20/0x4b [ 426.769245][ C1] ? wake_up_klogd.part.0+0x8e/0xd0 [ 426.769245][ C1] ? send_hsr_supervision_frame+0x889/0xb40 [ 427.169941][ T8493] rsyslogd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 427.126429][ C1] report_bug+0x1bd/0x210 [ 427.126429][ C1] handle_bug+0x38/0x90 [ 427.356235][ C1] exc_invalid_op+0x14/0x40 [ 427.356235][ C1] asm_exc_invalid_op+0x12/0x20 [ 427.356235][ C1] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40 [ 427.356235][ C1] Code: 03 31 ff 89 de e8 87 70 58 f9 84 db 0f 85 8b fd ff ff e8 5a 74 58 f9 48 c7 c7 00 29 67 89 c6 05 92 e4 36 03 01 e8 49 b1 28 f9 <0f> 0b e9 6c fd ff ff e8 3b 74 58 f9 41 be 42 00 00 00 ba 01 00 00 [ 427.356235][ C1] RSP: 0018:ffffc900004e8c48 EFLAGS: 00010286 [ 427.356235][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 427.356235][ C1] RDX: ffff88802c21c380 RSI: ffffffff815f5a55 RDI: fffff5200009d17b [ 427.356235][ C1] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8d0c3ac7 [ 427.356235][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888056d4da80 [ 427.356235][ C1] R13: 0000000000000000 R14: ffff888056db0ce8 R15: ffff88802cf255c0 [ 427.733905][ C1] ? vprintk_func+0x95/0x1d4 [ 427.733905][ C1] ? send_hsr_supervision_frame+0x889/0xb40 [ 427.733905][ C1] hsr_announce+0x122/0x320 [ 427.733905][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 427.733905][ C1] ? lock_is_held_type+0xbb/0xf0 [ 427.733905][ C1] call_timer_fn+0x1ac/0x760 [ 427.733905][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 427.733905][ C1] ? msleep_interruptible+0x130/0x130 [ 427.733905][ C1] ? lock_downgrade+0x830/0x830 [ 427.733905][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 427.733905][ C1] ? lockdep_hardirqs_on_prepare+0x19c/0x530 [ 427.733905][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 427.733905][ C1] ? send_hsr_supervision_frame+0xb40/0xb40 [ 427.733905][ C1] __run_timers.part.0+0x67c/0xaa0 [ 427.733905][ C1] ? call_timer_fn+0x760/0x760 [ 427.733905][ C1] ? lockdep_hardirqs_on+0x53/0x100 [ 427.733905][ C1] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 427.733905][ C1] run_timer_softirq+0xb3/0x1d0 [ 427.733905][ C1] __do_softirq+0x1f8/0xb23 [ 427.733905][ C1] asm_call_irq_on_stack+0xf/0x20 [ 427.733905][ C1] [ 428.293805][ C1] do_softirq_own_stack+0x9b/0xd0 [ 428.293805][ C1] irq_exit_rcu+0x235/0x280 [ 428.293805][ C1] sysvec_apic_timer_interrupt+0x51/0xf0 [ 428.293805][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 428.293805][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 428.293805][ C1] Code: 89 ef e8 b5 dd 8d f9 e9 86 fe ff ff 48 89 df e8 a8 dd 8d f9 e9 7b ff ff ff cc cc cc e9 07 00 00 00 0f 00 2d 04 a0 5f 00 fb f4 90 e9 07 00 00 00 0f 00 2d f4 9f 5f 00 f4 c3 cc cc 55 53 e8 69 [ 428.293805][ C1] RSP: 0018:ffffc9000041fe60 EFLAGS: 00000286 [ 428.293805][ C1] RAX: 1ffffffff13f8d70 RBX: ffff88802c21c380 RCX: 1ffffffff16b2b51 [ 428.293805][ C1] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 428.623753][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000001 [ 428.623753][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89fc6b60 [ 428.623753][ C1] R13: ffffed1005843870 R14: 0000000000000001 R15: ffffffff8b5996c8 [ 428.623753][ C1] default_idle+0x2f/0x50 [ 428.623753][ C1] default_idle_call+0x95/0xd0 [ 428.623753][ C1] do_idle+0x4a9/0x730 [ 428.623753][ C1] ? arch_cpu_idle_exit+0x70/0x70 [ 428.623753][ C1] cpu_startup_entry+0x14/0x20 [ 428.623753][ C1] secondary_startup_64+0xa4/0xb0 [ 428.623753][ C1] Kernel Offset: disabled [ 428.623753][ C1] Rebooting in 86400 seconds..