last executing test programs: 43.600309939s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x18, 0x10, 0xa, 0x801, 0x0, 0x0, {}, [@generic='\a']}, 0x18}}, 0x0) 43.352757248s ago: executing program 3: r0 = creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000200), 0xa) setxattr$security_ima(&(0x7f0000000240)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), &(0x7f0000000000)=ANY=[@ANYBLOB="0415"], 0x2, 0x0) open(&(0x7f0000000080)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 43.047543075s ago: executing program 3: ioperm(0x0, 0x7, 0x1) mlockall(0x0) 42.893080646s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000045c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f00000006c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 41.870408533s ago: executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 26.220319279s ago: executing program 5: unshare(0x2000680) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, 0x0, 0x0, 0x4}, 0x20) 26.024175247s ago: executing program 5: syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="303030304e303030303030303030303030462ca0179058936d6561737572652c00"], 0x1, 0xc34, &(0x7f0000000f40)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 25.833016052s ago: executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x219, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000002740)=@string={0x2}}, {0x4, &(0x7f0000002940)=@string={0x4, 0x3, "02d8"}}]}) 25.618334313s ago: executing program 5: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB=',\x00'], 0xed, 0x1cd, &(0x7f0000000d40)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet6(0xa, 0x800, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)=[{&(0x7f0000000740)=ANY=[@ANYRESHEX=r2, @ANYRES8=r3, @ANYRESHEX=r5, @ANYRES16=r0, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="84010b5f0216b4614e83c738c70b0f9b575fc3744acb1d251275870bf1ccbff55e5c0de06dabdcd6504ca7b2c030bcfcc875390c7275d475963070ba58fad66d10e38c3e5111f1f16867d49738998ee428fe9b072ec262ef1b99c3a9f14618c8d6d8862e46334c82467efa072df55d8abc94b6a05499a5bba97661d5a9dcbf19a47c2864a0", @ANYRES8=r1], 0x33e4}, {&(0x7f0000000500)=ANY=[], 0x18}, {0x0, 0x4c}, {&(0x7f0000002400)=ANY=[@ANYBLOB="8c1300003200200028bd7000fedbdf253300d28014002d00fe88000000000000000000000000010108008400", @ANYRES32=r2, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="6602ec8008001600", @ANYRES32=r6, @ANYBLOB="5d6a677bb2e4a56855e5af8c445fa298e53bced8679ba7f09cc688e1e39efe229b74570e5484f15ed12147065f70eb741133f64358ad6a09e5e5084d5ecf005b29456cae8b7aeeeeb60254e8cf19adc8e0176288a86b759a8caf81ebf4a681f732066ea91cfa0d5a1a8ec6c4e06e85e90ddb1e2407743aa21f268276f5f90dfde95cf8cfd01d14187126d1854ed05ee2e4d2cbde650fbcdb748905166474afda8dd8fa594af81b7dc4", @ANYRES32=r7, @ANYBLOB="6f7fa6439cba3364bd5f4c200271cc663a94f74079f707e863cdef5e4579b783d27d786729d2dfc7164ae2fa996719b0188d3d1de05ef92980d84da002a21a4d25d3d2d3193bb7544966f74a8d186dab37d69084414633ed7730fdc881ee5949e50a4b6ac66a2abd15adb4c41c3248cfd98e1e76504c0a576b031305fc4fc9cae7c4693620e529ebd81899a1c4f2d2375e7d5da306a627fa7dbb0a07bf6e6b5d975e4280303c088974f0f7f80cb90cf95d49c505611382a4b4cde9295cfe8f32c7581bdb3cd3d20084035342e7a75dd5a14ce00004607b24d3131aa0b807fd3959363f4212dbf45665e7dbcb34bf4b1b3f337cad4c0a3d"], 0x138c}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="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"/270, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x114}, {&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x1224}, {&(0x7f0000000800)={0x24, 0x42, 0x8, 0x70bd25, 0x25dfdbfe, "", [@nested={0xc, 0x81, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @u32=0x6}]}, @generic, @typed={0x8, 0xe8, 0x0, 0x0, @uid}]}, 0x24}, {&(0x7f0000004640)={0x110, 0x2a, 0x400, 0x70bd2a, 0x25dfdbff, "", [@nested={0xde, 0xb8, 0x0, 0x1, [@typed={0xc, 0x7f, 0x0, 0x0, @u64=0x6559747e}, @generic="de768f08d49cee231847a32fc36f72f1272bdd43c329abe1988ee316bdeac3b2e4cd04d50e1f73d97fd97c34e28b97dd83560f7a5f587140030d74908468319d9760e8f567d3e79e9e2c5c151c0ee87624f9c8a20989940361935b5d264d09783a66b233e91fdc0e40f46dad33d81d4c5383549c31d3c50ba9d85174925c86105b24174d6284900efa57950c8824cc9fa47fd0ccf64b4923b9dbd7bfd358395878c8a35aa83e1b6f8581", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x10c, 0x0, 0x0, @uid}]}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x200000000006fb}, @generic, @generic="b0a4c244387b54", @typed={0xc, 0xfe, 0x0, 0x0, @u64=0x4}]}, 0x110}, {&(0x7f0000003580)={0x4c0, 0x1c, 0x400, 0x70bd2d, 0x0, "", [@generic="25c353e3e0ce3b740e8e47894c41d5ce70d2cc0ae39b1c77e79a98388f6dd00389f3b3b08a4650b4bbd63f5b9d0f0c702a9760ccca0aa27b452380c79d64c3f988fecf28011bf0ead2fb0f1d1fcd87c1e1217076174957b63a525a8907e6419ab8d50cf22fad270ef40c800e68e1f84874c76830e2560efb8d13e1831bc7644cf688528fee470e9cab73ce4e9165678a0759c2f61ef41e70418f8bdf805c9f58a8b5b312bb89834402", @typed={0x8, 0x51, 0x0, 0x0, @fd}, @typed={0x8, 0xf3, 0x0, 0x0, @pid}, @generic="003564874b48eb8309f840188d1b83273aa2b2f42c7aa02b2efe567d70732622985f7879437f744f0ca075d5783553f5871b90f86a4fbeea24b85594b471615a4d18e1d2ec651cd20728975634e7e170574a6e1544", @nested={0x3e, 0x3f, 0x0, 0x1, [@generic="ce9056d2460d396befc06bf56c8d0ad1d9f5feae0f82eb8aa8229b0ef545e2b725e92cb5bc2e128d6dda79d94baa0c8b35283173dfa186c40ea0"]}, @nested={0x2a7, 0x112, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @pid}, @typed={0xd6, 0x109, 0x0, 0x0, @binary="823644176176ad14c7a8c9f57554809ab5280ed470e123925b87b4aea150b4091f232a62ef8d8ff0e0ff1d670edd50caa491c690831069dfbfc12a2ad92cdd3e4f907b311fc143e828a46900246df633da7eb0b3565bd9ea562fcf4c84bafb6748d378980742156bd8a6c60a029e550e9e84674f5268e00a9a560e4afdd8b2ec7f6cfec6ee7fee12dd3ea3d4885e8e7783a86dc3f16080f0406dc61214bfed39937b043a11543fd184ea3bdb05d0c219e73ff36fd6ee31b5e8f602848b2a895f3aa2c0ffaba64ba184ffb1e98bee640ab466"}, @generic="24dbff667966e436ee8d30ccb42b619867d5ce3b64cbf02e53ab311de25f02dbc135a13c327e3045017807e56e1ff5d132fa7342919bae86550f4bdf2d7f74d4819fa14c1634cd97d88ecf99764987b68b3c6ac08e65545c8b8add5c6de8b06c91ef30887badf001aab72db0e5c1504880c8126d5913102e7c6e27b99fdb41aa1da351cb5c3c95dc5d6370f361e23f6ce12cd0a7c757fb3fcfd5ee4741c6ee1d73", @generic="8cb4eb1b38eaf874ad3777d831fd637f5b791fceba5d146ca529e4b9d179ef6dd34a15ae18903775700c0098ba65d29d4ea7c06b334cbd300c20fbf4b6d2287c226ac54fb0c498cc77e093702e8c33f43c3090bbbf5dd8acedf5d2fc1b3f06421e98ae842201885b2919a6b319f869e890aaf542a8b43e179a3adfe05a4e553fa361854442631f74818d9a91ab9d5183dff3e32d338d2e6cd52d2cd4636207802331342e10b8ba149807af744894cdff0ca15dbfa104a5c6cb0aa0518526635d05ed2ba55896501dd2243c13b5659363a0fd8ae83598bb039ebe6d4f27d607ea1ffae748e392edbfa6453c22321d8cbc6c4a", @generic="23f876bd82b7fd93b142eb5c13a7bc1620781757b85edeea623fe6ad881c33eeb18300b6c2a3507ef708661db087bd52"]}, @generic="185a6a6838c5fe4a78fab3cdaf9b1fabbbf31dc3926da8f7e927e301330274ba2ab2cbe2f5d6f4b5a9a9a3da7da237a643f392c60b5faa18dd71bd1d23ce222cd0f259cc48a9abf2d51172ee196df7526d2c96feb4a4ff319aa8779cf10225377b2973f66566e26f99246cf5d31a763bbd33e5283e1f3a8e68d7d6c7951e4a2b2181d45a64959a70cc79d1464159ad094d7ca74bdb6cbe9c345f176084983515d5997ba54247a8b4e00ac6785502475f14", @typed={0x8, 0xa5, 0x0, 0x0, @fd}]}, 0x4c0}], 0x9, &(0x7f0000000600), 0x0, 0x4}, 0x11) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)={r1, 0x1, 0x6, @broadcast}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24b8f63825d9b9c174000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000500000008000200000000000800030000000000"], 0x24}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) sendfile(r9, r8, 0x0, 0x80000000) 24.787147215s ago: executing program 5: r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000200)) 23.581034797s ago: executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000007c0)=0x40, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 23.338554947s ago: executing program 0: mkdir(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) lremovexattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYRESDEC=r0]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000170b00001855000009000000f9000000000095000000000000000d002af0046a5b4be3259ff2a990d860412a085042ab3952bdd2d9a980c6336657b5f0992763ae8ebcab7c9aa2e2a7758544fcc37312c78d008286dbc8f4e2f71ddb0e168c14948156bfb1a3697a53845f60604f5c626834e00bc6fc38f66dcb1ee194a4c88141b4d9d6f5a8d40ce154d37d2403cf2c7c100dfcbc855c", @ANYRES64=r1], 0x0, 0x3878, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) getpriority(0x1, r2) sched_setaffinity(r2, 0x8, &(0x7f00000005c0)=0x7) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e164fcc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ee0742e013d5d412046", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x40}]}) syz_open_dev$tty20(0xc, 0x4, 0x1) 21.262969781s ago: executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87ea487e223ac37264833d618e92eac195f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224ed2259dabe4b942d32da15db16208ac5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d29c7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b356fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff53902a8f57000000009700cf0b4b8bc2294133000000007900000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645463dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a80741f0adba07f01d25eb3d1e23e0f2645d1cdfabfa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361cfbc61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e7567335dc3008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c7ba599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4a001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b96a81232fbef665f6212f875b2a0000000000000000000000000000f841b35af2e300000000000000000087a5f4bca39ad01340e98399f47f81d522dddcabc93ca6b082eb6be80b24b87652f76c3042ce504ac67b01a62451724b9257a0edceacb715a627247d11689663302f02b90fd6e10638b372c3413ee3066af68ce7ae685ccbd815c567fc50947703444e5625daea863219ebccf6cb3bd813e011097619c3f3c5f72c08ac0fa8f7e2536073bfd9f326f7369a3b4f000c4a300d3ef04db5fcf063e7f92711d1eb068d789e6c4d85c34c89e3e5f73178067e2976212ffe3ec8c284389ec7197a382bcba30b101938062e292e5185d8c1893f90cad3d8cac60b84b39843eed5fa17c362977c788361346eeca1d69de200bd55a8d7ee48e80266661574f362e2069cec64e7e4426eb0a76a9a72887f68b5081aaf99f4d0a863cf47798cbe87b00663da6c834674fc2160d047e95f011b64a06576016f074e9e6afbe7675636fcd7e8abf2d788f5c8b3185700"/3950], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 21.247436167s ago: executing program 0: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB=',\x00'], 0xed, 0x1cd, &(0x7f0000000d40)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet6(0xa, 0x800, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)=[{&(0x7f0000000740)=ANY=[@ANYRESHEX=r2, @ANYRES8=r3, @ANYRESHEX=r5, @ANYRES16=r0, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="84010b5f0216b4614e83c738c70b0f9b575fc3744acb1d251275870bf1ccbff55e5c0de06dabdcd6504ca7b2c030bcfcc875390c7275d475963070ba58fad66d10e38c3e5111f1f16867d49738998ee428fe9b072ec262ef1b99c3a9f14618c8d6d8862e46334c82467efa072df55d8abc94b6a05499a5bba97661d5a9dcbf19a47c2864a0", @ANYRES8=r1], 0x33e4}, {&(0x7f0000000500)=ANY=[], 0x18}, {0x0, 0x4c}, {&(0x7f0000002400)=ANY=[@ANYBLOB="8c1300003200200028bd7000fedbdf253300d28014002d00fe88000000000000000000000000010108008400", @ANYRES32=r2, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="6602ec8008001600", @ANYRES32=r6, @ANYBLOB="5d6a677bb2e4a56855e5af8c445fa298e53bced8679ba7f09cc688e1e39efe229b74570e5484f15ed12147065f70eb741133f64358ad6a09e5e5084d5ecf005b29456cae8b7aeeeeb60254e8cf19adc8e0176288a86b759a8caf81ebf4a681f732066ea91cfa0d5a1a8ec6c4e06e85e90ddb1e2407743aa21f268276f5f90dfde95cf8cfd01d14187126d1854ed05ee2e4d2cbde650fbcdb748905166474afda8dd8fa594af81b7dc4", @ANYRES32=r7, @ANYBLOB="6f7fa6439cba3364bd5f4c200271cc663a94f74079f707e863cdef5e4579b783d27d786729d2dfc7164ae2fa996719b0188d3d1de05ef92980d84da002a21a4d25d3d2d3193bb7544966f74a8d186dab37d69084414633ed7730fdc881ee5949e50a4b6ac66a2abd15adb4c41c3248cfd98e1e76504c0a576b031305fc4fc9cae7c4693620e529ebd81899a1c4f2d2375e7d5da306a627fa7dbb0a07bf6e6b5d975e4280303c088974f0f7f80cb90cf95d49c505611382a4b4cde9295cfe8f32c7581bdb3cd3d20084035342e7a75dd5a14ce00004607b24d3131aa0b807fd3959363f4212dbf45665e7dbcb34bf4b1b3f337cad4c0a3d"], 0x138c}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="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"/270, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x114}, {&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x1224}, {&(0x7f0000000800)={0x24, 0x42, 0x8, 0x70bd25, 0x25dfdbfe, "", [@nested={0xc, 0x81, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @u32=0x6}]}, @generic, @typed={0x8, 0xe8, 0x0, 0x0, @uid}]}, 0x24}, {&(0x7f0000004640)={0x110, 0x2a, 0x400, 0x70bd2a, 0x25dfdbff, "", [@nested={0xde, 0xb8, 0x0, 0x1, [@typed={0xc, 0x7f, 0x0, 0x0, @u64=0x6559747e}, @generic="de768f08d49cee231847a32fc36f72f1272bdd43c329abe1988ee316bdeac3b2e4cd04d50e1f73d97fd97c34e28b97dd83560f7a5f587140030d74908468319d9760e8f567d3e79e9e2c5c151c0ee87624f9c8a20989940361935b5d264d09783a66b233e91fdc0e40f46dad33d81d4c5383549c31d3c50ba9d85174925c86105b24174d6284900efa57950c8824cc9fa47fd0ccf64b4923b9dbd7bfd358395878c8a35aa83e1b6f8581", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x10c, 0x0, 0x0, @uid}]}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x200000000006fb}, @generic, @generic="b0a4c244387b54", @typed={0xc, 0xfe, 0x0, 0x0, @u64=0x4}]}, 0x110}, {&(0x7f0000003580)={0x4c0, 0x1c, 0x400, 0x70bd2d, 0x0, "", [@generic="25c353e3e0ce3b740e8e47894c41d5ce70d2cc0ae39b1c77e79a98388f6dd00389f3b3b08a4650b4bbd63f5b9d0f0c702a9760ccca0aa27b452380c79d64c3f988fecf28011bf0ead2fb0f1d1fcd87c1e1217076174957b63a525a8907e6419ab8d50cf22fad270ef40c800e68e1f84874c76830e2560efb8d13e1831bc7644cf688528fee470e9cab73ce4e9165678a0759c2f61ef41e70418f8bdf805c9f58a8b5b312bb89834402", @typed={0x8, 0x51, 0x0, 0x0, @fd}, @typed={0x8, 0xf3, 0x0, 0x0, @pid}, @generic="003564874b48eb8309f840188d1b83273aa2b2f42c7aa02b2efe567d70732622985f7879437f744f0ca075d5783553f5871b90f86a4fbeea24b85594b471615a4d18e1d2ec651cd20728975634e7e170574a6e1544", @nested={0x3e, 0x3f, 0x0, 0x1, [@generic="ce9056d2460d396befc06bf56c8d0ad1d9f5feae0f82eb8aa8229b0ef545e2b725e92cb5bc2e128d6dda79d94baa0c8b35283173dfa186c40ea0"]}, @nested={0x2a7, 0x112, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @pid}, @typed={0xd6, 0x109, 0x0, 0x0, @binary="823644176176ad14c7a8c9f57554809ab5280ed470e123925b87b4aea150b4091f232a62ef8d8ff0e0ff1d670edd50caa491c690831069dfbfc12a2ad92cdd3e4f907b311fc143e828a46900246df633da7eb0b3565bd9ea562fcf4c84bafb6748d378980742156bd8a6c60a029e550e9e84674f5268e00a9a560e4afdd8b2ec7f6cfec6ee7fee12dd3ea3d4885e8e7783a86dc3f16080f0406dc61214bfed39937b043a11543fd184ea3bdb05d0c219e73ff36fd6ee31b5e8f602848b2a895f3aa2c0ffaba64ba184ffb1e98bee640ab466"}, @generic="24dbff667966e436ee8d30ccb42b619867d5ce3b64cbf02e53ab311de25f02dbc135a13c327e3045017807e56e1ff5d132fa7342919bae86550f4bdf2d7f74d4819fa14c1634cd97d88ecf99764987b68b3c6ac08e65545c8b8add5c6de8b06c91ef30887badf001aab72db0e5c1504880c8126d5913102e7c6e27b99fdb41aa1da351cb5c3c95dc5d6370f361e23f6ce12cd0a7c757fb3fcfd5ee4741c6ee1d73", @generic="8cb4eb1b38eaf874ad3777d831fd637f5b791fceba5d146ca529e4b9d179ef6dd34a15ae18903775700c0098ba65d29d4ea7c06b334cbd300c20fbf4b6d2287c226ac54fb0c498cc77e093702e8c33f43c3090bbbf5dd8acedf5d2fc1b3f06421e98ae842201885b2919a6b319f869e890aaf542a8b43e179a3adfe05a4e553fa361854442631f74818d9a91ab9d5183dff3e32d338d2e6cd52d2cd4636207802331342e10b8ba149807af744894cdff0ca15dbfa104a5c6cb0aa0518526635d05ed2ba55896501dd2243c13b5659363a0fd8ae83598bb039ebe6d4f27d607ea1ffae748e392edbfa6453c22321d8cbc6c4a", @generic="23f876bd82b7fd93b142eb5c13a7bc1620781757b85edeea623fe6ad881c33eeb18300b6c2a3507ef708661db087bd52"]}, @generic="185a6a6838c5fe4a78fab3cdaf9b1fabbbf31dc3926da8f7e927e301330274ba2ab2cbe2f5d6f4b5a9a9a3da7da237a643f392c60b5faa18dd71bd1d23ce222cd0f259cc48a9abf2d51172ee196df7526d2c96feb4a4ff319aa8779cf10225377b2973f66566e26f99246cf5d31a763bbd33e5283e1f3a8e68d7d6c7951e4a2b2181d45a64959a70cc79d1464159ad094d7ca74bdb6cbe9c345f176084983515d5997ba54247a8b4e00ac6785502475f14", @typed={0x8, 0xa5, 0x0, 0x0, @fd}]}, 0x4c0}], 0x9, &(0x7f0000000600), 0x0, 0x4}, 0x11) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)={r1, 0x1, 0x6, @broadcast}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24b8f63825d9b9c174000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000500000008000200000000000800030000000000"], 0x24}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) sendfile(r9, r8, 0x0, 0x80000000) 20.844216295s ago: executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/4, 0x4}}], 0x1, 0x40, 0x0) 20.477241265s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{}, {0xc}, {0x6}]}) 20.056967388s ago: executing program 0: capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff99, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030026000b05d25a806c8c6f94f90224fc601000010010000000053582fb8f51c18fffd99b8e8bc137153e37", 0x33fe0}], 0x1}, 0x40040) 11.829628134s ago: executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@call]}, &(0x7f0000000000)='GPL\x00'}, 0x88) 9.742975937s ago: executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1}, 0x60) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) sendmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x4822, &(0x7f0000000180)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'wg2\x00'}) r4 = dup(r3) read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000004540)={0x2020}, 0x2020) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.525535102s ago: executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010040, &(0x7f0000000680)={[{}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {@numtail}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@fat=@check_strict}, {@shortname_lower}, {@uni_xlate}]}, 0x25, 0x336, &(0x7f00000001c0)="$eJzs3T1sW9UXAPDjviROI/VvD3+pgsmwIaGqCWKAKVFVpIoMUGTxtWDRlI/YVIqFpTDE9QJiBLEgwcTWAcbOiAEhNgZWioQKiIVulVrxkP1e7OeP0BThlI/fb4iOzj3H976Xq/glSm5eWo/tC4tx8caN67G8XIqF9TPrcbMU1TgWSWQuBwDwb3IzTePXNHPn6vdX9qOlOa8LAJifwfv/KydGifK9XA0AcBQO+f3/UzOzl+a2LABgjqbe/x8cG574Mf/C8HcCAIB/rmeef+HJjc2I87XackTrnU69U4/HR+MbF+O1aMZWnI5K3I7IHhSyp4X+xyfObZ49Xev7sRr1fkenHtHqdurZk8JGMugvx2pUopr3p8P+pN+/OuivRcTl7mD+aJU69cVYyef/biW2Yi0q8f+p/ohzm2fXavkL1Fv7/d2IXizvX0R//aeiEt+8HJeiGRei3zta/95qrXYm3Rzr71wpD+oAAAAAAAAAAAAAAAAAAAAAAGAeTtWGqsPzb9JWt/P2+cmC6tj5OPVsOD8fqJedD5SW90/neTeZPB9o/HyeTn0hjt3TKwcAAAAAAAAAAAAAAAAAAIC/j/buUjSaza2d9u5b28WgW8i88dWnXxyPyZrXk1EmFrKXG6vJc1HoSmLYng7b02SsJg+SiFHxlavDFRdrysOrmGrvB+WpoVK+pkazeeKBHz6a1fXbKJPE1G0ZD0r5/IWh1v+y1B90HRys3aHmWpqmB7XvfTjdFaWIhalP3F8RfHn91fseaZ98dJD5PD/04aGHK89e++CTn7cbzchvTbO5tNO+nf7puZLC/inl97k0YyfMDnqjTG+nvdtIvv3lufvf+3qiOJm9f9Ji5s2D5/psMrOUBf1lHuZKF2ds/tnBi7eGu/fub+bJj9cbV/e+/+mwXYUvEg7qAAAAAAAAAAAAAAAAAACAI1H4W/G78NjT81sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy90f//LwS9qcxhglvdmB4qb+20D5z8+JFeKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2G/BwAA//9pxHjs") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x1) 5.907322074s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146, 0x0, 0x8}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) 4.513743003s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESOCT=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff68}, 0x90) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="080064d02a780996", 0x8}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11}}], 0x28}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x9, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f0000000080)={{r9}, 0x0, 0x0}, 0x20) 4.392396821s ago: executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqsrc(r0, 0x0, 0x33, 0x0, &(0x7f0000000700)) 4.181705679s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18, 0x34448}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0) 3.19651427s ago: executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088a800008100000088644500001c00000000002f907800000002"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 3.13264211s ago: executing program 4: syz_usb_connect(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000014da2108ab12a380eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303", @ANYRESHEX], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 3.022978837s ago: executing program 2: keyctl$reject(0x14, 0x0, 0xffffe00000000000, 0x1, 0x0) 2.883853185s ago: executing program 2: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x98ea, &(0x7f0000013140)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 1.120857694s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18, 0x34448}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0) 883.974825ms ago: executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088a800008100000088644500001c00000000002f907800000002"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 623.531638ms ago: executing program 1: keyctl$reject(0x14, 0x0, 0xffffe00000000000, 0x1, 0x0) 511.211528ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x6}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 426.253388ms ago: executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x10000) 307.395624ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x80}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 210.482861ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800a0014"], 0x40}}, 0x0) 0s ago: executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000002c0)={0x0, @sliced}) kernel console output (not intermixed with test programs): 472.698783][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.765943][T10209] bridge_slave_0: left allmulticast mode [ 472.781692][T10209] bridge_slave_0: left promiscuous mode [ 472.796423][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.121981][ T29] audit: type=1326 audit(1717728494.508:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13037 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 473.201017][ T29] audit: type=1326 audit(1717728494.508:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13037 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 473.278110][ T29] audit: type=1326 audit(1717728494.508:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13037 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 473.358246][ T5128] Bluetooth: hci0: command tx timeout [ 473.391443][ T29] audit: type=1326 audit(1717728494.508:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13037 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 473.473591][ T29] audit: type=1326 audit(1717728494.508:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13037 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 473.525854][ T29] audit: type=1326 audit(1717728494.508:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13037 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 473.617036][ T29] audit: type=1326 audit(1717728494.528:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13037 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 473.662016][ T29] audit: type=1326 audit(1717728494.528:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13037 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6a4a7a6e7 code=0x7ffc0000 [ 474.068679][T13040] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 474.798826][ T5128] Bluetooth: hci2: command tx timeout [ 474.824253][T10209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.876215][T10209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.908583][T10209] bond0 (unregistering): Released all slaves [ 475.077130][T12970] chnl_net:caif_netlink_parms(): no params data found [ 475.440793][ T5128] Bluetooth: hci0: command tx timeout [ 475.620265][T13052] loop5: detected capacity change from 0 to 32768 [ 475.696002][T13052] XFS (loop5): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 475.898190][T12970] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.911424][T12970] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.922571][T13052] XFS (loop5): Ending clean mount [ 475.936583][T12970] bridge_slave_0: entered allmulticast mode [ 475.957196][T13052] XFS (loop5): Quotacheck needed: Please wait. [ 475.968811][T12970] bridge_slave_0: entered promiscuous mode [ 475.984110][T12970] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.995106][T12970] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.011402][T12970] bridge_slave_1: entered allmulticast mode [ 476.036978][T12970] bridge_slave_1: entered promiscuous mode [ 476.082517][T13052] XFS (loop5): Quotacheck: Done. [ 476.131741][T10209] hsr_slave_0: left promiscuous mode [ 476.201390][T10209] hsr_slave_1: left promiscuous mode [ 476.223795][T10209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.248206][T10209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.297391][T10209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.333770][T10209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.529478][T10209] veth1_macvtap: left promiscuous mode [ 476.557083][T10209] veth0_macvtap: left promiscuous mode [ 476.585253][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 476.595772][T10209] veth1_vlan: left promiscuous mode [ 476.632944][T11953] XFS (loop5): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 476.645025][T10209] veth0_vlan: left promiscuous mode [ 476.897849][ T5128] Bluetooth: hci2: command tx timeout [ 477.131879][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 477.131932][ T29] audit: type=1800 audit(1717728498.488:1290): pid=13104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1947 res=0 errno=0 [ 477.517893][ T5128] Bluetooth: hci0: command tx timeout [ 478.771905][T13128] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 478.987917][ T5128] Bluetooth: hci2: command tx timeout [ 480.050199][T10209] team0 (unregistering): Port device team_slave_1 removed [ 480.146565][T10209] team0 (unregistering): Port device team_slave_0 removed [ 481.050280][ T5128] Bluetooth: hci2: command tx timeout [ 481.137094][T13144] loop0: detected capacity change from 0 to 2048 [ 481.146309][T13133] ¡: renamed from team0 (while UP) [ 481.305123][T12970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.356972][T12970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.580683][T12970] team0: Port device team_slave_0 added [ 481.643613][T12970] team0: Port device team_slave_1 added [ 481.811529][ T29] audit: type=1326 audit(1717728503.218:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a5e7cf69 code=0x7fc00000 [ 481.872507][T12970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.895564][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.937560][T12970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.039546][T12970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.054842][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.127216][T12970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.196594][T13179] Bluetooth: MGMT ver 1.22 [ 482.375275][T13176] loop4: detected capacity change from 0 to 4096 [ 482.402525][T13176] ntfs3: Unknown parameter 'discarddiscard' [ 482.468885][T13027] chnl_net:caif_netlink_parms(): no params data found [ 482.565740][T12970] hsr_slave_0: entered promiscuous mode [ 482.580682][T12970] hsr_slave_1: entered promiscuous mode [ 482.590469][T12970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.598273][T12970] Cannot create hsr debugfs directory [ 482.611324][ T29] audit: type=1326 audit(1717728504.018:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a5e7cf69 code=0x7fc00000 [ 482.696168][T13176] loop4: detected capacity change from 0 to 4096 [ 482.745939][T13176] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 482.906125][T13176] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 482.953046][ T29] audit: type=1326 audit(1717728504.338:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3e7cf69 code=0x7ffc0000 [ 482.998285][T13027] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.027387][ T29] audit: type=1326 audit(1717728504.338:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3e7cf69 code=0x7ffc0000 [ 483.028068][T13027] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.125872][ T29] audit: type=1326 audit(1717728504.348:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03c3e7cf69 code=0x7ffc0000 [ 483.138472][T13027] bridge_slave_0: entered allmulticast mode [ 483.159867][ T29] audit: type=1326 audit(1717728504.348:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3e7cf69 code=0x7ffc0000 [ 483.201177][ T29] audit: type=1326 audit(1717728504.348:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3e7cf69 code=0x7ffc0000 [ 483.217508][T13027] bridge_slave_0: entered promiscuous mode [ 483.315708][ T29] audit: type=1326 audit(1717728504.348:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f03c3e7cf69 code=0x7ffc0000 [ 483.377956][ T29] audit: type=1326 audit(1717728504.638:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3e7cf69 code=0x7ffc0000 [ 483.412687][ T29] audit: type=1326 audit(1717728504.638:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3e7cf69 code=0x7ffc0000 [ 483.470411][T10197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.476373][ T29] audit: type=1800 audit(1717728504.678:1301): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1943 res=0 errno=0 [ 483.642346][T13224] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 483.643022][T13027] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.668446][T13027] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.676985][T13027] bridge_slave_1: entered allmulticast mode [ 483.690404][T13027] bridge_slave_1: entered promiscuous mode [ 483.801868][T10197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.150966][T10197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.189872][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.220249][T13248] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 484.281697][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.293854][T13250] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 484.388726][T10197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.498338][T13257] loop5: detected capacity change from 0 to 8 [ 484.581801][T13261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 484.611327][T13027] team0: Port device team_slave_0 added [ 484.661474][T13027] team0: Port device team_slave_1 added [ 484.689235][T13263] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 485.004309][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.026642][T13279] loop5: detected capacity change from 0 to 256 [ 485.035520][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.085632][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.139986][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.146976][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.208736][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.271391][T13281] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 485.286630][T13288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 485.408497][T13293] loop0: detected capacity change from 0 to 8 [ 485.448608][T10197] bridge_slave_1: left allmulticast mode [ 485.454428][T10197] bridge_slave_1: left promiscuous mode [ 485.475371][T10197] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.555247][T10197] bridge_slave_0: left allmulticast mode [ 485.567463][T10197] bridge_slave_0: left promiscuous mode [ 485.590488][T10197] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.098929][T13320] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 486.173271][T13319] loop4: detected capacity change from 0 to 2048 [ 486.268727][T13319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.292804][T13319] ext4 filesystem being mounted at /root/syzkaller-testdir2682378736/syzkaller.gUs5Qr/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.412820][T11532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.831577][T10197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.868510][T10197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.893118][T10197] bond0 (unregistering): Released all slaves [ 487.038807][T13316] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 487.197497][T13322] ¡: renamed from team0 (while UP) [ 487.374066][T13349] loop5: detected capacity change from 0 to 512 [ 487.440796][T13349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.455609][T13349] ext4 filesystem being mounted at /root/syzkaller-testdir3636038971/syzkaller.Q2spBS/40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.629011][T13349] EXT4-fs error (device loop5): ext4_do_update_inode:5075: inode #2: comm syz-executor.5: corrupted inode contents [ 487.686888][T13027] hsr_slave_0: entered promiscuous mode [ 487.698412][T13349] EXT4-fs error (device loop5): ext4_dirty_inode:5935: inode #2: comm syz-executor.5: mark_inode_dirty error [ 487.718648][T13027] hsr_slave_1: entered promiscuous mode [ 487.727641][T13349] EXT4-fs error (device loop5): ext4_do_update_inode:5075: inode #2: comm syz-executor.5: corrupted inode contents [ 487.741245][T13027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.749329][T13027] Cannot create hsr debugfs directory [ 487.790471][T13349] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz-executor.5: mark_inode_dirty error [ 487.803916][T13363] loop4: detected capacity change from 0 to 4096 [ 487.891206][T13368] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.071614][T13349] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 488.137235][T13371] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 488.179555][T13371] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 488.312882][T10197] hsr_slave_0: left promiscuous mode [ 488.328416][T10197] hsr_slave_1: left promiscuous mode [ 488.356487][T11953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.402898][T10197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.419648][T10197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.472726][T10197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.482829][T10197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.599090][T10197] veth1_macvtap: left promiscuous mode [ 488.604700][T10197] veth0_macvtap: left promiscuous mode [ 488.640039][T10197] veth1_vlan: left promiscuous mode [ 488.669728][T10197] veth0_vlan: left promiscuous mode [ 488.690602][T13389] loop5: detected capacity change from 0 to 1024 [ 488.718757][T13389] EXT4-fs: Ignoring removed orlov option [ 488.744911][T13389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 488.786542][T13389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.079153][T11953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.127166][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 489.127188][ T29] audit: type=1804 audit(1717728510.528:1354): pid=13397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=1956 res=1 errno=0 [ 489.950512][ T29] audit: type=1804 audit(1717728511.358:1355): pid=13397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="bus" dev="sda1" ino=1956 res=1 errno=0 [ 490.408368][ T5223] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 490.538699][ T29] audit: type=1326 audit(1717728511.938:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 490.562151][ T29] audit: type=1326 audit(1717728511.938:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 490.601875][ T29] audit: type=1326 audit(1717728511.938:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 490.627602][ T29] audit: type=1326 audit(1717728511.948:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 490.651531][ T29] audit: type=1326 audit(1717728511.948:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 490.678321][ T5223] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 490.683097][ T29] audit: type=1326 audit(1717728511.948:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 490.697872][ T5223] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 490.714811][ T29] audit: type=1326 audit(1717728511.948:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 490.746271][ T29] audit: type=1326 audit(1717728511.948:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 490.783503][ T5223] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.824513][ T5223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.068942][ T5223] usb 6-1: string descriptor 0 read error: -71 [ 491.111784][ T5223] usb 6-1: USB disconnect, device number 5 [ 491.160273][T10197] team0 (unregistering): Port device team_slave_1 removed [ 491.238020][T10197] team0 (unregistering): Port device team_slave_0 removed [ 492.215733][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 492.322643][T12970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.402716][T12970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.500615][T12970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.631844][T12970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 492.989278][T13448] loop5: detected capacity change from 0 to 256 [ 493.028435][T13447] loop0: detected capacity change from 0 to 1024 [ 493.081497][T13447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 493.104241][T13447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.378439][T11490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.456214][T12970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.562942][T12970] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.849604][T13459] evm: overlay not supported [ 494.192561][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.199857][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.434886][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.442528][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.791259][T13455] loop4: detected capacity change from 0 to 1024 [ 494.823643][T13027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 494.833166][T13455] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 494.851512][T13027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 494.862594][T13455] JBD2: no valid journal superblock found [ 494.873941][T13455] EXT4-fs (loop4): Could not load journal inode [ 494.930931][T13027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 494.950950][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 494.950973][ T29] audit: type=1326 audit(1717728516.348:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03c3e7cf69 code=0x0 [ 495.018887][T13027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.369498][T13484] loop5: detected capacity change from 0 to 1024 [ 495.391299][T13484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.444053][T13484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.452612][T13027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.497941][T13027] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.515412][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.522665][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.548833][ T5185] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 495.605903][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.613298][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.667450][T11953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.765761][T12970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.813025][ T5185] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.830914][ T5185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.864514][T13493] Cannot find add_set index 0 as target [ 495.884441][ T5185] usb 5-1: config 0 descriptor?? [ 495.904829][ T5185] cp210x 5-1:0.0: cp210x converter detected [ 496.070885][T13495] loop0: detected capacity change from 0 to 2048 [ 496.091924][T12970] veth0_vlan: entered promiscuous mode [ 496.114008][T13495] loop0: p1 < > p4 [ 496.139848][T13495] loop0: p4 size 8388608 extends beyond EOD, truncated [ 496.168858][T12970] veth1_vlan: entered promiscuous mode [ 496.329630][ T5185] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 496.342397][T12970] veth0_macvtap: entered promiscuous mode [ 496.365999][ T5185] usb 5-1: cp210x converter now attached to ttyUSB0 [ 496.400541][T12970] veth1_macvtap: entered promiscuous mode [ 496.522520][T13510] loop5: detected capacity change from 0 to 64 [ 496.586040][ T5185] usb 5-1: USB disconnect, device number 8 [ 496.645068][ T5185] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 496.708460][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.767049][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.810779][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.822323][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.832614][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.849973][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.860841][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.879553][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.945172][T12970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.298330][T13512] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 497.710103][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.728707][ T5185] cp210x 5-1:0.0: device disconnected [ 497.757955][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.773615][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.784230][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.794468][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.807852][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.823326][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.861833][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.890351][T12970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.942022][T12970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.961538][T12970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.971405][ T29] audit: type=1326 audit(1717728519.378:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x0 [ 497.972700][T12970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.007017][T12970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.056746][T13027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.106487][T13524] loop0: detected capacity change from 0 to 2048 [ 498.129207][T13524] ext4: Unknown parameter 'subj_type' [ 498.411228][T13027] veth0_vlan: entered promiscuous mode [ 498.449087][T10209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.467689][T10209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.523163][T13533] loop5: detected capacity change from 0 to 2048 [ 498.534437][T13537] loop4: detected capacity change from 0 to 256 [ 498.567281][T13027] veth1_vlan: entered promiscuous mode [ 498.587322][T10189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.596202][T13533] loop5: p1 < > p4 [ 498.611325][T13533] loop5: p4 size 8388608 extends beyond EOD, truncated [ 498.615840][T10189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.722210][T13027] veth0_macvtap: entered promiscuous mode [ 498.773746][T13027] veth1_macvtap: entered promiscuous mode [ 498.874333][T13542] loop3: detected capacity change from 0 to 256 [ 498.921378][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.935812][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.956441][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.970075][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.991869][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.018067][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.040944][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.066479][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.103754][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.133801][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.172819][T13027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.245672][ T29] audit: type=1800 audit(1717728520.648:1396): pid=13550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 499.267458][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.288879][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.309939][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.336202][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.364135][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.377099][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.405773][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.416596][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.428082][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.439516][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.461208][T13027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.464303][T13553] loop4: detected capacity change from 0 to 2048 [ 499.504121][T13027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.528715][T13553] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 499.539349][T13027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.555553][T13027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.567081][T13553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.576250][T13027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.755491][T13535] loop0: detected capacity change from 0 to 40427 [ 499.806451][T13535] F2FS-fs (loop0): invalid crc value [ 499.852332][T13535] F2FS-fs (loop0): Found nat_bits in checkpoint [ 499.959341][T10203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.998399][T10203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.088499][ T29] audit: type=1326 audit(1717728521.498:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x0 [ 500.107407][T13535] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 500.132270][T10203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.144206][T10203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.222573][T13574] loop3: detected capacity change from 0 to 2048 [ 500.273026][T13574] loop3: p1 < > p4 [ 500.288750][T13574] loop3: p4 size 8388608 extends beyond EOD, truncated [ 500.476205][T13584] input: syz1 as /devices/virtual/input/input11 [ 500.728861][T13593] loop5: detected capacity change from 0 to 2048 [ 500.765217][T13593] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 500.779777][T13593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.817974][T10804] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 501.030540][T10804] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 501.064741][T10804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.100632][T10804] usb 2-1: config 0 descriptor?? [ 501.132381][T10804] cp210x 2-1:0.0: cp210x converter detected [ 501.244524][T13605] block nbd3: NBD_DISCONNECT [ 501.260215][T13605] block nbd3: Send disconnect failed -107 [ 501.290108][T13604] block nbd3: Disconnected due to user request. [ 501.307983][T13604] block nbd3: shutting down sockets [ 501.552884][T10804] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 501.594232][T10804] usb 2-1: cp210x converter now attached to ttyUSB0 [ 501.658401][T13625] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 501.681488][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.688083][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.698709][T13625] loop4: detected capacity change from 0 to 256 [ 501.716823][ T29] audit: type=1326 audit(1717728523.118:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a5e7cf69 code=0x0 [ 501.778393][T13630] loop3: detected capacity change from 0 to 256 [ 501.793094][T13632] loop0: detected capacity change from 0 to 1024 [ 501.800334][ T5177] usb 2-1: USB disconnect, device number 4 [ 501.838262][ T5177] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 501.858497][T13625] FAT-fs (loop4): Directory bread(block 64) failed [ 501.869376][T13625] FAT-fs (loop4): Directory bread(block 65) failed [ 501.885544][ T5177] cp210x 2-1:0.0: device disconnected [ 501.893380][T13625] FAT-fs (loop4): Directory bread(block 66) failed [ 501.906700][T13625] FAT-fs (loop4): Directory bread(block 67) failed [ 501.919257][T13625] FAT-fs (loop4): Directory bread(block 68) failed [ 501.930359][T13625] FAT-fs (loop4): Directory bread(block 69) failed [ 501.937195][T13625] FAT-fs (loop4): Directory bread(block 70) failed [ 501.946328][T13625] FAT-fs (loop4): Directory bread(block 71) failed [ 501.962980][T13625] FAT-fs (loop4): Directory bread(block 72) failed [ 501.971379][T13625] FAT-fs (loop4): Directory bread(block 73) failed [ 502.048943][ T29] audit: type=1800 audit(1717728523.448:1399): pid=13625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=1048856 res=0 errno=0 [ 502.133529][T13625] syz-executor.4: attempt to access beyond end of device [ 502.133529][T13625] loop4: rw=2049, sector=1160, nr_sectors = 16 limit=256 [ 502.156571][T13625] syz-executor.4: attempt to access beyond end of device [ 502.156571][T13625] loop4: rw=2049, sector=1160, nr_sectors = 4 limit=256 [ 502.187950][T13625] Buffer I/O error on dev loop4, logical block 290, lost async page write [ 502.446743][T13646] loop4: detected capacity change from 0 to 1024 [ 502.483246][T13646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.508948][T13647] block nbd3: NBD_DISCONNECT [ 502.515969][T13649] loop0: detected capacity change from 0 to 512 [ 502.523305][T13647] block nbd3: Send disconnect failed -107 [ 502.530441][T13649] EXT4-fs: Ignoring removed mblk_io_submit option [ 502.553390][T13649] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 502.554119][T13642] block nbd3: Disconnected due to user request. [ 502.580625][T13642] block nbd3: shutting down sockets [ 502.603381][T13649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 502.618149][T13649] System zones: 1-12 [ 502.639551][T13649] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 502.757685][T13649] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 502.802708][T13649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.882904][T13665] loop1: detected capacity change from 0 to 256 [ 502.898621][ T29] audit: type=1800 audit(1717728524.298:1400): pid=13667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1971 res=0 errno=0 [ 502.919523][T13669] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 502.925837][T13669] loop4: detected capacity change from 0 to 256 [ 503.030192][T13669] FAT-fs (loop4): Directory bread(block 64) failed [ 503.068551][T13669] FAT-fs (loop4): Directory bread(block 65) failed [ 503.092816][T13669] FAT-fs (loop4): Directory bread(block 66) failed [ 503.119234][T13669] FAT-fs (loop4): Directory bread(block 67) failed [ 503.128104][T13669] FAT-fs (loop4): Directory bread(block 68) failed [ 503.146826][T13669] FAT-fs (loop4): Directory bread(block 69) failed [ 503.174290][T13669] FAT-fs (loop4): Directory bread(block 70) failed [ 503.210981][T13669] FAT-fs (loop4): Directory bread(block 71) failed [ 503.224657][T13669] FAT-fs (loop4): Directory bread(block 72) failed [ 503.232911][T13669] FAT-fs (loop4): Directory bread(block 73) failed [ 503.341298][ T29] audit: type=1800 audit(1717728524.748:1401): pid=13669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=1048860 res=0 errno=0 [ 503.428395][T13669] syz-executor.4: attempt to access beyond end of device [ 503.428395][T13669] loop4: rw=2049, sector=1160, nr_sectors = 16 limit=256 [ 503.444655][T11490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.464551][T13681] loop3: detected capacity change from 0 to 1024 [ 503.482138][T13685] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 503.538623][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 503.567204][T13669] syz-executor.4: attempt to access beyond end of device [ 503.567204][T13669] loop4: rw=2049, sector=1160, nr_sectors = 4 limit=256 [ 503.599563][T13669] Buffer I/O error on dev loop4, logical block 290, lost async page write [ 503.621386][T13681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.808641][T13695] netlink: get zone limit has 4 unknown bytes [ 504.367426][T13711] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 504.399512][T13704] loop1: detected capacity change from 0 to 40427 [ 504.438140][T13704] F2FS-fs (loop1): invalid crc value [ 504.527946][T13704] F2FS-fs (loop1): Found nat_bits in checkpoint [ 504.558812][ T5223] kernel write not supported for file bpf-prog (pid: 5223 comm: kworker/1:7) [ 504.650499][T13704] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 504.694257][T13724] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 505.118888][T13730] syz-executor.1: attempt to access beyond end of device [ 505.118888][T13730] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 505.161230][T13730] syz-executor.1: attempt to access beyond end of device [ 505.161230][T13730] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 505.265356][ T29] audit: type=1800 audit(1717728526.468:1402): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 505.602143][ T4485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.621161][ T4485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.629361][ T4485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.638510][ T4485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.654481][ T4485] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 505.662649][ T4485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.829507][T13027] syz-executor.1: attempt to access beyond end of device [ 505.829507][T13027] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 505.835263][T10189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.888168][T13027] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 506.142969][T13744] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'. [ 506.232308][ T29] audit: type=1326 audit(1717728527.638:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 506.302416][ T29] audit: type=1326 audit(1717728527.678:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 506.329881][T10189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.392512][ T29] audit: type=1326 audit(1717728527.678:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 506.499653][ T29] audit: type=1326 audit(1717728527.708:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 506.576706][T13752] loop3: detected capacity change from 0 to 1024 [ 506.591883][ T29] audit: type=1326 audit(1717728527.748:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 506.673867][ T29] audit: type=1326 audit(1717728527.748:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 506.743216][T10189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.811297][ T29] audit: type=1326 audit(1717728527.788:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 506.927254][ T29] audit: type=1326 audit(1717728527.788:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 507.046523][ T29] audit: type=1326 audit(1717728527.788:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 507.205588][T10189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.678449][ T4485] Bluetooth: hci2: command tx timeout [ 507.770039][ T4485] Bluetooth: hci3: command tx timeout [ 508.125613][T13726] chnl_net:caif_netlink_parms(): no params data found [ 508.321195][T10189] bridge_slave_1: left allmulticast mode [ 508.330622][T10189] bridge_slave_1: left promiscuous mode [ 508.344098][T10189] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.402766][T10189] bridge_slave_0: left allmulticast mode [ 508.427662][T10189] bridge_slave_0: left promiscuous mode [ 508.456700][T10189] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.681200][T13797] loop1: detected capacity change from 0 to 1024 [ 509.467736][T10189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.486768][T10189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.499963][T10189] bond0 (unregistering): Released all slaves [ 509.698405][T13726] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.705639][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.712923][T13726] bridge_slave_0: entered allmulticast mode [ 509.720837][T13726] bridge_slave_0: entered promiscuous mode [ 509.731790][T13726] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.740794][T13726] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.750885][T13726] bridge_slave_1: entered allmulticast mode [ 509.759402][T13726] bridge_slave_1: entered promiscuous mode [ 509.840351][ T4485] Bluetooth: hci3: command tx timeout [ 509.886096][T10189] hsr_slave_0: left promiscuous mode [ 509.892648][T10189] hsr_slave_1: left promiscuous mode [ 509.905948][T10189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.913598][T10189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.922726][T10189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.930436][T10189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.960625][T10189] veth1_macvtap: left promiscuous mode [ 509.966180][T10189] veth0_macvtap: left promiscuous mode [ 509.973502][T10189] veth1_vlan: left promiscuous mode [ 509.978920][T10189] veth0_vlan: left promiscuous mode [ 510.715135][T10189] ¡ (unregistering): Port device team_slave_1 removed [ 510.783774][T10189] ¡ (unregistering): Port device team_slave_0 removed [ 511.590324][T13726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.604519][T13726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.663063][T13726] team0: Port device team_slave_0 added [ 511.673267][T13726] team0: Port device team_slave_1 added [ 511.746022][T13726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.755374][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.781896][T13726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.822447][T13726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.829609][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.857233][T13726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.919964][ T4485] Bluetooth: hci3: command tx timeout [ 511.986218][T13726] hsr_slave_0: entered promiscuous mode [ 511.996010][T13726] hsr_slave_1: entered promiscuous mode [ 512.011688][T13726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.021516][T13726] Cannot create hsr debugfs directory [ 512.594469][T13726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 512.625573][T13726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.746775][T13726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 512.797939][T13726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.096048][T13833] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 513.227166][T13726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.323206][T13726] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.364426][T13840] loop5: detected capacity change from 0 to 1764 [ 513.384978][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.392245][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.432434][T13840] iso9660: Bad value for 'sbsector' [ 513.483585][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.490853][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.999270][ T4485] Bluetooth: hci3: command tx timeout [ 514.224261][T13816] loop3: detected capacity change from 0 to 40427 [ 514.232508][T13726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.253845][T13861] loop5: detected capacity change from 0 to 16 [ 514.256639][T13816] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 514.276539][T13816] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 514.299320][T13861] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0xbbaa231a, 0xe73df4ff expected [ 514.382884][T13816] F2FS-fs (loop3): Found nat_bits in checkpoint [ 514.477524][T13726] veth0_vlan: entered promiscuous mode [ 514.532692][T13726] veth1_vlan: entered promiscuous mode [ 514.532951][T13838] loop4: detected capacity change from 0 to 32768 [ 514.598153][T13838] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13838) [ 514.659999][T13726] veth0_macvtap: entered promiscuous mode [ 514.683410][T13816] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 514.691211][T13726] veth1_macvtap: entered promiscuous mode [ 514.697557][T13838] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 514.710429][T13816] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 514.716448][T13838] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 514.731233][T13838] BTRFS info (device loop4): using free-space-tree [ 514.775547][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 514.775576][ T29] audit: type=1800 audit(1717728536.178:1424): pid=13868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 514.829169][ T29] audit: type=1800 audit(1717728536.208:1425): pid=13868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 514.852145][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.865105][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.876332][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.891131][T13816] syz-executor.3: attempt to access beyond end of device [ 514.891131][T13816] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 514.908782][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.919915][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.931085][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.941102][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.956229][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.996179][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.057332][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.077164][T13891] loop1: detected capacity change from 0 to 1764 [ 515.102891][T13726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.122773][T13891] iso9660: Bad value for 'sbsector' [ 515.171805][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.222121][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.249891][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.312627][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.335690][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.375905][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.400457][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.422615][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.450981][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.486319][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.531398][T13726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.547132][ T29] audit: type=1326 audit(1717728536.948:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 515.584673][T13726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.602259][T11532] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 515.608380][T13726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.628201][ T29] audit: type=1326 audit(1717728536.948:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 515.678670][T13726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.694245][T13726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.728044][ T29] audit: type=1326 audit(1717728536.948:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 515.858297][ T29] audit: type=1326 audit(1717728536.948:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 515.881609][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.973144][ T29] audit: type=1326 audit(1717728536.948:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd6a4a7cf69 code=0x7ffc0000 [ 515.996270][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.068697][ T29] audit: type=1326 audit(1717728536.948:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd6a4a7cfa3 code=0x7ffc0000 [ 516.095696][ T29] audit: type=1326 audit(1717728536.988:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd6a4a7bcaf code=0x7ffc0000 [ 516.197354][T10203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.198164][T13913] loop1: detected capacity change from 0 to 2048 [ 516.238959][T10203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.245677][T13913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.280320][ T29] audit: type=1326 audit(1717728537.068:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd6a4a7cff7 code=0x7ffc0000 [ 516.318648][T13913] EXT4-fs: Ignoring removed nobh option [ 516.412752][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.421470][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.434072][T13913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.453849][T13925] loop4: detected capacity change from 0 to 16 [ 516.463904][T13925] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xbbaa231a, 0xe73df4ff expected [ 516.512449][T13913] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 2: invalid block bitmap [ 516.532621][T13913] EXT4-fs (loop1): Remounting filesystem read-only [ 516.738442][T13027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.947210][T13937] loop0: detected capacity change from 0 to 256 [ 517.187704][T13949] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 517.245376][T13949] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 517.272630][T13949] debugfs: Directory 'netdev:' with parent 'phy47' already present! [ 517.326684][T13958] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 517.403103][T13962] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 517.781847][T13963] loop3: detected capacity change from 0 to 4096 [ 517.813612][T13963] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0x0000000000000000' [ 517.913101][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.508868][T13976] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«QhQI¸¥ÿÿ [ 518.552671][T13945] loop4: detected capacity change from 0 to 32768 [ 518.596052][T13945] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13945) [ 518.663990][ T5136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 518.681155][ T5136] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 518.706469][T13945] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 518.717261][ T5136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 518.729037][T13945] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 518.741614][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 518.751051][T13945] BTRFS info (device loop4): using free-space-tree [ 518.758495][ T5136] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 518.768232][ T5136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 518.799252][ T5136] Bluetooth: hci4: command tx timeout [ 518.893121][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.187155][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.481849][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.511211][T11532] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 519.795703][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.107860][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 520.568141][ T35] bridge_slave_1: left allmulticast mode [ 520.577159][ T35] bridge_slave_1: left promiscuous mode [ 520.593655][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.627409][ T35] bridge_slave_0: left allmulticast mode [ 520.648288][ T35] bridge_slave_0: left promiscuous mode [ 520.663322][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.879545][ T4485] Bluetooth: hci1: command tx timeout [ 520.887468][ T4485] Bluetooth: hci4: command 0x0406 tx timeout [ 520.926051][T14052] loop1: detected capacity change from 0 to 2048 [ 521.245085][T14067] loop1: detected capacity change from 0 to 1024 [ 521.543824][T10209] hfsplus: b-tree write err: -5, ino 4 [ 521.568556][ T5223] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 521.718361][T14075] loop4: detected capacity change from 0 to 256 [ 521.763077][ T5223] usb 2-1: Using ep0 maxpacket: 32 [ 521.794906][ T5223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.810408][ T5223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.824903][ T5223] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 521.834822][ T5223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.892232][ T5223] usb 2-1: config 0 descriptor?? [ 521.903521][ T5223] hub 2-1:0.0: USB hub found [ 521.910149][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.944966][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.969020][ T35] bond0 (unregistering): Released all slaves [ 521.996886][T13977] chnl_net:caif_netlink_parms(): no params data found [ 522.072140][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.150501][ T5223] hub 2-1:0.0: 1 port detected [ 522.294279][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.323236][ T5223] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 522.339770][ T5223] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 522.361660][ T5223] usbhid 2-1:0.0: can't add hid device: -71 [ 522.367863][ T5223] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 522.429231][ T5223] usb 2-1: USB disconnect, device number 5 [ 522.525577][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 522.525603][ T29] audit: type=1804 audit(1717728543.928:1459): pid=14094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1009282348/syzkaller.JoTy1z/40/bus" dev="sda1" ino=1971 res=1 errno=0 [ 522.958143][ T4485] Bluetooth: hci1: command tx timeout [ 523.137073][T14112] loop3: detected capacity change from 0 to 4096 [ 523.175100][ T35] hsr_slave_0: left promiscuous mode [ 523.194188][ T35] hsr_slave_1: left promiscuous mode [ 523.201514][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.210202][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.234395][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.259061][T14120] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.263533][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.384730][ T35] veth1_macvtap: left promiscuous mode [ 523.399517][ T35] veth0_macvtap: left promiscuous mode [ 523.415463][ T35] veth1_vlan: left promiscuous mode [ 523.433354][ T35] veth0_vlan: left promiscuous mode [ 523.778843][T14127] loop1: detected capacity change from 0 to 1024 [ 523.794011][T14127] hfsplus: unable to find HFS+ superblock [ 523.861242][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 524.043660][T14131] loop1: detected capacity change from 0 to 1764 [ 525.041687][ T4485] Bluetooth: hci1: command tx timeout [ 525.054081][ T35] team0 (unregistering): Port device team_slave_1 removed [ 525.214804][ T35] team0 (unregistering): Port device team_slave_0 removed [ 526.071448][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 526.097052][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.138352][T13977] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.147047][T13977] bridge_slave_0: entered allmulticast mode [ 526.180196][T13977] bridge_slave_0: entered promiscuous mode [ 526.287751][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.329878][T13977] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.363208][T13977] bridge_slave_1: entered allmulticast mode [ 526.434549][T13977] bridge_slave_1: entered promiscuous mode [ 526.611634][T14167] loop3: detected capacity change from 0 to 256 [ 526.727813][T13977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.846013][T13977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.118366][ T4485] Bluetooth: hci1: command tx timeout [ 527.177174][T13977] team0: Port device team_slave_0 added [ 527.236230][T13977] team0: Port device team_slave_1 added [ 527.513810][T13977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.587699][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.720279][T13977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.797863][T13977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.817220][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.865254][T13977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.876987][T14199] loop0: detected capacity change from 0 to 1024 [ 527.884939][T14199] hfsplus: unable to find HFS+ superblock [ 527.924772][T14197] loop1: detected capacity change from 0 to 4096 [ 528.001110][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 528.013848][T14197] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0x0000000000000000' [ 528.145073][T13977] hsr_slave_0: entered promiscuous mode [ 528.190297][T13977] hsr_slave_1: entered promiscuous mode [ 528.213308][T13977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.250191][T14203] loop0: detected capacity change from 0 to 1764 [ 528.258085][T13977] Cannot create hsr debugfs directory [ 529.069475][ T779] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 529.309141][ T779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.347543][ T779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.390400][ T779] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 529.423724][ T779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.463908][ T779] usb 1-1: config 0 descriptor?? [ 529.903563][ T779] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 529.939998][T14238] dccp_invalid_packet: P.Data Offset(0) too small [ 529.966020][ T779] steelseries 0003:1038:12B6.0008: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 530.084664][ T779] steelseries 0003:1038:12B6.0008: hid_hw_raw_request() failed with -71 [ 530.356956][ T779] usb 1-1: USB disconnect, device number 7 [ 532.166785][T13977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 532.254129][T13977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 532.326103][T14240] loop1: detected capacity change from 0 to 4096 [ 532.336950][T13977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 532.344491][T14251] loop4: detected capacity change from 0 to 1024 [ 532.362925][T14240] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0x0000000000000000' [ 532.377401][T13977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.738330][ T5177] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 532.856194][T13977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.962496][T13977] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.011580][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.019050][ T5223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.056371][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.063689][ T5223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.381603][ T35] hfsplus: b-tree write err: -5, ino 4 [ 533.395331][T14287] loop3: detected capacity change from 0 to 4096 [ 533.424852][T14287] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 533.449096][ T5223] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 538.868430][ T5223] usb 2-1: device descriptor read/all, error -71 [ 539.110661][T13977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.630981][T14326] loop3: detected capacity change from 0 to 32768 [ 539.641083][T14326] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (14326) [ 539.665561][T14326] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 539.675957][T14326] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 539.685097][T14326] BTRFS info (device loop3): using free-space-tree [ 539.750215][ T29] audit: type=1800 audit(1717728561.158:1460): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 540.414809][T14346] overlayfs: statfs failed on './file0' [ 540.595755][T14306] loop4: detected capacity change from 0 to 32768 [ 540.671924][T13977] veth0_vlan: entered promiscuous mode [ 540.698394][T14306] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 540.706553][T13977] veth1_vlan: entered promiscuous mode [ 540.786017][T12970] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 540.817002][T13977] veth0_macvtap: entered promiscuous mode [ 540.834546][T13977] veth1_macvtap: entered promiscuous mode [ 540.903333][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.948154][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.994209][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.040073][T14306] XFS (loop4): Ending clean mount [ 541.048030][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.068051][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.112787][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.128522][T14314] loop0: detected capacity change from 0 to 40427 [ 541.137854][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.162060][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.164484][T14314] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 541.185192][T14314] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 541.189555][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.210547][T14314] F2FS-fs (loop0): invalid crc value [ 541.224095][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.224590][T14314] F2FS-fs (loop0): Found nat_bits in checkpoint [ 541.246811][T13977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.268935][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.308090][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.330969][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.347970][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.357840][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.373128][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.384785][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.397953][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.413256][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.418637][T14314] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 541.423811][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.437852][T14314] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 541.457052][T11532] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 541.466681][T13977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.551634][T13977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.575448][T13977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.590553][T13977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.618124][T13977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.054698][T10203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.088086][T10203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.388280][T10209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.475201][T10209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.526503][T14407] loop1: detected capacity change from 0 to 512 [ 543.625304][T13726] syz-executor.0: attempt to access beyond end of device [ 543.625304][T13726] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 543.683007][T13726] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 543.917582][T14407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.985724][T14409] loop4: detected capacity change from 0 to 32768 [ 543.994661][T14409] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (14409) [ 544.001387][T14407] ext4 filesystem being mounted at /root/syzkaller-testdir23246659/syzkaller.Ck4yhR/58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.061971][T14409] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 544.072511][T14409] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 544.081368][T14409] BTRFS info (device loop4): using free-space-tree [ 544.208669][T14420] xt_CT: No such helper "pptp" [ 544.309132][T14407] xt_bpf: check failed: parse error [ 544.479398][T13027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.544951][T11532] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 546.985409][T14472] loop5: detected capacity change from 0 to 256 [ 547.368190][T14478] loop1: detected capacity change from 0 to 512 [ 547.479812][T14478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.525400][T14478] ext4 filesystem being mounted at /root/syzkaller-testdir23246659/syzkaller.Ck4yhR/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.641482][T14478] xt_bpf: check failed: parse error [ 547.779321][T13027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.072683][T14456] loop3: detected capacity change from 0 to 40427 [ 551.556382][T14512] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.432419][T14529] loop0: detected capacity change from 0 to 512 [ 554.512821][T14521] sctp: [Deprecated]: syz-executor.4 (pid 14521) Use of int in max_burst socket option deprecated. [ 554.512821][T14521] Use struct sctp_assoc_value instead [ 554.637862][T14529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.651538][T14529] ext4 filesystem being mounted at /root/syzkaller-testdir2224837705/syzkaller.QtmsUH/26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.836230][T14529] xt_bpf: check failed: parse error [ 554.991897][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.101437][ T29] audit: type=1804 audit(1717728576.498:1461): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=1973 res=1 errno=0 [ 555.346505][T14553] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 555.757767][T14580] loop5: detected capacity change from 0 to 64 [ 556.138292][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 556.366716][ T25] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 556.376170][ T25] usb 6-1: config 0 has no interface number 0 [ 556.392104][ T25] usb 6-1: config 0 interface 156 has no altsetting 0 [ 556.406078][ T25] usb 6-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 556.441235][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.462092][ T25] usb 6-1: config 0 descriptor?? [ 556.480235][ T25] hub 6-1:0.156: bad descriptor, ignoring hub [ 556.486441][ T25] hub 6-1:0.156: probe with driver hub failed with error -5 [ 556.514118][ T25] option 6-1:0.156: GSM modem (1-port) converter detected [ 556.836174][ T25] usb 6-1: USB disconnect, device number 6 [ 556.859375][ T25] option 6-1:0.156: device disconnected [ 556.961749][T14583] loop4: detected capacity change from 0 to 32768 [ 557.072590][T14583] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 557.354798][T14583] XFS (loop4): Ending clean mount [ 557.374743][T14583] XFS (loop4): Quotacheck needed: Please wait. [ 557.468768][T14624] loop3: detected capacity change from 0 to 512 [ 557.488565][T14583] XFS (loop4): Quotacheck: Done. [ 557.518415][T14624] EXT4-fs (loop3): filesystem is read-only [ 557.548023][ T29] audit: type=1804 audit(1717728578.948:1462): pid=14583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2682378736/syzkaller.gUs5Qr/157/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 557.742977][T14638] loop5: detected capacity change from 0 to 64 [ 557.779437][T11532] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 557.924413][ T4485] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 557.963784][T14638] hfs: request for non-existent node 131072 in B*Tree [ 558.050551][T14638] hfs: request for non-existent node 131072 in B*Tree [ 558.492508][T14658] Bluetooth: MGMT ver 1.22 [ 558.673408][T14661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.524416][T14663] loop5: detected capacity change from 0 to 2048 [ 559.650567][T14663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.688656][T14663] ext4 filesystem being mounted at /root/syzkaller-testdir2770631180/syzkaller.UOdjB5/12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.780669][T14673] loop0: detected capacity change from 0 to 2048 [ 559.816879][T14673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.870326][T14666] loop3: detected capacity change from 0 to 8192 [ 559.874559][T13977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.966938][T14645] loop1: detected capacity change from 0 to 32768 [ 559.994515][T14645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (14645) [ 560.367696][T14683] loop4: detected capacity change from 0 to 32768 [ 560.385262][T14683] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (14683) [ 560.405110][T14683] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 560.415422][T14683] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 560.418661][T14645] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.426312][T14683] BTRFS info (device loop4): using free-space-tree [ 560.458259][T14645] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 560.475415][T14692] loop3: detected capacity change from 0 to 512 [ 560.503689][T14692] EXT4-fs (loop3): filesystem is read-only [ 560.518503][T14645] BTRFS info (device loop1): using free-space-tree [ 560.928519][T14732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.749680][T14645] BTRFS error (device loop1): open_ctree failed [ 563.138569][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.186080][T11532] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 563.404698][T14752] loop5: detected capacity change from 0 to 2048 [ 563.554702][T14752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.918651][ T29] audit: type=1800 audit(1717728585.308:1463): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1937 res=0 errno=0 [ 563.990816][T14765] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.793306][T14781] loop1: detected capacity change from 0 to 32768 [ 564.814666][T14781] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (14781) [ 564.843083][T14777] loop4: detected capacity change from 0 to 8192 [ 564.855050][T14781] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 564.865377][T14781] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 564.873901][T14781] BTRFS info (device loop1): using free-space-tree [ 564.958732][T14790] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 565.413406][T14806] loop0: detected capacity change from 0 to 16 [ 565.588555][T14806] erofs: (device loop0): mounted with root inode @ nid 36. [ 565.778903][T14810] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 565.817146][T14810] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 565.870175][T14810] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 565.906395][T14810] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 565.934973][T13027] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 566.087168][T14772] loop5: detected capacity change from 0 to 32768 [ 566.102610][T14772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (14772) [ 566.212694][T14772] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 566.288354][T14772] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 566.315737][T14772] BTRFS info (device loop5): using free-space-tree [ 566.596506][T14835] loop4: detected capacity change from 0 to 2048 [ 566.686213][T14835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.791063][T14835] ext4 filesystem being mounted at /root/syzkaller-testdir2682378736/syzkaller.gUs5Qr/166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.174740][T13977] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 567.234000][T11532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.648330][T14863] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 567.675506][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 567.706149][T14863] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 567.746389][T14863] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 567.788251][T14863] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 567.891876][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 567.908060][T14861] loop4: detected capacity change from 0 to 8192 [ 567.917302][ T25] usb 4-1: New USB device found, idVendor=13d3, idProduct=3334, bcdDevice=40.6f [ 567.948415][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.986561][ T25] usb 4-1: config 0 descriptor?? [ 568.016395][ T25] r8712u: register rtl8712_netdev_ops to netdev_ops [ 568.060871][ T25] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 568.130278][T14877] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 568.261466][ T25] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 568.283051][ T25] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 568.320206][ T25] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 568.389732][ T25] usb 4-1: USB disconnect, device number 8 [ 569.290006][T14906] hub 9-0:1.0: USB hub found [ 569.299661][T14906] hub 9-0:1.0: 8 ports detected [ 570.043728][T14894] loop0: detected capacity change from 0 to 256 [ 570.111542][T14903] loop1: detected capacity change from 0 to 1024 [ 570.115216][T14909] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 570.257235][ T29] audit: type=1800 audit(1717728591.658:1464): pid=14903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 570.430550][T14916] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 570.771812][T14927] loop1: detected capacity change from 0 to 164 [ 570.838905][T14927] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 570.990684][T14935] IPv6: sit1: Disabled Multicast RS [ 571.047920][T14887] loop4: detected capacity change from 0 to 32768 [ 571.066938][T14937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 571.107289][T14887] [ 571.107289][T14887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 571.107289][T14887] [ 571.162124][T14941] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 571.191015][T14887] ialloc: diAlloc returned -5! [ 571.274158][T11532] [ 571.274158][T11532] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 571.274158][T11532] [ 571.298492][T11532] [ 571.298492][T11532] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 571.298492][T11532] [ 571.801974][T14968] loop3: detected capacity change from 0 to 164 [ 571.871974][T14968] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 572.454405][T14986] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 572.992245][T14972] loop1: detected capacity change from 0 to 32768 [ 573.032033][T14972] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (14972) [ 573.086923][T14972] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 573.125721][T14972] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 573.159372][T14972] BTRFS info (device loop1): using free-space-tree [ 573.234177][T14980] loop3: detected capacity change from 0 to 32768 [ 573.271230][T14980] [ 573.271230][T14980] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 573.271230][T14980] [ 573.346751][T14980] ialloc: diAlloc returned -5! [ 573.509233][T12970] [ 573.509233][T12970] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 573.509233][T12970] [ 573.575107][T12970] [ 573.575107][T12970] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 573.575107][T12970] [ 573.609665][T13027] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 574.107771][T15043] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 574.378567][T15049] loop4: detected capacity change from 0 to 1024 [ 574.467470][T15049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.513818][T15053] loop5: detected capacity change from 0 to 164 [ 574.541815][T15053] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 577.682243][T15078] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 578.598589][T15088] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 578.657325][T15092] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 578.894008][T15100] loop0: detected capacity change from 0 to 164 [ 578.929317][T15100] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 579.187246][T15108] loop3: detected capacity change from 0 to 764 [ 579.612659][T15127] binder: 15125:15127 ioctl 4018620d 0 returned -22 [ 579.693390][T15130] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 579.882125][T15139] x_tables: duplicate underflow at hook 2 [ 580.859995][T15149] loop5: detected capacity change from 0 to 1024 [ 581.274170][T15157] loop4: detected capacity change from 0 to 32768 [ 581.291313][T15157] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (15157) [ 581.315003][T15157] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 581.325449][T15157] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 581.333984][T15157] BTRFS info (device loop4): using free-space-tree [ 581.552554][T15186] binder: 15182:15186 ioctl 4018620d 0 returned -22 [ 582.328783][T15197] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 582.656399][T11532] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 582.943505][T15216] loop3: detected capacity change from 0 to 1024 [ 583.054978][T15214] loop1: detected capacity change from 0 to 4096 [ 583.087239][T15214] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 583.815801][T15228] x_tables: duplicate underflow at hook 2 [ 585.131054][T15237] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 585.151918][T15237] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 588.892257][T15257] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 589.974114][T15263] loop3: detected capacity change from 0 to 1024 [ 590.341778][T15279] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.5'. [ 590.380948][T15279] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 594.047247][T15296] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 594.836768][T15301] x_tables: duplicate underflow at hook 2 [ 595.122678][T15306] loop1: detected capacity change from 0 to 1024 [ 596.474610][ T29] audit: type=1800 audit(1717728617.878:1465): pid=15340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 596.684619][ T4485] Bluetooth: hci0: command 0x0406 tx timeout [ 596.687452][T15333] loop0: detected capacity change from 0 to 32768 [ 596.702265][T15333] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (15333) [ 596.753301][T15344] x_tables: duplicate underflow at hook 2 [ 597.010567][T15333] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 597.021009][T15333] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 597.029601][T15333] BTRFS info (device loop0): using free-space-tree [ 598.644169][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 598.736627][T13726] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 598.926572][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.264883][T15415] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 599.723478][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 599.879693][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 600.234237][T15456] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 600.543959][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 600.671548][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 600.798753][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 600.862974][ T5181] IPVS: starting estimator thread 0... [ 600.978737][T15487] IPVS: using max 19 ests per chain, 45600 per kthread [ 601.143477][T15503] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 601.436574][T15517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 601.469727][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 602.159644][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 602.364130][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.457511][T15546] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 602.492379][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.548125][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 602.557219][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.626984][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 602.637190][ T9] usb 6-1: config 0 descriptor?? [ 602.685440][ T5205] IPVS: starting estimator thread 0... [ 602.751788][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 602.808309][T15551] IPVS: using max 16 ests per chain, 38400 per kthread [ 603.002049][T15561] 9pnet_fd: Insufficient options for proto=fd [ 603.044922][ T29] audit: type=1804 audit(1717728624.448:1466): pid=15562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1009282348/syzkaller.JoTy1z/129/file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="sda1" ino=1952 res=1 errno=0 [ 603.080543][T15564] loop1: detected capacity change from 0 to 256 [ 603.092230][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.148375][ T9] hid (null): report_id 0 is invalid [ 603.276500][T15564] loop1: detected capacity change from 0 to 2048 [ 603.299073][T15564] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 603.313965][T15564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.564632][T15578] loop4: detected capacity change from 0 to 512 [ 603.582818][ T9] usb 6-1: string descriptor 0 read error: -71 [ 603.606368][ T9] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 603.626120][ T9] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 603.636204][ T9] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 603.646959][ T9] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 603.654996][ T9] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 603.669198][ T9] usb 6-1: USB disconnect, device number 7 [ 603.689366][T15578] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 603.707838][T15545] loop0: detected capacity change from 0 to 32768 [ 603.727912][T15578] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 2683928664 (level 1) [ 603.733182][T15585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.790971][T15545] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 603.817343][T15578] EXT4-fs (loop4): Remounting filesystem read-only [ 603.839293][T15578] EXT4-fs (loop4): 1 truncate cleaned up [ 603.871088][T15578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.896524][T15545] XFS (loop0): Ending clean mount [ 603.968253][ T5178] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 603.971117][T11532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.059156][T13726] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 604.177455][ T5178] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.204208][ T5178] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.268808][ T5178] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.277907][ T5178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.334706][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 604.354553][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 604.358478][ T5178] usb 2-1: Product: syz [ 604.387661][ T5178] usb 2-1: Manufacturer: syz [ 604.407746][ T5178] usb 2-1: SerialNumber: syz [ 604.462894][ T5181] IPVS: starting estimator thread 0... [ 604.588405][T15610] IPVS: using max 16 ests per chain, 38400 per kthread [ 604.648497][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 605.042692][T15628] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 605.516181][ T5178] cdc_ncm 2-1:1.0: bind() failure [ 605.571146][ T5178] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 605.622209][ T5178] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 606.265644][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801f261800: rx timeout, send abort [ 606.274563][ T5178] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 606.284390][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801f261800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 607.076083][ T5178] usb 2-1: USB disconnect, device number 8 [ 607.428576][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 608.301117][ T5205] kernel write not supported for file /uhid (pid: 5205 comm: kworker/1:6) [ 608.422888][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.446217][T15662] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 608.468189][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.488053][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 608.497174][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.530760][ T9] usb 5-1: config 0 descriptor?? [ 608.918463][ T5177] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 608.959717][ T9] hid (null): report_id 0 is invalid [ 610.039072][ T9] usb 5-1: string descriptor 0 read error: -71 [ 610.046390][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.063799][ T9] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 610.077420][ T5177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.108594][ T9] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 610.131721][ T5177] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.152271][ T9] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 610.170271][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801f727400: rx timeout, send abort [ 610.187073][ T5177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.201286][ T9] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 610.207333][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801f727400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 610.233084][ T9] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 610.244383][ T5177] usb 2-1: Product: syz [ 610.267764][ T5177] usb 2-1: Manufacturer: syz [ 610.289116][ T5177] usb 2-1: SerialNumber: syz [ 610.311008][ T9] usb 5-1: USB disconnect, device number 10 [ 610.331918][T15680] loop5: detected capacity change from 0 to 1024 [ 610.455641][T15680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.597235][T15680] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 611.375147][ T5177] cdc_ncm 2-1:1.0: bind() failure [ 611.416648][ T5177] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 611.445460][ T5177] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 611.456742][ T5177] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 611.477244][ T5177] usb 2-1: USB disconnect, device number 9 [ 611.500472][T13977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.675256][ T5136] Bluetooth: hci5: unexpected event for opcode 0x0428 [ 612.599480][ T5223] kernel write not supported for file /uhid (pid: 5223 comm: kworker/1:7) [ 612.729607][T15710] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 612.737762][T15710] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.4'. [ 612.771846][T15710] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 612.986402][ T29] audit: type=1326 audit(1717728634.388:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.001510][T15721] loop4: detected capacity change from 0 to 256 [ 613.062328][ T29] audit: type=1326 audit(1717728634.418:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.123280][ T29] audit: type=1326 audit(1717728634.428:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.166535][ T29] audit: type=1326 audit(1717728634.428:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.196743][T15721] FAT-fs (loop4): Directory bread(block 64) failed [ 613.203178][ T29] audit: type=1326 audit(1717728634.428:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.217727][T15721] FAT-fs (loop4): Directory bread(block 65) failed [ 613.254718][ T29] audit: type=1326 audit(1717728634.428:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.289505][T15721] FAT-fs (loop4): Directory bread(block 66) failed [ 613.297335][T15721] FAT-fs (loop4): Directory bread(block 67) failed [ 613.305692][T15721] FAT-fs (loop4): Directory bread(block 68) failed [ 613.338424][ T29] audit: type=1326 audit(1717728634.428:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.358158][T15721] FAT-fs (loop4): Directory bread(block 69) failed [ 613.382365][ T29] audit: type=1326 audit(1717728634.428:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.400193][T15721] FAT-fs (loop4): Directory bread(block 70) failed [ 613.454250][ T29] audit: type=1326 audit(1717728634.428:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.455033][T15721] FAT-fs (loop4): Directory bread(block 71) failed [ 613.491478][ T29] audit: type=1326 audit(1717728634.428:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3307cf69 code=0x7ffc0000 [ 613.573581][T15721] FAT-fs (loop4): Directory bread(block 72) failed [ 613.580364][T15721] FAT-fs (loop4): Directory bread(block 73) failed [ 613.756092][T15709] loop1: detected capacity change from 0 to 32768 [ 613.912346][T15709] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 614.628747][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 614.689429][T15709] XFS (loop1): Ending clean mount [ 614.985771][T13027] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 615.406498][T15770] loop0: detected capacity change from 0 to 2048 [ 615.490265][T15774] netem: incorrect ge model size [ 615.523776][T15777] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 615.537569][T15774] netem: change failed [ 615.563516][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 615.684100][ T5136] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 615.696736][ T5136] Bluetooth: hci5: Injecting HCI hardware error event [ 615.711711][ T5136] Bluetooth: hci5: hardware error 0x00 [ 615.878308][T15785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 615.932342][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 617.502005][T15811] loop5: detected capacity change from 0 to 164 [ 617.535613][T15814] netem: incorrect ge model size [ 617.543029][T15814] netem: change failed [ 617.559212][T15811] rock: directory entry would overflow storage [ 617.571781][T15811] rock: sig=0x4f50, size=4, remaining=3 [ 617.592243][T15811] isofs: Unable to find the ".." directory for NFS. [ 617.815796][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 617.838465][ T5136] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 618.008940][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 618.204969][T15798] loop0: detected capacity change from 0 to 32768 [ 618.311493][T15798] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 619.069262][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 619.097050][T15798] XFS (loop0): Ending clean mount [ 619.543643][T13726] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 619.634920][T15859] netem: incorrect ge model size [ 619.690033][T15859] netem: change failed [ 620.239952][ T5136] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 620.249967][ T5136] Bluetooth: hci3: Injecting HCI hardware error event [ 620.263303][ T5136] Bluetooth: hci3: hardware error 0x00 [ 620.354529][T15867] loop5: detected capacity change from 0 to 2048 [ 620.456430][T15867] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.461749][T15849] loop1: detected capacity change from 0 to 32768 [ 620.474532][T15849] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (15849) [ 620.497450][T15849] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 620.509309][T15849] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 620.518230][T15849] BTRFS info (device loop1): using free-space-tree [ 620.735056][T15888] loop5: detected capacity change from 0 to 256 [ 620.738456][ T5205] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 620.811900][T13027] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 620.938008][ T5205] usb 1-1: Using ep0 maxpacket: 16 [ 620.950029][ T5205] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 620.984565][ T5205] usb 1-1: language id specifier not provided by device, defaulting to English [ 621.024618][ T5205] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.40 [ 621.055394][ T5205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.094616][ T5205] usb 1-1: Product: syz [ 621.110881][ T5205] usb 1-1: SerialNumber: syz [ 621.396138][ T5205] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 622.158877][ T5205] usb 1-1: USB disconnect, device number 8 [ 622.415713][ T5136] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 622.905789][T15916] x_tables: duplicate underflow at hook 4 [ 624.235798][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 624.235852][ T29] audit: type=1326 audit(1717728645.448:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15918 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78f367cf69 code=0x0 [ 624.671350][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.691280][T15927] veth0_vlan: left promiscuous mode [ 625.002582][T15938] loop0: detected capacity change from 0 to 256 [ 625.300894][T15905] loop1: detected capacity change from 0 to 32768 [ 625.390121][T15905] read_mapping_page failed! [ 625.408261][T15905] diRead: diIAGRead returned -5 [ 625.802914][ T4485] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 625.820824][ T4485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 625.832324][ T4485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 625.843515][ T4485] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 625.851673][ T4485] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 625.860276][ T4485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.094159][T10177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.410610][T10177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.432787][T15956] loop1: detected capacity change from 0 to 1764 [ 626.606458][T10177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.668474][ T5181] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 626.868114][ T5181] usb 5-1: Using ep0 maxpacket: 16 [ 626.875842][ T5181] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 626.937900][ T5181] usb 5-1: language id specifier not provided by device, defaulting to English [ 626.990851][ T5181] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.40 [ 627.038713][ T5181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.099884][ T5181] usb 5-1: Product: syz [ 627.120858][ T5181] usb 5-1: SerialNumber: syz [ 627.174392][ T5181] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 627.371503][T10177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.420003][ T4485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 627.440880][ T4485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 627.451647][ T4485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 627.460619][ T4485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 627.468960][ T4485] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 627.476554][ T4485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 627.516600][ T5205] usb 5-1: USB disconnect, device number 11 [ 627.921354][ T5136] Bluetooth: hci1: command tx timeout [ 627.978349][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888060b0a000: rx timeout, send abort [ 628.013730][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060b0a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 628.076302][T15945] chnl_net:caif_netlink_parms(): no params data found [ 629.026283][T10177] bridge_slave_1: left allmulticast mode [ 629.055407][T10177] bridge_slave_1: left promiscuous mode [ 629.061521][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.079546][T10177] bridge_slave_0: left allmulticast mode [ 629.085256][T10177] bridge_slave_0: left promiscuous mode [ 629.099842][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.519674][ T5136] Bluetooth: hci3: command tx timeout [ 629.997698][T16003] loop4: detected capacity change from 0 to 1764 [ 630.006919][ T5136] Bluetooth: hci1: command tx timeout [ 630.104453][T15997] loop1: detected capacity change from 0 to 32768 [ 630.127853][T15997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (15997) [ 630.146159][T15997] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 630.156489][T15997] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 630.166181][T15997] BTRFS info (device loop1): using free-space-tree [ 630.485733][T10177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.506598][T10177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.531409][T10177] bond0 (unregistering): Released all slaves [ 630.669537][T15945] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.695161][T15945] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.715679][T15945] bridge_slave_0: entered allmulticast mode [ 630.754903][T13027] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 630.758236][T15945] bridge_slave_0: entered promiscuous mode [ 630.868498][T15945] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.879158][T15945] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.935318][T15945] bridge_slave_1: entered allmulticast mode [ 630.943564][T15945] bridge_slave_1: entered promiscuous mode [ 631.266530][ T29] audit: type=1326 audit(1717728652.668:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8beb27cf69 code=0x0 [ 631.330283][T15945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.551322][T15945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.577303][T15972] chnl_net:caif_netlink_parms(): no params data found [ 631.598151][ T5136] Bluetooth: hci3: command tx timeout [ 631.763950][ T5136] Bluetooth: hci2: command 0x0406 tx timeout [ 631.835948][T10177] hsr_slave_0: left promiscuous mode [ 631.846462][T10177] hsr_slave_1: left promiscuous mode [ 631.865887][T10177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.874366][T10177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.890191][T10177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.897700][T10177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.944934][T10177] veth1_macvtap: left promiscuous mode [ 631.950779][T10177] veth0_macvtap: left promiscuous mode [ 631.956613][T10177] veth1_vlan: left promiscuous mode [ 631.963306][T16060] 9pnet_fd: Insufficient options for proto=fd [ 632.079531][ T4485] Bluetooth: hci1: command tx timeout [ 633.701829][ T4485] Bluetooth: hci3: command tx timeout [ 634.159233][ T4485] Bluetooth: hci1: command tx timeout [ 634.309436][T10177] team0 (unregistering): Port device team_slave_1 removed [ 634.409322][T10177] team0 (unregistering): Port device team_slave_0 removed [ 634.850735][ T5136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 634.865078][ T5136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 634.905734][ T5136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 634.940640][ T5136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 634.955459][ T5136] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 634.978499][ T5136] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 635.777909][ T5136] Bluetooth: hci3: command tx timeout [ 636.065801][T15945] team0: Port device team_slave_0 added [ 636.173864][T15945] team0: Port device team_slave_1 added [ 636.496649][T15945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.516235][T15945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.575920][T15945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.589913][T15972] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.597157][T15972] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.612267][T15972] bridge_slave_0: entered allmulticast mode [ 636.624607][T15972] bridge_slave_0: entered promiscuous mode [ 636.673863][T15945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.681106][T15945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.750349][T15945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.754690][T16103] dlm: plock device version mismatch: kernel (1.2.0), user (1.4194304000.0) [ 636.762984][T15972] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.803433][T15972] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.813544][T15972] bridge_slave_1: entered allmulticast mode [ 636.832341][T15972] bridge_slave_1: entered promiscuous mode [ 636.962023][T15972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.003399][T15972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.038347][ T5136] Bluetooth: hci6: command tx timeout [ 639.116162][ T29] audit: type=1326 audit(1717728660.508:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4a7cf69 code=0x0 [ 639.179383][ T5136] Bluetooth: hci6: command tx timeout [ 639.768214][T16125] loop4: detected capacity change from 0 to 256 [ 639.840715][T15972] team0: Port device team_slave_0 added [ 639.855490][T15945] hsr_slave_0: entered promiscuous mode [ 639.870187][T15945] hsr_slave_1: entered promiscuous mode [ 639.892421][T15945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 639.911787][T15945] Cannot create hsr debugfs directory [ 639.950878][T16125] FAT-fs (loop4): Directory bread(block 64) failed [ 639.957530][T16125] FAT-fs (loop4): Directory bread(block 65) failed [ 639.967076][T15972] team0: Port device team_slave_1 added [ 639.972953][T16125] FAT-fs (loop4): Directory bread(block 66) failed [ 639.981496][T16125] FAT-fs (loop4): Directory bread(block 67) failed [ 639.982121][T16119] veth0_vlan: left promiscuous mode [ 639.988187][T16125] FAT-fs (loop4): Directory bread(block 68) failed [ 640.003372][T16125] FAT-fs (loop4): Directory bread(block 69) failed [ 640.010222][T16125] FAT-fs (loop4): Directory bread(block 70) failed [ 640.016780][T16125] FAT-fs (loop4): Directory bread(block 71) failed [ 640.024827][T16125] FAT-fs (loop4): Directory bread(block 72) failed [ 640.054909][T16125] FAT-fs (loop4): Directory bread(block 73) failed [ 640.257325][T15972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.264888][T15972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.301153][T15972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.349475][T15972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.356467][T15972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.385240][T15972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.445197][T10177] bridge_slave_1: left allmulticast mode [ 640.451118][T10177] bridge_slave_1: left promiscuous mode [ 640.457118][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.467432][T10177] bridge_slave_0: left allmulticast mode [ 640.473523][T10177] bridge_slave_0: left promiscuous mode [ 640.479748][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.687098][T16127] loop1: detected capacity change from 0 to 32768 [ 640.763236][T16127] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 640.829817][T16127] XFS (loop1): Ending clean mount [ 641.004337][T13027] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 641.545498][T10177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.563923][T10177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.576477][T10177] bond0 (unregistering): Released all slaves [ 641.598395][ T4485] Bluetooth: hci6: command tx timeout [ 642.820239][T15972] hsr_slave_0: entered promiscuous mode [ 642.858039][T15972] hsr_slave_1: entered promiscuous mode [ 642.874159][T15972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.915267][T15972] Cannot create hsr debugfs directory [ 643.062386][T16076] chnl_net:caif_netlink_parms(): no params data found [ 643.438204][T14307] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 643.612175][T10177] hsr_slave_0: left promiscuous mode [ 643.618792][T10177] hsr_slave_1: left promiscuous mode [ 643.638483][T10177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.650736][T14307] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 643.653781][T10177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.666129][T14307] usb 5-1: config 179 has no interface number 0 [ 643.682515][T14307] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 643.684751][ T4485] Bluetooth: hci6: command tx timeout [ 643.702610][T14307] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 643.715198][T10177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.721515][T14307] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 30768, setting to 8 [ 643.738208][T10177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.769994][T14307] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 643.843609][T14307] usb 5-1: New USB device found, idVendor=12ab, idProduct=80a3, bcdDevice=1e.eb [ 643.864233][T10177] veth1_macvtap: left promiscuous mode [ 643.881524][T14307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.891343][T16185] loop1: detected capacity change from 0 to 2048 [ 643.896662][T10177] veth0_macvtap: left promiscuous mode [ 643.906753][T16185] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 643.924854][T16185] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 643.935777][T16168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 643.938192][T10177] veth1_vlan: left promiscuous mode [ 643.950568][T16168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 643.958337][T10177] veth0_vlan: left promiscuous mode [ 643.964370][T16185] UDF-fs: Scanning with blocksize 512 failed [ 643.984089][T16185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 644.511990][T16191] loop1: detected capacity change from 0 to 2048 [ 644.555472][T16191] EXT4-fs: Ignoring removed bh option [ 644.563143][T16191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 644.578207][T16191] EXT4-fs: Ignoring removed nobh option [ 644.673860][T16191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.070466][T13027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.180627][ T779] usb 5-1: USB disconnect, device number 12 [ 646.180693][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 646.194880][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 646.204578][ C1] ================================================================== [ 646.212657][ C1] BUG: KASAN: slab-use-after-free in register_lock_class+0x8d1/0x980 [ 646.220724][ C1] Read of size 1 at addr ffff88802240c091 by task kworker/u8:17/10183 [ 646.228864][ C1] [ 646.231176][ C1] CPU: 1 PID: 10183 Comm: kworker/u8:17 Not tainted 6.10.0-rc2-syzkaller-00235-g8a92980606e3 #0 [ 646.241575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 646.251708][ C1] Workqueue: bat_events batadv_nc_worker [ 646.257344][ C1] Call Trace: [ 646.260614][ C1] [ 646.263445][ C1] dump_stack_lvl+0x241/0x360 [ 646.268119][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.273309][ C1] ? __pfx__printk+0x10/0x10 [ 646.277891][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.283524][ C1] ? _printk+0xd5/0x120 [ 646.287674][ C1] ? __virt_addr_valid+0x183/0x520 [ 646.292783][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.298419][ C1] print_report+0x169/0x550 [ 646.302921][ C1] ? __virt_addr_valid+0x183/0x520 [ 646.308029][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.313655][ C1] ? __virt_addr_valid+0x44e/0x520 [ 646.318763][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.324392][ C1] ? __phys_addr+0xba/0x170 [ 646.328892][ C1] ? register_lock_class+0x8d1/0x980 [ 646.334174][ C1] kasan_report+0x143/0x180 [ 646.338670][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.344300][ C1] ? register_lock_class+0x8d1/0x980 [ 646.349583][ C1] register_lock_class+0x8d1/0x980 [ 646.354690][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 646.360316][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.365947][ C1] __lock_acquire+0xda/0x1fd0 [ 646.370622][ C1] lock_acquire+0x1ed/0x550 [ 646.375122][ C1] ? __wake_up_common_lock+0x25/0x1e0 [ 646.380579][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 646.385592][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.391315][ C1] ? __pfx_lock_release+0x10/0x10 [ 646.396328][ C1] ? __usb_hcd_giveback_urb+0x375/0x530 [ 646.401863][ C1] ? __pfx_lock_release+0x10/0x10 [ 646.406878][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 646.412077][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 646.417358][ C1] ? __wake_up_common_lock+0x25/0x1e0 [ 646.422718][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 646.428604][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 646.434492][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.440119][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 646.446006][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 646.452344][ C1] __wake_up_common_lock+0x25/0x1e0 [ 646.457534][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.463217][ C1] __usb_hcd_giveback_urb+0x3ac/0x530 [ 646.468591][ C1] dummy_timer+0x830/0x45d0 [ 646.473145][ C1] ? __pfx_lock_release+0x10/0x10 [ 646.478177][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 646.484502][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 646.489879][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.495509][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 646.500711][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 646.505654][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 646.510674][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 646.515869][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 646.521849][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 646.527564][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.533195][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 646.539522][ C1] hrtimer_interrupt+0x396/0x990 [ 646.544470][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 646.550449][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 646.556073][ C1] [ 646.558993][ C1] [ 646.561911][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.567884][ C1] RIP: 0010:lock_release+0xc1/0x9f0 [ 646.573074][ C1] Code: 48 89 d8 48 c1 e8 06 48 8d 3c c5 68 4b ad 8f be 08 00 00 00 e8 a0 5f 89 00 48 0f a3 1d a0 bf 3a 0e 73 16 e8 d1 ca 09 00 84 c0 <75> 0d 80 3d 24 30 25 0e 00 0f 84 d4 05 00 00 48 c7 c0 ac 7d ad 8f [ 646.592711][ C1] RSP: 0018:ffffc90009a87a20 EFLAGS: 00000202 [ 646.598778][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81728bc0 [ 646.606736][ C1] RDX: 0000000000000000 RSI: ffffffff8c1ff360 RDI: ffffffff8c1ff320 [ 646.614725][ C1] RBP: ffffc90009a87b48 R08: ffffffff8fad4b6f R09: 1ffffffff1f5a96d [ 646.622685][ C1] R10: dffffc0000000000 R11: fffffbfff1f5a96e R12: 1ffff92001350f50 [ 646.630650][ C1] R13: ffffffff8b5115fb R14: ffff88801be89dc0 R15: dffffc0000000000 [ 646.638611][ C1] ? batadv_nc_worker+0xcb/0x610 [ 646.643544][ C1] ? lock_release+0xb0/0x9f0 [ 646.648133][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 646.653157][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.658797][ C1] ? batadv_nc_worker+0xcb/0x610 [ 646.663724][ C1] ? __pfx_lock_release+0x10/0x10 [ 646.668740][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 646.674717][ C1] ? batadv_nc_worker+0xcb/0x610 [ 646.679729][ C1] batadv_nc_worker+0x28b/0x610 [ 646.684569][ C1] ? batadv_nc_worker+0xcb/0x610 [ 646.689499][ C1] ? process_scheduled_works+0x945/0x1830 [ 646.695209][ C1] process_scheduled_works+0xa2e/0x1830 [ 646.700763][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 646.706747][ C1] ? assign_work+0x364/0x3d0 [ 646.711330][ C1] worker_thread+0x86d/0xd70 [ 646.715920][ C1] ? __kthread_parkme+0x169/0x1d0 [ 646.720936][ C1] ? __pfx_worker_thread+0x10/0x10 [ 646.726038][ C1] kthread+0x2f2/0x390 [ 646.730100][ C1] ? __pfx_worker_thread+0x10/0x10 [ 646.735464][ C1] ? __pfx_kthread+0x10/0x10 [ 646.740045][ C1] ret_from_fork+0x4d/0x80 [ 646.744460][ C1] ? __pfx_kthread+0x10/0x10 [ 646.749042][ C1] ret_from_fork_asm+0x1a/0x30 [ 646.753814][ C1] [ 646.756816][ C1] [ 646.759121][ C1] Allocated by task 14307: [ 646.763605][ C1] kasan_save_track+0x3f/0x80 [ 646.768278][ C1] __kasan_kmalloc+0x98/0xb0 [ 646.772860][ C1] kmalloc_trace_noprof+0x19c/0x2c0 [ 646.778042][ C1] xpad_probe+0x3c8/0x1b90 [ 646.782450][ C1] usb_probe_interface+0x647/0xbb0 [ 646.787654][ C1] really_probe+0x2ba/0xad0 [ 646.792150][ C1] __driver_probe_device+0x1a2/0x390 [ 646.797427][ C1] driver_probe_device+0x50/0x430 [ 646.802448][ C1] __device_attach_driver+0x2d6/0x530 [ 646.807811][ C1] bus_for_each_drv+0x250/0x2e0 [ 646.812647][ C1] __device_attach+0x333/0x520 [ 646.817402][ C1] bus_probe_device+0x189/0x260 [ 646.822240][ C1] device_add+0x856/0xbf0 [ 646.826563][ C1] usb_set_configuration+0x1976/0x1fb0 [ 646.832019][ C1] usb_generic_driver_probe+0x88/0x140 [ 646.837468][ C1] usb_probe_device+0x1ba/0x380 [ 646.842315][ C1] really_probe+0x2ba/0xad0 [ 646.846810][ C1] __driver_probe_device+0x1a2/0x390 [ 646.852177][ C1] driver_probe_device+0x50/0x430 [ 646.857207][ C1] __device_attach_driver+0x2d6/0x530 [ 646.862572][ C1] bus_for_each_drv+0x250/0x2e0 [ 646.867410][ C1] __device_attach+0x333/0x520 [ 646.872164][ C1] bus_probe_device+0x189/0x260 [ 646.877175][ C1] device_add+0x856/0xbf0 [ 646.881496][ C1] usb_new_device+0x104a/0x19a0 [ 646.886341][ C1] hub_event+0x2d6a/0x5150 [ 646.890752][ C1] process_scheduled_works+0xa2e/0x1830 [ 646.896289][ C1] worker_thread+0x86d/0xd70 [ 646.900953][ C1] kthread+0x2f2/0x390 [ 646.905011][ C1] ret_from_fork+0x4d/0x80 [ 646.909421][ C1] ret_from_fork_asm+0x1a/0x30 [ 646.914180][ C1] [ 646.916487][ C1] Freed by task 779: [ 646.920361][ C1] kasan_save_track+0x3f/0x80 [ 646.925026][ C1] kasan_save_free_info+0x40/0x50 [ 646.930034][ C1] poison_slab_object+0xe0/0x150 [ 646.934960][ C1] __kasan_slab_free+0x37/0x60 [ 646.939712][ C1] kfree+0x149/0x360 [ 646.943606][ C1] xpad_disconnect+0x359/0x490 [ 646.948360][ C1] usb_unbind_interface+0x260/0x940 [ 646.953554][ C1] device_release_driver_internal+0x505/0x7c0 [ 646.959612][ C1] bus_remove_device+0x34f/0x420 [ 646.964537][ C1] device_del+0x57a/0x9b0 [ 646.968893][ C1] usb_disable_device+0x3bf/0x850 [ 646.973914][ C1] usb_disconnect+0x340/0x950 [ 646.978845][ C1] hub_event+0x1eb9/0x5150 [ 646.983255][ C1] process_scheduled_works+0xa2e/0x1830 [ 646.988795][ C1] worker_thread+0x86d/0xd70 [ 646.993375][ C1] kthread+0x2f2/0x390 [ 646.997461][ C1] ret_from_fork+0x4d/0x80 [ 647.001872][ C1] ret_from_fork_asm+0x1a/0x30 [ 647.006629][ C1] [ 647.008938][ C1] The buggy address belongs to the object at ffff88802240c000 [ 647.008938][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 647.022977][ C1] The buggy address is located 145 bytes inside of [ 647.022977][ C1] freed 1024-byte region [ffff88802240c000, ffff88802240c400) [ 647.036852][ C1] [ 647.039165][ C1] The buggy address belongs to the physical page: [ 647.045558][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22408 [ 647.054304][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 647.062819][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 647.070347][ C1] page_type: 0xffffefff(slab) [ 647.075008][ C1] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 647.083664][ C1] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 647.092242][ C1] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 647.100908][ C1] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 647.109572][ C1] head: 00fff00000000003 ffffea0000890201 ffffffffffffffff 0000000000000000 [ 647.118233][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 647.126881][ C1] page dumped because: kasan: bad access detected [ 647.133276][ C1] page_owner tracks the page as allocated [ 647.138974][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 35, tgid 35 (kworker/u8:2), ts 133017316108, free_ts 132940746886 [ 647.159571][ C1] post_alloc_hook+0x1f3/0x230 [ 647.164338][ C1] get_page_from_freelist+0x2e2d/0x2ee0 [ 647.169884][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 647.175079][ C1] alloc_slab_page+0x5f/0x120 [ 647.179745][ C1] allocate_slab+0x5a/0x2e0 [ 647.184238][ C1] ___slab_alloc+0xcd1/0x14b0 [ 647.188913][ C1] __slab_alloc+0x58/0xa0 [ 647.193233][ C1] __kmalloc_noprof+0x257/0x400 [ 647.198093][ C1] ieee802_11_parse_elems_full+0xd5/0x2870 [ 647.203894][ C1] ieee80211_inform_bss+0x15f/0x1080 [ 647.209170][ C1] cfg80211_inform_single_bss_data+0x1123/0x2360 [ 647.215495][ C1] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 647.221123][ C1] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 647.227188][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 647.232809][ C1] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 647.238954][ C1] ieee80211_iface_work+0x8a3/0xf10 [ 647.244141][ C1] page last free pid 5429 tgid 5429 stack trace: [ 647.250451][ C1] free_unref_page+0xd22/0xea0 [ 647.255213][ C1] __put_partials+0xeb/0x130 [ 647.259797][ C1] put_cpu_partial+0x17c/0x250 [ 647.264553][ C1] __slab_free+0x2ea/0x3d0 [ 647.268961][ C1] qlist_free_all+0x9e/0x140 [ 647.273539][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 647.278993][ C1] __kasan_slab_alloc+0x23/0x80 [ 647.283848][ C1] kmalloc_trace_noprof+0x132/0x2c0 [ 647.289032][ C1] kernfs_iop_get_link+0x67/0x5a0 [ 647.294098][ C1] vfs_readlink+0x170/0x3b0 [ 647.298595][ C1] do_readlinkat+0x283/0x3b0 [ 647.303173][ C1] __x64_sys_readlink+0x7f/0x90 [ 647.308039][ C1] do_syscall_64+0xf3/0x230 [ 647.312534][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.318421][ C1] [ 647.320727][ C1] Memory state around the buggy address: [ 647.326365][ C1] ffff88802240bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 647.334412][ C1] ffff88802240c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 647.342455][ C1] >ffff88802240c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 647.350500][ C1] ^ [ 647.355071][ C1] ffff88802240c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 647.363115][ C1] ffff88802240c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 647.371157][ C1] ================================================================== [ 647.379202][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 647.386381][ C1] CPU: 1 PID: 10183 Comm: kworker/u8:17 Not tainted 6.10.0-rc2-syzkaller-00235-g8a92980606e3 #0 [ 647.396870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 647.407008][ C1] Workqueue: bat_events batadv_nc_worker [ 647.412642][ C1] Call Trace: [ 647.415913][ C1] [ 647.418746][ C1] dump_stack_lvl+0x241/0x360 [ 647.423423][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.428617][ C1] ? __pfx__printk+0x10/0x10 [ 647.433196][ C1] ? rcu_is_watching+0x15/0xb0 [ 647.437954][ C1] ? lock_release+0xbf/0x9f0 [ 647.442535][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.448165][ C1] ? vscnprintf+0x5d/0x90 [ 647.452542][ C1] panic+0x349/0x860 [ 647.456460][ C1] ? check_panic_on_warn+0x21/0xb0 [ 647.461577][ C1] ? __pfx_panic+0x10/0x10 [ 647.465989][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 647.471199][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.476844][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 647.482751][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 647.489081][ C1] ? print_report+0x502/0x550 [ 647.493759][ C1] check_panic_on_warn+0x86/0xb0 [ 647.498694][ C1] ? register_lock_class+0x8d1/0x980 [ 647.503971][ C1] end_report+0x77/0x160 [ 647.508212][ C1] kasan_report+0x154/0x180 [ 647.512713][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.518347][ C1] ? register_lock_class+0x8d1/0x980 [ 647.523664][ C1] register_lock_class+0x8d1/0x980 [ 647.528786][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 647.534413][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.540053][ C1] __lock_acquire+0xda/0x1fd0 [ 647.544732][ C1] lock_acquire+0x1ed/0x550 [ 647.549232][ C1] ? __wake_up_common_lock+0x25/0x1e0 [ 647.554600][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 647.559700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.565337][ C1] ? __pfx_lock_release+0x10/0x10 [ 647.570352][ C1] ? __usb_hcd_giveback_urb+0x375/0x530 [ 647.575889][ C1] ? __pfx_lock_release+0x10/0x10 [ 647.580991][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 647.586206][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 647.591489][ C1] ? __wake_up_common_lock+0x25/0x1e0 [ 647.596961][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 647.602938][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 647.608831][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.614461][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 647.620352][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 647.626677][ C1] __wake_up_common_lock+0x25/0x1e0 [ 647.631867][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.637499][ C1] __usb_hcd_giveback_urb+0x3ac/0x530 [ 647.642866][ C1] dummy_timer+0x830/0x45d0 [ 647.647371][ C1] ? __pfx_lock_release+0x10/0x10 [ 647.652573][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 647.658898][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 647.664270][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.669901][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 647.675188][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 647.680303][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 647.685239][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 647.690441][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 647.696420][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 647.702137][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.707767][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 647.713827][ C1] hrtimer_interrupt+0x396/0x990 [ 647.718774][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 647.724753][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 647.730384][ C1] [ 647.733305][ C1] [ 647.736223][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 647.742198][ C1] RIP: 0010:lock_release+0xc1/0x9f0 [ 647.747390][ C1] Code: 48 89 d8 48 c1 e8 06 48 8d 3c c5 68 4b ad 8f be 08 00 00 00 e8 a0 5f 89 00 48 0f a3 1d a0 bf 3a 0e 73 16 e8 d1 ca 09 00 84 c0 <75> 0d 80 3d 24 30 25 0e 00 0f 84 d4 05 00 00 48 c7 c0 ac 7d ad 8f [ 647.767163][ C1] RSP: 0018:ffffc90009a87a20 EFLAGS: 00000202 [ 647.773225][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81728bc0 [ 647.781191][ C1] RDX: 0000000000000000 RSI: ffffffff8c1ff360 RDI: ffffffff8c1ff320 [ 647.789154][ C1] RBP: ffffc90009a87b48 R08: ffffffff8fad4b6f R09: 1ffffffff1f5a96d [ 647.797206][ C1] R10: dffffc0000000000 R11: fffffbfff1f5a96e R12: 1ffff92001350f50 [ 647.805170][ C1] R13: ffffffff8b5115fb R14: ffff88801be89dc0 R15: dffffc0000000000 [ 647.813167][ C1] ? batadv_nc_worker+0xcb/0x610 [ 647.818106][ C1] ? lock_release+0xb0/0x9f0 [ 647.822694][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 647.827709][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.833340][ C1] ? batadv_nc_worker+0xcb/0x610 [ 647.838265][ C1] ? __pfx_lock_release+0x10/0x10 [ 647.843285][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 647.849257][ C1] ? batadv_nc_worker+0xcb/0x610 [ 647.854181][ C1] batadv_nc_worker+0x28b/0x610 [ 647.859020][ C1] ? batadv_nc_worker+0xcb/0x610 [ 647.863946][ C1] ? process_scheduled_works+0x945/0x1830 [ 647.869652][ C1] process_scheduled_works+0xa2e/0x1830 [ 647.875202][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.881180][ C1] ? assign_work+0x364/0x3d0 [ 647.885761][ C1] worker_thread+0x86d/0xd70 [ 647.890353][ C1] ? __kthread_parkme+0x169/0x1d0 [ 647.895377][ C1] ? __pfx_worker_thread+0x10/0x10 [ 647.900488][ C1] kthread+0x2f2/0x390 [ 647.904557][ C1] ? __pfx_worker_thread+0x10/0x10 [ 647.909662][ C1] ? __pfx_kthread+0x10/0x10 [ 647.914250][ C1] ret_from_fork+0x4d/0x80 [ 647.918675][ C1] ? __pfx_kthread+0x10/0x10 [ 647.923263][ C1] ret_from_fork_asm+0x1a/0x30 [ 647.928042][ C1] [ 649.040117][ C1] Shutting down cpus with NMI [ 649.045103][ C1] Kernel Offset: disabled [ 649.049423][ C1] Rebooting in 86400 seconds..