last executing test programs: 48.549828923s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 47.947102822s ago: executing program 2: r0 = syz_open_dev$I2C(&(0x7f00000028c0), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x541b, 0x0) 47.837400704s ago: executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000840)=[@acquire, @acquire_done, @request_death], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001e80)={0x1, 0x0, [{0x0, 0x70, &(0x7f00000009c0)=""/112}]}) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0) 47.084546566s ago: executing program 2: r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f646973636172640000008000200000ff5f78617474722c646973636172642c7768696e745f6d6f64653d757365722d626173651a9603642c6e6f696e6c696e48c8b8bd9db81b403801c199ffba3691ebc17570972cb0aab560ecd4a62772a15b05a04f8812838b6d154a85515cf6a313e8043c58707a92ff4e0d69fdd8fd380734190ccaff409ba8953c23b0c6f1c09d49447f1e1d0cedb97bb4daf266dcc2cec17b92cbbe1303abfc278ad789ffe0f34862de20f795a4b968385446d1964503b1815a337e284216bd6809000000000004000000d593d55b7516ceab7cd6f2aebee0e3b4e72511cc77b8aeb6cb60fe02009fbd67bd8d700393ec17bc2e14a4811bdefdda2f5f5ebead17e18e7fa077c6bf2fe6d11ac484b13898ad0c52acbc155d3426"], 0x1, 0x54f8, &(0x7f0000010140)="$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") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) dup3(r0, r1, 0x0) 45.583779254s ago: executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x9c02, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xf0ffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x41009432, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc2}) 45.413224954s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 44.754289409s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 44.699212996s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x2}, 0x0) 44.601134838s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x8, 0x5, 0x101, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 44.442170347s ago: executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 44.363982301s ago: executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x48}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000b00)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3, r3]}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4}, 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00'}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x40086607, 0x20001412) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0x3, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000000040)=""/14, 0x27, 0xe, 0x1, 0x800}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@bloom_filter={0x1e, 0x0, 0x40, 0x3, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5}, 0x48) sendmsg$inet(r0, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14}}], 0x18}, 0x2000c001) 44.322149805s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 44.038727706s ago: executing program 4: mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) poll(&(0x7f0000000200)=[{r3}], 0x1, 0xb43) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) splice(r1, 0x0, r3, 0x0, 0xffffffe1, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0xe, &(0x7f00001c9fff)="03", 0x1) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000001080)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC=0x0, @ANYBLOB="0000b06bb67ea4703a71b976a8e77eef6ddc24eb16223dea582cee4da7c8d64be67e2f0ad5ed09"], 0xfe, 0xc17, &(0x7f0000000280)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzv73ux7b9YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+dKZ59KjbgUAsJ+ujH/1zFn3fwD4RLnq//8BAAAAAAAAAAAAAOCgS1HE45Fi/sp6mqxedwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lz0/fKGbH1z/YXsyXh2/eqn+0tzN+YXW4mJruj4x256am2498BF2W3+7oWoA6jdfuzV9/fpi/eyz57a8fXvwvf7HTg5eHH769FPdshMjo6PjPWVqfR/50+9yrxkeR6OI05Hime/9JDUjoojdj8V9vjt77VjViaGqExMjo1VHZtrN2aXyzbHuQBQR9Z5Kje4Y7cO52JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13324viiiFim+c2I9XYuII91x+GI1Mfje7Sj2sI8PoGxnvS9ipTgE5+wA648iXokUP327iKlyzPJPfCHilTJ/EPFmmS9GpPKLcT7i3R2+RxxOtSjiL8rzf3E9TVfXg+515fLX6l+ZvT7XU7Z7XTn094f9dMCvTQNRRLO64q+nj/6bHQAAAAAAAAAAAAAAAAAetmNRxJOR4uX/+KNqXnFU89JPXBz+/cFf7J0z/sR9jlOWfTYilosHm5N7NE8hHktjKT3iucSfZANRxB/n+X/fetSNAQAAAAAAAAAAAAAAAAAA+EQr4seR4oV3TqWV6F1TvD17o361eW2msypsd+3f7prpGxsbG/XUyUbOyZzLOVdyruZcyxlFrp+zkXMy53LOlZyrOddyxpFcP2cj52TO5ZwrOVdzruWMWq6fs5FzMudyzpWcqznXcsYBWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgi3o8U3/7GeooUEY2Iyejkan+3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKPWnIr4fKep/0LizrxYRqfq341T5y/loHC3z09EYLvPFaFzK2ayy1vjWI2g/u9OXivhRpOgfeOvOCc/nv6/z6s7XIN785uarX6l18kj3zcH3+h87eeLi8OivPXGv7bRTA4Yut2dv3a5PjIyOjvfsruVP/3TPvsH8ucXD6ToRsfj6G681Z2ZaCzY+GRu1zkYtDkh79msjX6/ioLRn+0bjYDRjc+MRX5jYF+X9/91I8dvv/Gf3ht+9//9C59WdO3z87E827/8vbD/QHt3/H+/Z90L+3UhfLWJg6eZ838mIgcXX3zjdvtm80brRmj1/5syXh4e/fO5M39GIgevtmVbP1q6HCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxu5qvNXhx+OnTTx2JI9V8qy3ztl4dv3qp/tLczfmF1uJia7o+MduemptuPejHDVTTvSZGRvekM/d1bI/bf2zgpbn51xfaN/5wacf3jw9cura4tNCc2vntOBZFRKN3z1DV4ImR0arRM+3mbFV1bMfJdB9eXyrivyLF1Pl6+nzel+f/bZ/hv2X+//L2A+3R/L9P9ewrPzOlIn4WKX7rL5+Iz1ftPB53jVku97eRYujC53K5OFqW67ah81yBzszAsuz/RYp/fH9r2e58yMc3yz73wAN7SJTn/0Sk+P6ffzd+Pe/b+vyHnc//8e0H2qPz/5mefce3PK9g110nn//TkeLFx9+K38j7Puj5H0VsbGz8acSpXPjO8zn26Px/tmffYHQ+9zcfXvcBAAAAAAAAAAAOrb5UxN9FiqdGa+n5vO9B/v7f9PYD7dHf//rlnn3T+7Re0a4HFQAAAAAOiL5UxI8jxY2lt+7Mod46/7tn/ufvbK69PpK2vVv9Od8vVc8NeJh//tdrMH/u5O67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n9dTn7zPeuqrkeLl/3kml0sny3LddeAHq18HrszNnr40MzM31VxqXptp1cfnm1Otsu5nIsX633wu1y2q9dW768131ngf2Oiuxb4QKUb/vlu2sxZ7d23yznrgnbXYy7KfihT//Q9by3bXsf7sZtmzZdm/jhRf/+edy57cLHuuLPvdSPHDr9e7ZY+XZbvPR+08k3SgFjOtZ6fmZu56FCoAAAAAAAAAAAAAAAAAAAB8WH2piD+LFP97cyWW87T/vP5/dwX+Wrfsm9/sWe9/m9vVOv+D1fr/99r+KOv/Dz60ngIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOGRoog3IsX8lfW02l++7hi43J69dXtiZHTnasdSVfNIVb78GXju7LnzX3p++EI3P7j+w/ZkvDp+9VL9pbmb8wutxcXWdH1itj01N9164CPstv7m0HUMVQNQv/narenr1xfrZ589t+Xt24Pv9T92cvDi8NOnn+qWnRgZHR3vKVPr+xCf/qEat+loFPFXkeKZ7/0k/Ut/RBG7H4v7fHf22rGqE0NVJyZGRquOzLSbs0vlm2PdgSgi6j2VGt0x2odzsSuNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv/twfVHEa5HiOyfW07/2RxzpjsMXr4x/9czZe7ej2MM+PoCynfW+iJXiEJyzA6w/ivinSPHTt0/Fv/VH1KLzE1+IeKXMH0S8WeaLEan8YpyPeHeH7xGHUy2K+P/y/F9cT2/3l9eD7nXl8tfqX5m9PtdTtntdOfT3h/10wK9NA1HED6sr/nr6d/9dAwAAAAAAAAAAAAAAABwgRfxqpHjhnVOpmh98Z05xe/ZG/Wrz2kxnWl937l93zvTGxsZGPXWykXMy53LOlZyrOddyRpHr52zknMy5nHMl52rOtZxxJNfP2cg5mXM550rO1ZxrOaOW6+ds5JzMuZxzJedqzrWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/Yz1t9HfWl56MTq5aD/Rj7+cBAAD//1vO/Qs=") 43.11545286s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="f8d316d6d863cfbeb1ab91c03635c12eab5cc3503ef8e8c3dcf9c85888c54016797a23d4605c5d117dd33044cc1348a8ff149a75d28a9d9d69ddec7b17114722753b4e4e0f24264f71f665b80e9569954a05d73ed778490a47a24d8a7756e0df3a0397a3ec3c84f4dc40a6dccf1f512bfa0a9fb67769ebfe7e22cacf44e93eb9705ea400e1c7e7185cb52919e2c6f6a5d6", 0x91, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc", 0xd2, 0x0, 0x0, 0x0) 43.023997586s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1}, 'syz_tun\x00'}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x60600) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@local}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000002c0)={[{@dioread_lock}, {@usrquota}, {@errors_continue}, {@init_itable}, {@grpquota}, {@grpjquota, 0x2e}, {@resuid}, {@errors_remount}, {@nolazytime}, {@nomblk_io_submit}], [], 0x2c}, 0x84, 0x4ac, &(0x7f0000000740)="$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") r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2a, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x58}, @exit, @alu={0x4, 0x0, 0x7, 0x7, 0x1, 0x18, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x3d, &(0x7f00000001c0)=""/61, 0x40f00, 0x43, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x9, 0x101}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r0, r0, r2], &(0x7f0000000280)=[{0x0, 0x4, 0x7, 0x2}], 0x10, 0x9}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000005c0)={0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f22"], 0x22) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = dup(r1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 42.922243104s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 42.667338657s ago: executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.595932113s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 40.783641024s ago: executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x101}, {0x6}]}, 0x10) sendto$packet(r0, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000089060000", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 40.679893156s ago: executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047440, 0x20004002) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = epoll_create(0x40000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000640)={0x20000000}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x22, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000280)='.\x00', 0x6420c0, 0x0) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000100)={0x30, r1, 0x807, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, 'jU'}]}, 0x30}}, 0x0) 35.705324971s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.842143999s ago: executing program 3: unshare(0x60480) r0 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\xa6Ey\xdb\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = dup(r0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x40000000, r1, 0x0) write$nbd(r1, &(0x7f0000000100)=ANY=[], 0x10) pread64(r1, &(0x7f0000000000)=""/179, 0xb3, 0x0) 33.781322868s ago: executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 32.837709594s ago: executing program 3: syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d657461646174615f636865636b73756d3d63726336342c6e6f636f772c636f6d7072657373696f6e3d6e6f6e652c636f6d7072657373796f6e3d677a69702c7374725f686173683d6372633332632c646174615f636865636b73756d3d7878686173682c6261636b67726f756e645f636f6d7072657373696f6e3d6e6f6e652c6e6f636f772c6673757569643d646238376534356f2d30fa31002d623337352d363234302d64323134310063632c7569643e", @ANYBLOB="36152b94068c14974e3004ae1a80df1ebf08537242efbd85ef1f", @ANYBLOB=',cojtext=root,euid>', @ANYRES8, @ANYBLOB="2c733f000013000000004be9cc0222dd3f666f776e45723e", @ANYRES8, @ANYRES32, @ANYRESDEC=0x0, @ANYRES16=0x0], 0xfd, 0x5d5e, &(0x7f00000060c0)="$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") lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 32.119866425s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x309) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x2}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0x4) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x705}, 0x20}, 0x1, 0x4c00000000000000}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040880}, 0x44) write$FUSE_LSEEK(r0, &(0x7f00000020c0)={0x18}, 0xfffffc60) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000800000000061106d00000000009500"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2}) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa060000000180c200000086dd"], 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @dev, @remote}}}], 0x20}}], 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073013900000000009500000000000000f96754a655718b389b9c5c8e81e1c3df94751ad2ee857dae40e64c901f88df739e2381b48200e3cfc55eccf7987a40da24f0b000eabd146a7478351bba67be8b1ccf40e3c8f5a5af7a5084cd2a1305d7e4560ea2cd9d0fd5add1f1725f227c1445ad057bf345935ca36967d0f147424a14a91cdca1cee5b58cae675f28e27cdacc50cd03d25fdc1a0a4823abca26408544ec03d8556e4f55f86af12a7ac8d564a86a3cee099ec2d0fb351a"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)) 12.649565288s ago: executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f0000000240)='./file0\x00', 0x601c2, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141a42, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) 10.04387586s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_binder, @flat=@handle}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000380)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[], 0x7) write$cgroup_int(r8, &(0x7f0000000200), 0x43400) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='jbd2_handle_extend\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r11}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.043564842s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 8.586690085s ago: executing program 1: bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 0s ago: executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) kernel console output (not intermixed with test programs): luetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.683867][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.799850][ T5105] Bluetooth: hci3: command tx timeout [ 295.899064][ T9991] loop4: detected capacity change from 0 to 32768 [ 296.013616][T10010] cgroup: name respecified [ 296.016868][ T9991] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 296.032111][ T9991] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 296.076572][ T9991] bcachefs (loop4): alloc_read... done [ 296.091806][ T9991] bcachefs (loop4): stripes_read... done [ 296.097563][ T9991] bcachefs (loop4): snapshots_read... done [ 296.113957][ T9991] bcachefs (loop4): journal_replay... done [ 296.119894][ T9991] bcachefs (loop4): resume_logged_ops... done [ 296.126251][ T9991] bcachefs (loop4): going read-write [ 296.145862][ T9991] bcachefs (loop4): done starting filesystem [ 296.397710][ T8340] bcachefs (loop4): shutting down [ 296.417112][ T8340] bcachefs (loop4): going read-only [ 296.423396][ T8340] bcachefs (loop4): finished waiting for writes to stop [ 296.458598][ T8340] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 296.495927][ T8340] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 296.508205][ T8340] bcachefs (loop4): shutdown complete, journal seq 15 [ 296.525867][ T8340] bcachefs (loop4): marking filesystem clean [ 296.589880][ T8340] bcachefs (loop4): shutdown complete [ 296.641175][ T2816] team0 (unregistering): Port device team_slave_1 removed [ 296.718397][ T2816] team0 (unregistering): Port device team_slave_0 removed [ 297.491410][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.498643][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.513054][ T9917] bridge_slave_0: entered allmulticast mode [ 297.529199][ T9917] bridge_slave_0: entered promiscuous mode [ 297.543164][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.550322][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.584791][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 297.593061][ T9917] bridge_slave_1: entered allmulticast mode [ 297.602135][ T9917] bridge_slave_1: entered promiscuous mode [ 297.742813][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.775287][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.812352][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 297.830096][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.856663][ T5105] Bluetooth: hci2: command tx timeout [ 297.885627][ T8] usb 5-1: config 0 descriptor?? [ 297.895508][ T8] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 297.989353][ T9917] team0: Port device team_slave_0 added [ 298.012625][ T5105] Bluetooth: hci3: command tx timeout [ 298.035086][ T9917] team0: Port device team_slave_1 added [ 298.060697][T10017] loop1: detected capacity change from 0 to 32768 [ 298.086837][T10017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10017) [ 298.132644][T10017] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.154611][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.162196][T10017] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 298.162274][T10017] BTRFS info (device loop1): using free-space-tree [ 298.182343][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.184439][ T8] usb 5-1: USB disconnect, device number 9 [ 298.217831][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.327382][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.335191][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.362855][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.535324][ T9917] hsr_slave_0: entered promiscuous mode [ 298.559330][ T9917] hsr_slave_1: entered promiscuous mode [ 298.588200][ T9917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.599156][ T9917] Cannot create hsr debugfs directory [ 298.632748][T10050] binder: 10016:10050 ioctl c0306201 200003c0 returned -14 [ 298.720314][ T9998] chnl_net:caif_netlink_parms(): no params data found [ 298.910834][ T8301] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.076975][ T2816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.504198][ T2816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.671619][ T2816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.854752][T10069] cgroup: name respecified [ 299.863460][ T2816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.882240][ T9998] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.882348][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.882557][ T9998] bridge_slave_0: entered allmulticast mode [ 299.892595][ T9998] bridge_slave_0: entered promiscuous mode [ 299.895883][ T9998] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.895981][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.896382][ T9998] bridge_slave_1: entered allmulticast mode [ 299.897697][ T9998] bridge_slave_1: entered promiscuous mode [ 300.009283][ T9998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.075909][ T5105] Bluetooth: hci2: command tx timeout [ 300.125533][ T9998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.179469][T10085] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 300.204066][T10085] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 300.237412][ T5105] Bluetooth: hci3: command tx timeout [ 300.308459][ T9998] team0: Port device team_slave_0 added [ 300.412776][T10091] block nbd4: shutting down sockets [ 300.432882][ T9998] team0: Port device team_slave_1 added [ 300.618342][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 300.629260][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.641440][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.671784][ T9998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.709869][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.750448][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.806365][ T9998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.901736][T10083] loop1: detected capacity change from 0 to 32768 [ 300.928372][T10083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10083) [ 300.942756][ T2816] bridge_slave_1: left allmulticast mode [ 300.948965][ T2816] bridge_slave_1: left promiscuous mode [ 300.958869][ T2816] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.967547][T10083] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.979292][T10083] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 300.989519][ T2816] bridge_slave_0: left allmulticast mode [ 300.995284][ T2816] bridge_slave_0: left promiscuous mode [ 301.001119][ T2816] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.011343][T10083] BTRFS info (device loop1): using free-space-tree [ 301.433857][T10083] binder: 10082:10083 ioctl c0306201 200003c0 returned -14 [ 301.563498][ T8301] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.951862][ T2816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.973469][ T2816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.984423][ T2816] bond0 (unregistering): Released all slaves [ 301.997601][ T2816] bond1 (unregistering): Released all slaves [ 302.092437][ T9998] hsr_slave_0: entered promiscuous mode [ 302.116372][ T9998] hsr_slave_1: entered promiscuous mode [ 302.134692][ T9998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.142464][ T9998] Cannot create hsr debugfs directory [ 302.256662][ T928] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 302.288880][ T5105] Bluetooth: hci2: command tx timeout [ 302.318836][T10130] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 302.390061][ T9917] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.416476][ T9917] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 302.474967][ T928] usb 2-1: Using ep0 maxpacket: 8 [ 302.506826][ T928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.540910][ T928] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 302.551263][ T9917] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 302.571853][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.611858][ T2816] hsr_slave_0: left promiscuous mode [ 302.617867][ T2816] hsr_slave_1: left promiscuous mode [ 302.621311][ T928] usb 2-1: config 0 descriptor?? [ 302.636705][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.653617][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.670452][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.680014][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.708651][ T2816] veth1_macvtap: left promiscuous mode [ 302.714950][ T2816] veth0_macvtap: left promiscuous mode [ 302.721082][ T2816] veth1_vlan: left promiscuous mode [ 302.727703][ T2816] veth0_vlan: left promiscuous mode [ 302.881301][T10124] loop1: detected capacity change from 0 to 256 [ 302.901758][T10124] exfat: Deprecated parameter 'utf8' [ 302.907679][T10124] exfat: Bad value for 'gid' [ 303.178149][ T8] usb 2-1: USB disconnect, device number 6 [ 303.570489][ T2816] team0 (unregistering): Port device team_slave_1 removed [ 303.624079][ T2816] team0 (unregistering): Port device team_slave_0 removed [ 304.238199][ T9917] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.455040][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 304.455056][ T29] audit: type=1326 audit(1986732975.864:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10160 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3634e7cea9 code=0x0 [ 304.534850][ T5105] Bluetooth: hci2: command tx timeout [ 304.765305][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.790987][ T9917] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.804020][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.811152][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.879948][T10167] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 304.888255][T10167] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.291340][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.298622][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.574337][T10172] loop4: detected capacity change from 0 to 256 [ 305.582363][T10172] FAT-fs (loop4): Unrecognized mount option "shortncharset=cp864" or missing value [ 305.639769][T10169] loop4: detected capacity change from 0 to 8 [ 305.696945][T10169] SQUASHFS error: zstd decompression error: 10 [ 305.717427][T10169] SQUASHFS error: zstd decompression failed, data probably corrupt [ 305.730127][T10169] SQUASHFS error: Failed to read block 0x4ea: -5 [ 305.744424][T10169] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 305.751758][T10169] SQUASHFS error: Unable to read inode 0x11f [ 306.591614][ T9998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 306.644000][ T9998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 306.701003][ T9998] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 306.793275][ T9917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.826656][ T9998] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.031330][ T9917] veth0_vlan: entered promiscuous mode [ 307.139613][ T9917] veth1_vlan: entered promiscuous mode [ 307.380300][ T9917] veth0_macvtap: entered promiscuous mode [ 307.455026][ T9917] veth1_macvtap: entered promiscuous mode [ 307.503547][ T9998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.563373][ T9998] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.583716][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.607843][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.618812][ T29] audit: type=1326 audit(1986732978.820:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3634e7cea9 code=0x0 [ 307.619775][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.651418][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.665246][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.676047][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.694770][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.705462][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.715914][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.726885][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.738859][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.770388][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.777607][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.792589][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.799810][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.823303][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.843156][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.869742][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.880868][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.885085][T10201] loop0: detected capacity change from 0 to 8192 [ 307.897782][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.904494][T10201] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 307.909514][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.929327][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.939972][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.954517][ T9917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.966289][ T9917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.978468][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.012469][ T9917] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.022235][ T9917] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.032360][ T9917] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.043136][ T9917] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.099904][ T9998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.234157][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.241991][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.339345][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.365093][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.562995][ T9998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.661444][ T9998] veth0_vlan: entered promiscuous mode [ 308.694104][ T9998] veth1_vlan: entered promiscuous mode [ 308.762106][ T9998] veth0_macvtap: entered promiscuous mode [ 308.787147][ T9998] veth1_macvtap: entered promiscuous mode [ 308.804930][T10223] loop1: detected capacity change from 0 to 4096 [ 308.839115][T10223] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 308.854160][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.876574][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.887964][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.899219][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.909954][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.921939][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.934213][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.947290][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.962236][T10223] ntfs3: loop1: Failed to load $MFT (-2). [ 308.995624][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.003640][T10227] loop4: detected capacity change from 0 to 2048 [ 309.013994][T10227] udf: Bad value for 'volume' [ 309.023667][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.033513][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.048531][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.060501][ T9998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.125916][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.140357][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.154785][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.169663][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.192014][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.237755][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.243232][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.247595][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.247618][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.296656][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.322503][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.335282][T10230] loop0: detected capacity change from 0 to 8192 [ 309.347252][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.364089][T10230] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.365782][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.398082][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.420827][ T9998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.511402][ T9998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.525737][ T9998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.534690][ T9998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.561740][ T9998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.735606][T10242] loop0: detected capacity change from 0 to 256 [ 309.758383][T10243] loop4: detected capacity change from 0 to 256 [ 309.772802][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.780667][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.843133][T10243] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 309.880436][ T6804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.894467][ T6804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.987495][ T29] audit: type=1326 audit(1986732981.046:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10244 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ac407cea9 code=0x0 [ 310.200370][T10252] loop2: detected capacity change from 0 to 1024 [ 310.349387][ T5197] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 310.541299][T10258] loop2: detected capacity change from 0 to 2048 [ 310.559187][T10258] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 310.571525][ T5197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 310.583273][ T5197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 310.594307][T10258] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 310.612404][ T5197] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.625960][ T5197] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.641390][T10258] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.651581][ T5197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.663520][ T5197] usb 1-1: config 0 descriptor?? [ 310.706044][ T29] audit: type=1800 audit(1986732981.710:1219): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 310.750938][ T29] audit: type=1804 audit(1986732981.720:1220): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2436010507/syzkaller.zvFxw9/4/bus/bus" dev="loop2" ino=1367 res=1 errno=0 [ 310.785060][T10260] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 310.988299][T10263] loop2: detected capacity change from 0 to 2048 [ 311.025023][T10263] udf: Bad value for 'volume' [ 311.139610][ T5197] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 311.204986][ T5197] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 311.420328][T10276] loop3: detected capacity change from 0 to 128 [ 311.548177][T10276] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.561948][T10276] ext4 filesystem being mounted at /root/syzkaller-testdir1451874696/syzkaller.q1FkDP/6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 311.673840][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.688129][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.697174][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.705428][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.741102][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 311.749160][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.829545][ T9917] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.864683][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.884885][T10287] sit0: left promiscuous mode [ 311.979666][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.980572][T10296] loop4: detected capacity change from 0 to 256 [ 312.016847][T10296] exfat: Deprecated parameter 'namecase' [ 312.050441][T10296] exfat: Deprecated parameter 'namecase' [ 312.083122][T10296] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 312.121677][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.142048][ T5147] usb 1-1: USB disconnect, device number 12 [ 312.234238][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.461519][T10286] chnl_net:caif_netlink_parms(): no params data found [ 312.506215][ T35] bridge_slave_1: left allmulticast mode [ 312.512248][ T35] bridge_slave_1: left promiscuous mode [ 312.518099][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.551678][ T35] bridge_slave_0: left allmulticast mode [ 312.558135][ T35] bridge_slave_0: left promiscuous mode [ 312.573569][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.933695][T10310] loop2: detected capacity change from 0 to 128 [ 312.967166][T10301] loop3: detected capacity change from 0 to 32768 [ 312.996623][T10301] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10301) [ 313.012085][T10310] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.028473][T10310] ext4 filesystem being mounted at /root/syzkaller-testdir2436010507/syzkaller.zvFxw9/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 313.106307][T10301] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.127578][T10301] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 313.145958][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.157941][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.181216][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.198474][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.208617][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 313.216648][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.304961][T10301] BTRFS info (device loop3): rebuilding free space tree [ 313.316826][ T9998] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.361902][T10301] BTRFS info (device loop3): disabling free space tree [ 313.369278][T10301] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 313.394228][T10301] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 313.516651][ T9917] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.802986][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.877911][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.911499][ T35] bond0 (unregistering): Released all slaves [ 313.954448][ T35] bond1 (unregistering): Released all slaves [ 314.031794][ T5105] Bluetooth: hci0: command tx timeout [ 314.056520][T10345] loop3: detected capacity change from 0 to 256 [ 314.067134][T10345] FAT-fs (loop3): Unrecognized mount option "shortncharset=cp864" or missing value [ 314.125277][T10342] loop3: detected capacity change from 0 to 8 [ 314.183464][T10342] SQUASHFS error: zstd decompression error: 10 [ 314.198248][T10342] SQUASHFS error: zstd decompression failed, data probably corrupt [ 314.234401][T10342] SQUASHFS error: Failed to read block 0x4ea: -5 [ 314.245205][T10342] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 314.326347][ T5147] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 314.327807][T10342] SQUASHFS error: Unable to read inode 0x11f [ 314.346201][T10286] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.357912][T10286] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.367035][T10286] bridge_slave_0: entered allmulticast mode [ 314.374451][T10286] bridge_slave_0: entered promiscuous mode [ 314.387041][T10286] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.394589][T10286] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.401984][T10286] bridge_slave_1: entered allmulticast mode [ 314.409622][T10286] bridge_slave_1: entered promiscuous mode [ 314.532554][ T5147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 314.557245][ T5147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 314.580896][ T5147] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.594030][ T5147] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.603090][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.625247][T10286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.645424][ T5147] usb 3-1: config 0 descriptor?? [ 314.703426][T10286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.734984][ T35] hsr_slave_0: left promiscuous mode [ 314.745859][ T35] hsr_slave_1: left promiscuous mode [ 314.752095][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.759919][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.770599][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.778953][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.818618][ T35] veth1_macvtap: left promiscuous mode [ 314.824290][ T35] veth0_macvtap: left promiscuous mode [ 314.830197][ T35] veth1_vlan: left promiscuous mode [ 314.835608][ T35] veth0_vlan: left promiscuous mode [ 315.108165][ T5147] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 315.178574][ T5147] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 315.463226][ T5105] Bluetooth: hci1: command tx timeout [ 315.608289][ T35] team0 (unregistering): Port device team_slave_1 removed [ 315.682421][ T35] team0 (unregistering): Port device team_slave_0 removed [ 316.127552][ T5147] usb 3-1: USB disconnect, device number 8 [ 316.239683][ T5105] Bluetooth: hci0: command tx timeout [ 316.405838][T10286] team0: Port device team_slave_0 added [ 316.429731][T10286] team0: Port device team_slave_1 added [ 316.515921][T10286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.528501][T10286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.565267][T10286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.576835][T10312] chnl_net:caif_netlink_parms(): no params data found [ 316.591048][T10286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.599048][T10286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.625865][T10286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.777450][T10379] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 316.895594][T10286] hsr_slave_0: entered promiscuous mode [ 316.902433][T10286] hsr_slave_1: entered promiscuous mode [ 316.909108][T10286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.917314][T10286] Cannot create hsr debugfs directory [ 316.956254][T10312] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.963368][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.975905][T10312] bridge_slave_0: entered allmulticast mode [ 316.983922][T10312] bridge_slave_0: entered promiscuous mode [ 317.001568][T10312] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.008710][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.041321][T10312] bridge_slave_1: entered allmulticast mode [ 317.053694][T10312] bridge_slave_1: entered promiscuous mode [ 317.285559][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.310542][T10312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.340391][T10312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.468651][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.538116][T10312] team0: Port device team_slave_0 added [ 317.585265][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.602417][T10312] team0: Port device team_slave_1 added [ 317.686031][ T5105] Bluetooth: hci1: command tx timeout [ 317.705591][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.739824][T10312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.746821][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.774757][ T5197] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 317.787471][T10312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.806650][T10312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.813810][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.840036][T10312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.927145][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.997095][ T5197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 318.012307][ T5197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 318.031991][ T5197] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.066722][ T5197] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.095991][T10312] hsr_slave_0: entered promiscuous mode [ 318.102452][ T5197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.116030][ T5197] usb 3-1: config 0 descriptor?? [ 318.129243][T10312] hsr_slave_1: entered promiscuous mode [ 318.138760][T10312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.149390][T10312] Cannot create hsr debugfs directory [ 318.273078][ T35] bridge_slave_1: left allmulticast mode [ 318.278828][ T35] bridge_slave_1: left promiscuous mode [ 318.285028][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.308475][ T35] bridge_slave_0: left allmulticast mode [ 318.324582][ T35] bridge_slave_0: left promiscuous mode [ 318.330543][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.455617][ T5105] Bluetooth: hci0: command tx timeout [ 318.572802][ T5197] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 318.626826][ T5197] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 318.996698][T10429] loop0: detected capacity change from 0 to 40427 [ 319.019525][T10429] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 319.027498][T10429] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 319.040920][T10429] F2FS-fs (loop0): invalid crc value [ 319.098943][T10429] F2FS-fs (loop0): Found nat_bits in checkpoint [ 319.199788][T10429] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 319.217772][T10429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 319.360124][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.388876][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.407394][T10429] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 319.433494][ T35] bond0 (unregistering): Released all slaves [ 319.434978][T10429] overlayfs: conflicting lowerdir path [ 319.465725][T10429] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 319.494733][T10436] bond0: entered promiscuous mode [ 319.507300][T10436] bond_slave_0: entered promiscuous mode [ 319.518539][T10436] bond_slave_1: entered promiscuous mode [ 319.537956][ T9] usb 3-1: USB disconnect, device number 9 [ 319.551749][T10436] vlan2: entered promiscuous mode [ 319.561651][ T9406] F2FS-fs (loop0): access invalid blkaddr:2048 [ 319.562490][T10436] vlan1: entered promiscuous mode [ 319.569399][ T9406] CPU: 0 PID: 9406 Comm: syz-executor.0 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 319.584693][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 319.594768][ T9406] Call Trace: [ 319.598052][ T9406] [ 319.600992][ T9406] dump_stack_lvl+0x241/0x360 [ 319.605703][ T9406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.610923][ T9406] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 319.616839][ T9406] ? __lock_acquire+0x1346/0x1fd0 [ 319.621894][ T9406] __f2fs_is_valid_blkaddr+0xe16/0x1460 [ 319.627454][ T9406] f2fs_map_blocks+0xf29/0x4970 [ 319.632332][ T9406] ? xas_load+0x59b/0x5c0 [ 319.636645][ T9406] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 319.641948][ T9406] ? xa_load+0x2dd/0x350 [ 319.646212][ T9406] ? __pfx_xa_load+0x10/0x10 [ 319.650812][ T9406] ? folio_index+0xab/0x350 [ 319.655300][ T9406] f2fs_mpage_readpages+0xcff/0x21b0 [ 319.660615][ T9406] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 319.666396][ T9406] ? f2fs_readahead+0x184/0x340 [ 319.671255][ T9406] read_pages+0x17e/0x840 [ 319.675579][ T9406] ? __pfx_lru_add_fn+0x10/0x10 [ 319.680424][ T9406] ? folio_add_lru+0x27b/0x9e0 [ 319.685185][ T9406] ? __pfx_read_pages+0x10/0x10 [ 319.690030][ T9406] ? filemap_add_folio+0x26d/0x650 [ 319.695173][ T9406] ? __pfx_filemap_add_folio+0x10/0x10 [ 319.700634][ T9406] ? page_cache_ra_order+0x2e0/0xcb0 [ 319.705918][ T9406] page_cache_ra_unbounded+0x6ce/0x7f0 [ 319.711388][ T9406] f2fs_readdir+0x5bc/0xbf0 [ 319.715886][ T9406] ? __pfx___might_resched+0x10/0x10 [ 319.721180][ T9406] ? __pfx_f2fs_readdir+0x10/0x10 [ 319.726198][ T9406] ? trace_contention_end+0x3c/0x120 [ 319.731481][ T9406] ? iterate_dir+0x55b/0x820 [ 319.736073][ T9406] ? __fdget_pos+0x24e/0x310 [ 319.740660][ T9406] ? __pfx_reacquire_held_locks+0x10/0x10 [ 319.746378][ T9406] ? bpf_lsm_file_permission+0x9/0x10 [ 319.751743][ T9406] iterate_dir+0x65e/0x820 [ 319.756192][ T9406] __se_sys_getdents64+0x20d/0x4f0 [ 319.761483][ T9406] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 319.767454][ T9406] ? __pfx___se_sys_getdents64+0x10/0x10 [ 319.773071][ T9406] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 319.779039][ T9406] ? __pfx_filldir64+0x10/0x10 [ 319.783790][ T9406] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.790107][ T9406] ? exc_page_fault+0x590/0x8c0 [ 319.794950][ T9406] ? do_syscall_64+0xb6/0x230 [ 319.799621][ T9406] do_syscall_64+0xf3/0x230 [ 319.804118][ T9406] ? clear_bhb_loop+0x35/0x90 [ 319.808789][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.814680][ T9406] RIP: 0033:0x7fc98baa83a3 [ 319.819088][ T9406] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 319.838705][ T9406] RSP: 002b:00007ffc1c711b18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 319.847126][ T9406] RAX: ffffffffffffffda RBX: 00005555663bf970 RCX: 00007fc98baa83a3 [ 319.855094][ T9406] RDX: 0000000000008000 RSI: 00005555663bf970 RDI: 0000000000000005 [ 319.863071][ T9406] RBP: 00005555663bf944 R08: 0000000000000000 R09: 0000000000000000 [ 319.871030][ T9406] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 319.879008][ T9406] R13: 0000000000000010 R14: 00005555663bf940 R15: 0000000000000009 [ 319.886982][ T9406] [ 319.904143][T10436] dummy0: entered promiscuous mode [ 319.909507][ T5105] Bluetooth: hci1: command tx timeout [ 319.926547][ T9406] syz-executor.0: attempt to access beyond end of device [ 319.926547][ T9406] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 319.966918][ T9406] syz-executor.0: attempt to access beyond end of device [ 319.966918][ T9406] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 320.165895][ T11] kworker/u8:0: attempt to access beyond end of device [ 320.165895][ T11] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 320.212760][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 320.232827][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 320.266946][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 320.290810][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 320.345541][T10286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.459548][T10447] loop2: detected capacity change from 0 to 256 [ 320.482477][T10447] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d) [ 320.514292][T10286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.605704][ T35] hsr_slave_0: left promiscuous mode [ 320.611962][ T35] hsr_slave_1: left promiscuous mode [ 320.619585][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.627124][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.637187][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.644874][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.674864][ T35] veth1_macvtap: left promiscuous mode [ 320.681235][T10452] loop2: detected capacity change from 0 to 1024 [ 320.687640][ T35] veth0_macvtap: left promiscuous mode [ 320.687823][ T35] veth1_vlan: left promiscuous mode [ 320.687952][ T35] veth0_vlan: left promiscuous mode [ 320.691099][ T5105] Bluetooth: hci0: command tx timeout [ 320.716051][T10452] hfsplus: bad catalog entry type [ 320.751568][ T51] hfsplus: b-tree write err: -5, ino 4 [ 320.978266][T10456] Bluetooth: MGMT ver 1.22 [ 320.983041][T10456] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 321.613173][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.642205][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.657365][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.699323][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.714872][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 321.715711][ T35] team0 (unregistering): Port device team_slave_1 removed [ 321.722261][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.796066][ T35] team0 (unregistering): Port device team_slave_0 removed [ 322.130904][ T5105] Bluetooth: hci1: command tx timeout [ 322.357061][T10286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.404224][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.424210][T10286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.538094][T10466] loop3: detected capacity change from 0 to 2048 [ 322.573144][T10466] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.968791][T10474] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 1, id = 0 [ 323.160776][T10312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.202738][T10286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.251517][T10312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.267089][T10463] chnl_net:caif_netlink_parms(): no params data found [ 323.293949][T10286] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.313181][T10312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.322261][ T29] audit: type=1326 audit(1986732993.515:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.351489][T10312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 323.368887][ T29] audit: type=1326 audit(1986732993.515:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.434749][ T29] audit: type=1326 audit(1986732993.515:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.466571][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.469665][ T29] audit: type=1326 audit(1986732993.515:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.473772][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.495688][ T29] audit: type=1326 audit(1986732993.515:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.541117][ T29] audit: type=1326 audit(1986732993.515:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.566936][ T29] audit: type=1326 audit(1986732993.515:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.589686][ T29] audit: type=1326 audit(1986732993.515:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.612320][ T29] audit: type=1326 audit(1986732993.515:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.648820][ T29] audit: type=1326 audit(1986732993.515:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4c27cea9 code=0x50000 [ 323.699013][T10487] loop3: detected capacity change from 0 to 1024 [ 323.762462][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.797011][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.804235][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.933070][ T5105] Bluetooth: hci4: command tx timeout [ 323.953979][ T6804] hfsplus: b-tree write err: -5, ino 8 [ 323.985852][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.100806][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.138742][T10463] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.146512][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.160374][T10463] bridge_slave_0: entered allmulticast mode [ 324.168780][T10463] bridge_slave_0: entered promiscuous mode [ 324.252007][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.292057][T10463] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.299274][T10463] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.308820][T10463] bridge_slave_1: entered allmulticast mode [ 324.333473][T10463] bridge_slave_1: entered promiscuous mode [ 324.425252][T10286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.497793][T10463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.532466][T10463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.844439][T10463] team0: Port device team_slave_0 added [ 324.885411][T10463] team0: Port device team_slave_1 added [ 324.904761][T10312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.048042][T10463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.066129][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.120009][T10463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.157272][ T35] bridge_slave_1: left allmulticast mode [ 325.162959][ T35] bridge_slave_1: left promiscuous mode [ 325.176617][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.209036][ T35] bridge_slave_0: left allmulticast mode [ 325.222776][ T35] bridge_slave_0: left promiscuous mode [ 325.228667][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.384723][T10499] loop3: detected capacity change from 0 to 32768 [ 325.486042][T10499] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 325.637488][T10499] XFS (loop3): Ending clean mount [ 325.657247][T10499] XFS (loop3): Quotacheck needed: Please wait. [ 325.745942][T10499] XFS (loop3): Quotacheck: Done. [ 325.926608][ T9917] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 325.987987][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.996003][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.150505][ T5105] Bluetooth: hci4: command tx timeout [ 326.437124][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.456775][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.478922][ T35] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 326.500519][ T35] bond0 (unregistering): Released all slaves [ 326.551210][T10463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.559828][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.587915][T10463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.641711][T10511] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 326.652736][T10511] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.774439][T10463] hsr_slave_0: entered promiscuous mode [ 326.811935][T10463] hsr_slave_1: entered promiscuous mode [ 326.831139][T10463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.845213][T10463] Cannot create hsr debugfs directory [ 326.969680][T10312] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.979555][T10286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.134422][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.135304][T10518] loop3: detected capacity change from 0 to 32768 [ 327.141615][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.173774][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.181013][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.212515][ T35] hsr_slave_0: left promiscuous mode [ 327.218441][ T35] hsr_slave_1: left promiscuous mode [ 327.230817][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.238289][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.257896][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.266128][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.288522][T10518] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 327.300799][ T35] veth1_macvtap: left promiscuous mode [ 327.307433][ T35] veth0_macvtap: left promiscuous mode [ 327.308247][T10518] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 327.313174][ T35] veth1_vlan: left promiscuous mode [ 327.326964][ T35] veth0_vlan: left promiscuous mode [ 327.354315][T10518] bcachefs (loop3): alloc_read... done [ 327.365939][T10518] bcachefs (loop3): stripes_read... done [ 327.377752][T10518] bcachefs (loop3): snapshots_read... done [ 327.394112][T10518] bcachefs (loop3): journal_replay... done [ 327.400173][T10518] bcachefs (loop3): resume_logged_ops... done [ 327.406883][T10518] bcachefs (loop3): going read-write [ 327.416506][T10518] bcachefs (loop3): done starting filesystem [ 327.484401][ T9917] bcachefs (loop3): shutting down [ 327.492188][ T9917] bcachefs (loop3): going read-only [ 327.498831][ T9917] bcachefs (loop3): finished waiting for writes to stop [ 327.510342][ T9917] bcachefs (loop3): flushing journal and stopping allocators, journal seq 7 [ 327.534306][ T9917] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 7 [ 327.577987][ T9917] bcachefs (loop3): shutdown complete, journal seq 8 [ 327.594134][ T9917] bcachefs (loop3): marking filesystem clean [ 327.622810][ T9917] bcachefs (loop3): shutdown complete [ 327.802596][T10533] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 328.177368][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.374379][ T5098] Bluetooth: hci4: command tx timeout [ 328.396466][T10544] loop3: detected capacity change from 0 to 128 [ 328.404928][ T35] team0 (unregistering): Port device team_slave_1 removed [ 328.493329][ T35] team0 (unregistering): Port device team_slave_0 removed [ 329.165108][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.177531][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.194528][T10548] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 329.203696][T10548] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.275250][T10550] loop2: detected capacity change from 0 to 512 [ 329.301587][T10550] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 329.304333][T10552] ieee802154 phy0 wpan0: encryption failed: -90 [ 329.328684][T10550] UDF-fs: Scanning with blocksize 512 failed [ 329.355109][T10550] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 329.368032][T10550] UDF-fs: Scanning with blocksize 1024 failed [ 329.394245][T10550] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 329.402623][T10550] UDF-fs: Scanning with blocksize 2048 failed [ 329.425691][T10550] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 329.438747][T10550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.495706][T10312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.558278][T10556] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 329.564371][T10286] veth0_vlan: entered promiscuous mode [ 329.674958][T10286] veth1_vlan: entered promiscuous mode [ 329.771886][T10286] veth0_macvtap: entered promiscuous mode [ 329.854751][T10286] veth1_macvtap: entered promiscuous mode [ 329.879761][T10568] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.897070][T10568] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.044155][T10312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.113206][T10286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.151023][T10286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.201865][T10286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.212373][T10286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.222366][T10286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.246775][T10286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.284480][T10286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.540581][T10286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.662256][ T5098] Bluetooth: hci4: command tx timeout [ 330.685280][T10286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.930762][T10286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.949365][T10286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.959865][T10286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.013195][T10286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.033494][T10286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.052081][T10286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.063075][T10286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.078682][T10286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.125915][T10286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.152585][T10286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.190940][T10286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.218798][T10286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.251394][T10286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.423681][T10596] loop2: detected capacity change from 0 to 512 [ 331.477889][T10596] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 331.527580][T10596] UDF-fs: Scanning with blocksize 512 failed [ 331.543145][T10596] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 331.577086][T10596] UDF-fs: Scanning with blocksize 1024 failed [ 331.700403][T10596] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 331.814292][T10596] UDF-fs: Scanning with blocksize 2048 failed [ 331.934355][T10596] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 332.180276][T10596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.317202][T10312] veth0_vlan: entered promiscuous mode [ 332.384228][T10312] veth1_vlan: entered promiscuous mode [ 332.390797][T10463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.447647][ T2437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.455500][ T2437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.477081][T10463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.495508][T10463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.539135][T10602] loop2: detected capacity change from 0 to 256 [ 332.615863][T10602] FAT-fs (loop2): Directory bread(block 64) failed [ 332.623965][T10463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.639552][T10602] FAT-fs (loop2): Directory bread(block 65) failed [ 332.682652][T10602] FAT-fs (loop2): Directory bread(block 66) failed [ 332.695403][ T2437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.699901][T10602] FAT-fs (loop2): Directory bread(block 67) failed [ 332.710230][ T2437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.718972][T10602] FAT-fs (loop2): Directory bread(block 68) failed [ 332.732606][T10312] veth0_macvtap: entered promiscuous mode [ 332.762704][T10312] veth1_macvtap: entered promiscuous mode [ 332.776462][T10602] FAT-fs (loop2): Directory bread(block 69) failed [ 332.805260][T10602] FAT-fs (loop2): Directory bread(block 70) failed [ 332.814584][T10602] FAT-fs (loop2): Directory bread(block 71) failed [ 332.840606][T10602] FAT-fs (loop2): Directory bread(block 72) failed [ 332.866435][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.877188][T10602] FAT-fs (loop2): Directory bread(block 73) failed [ 332.896185][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.906044][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.962216][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.988722][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.009420][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.019557][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.042349][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.059471][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.070531][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.096609][T10312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.134471][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.164126][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.175998][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.186689][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.198414][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.209335][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.233435][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.268580][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.295815][T10312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.328920][T10312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.363155][T10312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.436185][T10312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.494513][T10312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.529016][T10312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.556487][T10312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.619289][T10463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.686606][T10463] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.779221][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.781207][T10612] loop1: detected capacity change from 0 to 32768 [ 333.786388][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.795830][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.807486][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.886927][T10612] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 333.900601][ T6804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.909367][ T6804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.974783][T10633] loop3: detected capacity change from 0 to 2048 [ 333.988211][T10612] XFS (loop1): Ending clean mount [ 334.021535][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.031306][T10633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.060988][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.147923][ T29] kauditd_printk_skb: 7670 callbacks suppressed [ 334.147941][ T29] audit: type=1326 audit(1986733003.636:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10611 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f979d07cea9 code=0x0 [ 334.267016][T10634] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 334.437581][T10286] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 334.558223][T10463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.747766][T10463] veth0_vlan: entered promiscuous mode [ 334.771405][T10655] loop4: detected capacity change from 0 to 256 [ 334.802445][T10463] veth1_vlan: entered promiscuous mode [ 334.893969][T10463] veth0_macvtap: entered promiscuous mode [ 334.928730][T10463] veth1_macvtap: entered promiscuous mode [ 335.009396][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.044932][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.059596][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.068687][T10666] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.075973][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.098461][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.109446][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.119291][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.129965][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.151089][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.168009][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.183107][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.205000][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.227356][T10463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.285934][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.328836][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.348336][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.368834][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.387488][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.402874][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.423229][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.441962][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.465872][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.503446][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.536601][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.569995][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.614177][T10463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.679722][T10463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.697221][T10463] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.724986][T10463] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.746575][T10463] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.972124][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.999749][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.089342][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.121414][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.596581][T10697] loop0: detected capacity change from 0 to 764 [ 336.620294][T10697] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 336.628820][T10680] loop3: detected capacity change from 0 to 32768 [ 336.684995][T10680] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 336.798606][T10680] XFS (loop3): Ending clean mount [ 336.879923][ T29] audit: type=1326 audit(1986733006.190:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10679 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c22c7cea9 code=0x0 [ 337.055444][T10715] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 337.088701][T10717] loop4: detected capacity change from 0 to 512 [ 337.096553][T10719] netlink: 210568 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.103567][T10717] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 337.125479][T10717] UDF-fs: Scanning with blocksize 512 failed [ 337.127978][T10719] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 337.143477][T10717] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 337.143730][T10719] openvswitch: netlink: Message has 4 unknown bytes. [ 337.169261][T10717] UDF-fs: Scanning with blocksize 1024 failed [ 337.182548][T10717] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 337.191847][T10717] UDF-fs: Scanning with blocksize 2048 failed [ 337.198905][T10717] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 337.210688][T10717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.278143][ T9917] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.535594][T10728] lo: entered allmulticast mode [ 337.552619][T10732] loop1: detected capacity change from 0 to 512 [ 337.594815][T10732] EXT4-fs (loop1): Test dummy encryption mode enabled [ 337.644982][T10732] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 337.686748][T10738] loop0: detected capacity change from 0 to 64 [ 337.693582][T10732] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 337.752449][T10732] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.064441][T10286] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 338.157616][T10730] loop2: detected capacity change from 0 to 32768 [ 338.174663][T10730] XFS: attr2 mount option is deprecated. [ 338.195329][T10730] XFS: ikeep mount option is deprecated. [ 338.206046][T10730] XFS: noikeep mount option is deprecated. [ 338.271318][T10730] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 338.368205][T10730] XFS (loop2): Ending clean mount [ 338.411154][T10730] XFS (loop2): Quotacheck needed: Please wait. [ 338.565298][T10771] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 338.672348][T10730] XFS (loop2): Quotacheck: Done. [ 339.001727][ T5146] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 339.331627][ T5146] usb 2-1: config index 0 descriptor too short (expected 55076, got 36) [ 339.340020][ T5146] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 339.465632][ T5146] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 339.499800][ T9998] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 339.572259][ T5146] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 339.650848][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 227, changing to 7 [ 339.765864][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 58544, setting to 1024 [ 339.913339][ T5146] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 339.981452][ T5146] usb 2-1: New USB device strings: Mfr=1, Product=16, SerialNumber=3 [ 340.081429][ T5146] usb 2-1: Product: syz [ 340.122636][ T5146] usb 2-1: Manufacturer: syz [ 340.127291][ T5146] usb 2-1: SerialNumber: syz [ 340.251828][ T5146] usb 2-1: config 0 descriptor?? [ 340.262421][T10771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 340.309239][ T5146] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 341.129552][T10796] loop2: detected capacity change from 0 to 8 [ 341.133220][ T8] usb 2-1: USB disconnect, device number 7 [ 341.230729][T10796] SQUASHFS error: lzo decompression failed, data probably corrupt [ 341.257799][T10796] SQUASHFS error: Failed to read block 0x91: -5 [ 341.279321][T10796] SQUASHFS error: Unable to read metadata cache entry [8f] [ 341.287217][T10796] SQUASHFS error: Unable to read inode 0x11f [ 341.591470][T10808] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 343.104708][T10833] 9pnet_fd: Insufficient options for proto=fd [ 343.375966][T10843] loop0: detected capacity change from 0 to 256 [ 343.535790][T10820] loop2: detected capacity change from 0 to 32768 [ 343.682230][T10820] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 343.706538][T10818] loop3: detected capacity change from 0 to 32768 [ 343.714216][T10818] XFS: attr2 mount option is deprecated. [ 343.720213][T10818] XFS: ikeep mount option is deprecated. [ 343.725982][T10818] XFS: noikeep mount option is deprecated. [ 343.732795][T10820] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 343.782528][T10820] bcachefs (loop2): alloc_read... done [ 343.791854][T10820] bcachefs (loop2): stripes_read... done [ 343.797684][T10820] bcachefs (loop2): snapshots_read... done [ 343.822506][T10820] bcachefs (loop2): journal_replay... done [ 343.856561][T10820] bcachefs (loop2): resume_logged_ops... done [ 343.910533][T10820] bcachefs (loop2): going read-write [ 343.936925][T10818] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 343.987162][T10820] bcachefs (loop2): done starting filesystem [ 344.566587][T10818] XFS (loop3): Ending clean mount [ 344.586671][T10818] XFS (loop3): Quotacheck needed: Please wait. [ 344.762153][T10818] XFS (loop3): Quotacheck: Done. [ 344.939914][ T9998] bcachefs (loop2): shutting down [ 344.954795][ T9998] bcachefs (loop2): going read-only [ 344.965320][ T9998] bcachefs (loop2): finished waiting for writes to stop [ 345.017713][ T9998] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 345.058417][T10882] loop0: detected capacity change from 0 to 32768 [ 345.084090][ T9917] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 345.104519][ T9998] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 345.110228][T10882] btrfs: Deprecated parameter 'usebackuproot' [ 345.126522][T10882] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 345.148349][ T9998] bcachefs (loop2): shutdown complete, journal seq 15 [ 345.156214][ T9998] bcachefs (loop2): marking filesystem clean [ 345.163674][T10882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10882) [ 345.315153][T10882] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 345.327189][ T9998] bcachefs (loop2): shutdown complete [ 345.337590][T10882] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 345.640880][T10882] BTRFS info (device loop0): rebuilding free space tree [ 345.669761][T10915] loop4: detected capacity change from 0 to 256 [ 345.742764][T10882] BTRFS info (device loop0): disabling free space tree [ 345.756969][T10882] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 345.769435][T10915] FAT-fs (loop4): Directory bread(block 64) failed [ 345.776000][T10915] FAT-fs (loop4): Directory bread(block 65) failed [ 345.789190][T10882] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 345.814373][T10915] FAT-fs (loop4): Directory bread(block 66) failed [ 345.837837][T10915] FAT-fs (loop4): Directory bread(block 67) failed [ 345.860235][T10915] FAT-fs (loop4): Directory bread(block 68) failed [ 345.870981][T10915] FAT-fs (loop4): Directory bread(block 69) failed [ 345.899388][T10915] FAT-fs (loop4): Directory bread(block 70) failed [ 345.914578][T10915] FAT-fs (loop4): Directory bread(block 71) failed [ 345.928367][T10915] FAT-fs (loop4): Directory bread(block 72) failed [ 345.949418][T10915] FAT-fs (loop4): Directory bread(block 73) failed [ 345.964471][T10922] 9pnet_fd: Insufficient options for proto=fd [ 346.217990][T10463] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.427890][T10932] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 347.219221][T10942] binder_alloc: 10940: binder_alloc_buf size 1500523191332350224 failed, no address space [ 347.230432][T10942] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 347.274784][ T783] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 347.437979][T10948] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 347.446989][T10948] netlink: 14557 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.512995][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 347.531024][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 347.563521][ T783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.584842][ T783] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.608159][ T783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.625357][ T783] usb 3-1: config 0 descriptor?? [ 347.917245][T10959] loop3: detected capacity change from 0 to 256 [ 347.963508][T10959] FAT-fs (loop3): Directory bread(block 64) failed [ 347.980415][T10959] FAT-fs (loop3): Directory bread(block 65) failed [ 347.995921][T10959] FAT-fs (loop3): Directory bread(block 66) failed [ 348.007411][T10959] FAT-fs (loop3): Directory bread(block 67) failed [ 348.027991][T10959] FAT-fs (loop3): Directory bread(block 68) failed [ 348.046006][T10959] FAT-fs (loop3): Directory bread(block 69) failed [ 348.053150][T10959] FAT-fs (loop3): Directory bread(block 70) failed [ 348.060287][T10959] FAT-fs (loop3): Directory bread(block 71) failed [ 348.079522][T10959] FAT-fs (loop3): Directory bread(block 72) failed [ 348.090062][T10949] loop4: detected capacity change from 0 to 32768 [ 348.097153][T10959] FAT-fs (loop3): Directory bread(block 73) failed [ 348.100612][T10949] XFS: ikeep mount option is deprecated. [ 348.114422][T10949] XFS: ikeep mount option is deprecated. [ 348.118831][ T783] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 348.128850][ T783] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 348.145860][T10949] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.161364][ T783] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 348.278933][T10949] XFS (loop4): Ending clean mount [ 348.338940][T10975] QAT: failed to copy from user cfg_data. [ 348.352620][ T29] audit: type=1800 audit(1986733016.909:8903): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=9289 res=0 errno=0 [ 348.437032][ T5147] usb 3-1: USB disconnect, device number 10 [ 348.447643][T10312] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.468406][T10979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.594198][T10980] loop3: detected capacity change from 0 to 2048 [ 348.634619][T10980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.165248][T10992] loop1: detected capacity change from 0 to 256 [ 349.500604][T10992] FAT-fs (loop1): bogus logical sector size 0 [ 349.506776][T10992] FAT-fs (loop1): Can't find a valid FAT filesystem [ 350.089513][T10985] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 351.049931][ T9917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.139931][T11003] loop2: detected capacity change from 0 to 512 [ 351.151171][T10973] loop0: detected capacity change from 0 to 40427 [ 351.170255][T11005] loop1: detected capacity change from 0 to 256 [ 351.192889][T10973] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 351.200877][T11003] EXT4-fs (loop2): Test dummy encryption mode enabled [ 351.214414][T10973] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 351.247554][T11003] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 351.273206][T10973] F2FS-fs (loop0): invalid crc value [ 351.275622][T11005] FAT-fs (loop1): Directory bread(block 64) failed [ 351.285353][T11005] FAT-fs (loop1): Directory bread(block 65) failed [ 351.292412][T11005] FAT-fs (loop1): Directory bread(block 66) failed [ 351.300884][T11003] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 351.301403][T11005] FAT-fs (loop1): Directory bread(block 67) failed [ 351.320401][T11005] FAT-fs (loop1): Directory bread(block 68) failed [ 351.322377][T10973] F2FS-fs (loop0): Found nat_bits in checkpoint [ 351.328610][T11005] FAT-fs (loop1): Directory bread(block 69) failed [ 351.337899][T11003] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.341352][T11005] FAT-fs (loop1): Directory bread(block 70) failed [ 351.364593][T11005] FAT-fs (loop1): Directory bread(block 71) failed [ 351.371359][T11005] FAT-fs (loop1): Directory bread(block 72) failed [ 351.377901][T11005] FAT-fs (loop1): Directory bread(block 73) failed [ 351.493609][T10973] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 351.508007][T10973] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 351.621326][ T9998] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 351.930594][T11037] loop2: detected capacity change from 0 to 2048 [ 352.040799][T11037] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 352.072161][T11039] loop3: detected capacity change from 0 to 2048 [ 352.074610][T11037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.140993][T11039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.406485][ T783] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 352.633858][ T783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 352.638730][T11029] loop4: detected capacity change from 0 to 32768 [ 352.653110][T11029] XFS: attr2 mount option is deprecated. [ 352.658901][T11029] XFS: ikeep mount option is deprecated. [ 352.686572][T11029] XFS: noikeep mount option is deprecated. [ 352.691744][ T783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 352.754666][T11029] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 352.765991][ T783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.823255][ T783] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.848240][ T783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.867008][T11029] XFS (loop4): Ending clean mount [ 352.874986][ T783] usb 1-1: config 0 descriptor?? [ 352.885137][T11029] XFS (loop4): Quotacheck needed: Please wait. [ 352.933895][T11061] loop2: detected capacity change from 0 to 256 [ 352.946783][ T9917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.977559][T11029] XFS (loop4): Quotacheck: Done. [ 353.005737][ T5098] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 353.014866][ T5098] Bluetooth: hci0: Injecting HCI hardware error event [ 353.024276][T11061] FAT-fs (loop2): Directory bread(block 64) failed [ 353.026716][ T5105] Bluetooth: hci0: hardware error 0x00 [ 353.058388][T11061] FAT-fs (loop2): Directory bread(block 65) failed [ 353.085344][T11061] FAT-fs (loop2): Directory bread(block 66) failed [ 353.122555][T11061] FAT-fs (loop2): Directory bread(block 67) failed [ 353.137280][T11061] FAT-fs (loop2): Directory bread(block 68) failed [ 353.171028][T11061] FAT-fs (loop2): Directory bread(block 69) failed [ 353.217104][T11061] FAT-fs (loop2): Directory bread(block 70) failed [ 353.224946][T11065] loop3: detected capacity change from 0 to 4096 [ 353.235442][T11065] ntfs3: Unknown parameter '184467440737095516150x0000000000000000' [ 353.242303][T11061] FAT-fs (loop2): Directory bread(block 71) failed [ 353.260866][T10312] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 353.283854][T11061] FAT-fs (loop2): Directory bread(block 72) failed [ 353.290454][T11061] FAT-fs (loop2): Directory bread(block 73) failed [ 353.354573][ T783] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 353.379728][ T783] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 353.423382][ T783] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 353.511700][T11071] cgroup: No subsys list or none specified [ 354.258378][ T783] usb 1-1: USB disconnect, device number 13 [ 355.347255][ T5105] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 355.473026][T11097] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 355.528248][T11097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 355.703602][T11114] [U] #! ./BUS [ 355.800224][T11122] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 356.786568][T11136] loop3: detected capacity change from 0 to 512 [ 356.875005][T11136] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 356.912077][T11136] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 356.940294][T11136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.969303][T11136] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 234881024 (level 0) [ 357.055883][ T9917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.510704][T11116] loop1: detected capacity change from 0 to 32768 [ 357.733798][T11167] loop3: detected capacity change from 0 to 256 [ 357.814311][T11167] FAT-fs (loop3): bogus logical sector size 0 [ 357.821379][T11167] FAT-fs (loop3): Can't find a valid FAT filesystem [ 358.959290][ T51] bridge_slave_1: left allmulticast mode [ 358.978046][ T51] bridge_slave_1: left promiscuous mode [ 358.993758][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.011438][T11163] loop0: detected capacity change from 0 to 32768 [ 359.045515][ T51] bridge_slave_0: left allmulticast mode [ 359.051191][ T51] bridge_slave_0: left promiscuous mode [ 359.077104][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.244816][T11163] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 359.259106][T11163] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 359.368330][T11163] bcachefs (loop0): alloc_read... done [ 359.386149][T11163] bcachefs (loop0): stripes_read... done [ 359.405367][T11163] bcachefs (loop0): snapshots_read... done [ 359.443079][T11163] bcachefs (loop0): journal_replay... done [ 359.468068][T11163] bcachefs (loop0): resume_logged_ops... done [ 359.495492][T11163] bcachefs (loop0): going read-write [ 359.517864][T11175] loop3: detected capacity change from 0 to 32768 [ 359.540719][T11163] bcachefs (loop0): done starting filesystem [ 359.761665][T10463] bcachefs (loop0): shutting down [ 359.814961][T10463] bcachefs (loop0): going read-only [ 359.820206][T10463] bcachefs (loop0): finished waiting for writes to stop [ 359.856319][T11212] loop4: detected capacity change from 0 to 256 [ 359.900413][T11212] FAT-fs (loop4): bogus logical sector size 0 [ 359.906529][T11212] FAT-fs (loop4): Can't find a valid FAT filesystem [ 360.778645][T10463] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 360.787451][T10463] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 360.813881][T10463] bcachefs (loop0): shutdown complete, journal seq 9 [ 360.821162][T10463] bcachefs (loop0): marking filesystem clean [ 361.288407][T10463] bcachefs (loop0): shutdown complete [ 361.294626][T11175] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nocow [ 361.313263][T11175] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 361.399240][T11175] bcachefs (loop3): alloc_read... done [ 361.430521][T11175] bcachefs (loop3): stripes_read... done [ 361.450624][T11175] bcachefs (loop3): snapshots_read... done [ 361.463528][T11175] bcachefs (loop3): journal_replay... done [ 361.479157][T11175] bcachefs (loop3): resume_logged_ops... done [ 361.488225][T11175] bcachefs (loop3): going read-write [ 361.500938][T11175] bcachefs (loop3): done starting filesystem [ 361.629508][ T9917] bcachefs (loop3): shutting down [ 361.636261][ T9917] bcachefs (loop3): going read-only [ 361.641505][ T9917] bcachefs (loop3): finished waiting for writes to stop [ 361.712613][ T9917] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 361.721764][ T9917] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 361.791247][ T9917] bcachefs (loop3): shutdown complete, journal seq 11 [ 361.801015][ T9917] bcachefs (loop3): marking filesystem clean [ 361.853615][ T9917] bcachefs (loop3): shutdown complete [ 362.213292][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.251027][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.306875][ T51] bond0 (unregistering): Released all slaves [ 362.388606][T11233] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 362.481051][T11235] loop0: detected capacity change from 0 to 32768 [ 362.870657][T11249] loop3: detected capacity change from 0 to 512 [ 362.899141][T11249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 362.945897][T11249] EXT4-fs (loop3): 1 truncate cleaned up [ 362.957029][T11249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.087846][T11249] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 363.131246][T11249] EXT4-fs (loop3): Remounting filesystem read-only [ 363.138156][T11249] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.3: unable to update i_inline_off [ 363.261424][ T9917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.309067][ T51] hsr_slave_0: left promiscuous mode [ 363.325667][ T51] hsr_slave_1: left promiscuous mode [ 363.355516][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.373888][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.386817][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.406842][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.484052][ T51] veth1_macvtap: left promiscuous mode [ 363.502927][ T51] veth0_macvtap: left promiscuous mode [ 363.524796][ T51] veth1_vlan: left promiscuous mode [ 363.537091][ T51] veth0_vlan: left promiscuous mode [ 363.791320][T11242] loop2: detected capacity change from 0 to 32768 [ 363.859768][T11247] loop4: detected capacity change from 0 to 32768 [ 363.874462][T11242] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 363.909543][ T5146] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 364.082315][T11242] XFS (loop2): Ending clean mount [ 364.110176][T11242] XFS (loop2): Quotacheck needed: Please wait. [ 364.150648][ T5146] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 364.162970][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.198770][ T5146] usb 2-1: config 0 descriptor?? [ 364.210544][ T5146] usbtest 2-1:0.0: Linux user mode test driver [ 364.229186][ T5146] usbtest 2-1:0.0: low-speed {control} tests [ 364.313731][T11242] XFS (loop2): Quotacheck: Done. [ 364.457309][ T9998] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 364.468817][ T9] usb 2-1: USB disconnect, device number 8 [ 365.016968][T11295] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 365.080186][T11292] loop0: detected capacity change from 0 to 4096 [ 365.106295][T11292] ntfs3: loop0: ino=3, Correct links count -> 2. [ 365.309023][ T51] team0 (unregistering): Port device team_slave_1 removed [ 365.455578][T11310] loop4: detected capacity change from 0 to 2048 [ 365.514551][ T51] team0 (unregistering): Port device team_slave_0 removed [ 365.537228][T11310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.595467][ T29] audit: type=1800 audit(1986733033.054:8904): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 365.656942][T10312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.258651][ T5146] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 366.466326][ T5146] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.487902][ T5146] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 366.519458][ T5146] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.548549][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.567925][ T5146] usb 5-1: SerialNumber: syz [ 366.599486][ T5146] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 366.873365][T11330] loop2: detected capacity change from 0 to 32768 [ 367.027586][T11326] loop4: detected capacity change from 0 to 1764 [ 367.081539][T11326] iso9660: Bad value for 'gid' [ 367.265567][T11330] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nocow [ 367.307211][T11359] loop3: detected capacity change from 0 to 64 [ 367.324605][T11330] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 367.384377][T11330] bcachefs (loop2): alloc_read... done [ 367.389948][T11330] bcachefs (loop2): stripes_read... done [ 367.419644][T11330] bcachefs (loop2): snapshots_read... done [ 367.435998][T11330] bcachefs (loop2): journal_replay... done [ 367.482766][T11330] bcachefs (loop2): resume_logged_ops... done [ 367.520254][T11330] bcachefs (loop2): going read-write [ 367.536651][ T783] usb 5-1: USB disconnect, device number 10 [ 367.537061][T11330] bcachefs (loop2): done starting filesystem [ 367.553998][T11367] loop1: detected capacity change from 0 to 256 [ 367.599287][T11354] loop0: detected capacity change from 0 to 32768 [ 367.602684][T11367] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x02a07125, utbl_chksum : 0xe619d30d) [ 367.622551][ T29] audit: type=1800 audit(1986733034.953:8905): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 367.658652][ T9998] bcachefs (loop2): shutting down [ 367.663898][ T9998] bcachefs (loop2): going read-only [ 367.672692][ T9998] bcachefs (loop2): finished waiting for writes to stop [ 367.682919][ T9998] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 367.693994][ T29] audit: type=1800 audit(1986733035.000:8906): pid=11367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048755 res=0 errno=0 [ 367.718197][ T9998] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 367.751448][ T9998] bcachefs (loop2): shutdown complete, journal seq 11 [ 367.759736][ T9998] bcachefs (loop2): marking filesystem clean [ 367.799618][ T9998] bcachefs (loop2): shutdown complete [ 369.641197][T11390] loop4: detected capacity change from 0 to 24 [ 369.649922][T11390] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 369.831843][T11388] vivid-000: kernel_thread() failed [ 370.018573][T11387] loop3: detected capacity change from 0 to 512 [ 370.050099][T11390] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 370.161799][T11387] EXT4-fs (loop3): can't mount with commit=7, fs mounted w/o journal [ 371.852900][T11423] vivid-000: kernel_thread() failed [ 372.105825][T11397] loop0: detected capacity change from 0 to 32768 [ 372.125928][T11431] loop1: detected capacity change from 0 to 512 [ 372.172034][T11433] Process accounting resumed [ 372.181413][T11431] EXT4-fs (loop1): can't mount with commit=7, fs mounted w/o journal [ 372.579888][ T5155] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 372.933707][T11456] loop1: detected capacity change from 0 to 24 [ 372.949902][T11456] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 373.019014][T11456] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 373.472561][ T5155] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.492134][ T5155] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 373.524895][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.587852][ T5155] usb 5-1: config 0 descriptor?? [ 373.843609][ T5155] usb 5-1: USB disconnect, device number 11 [ 374.007598][T11486] Process accounting resumed [ 374.122391][T11488] Bluetooth: MGMT ver 1.22 [ 374.167149][T11492] loop1: detected capacity change from 0 to 512 [ 374.220965][T11492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.273193][T11492] ext4 filesystem being mounted at /root/syzkaller-testdir4289179472/syzkaller.zm41wr/74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.425834][T11478] loop0: detected capacity change from 0 to 32768 [ 374.472976][T11478] XFS: attr2 mount option is deprecated. [ 374.478672][T11478] XFS: ikeep mount option is deprecated. [ 374.487521][T11478] XFS: noikeep mount option is deprecated. [ 374.574816][T11478] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 374.585100][T10286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.726291][T11512] loop2: detected capacity change from 0 to 512 [ 374.818679][T11478] XFS (loop0): Ending clean mount [ 374.835997][T11512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.861375][T11478] XFS (loop0): Quotacheck needed: Please wait. [ 374.895229][T11512] ext4 filesystem being mounted at /root/syzkaller-testdir2436010507/syzkaller.zvFxw9/99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.103565][T11478] XFS (loop0): Quotacheck: Done. [ 375.151569][T11512] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 375.203525][T11512] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 375.245668][T11512] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 375.258956][T11512] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 375.270511][T10463] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 375.491319][ T9998] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.742515][T11535] loop4: detected capacity change from 0 to 4096 [ 375.757184][T11539] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 375.789050][T11535] ntfs3: Unknown parameter 'ÿÿÿÿ0xffffffffffffffff' [ 376.303886][T11533] loop1: detected capacity change from 0 to 32768 [ 376.370937][T11533] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 5642b27e should be 29d2fb78 [ 376.416803][T11533] bcachefs (/dev/loop1): error reading superblock: Invalid superblock: too big (got 4696 bytes, layout max 512)checksum error, type crc32c_nonzero: got e1a61126 should be 59e14704 [ 377.350509][T11578] loop0: detected capacity change from 0 to 256 [ 377.410923][T11578] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 377.551678][T11580] loop3: detected capacity change from 0 to 256 [ 378.213497][ T29] audit: type=1400 audit(1986733044.850:8907): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=wx pid=11599 comm="syz-executor.3" name="126" dev="sda1" ino=1930 [ 378.304353][T11576] loop2: detected capacity change from 0 to 40427 [ 378.364965][T11576] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 378.409218][T11576] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 378.436178][ T29] audit: type=1326 audit(1986733045.065:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37567cea9 code=0x7ffc0000 [ 378.487798][T11576] F2FS-fs (loop2): invalid crc value [ 378.506840][ T29] audit: type=1326 audit(1986733045.065:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37567cea9 code=0x7ffc0000 [ 378.565771][ T29] audit: type=1326 audit(1986733045.102:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37567cea9 code=0x7ffc0000 [ 378.590656][ T29] audit: type=1326 audit(1986733045.102:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37567cea9 code=0x7ffc0000 [ 378.616892][T11576] F2FS-fs (loop2): Found nat_bits in checkpoint [ 378.672780][T11618] loop0: detected capacity change from 0 to 512 [ 378.695703][ T29] audit: type=1326 audit(1986733045.112:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37567cea9 code=0x7ffc0000 [ 378.740677][T11618] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 378.809253][ T29] audit: type=1804 audit(1986733045.112:8913): pid=11614 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2840088816/syzkaller.ctNbhy/62/file0" dev="sda1" ino=1965 res=1 errno=0 [ 378.834144][T11618] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz-executor.0: iget: bad i_size value: -6917529027641081756 [ 378.834642][ T29] audit: type=1326 audit(1986733045.130:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37567cea9 code=0x7ffc0000 [ 378.874224][ T29] audit: type=1326 audit(1986733045.130:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37567cea9 code=0x7ffc0000 [ 378.886114][T11576] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 378.903141][ T29] audit: type=1326 audit(1986733045.130:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc37567a627 code=0x7ffc0000 [ 378.943380][T11618] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 378.987357][T11576] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 379.005995][T11618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.059397][T11618] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set [ 379.125686][T11618] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 0 [ 379.233356][ T9998] syz-executor.2: attempt to access beyond end of device [ 379.233356][ T9998] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 379.274763][T10463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.277049][ T9998] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 379.422991][T11639] syz-executor.4[11639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.423240][T11639] syz-executor.4[11639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.215527][T11665] loop4: detected capacity change from 0 to 2048 [ 380.257379][ T5197] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 380.297268][T11665] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 380.342420][T11665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.469046][ T5197] usb 4-1: Using ep0 maxpacket: 16 [ 380.524252][ T5197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 380.548988][ T5197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 380.583040][ T5197] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 380.620570][ T5197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.651927][ T5197] usb 4-1: config 0 descriptor?? [ 380.672641][T11654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 381.019482][T11654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.037440][T11674] loop1: detected capacity change from 0 to 512 [ 381.058601][T11674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.066112][T11654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.099976][T11674] EXT4-fs: old and new quota format mixing [ 381.162951][ T5197] usbhid 4-1:0.0: can't add hid device: -71 [ 381.182813][ T5197] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 381.225277][ T5197] usb 4-1: USB disconnect, device number 10 [ 381.641185][ T5146] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 381.869930][ T5146] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.897646][ T5146] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 381.914168][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.925244][ T5146] usb 2-1: config 0 descriptor?? [ 382.081376][T11686] loop3: detected capacity change from 0 to 4096 [ 382.090204][T11686] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 382.285468][T11689] loop3: detected capacity change from 0 to 512 [ 382.297293][T11689] EXT4-fs (loop3): unsupported inode size: 264 [ 382.304024][T11689] EXT4-fs (loop3): blocksize: 1024 [ 382.370770][ T5146] ath6kl: Unsupported hardware version: 0x0 [ 382.393842][ T5146] ath6kl: Failed to init ath6kl core: -22 [ 382.413078][ T5146] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 382.448975][T11689] loop3: detected capacity change from 0 to 1024 [ 382.466719][T11689] EXT4-fs: Ignoring removed mblk_io_submit option [ 382.493212][T11689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.607718][ T5197] usb 2-1: USB disconnect, device number 9 [ 382.631696][ T9917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.845502][T11694] binder: 11693:11694 ioctl 894b 20000380 returned -22 [ 383.738620][T11703] loop3: detected capacity change from 0 to 32768 [ 383.841951][T11703] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,nocow [ 383.858270][T11703] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 383.880067][T11703] bcachefs (loop3): alloc_read... done [ 383.885635][T11703] bcachefs (loop3): stripes_read... done [ 383.913269][T11703] bcachefs (loop3): snapshots_read... done [ 383.920605][T11703] bcachefs (loop3): journal_replay... done [ 383.941620][T11703] bcachefs (loop3): resume_logged_ops... done [ 383.949248][T11703] bcachefs (loop3): going read-write [ 383.974345][T11703] bcachefs (loop3): done starting filesystem [ 384.066630][ T9917] bcachefs (loop3): shutting down [ 384.073239][ T9917] bcachefs (loop3): going read-only [ 384.079867][ T9917] bcachefs (loop3): finished waiting for writes to stop [ 384.096048][ T9917] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 384.119073][ T9917] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 9 [ 384.134238][ T9917] bcachefs (loop3): shutdown complete, journal seq 10 [ 384.144885][ T9917] bcachefs (loop3): marking filesystem clean [ 384.186166][ T9917] bcachefs (loop3): shutdown complete [ 384.863329][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 384.863347][ T29] audit: type=1804 audit(1986733051.080:9069): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1451874696/syzkaller.q1FkDP/142/file0" dev="sda1" ino=1964 res=1 errno=0 [ 385.313610][ T5147] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 385.525903][ T5147] usb 4-1: Using ep0 maxpacket: 16 [ 385.538881][ T5147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 385.568406][ T5147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 385.590147][ T5147] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 385.610104][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.632697][ T5147] usb 4-1: config 0 descriptor?? [ 385.638522][T11721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.928291][T11721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.948843][T11721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.999357][ T5147] usbhid 4-1:0.0: can't add hid device: -71 [ 386.013049][ T5147] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 386.030443][ T5147] usb 4-1: USB disconnect, device number 11 [ 386.864950][T11729] loop3: detected capacity change from 0 to 512 [ 386.894657][T11729] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 386.902571][T11729] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 386.910641][T11729] System zones: 0-1, 15-15, 18-18, 34-34 [ 386.916804][T11729] EXT4-fs (loop3): orphan cleanup on readonly fs [ 386.923204][T11729] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 386.932638][T11729] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 386.947968][T11729] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 386.957785][T11729] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 386.972980][T11729] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 386.982363][T11729] EXT4-fs (loop3): 1 truncate cleaned up [ 386.989221][T11729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 388.101850][ T9917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.604571][ T5147] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 388.811692][ T5147] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.822054][ T5147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 388.831131][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.849162][ T5147] usb 4-1: config 0 descriptor?? [ 389.301098][ T5147] ath6kl: Unsupported hardware version: 0x0 [ 389.309334][ T5147] ath6kl: Failed to init ath6kl core: -22 [ 389.315776][ T5147] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 389.544539][ T5147] usb 4-1: USB disconnect, device number 12 [ 391.566172][T11744] loop3: detected capacity change from 0 to 32768 [ 391.650257][T11744] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,nocow [ 391.669226][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.669283][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.685468][T11744] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 391.713606][T11744] bcachefs (loop3): alloc_read... done [ 391.723694][T11744] bcachefs (loop3): stripes_read... done [ 391.731839][T11744] bcachefs (loop3): snapshots_read... done [ 391.744693][T11744] bcachefs (loop3): journal_replay... done [ 391.750872][T11744] bcachefs (loop3): resume_logged_ops... done [ 391.758026][T11744] bcachefs (loop3): going read-write [ 391.776723][T11744] bcachefs (loop3): done starting filesystem [ 391.875591][ T9917] bcachefs (loop3): shutting down [ 391.881183][ T9917] bcachefs (loop3): going read-only [ 391.886407][ T9917] bcachefs (loop3): finished waiting for writes to stop [ 391.894096][ T9917] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 391.921152][ T9917] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 9 [ 391.941000][ T9917] bcachefs (loop3): shutdown complete, journal seq 10 [ 391.948765][ T9917] bcachefs (loop3): marking filesystem clean [ 392.007116][ T9917] bcachefs (loop3): shutdown complete [ 392.756367][ T29] audit: type=1800 audit(1986733058.460:9070): pid=11758 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="sda1" ino=1965 res=0 errno=0 [ 411.889888][ T5098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.902425][ T5098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.911490][ T5098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.920609][ T5098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.966756][ T5098] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 411.974786][ T5098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.150515][ T5105] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.162169][ T5105] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.170670][ T5105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.179381][ T5105] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 412.187151][ T5105] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 412.195067][ T5105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.816817][ T5098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 413.830071][ T5098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 413.838689][ T5098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 413.846811][ T5098] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 413.854483][ T5098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 413.863607][ T5098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 414.155254][ T5098] Bluetooth: hci5: command tx timeout [ 414.422531][ T5098] Bluetooth: hci6: command tx timeout [ 415.668902][ T5105] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 415.682368][ T5105] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 415.691082][ T5105] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 415.699970][ T5105] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 415.717255][ T5105] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 415.724671][ T5105] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 416.036978][ T5105] Bluetooth: hci7: command tx timeout [ 416.379037][ T5105] Bluetooth: hci5: command tx timeout [ 416.635543][ T5105] Bluetooth: hci6: command tx timeout [ 417.918436][ T5105] Bluetooth: hci8: command tx timeout [ 418.260747][ T5105] Bluetooth: hci7: command tx timeout [ 418.612013][ T5105] Bluetooth: hci5: command tx timeout [ 418.859355][ T5105] Bluetooth: hci6: command tx timeout [ 420.149989][ T5105] Bluetooth: hci8: command tx timeout [ 420.484064][ T5105] Bluetooth: hci7: command tx timeout [ 420.836756][ T5105] Bluetooth: hci5: command tx timeout [ 421.083407][ T5105] Bluetooth: hci6: command tx timeout [ 422.367595][ T5105] Bluetooth: hci8: command tx timeout [ 422.718421][ T5105] Bluetooth: hci7: command tx timeout [ 424.308827][ T5098] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 424.321786][ T5098] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 424.330625][ T5098] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 424.340083][ T5098] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 424.349900][ T5098] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 424.357359][ T5098] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 424.589436][ T5098] Bluetooth: hci8: command tx timeout [ 426.556643][ T5098] Bluetooth: hci9: command tx timeout [ 426.743357][ T5100] Bluetooth: hci2: command 0x0406 tx timeout [ 426.749480][ T5098] Bluetooth: hci3: command 0x0406 tx timeout [ 428.779939][ T5105] Bluetooth: hci9: command tx timeout [ 431.014245][ T5105] Bluetooth: hci9: command tx timeout [ 433.227224][ T5105] Bluetooth: hci9: command tx timeout [ 448.630774][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 454.095308][ T5105] Bluetooth: hci4: command 0x0405 tx timeout [ 457.350575][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.357095][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.901067][ T5105] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 481.918999][ T5105] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 481.927374][ T5105] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 481.935662][ T5105] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 481.949075][ T5105] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 481.956581][ T5105] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 481.994017][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 482.008940][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 482.024094][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 482.034775][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 482.043507][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 482.050924][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 483.306953][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 483.317985][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 483.334238][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 483.343400][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 483.352677][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 483.360254][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 484.200357][ T53] Bluetooth: hci10: command tx timeout [ 484.296361][ T53] Bluetooth: hci11: command tx timeout [ 485.198447][ T5100] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 485.211117][ T5100] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 485.232793][ T5100] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 485.246658][ T5100] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 485.254582][ T5100] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 485.263620][ T5100] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 485.568501][ T5100] Bluetooth: hci12: command tx timeout [ 486.424211][ T5100] Bluetooth: hci10: command tx timeout [ 486.509242][ T5100] Bluetooth: hci11: command tx timeout [ 487.457772][ T53] Bluetooth: hci13: command tx timeout [ 487.792115][ T53] Bluetooth: hci12: command tx timeout [ 488.651433][ T53] Bluetooth: hci10: command tx timeout [ 488.733094][ T53] Bluetooth: hci11: command tx timeout [ 489.673640][ T53] Bluetooth: hci13: command tx timeout [ 490.015785][ T53] Bluetooth: hci12: command tx timeout [ 490.881623][ T53] Bluetooth: hci10: command tx timeout [ 490.957047][ T53] Bluetooth: hci11: command tx timeout [ 491.897322][ T53] Bluetooth: hci13: command tx timeout [ 492.258682][ T53] Bluetooth: hci12: command tx timeout [ 493.833213][ T5100] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 493.846108][ T5100] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 493.861585][ T5100] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 493.870940][ T5100] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 493.885955][ T5100] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 493.894222][ T5100] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 494.120938][ T5100] Bluetooth: hci13: command tx timeout [ 496.088408][ T5100] Bluetooth: hci14: command tx timeout [ 498.322305][ T5100] Bluetooth: hci14: command tx timeout [ 500.535317][ T5100] Bluetooth: hci14: command tx timeout [ 502.759023][ T5100] Bluetooth: hci14: command tx timeout [ 523.031304][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.037626][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 545.622901][ T30] INFO: task syz-executor.2:11658 blocked for more than 143 seconds. [ 545.633441][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 545.641232][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2032/12/15 14:20:01 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 545.676722][ T30] task:syz-executor.2 state:D stack:27552 pid:11658 tgid:11657 ppid:9998 flags:0x00004006 [ 545.714106][ T30] Call Trace: [ 545.717426][ T30] [ 545.720367][ T30] __schedule+0x1796/0x49d0 [ 545.735249][ T30] ? __pfx___schedule+0x10/0x10 [ 545.740144][ T30] ? __pfx_lock_release+0x10/0x10 [ 545.745191][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 545.767252][ T30] ? schedule+0x90/0x320 [ 545.771527][ T30] schedule+0x14b/0x320 [ 545.775702][ T30] schedule_preempt_disabled+0x13/0x30 [ 545.799280][ T30] __mutex_lock+0x6a4/0xd70 [ 545.803843][ T30] ? __mutex_lock+0x527/0xd70 [ 545.808541][ T30] ? register_nexthop_notifier+0x84/0x290 [ 545.831358][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 545.836429][ T30] ? __asan_memset+0x23/0x50 [ 545.841039][ T30] register_nexthop_notifier+0x84/0x290 [ 545.852739][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 545.858584][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 545.884785][ T30] ? __asan_memset+0x23/0x50 [ 545.889410][ T30] ops_init+0x359/0x610 [ 545.894924][ T30] setup_net+0x515/0xca0 [ 545.906160][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 545.911730][ T30] ? __pfx_setup_net+0x10/0x10 [ 545.916529][ T30] copy_net_ns+0x4e2/0x7b0 [ 545.938239][ T30] create_new_namespaces+0x425/0x7b0 [ 545.943561][ T30] ? bpf_lsm_capable+0x9/0x10 [ 545.948270][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 545.981000][ T30] ksys_unshare+0x619/0xc10 [ 545.985559][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 545.990597][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 546.013156][ T30] ? do_syscall_64+0x100/0x230 [ 546.017974][ T30] __x64_sys_unshare+0x38/0x40 [ 546.022752][ T30] do_syscall_64+0xf3/0x230 [ 546.045588][ T30] ? clear_bhb_loop+0x35/0x90 [ 546.050307][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.066575][ T30] RIP: 0033:0x7f6f4c27cea9 [ 546.071013][ T30] RSP: 002b:00007f6f4cfad0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 546.098618][ T30] RAX: ffffffffffffffda RBX: 00007f6f4c3b3f80 RCX: 00007f6f4c27cea9 [ 546.106620][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 546.130674][ T30] RBP: 00007f6f4c2ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 546.138674][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.162731][ T30] R13: 000000000000000b R14: 00007f6f4c3b3f80 R15: 00007ffd0bfa29a8 [ 546.170744][ T30] [ 546.184149][ T30] INFO: task syz-executor.4:11682 blocked for more than 143 seconds. [ 546.192241][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 546.200134][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.216833][ T30] task:syz-executor.4 state:D stack:23800 pid:11682 tgid:11681 ppid:10312 flags:0x00004006 [ 546.228888][ T30] Call Trace: [ 546.232187][ T30] [ 546.235127][ T30] __schedule+0x1796/0x49d0 [ 546.246340][ T30] ? __pfx___schedule+0x10/0x10 [ 546.251288][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.256326][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 546.268524][ T30] ? schedule+0x90/0x320 [ 546.272829][ T30] schedule+0x14b/0x320 [ 546.277003][ T30] schedule_preempt_disabled+0x13/0x30 [ 546.282654][ T30] __mutex_lock+0x6a4/0xd70 [ 546.287186][ T30] ? __mutex_lock+0x527/0xd70 [ 546.298854][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 546.304133][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 546.309192][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 546.314419][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 546.319639][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 546.333789][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 546.339805][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 546.365866][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 546.371278][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 546.387242][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 546.392660][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 546.408621][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 546.413767][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 546.419614][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 546.424743][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 546.436651][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 546.444350][ T30] ? ref_tracker_free+0x643/0x7e0 [ 546.449415][ T30] netlink_rcv_skb+0x1e3/0x430 [ 546.461282][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [