last executing test programs: 26.432392283s ago: executing program 0 (id=1015): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000500000000001c00028004000100140003800c000180080001"], 0x48}}, 0x0) 26.240203405s ago: executing program 0 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 25.265919402s ago: executing program 0 (id=1018): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x369, &(0x7f0000000700)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 24.622449065s ago: executing program 0 (id=1021): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b744000000000000030109029200030172e5000904000000010100000a24010000020102"], 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4a9, &(0x7f0000000b40)="$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") syz_emit_vhci(&(0x7f0000000ac0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x1b, 0x0, @fixed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none}]}}}}, 0x1d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x1800, &(0x7f0000000300)=ANY=[], 0x1, 0x1cf, &(0x7f0000000780)="$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") r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="2fe26c986275788a46cdacd98c6986bda0a08ca1c922990d3c78ed30dfc95cec2a22807faa61ebe21a2193b26e15a86e1ab99f1be5ea1bb0fb938417436d18e65728a2dee61ea7bc", 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b65, 0x6) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x16000}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) connect$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x2000c040) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 21.912544071s ago: executing program 0 (id=1030): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x5}}, {@dmask}, {@gid}, {@umask={'umask', 0x3d, 0x8}}, {@utf8}, {}]}, 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f00000000c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c646973636172642c756d61736b3d30303030303030303030303030303030303034373334352c6469736361720100004073636172642c666d61736b3d30303030303030303030303030303030303030303030322c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000022,iocharset=cp857,errors=remount-ro,\x00'], 0x3, 0x1507, &(0x7f0000000440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 19.204133091s ago: executing program 0 (id=1033): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000300), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) close_range(0xffffffffffffffff, r0, 0x2) sched_setscheduler(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000f20000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r4, 0x10d, 0x84, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close(r2) 13.797277271s ago: executing program 2 (id=1059): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d49fbc0000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00('], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.727306366s ago: executing program 5 (id=1067): io_setup(0x80, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdb6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1000000}, 0x90) r1 = socket(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c30000000b8adaed8ec6e8fac0000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e6700000000000000000000000000000000000000000004000000000018040000000000000c0000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f00000000000000000000009300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000e21071ce4cc8eaac65a0f6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00000000000000000000000000000000009476b0c33efd5e65b7316c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014bc1d077b4817d693d02c0000000000000000000000000000000000416cbf6525780f42e3870800000000000000000000000000000000000000000000000000000000000000abcc3311337430270000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d65992000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081cc42e042291bc3000000000000200000000000000000000000000000000000000000000000000000000000005de0eab8674f2269845f530928d7000000000000000000000000000000000000000000000000000000000000000000000000000000ee72000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095dd0000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000670000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c81e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d100000000000000000000000000000000000000000000000000000000000000000072"]}, 0x9c0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$alg(r4, &(0x7f0000001880)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18}], 0x18, 0x4008000}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000040601010000000000000000000000000900020073797a32000000000500010007000000252c3173ee3b1f7f7f225a6a9ee85d0e0c753dbdcc4ac08f5d9cc11eff7fad62d035899122c108f83cc54e4da56ddda0fb7336290ce767dddd849a32d975f3850b7ee5cff33cf4529a92878beae2d1e3bfea6828bf01ecf94b9ebca277a9c3b360833cc9d48861262b91e47b75618853dfa9dae49f36ee819431aa0f7260f9fe8f01e741b8ad11e9bd70b8354f62a2b79e1fa1269299e3d22542bb9076352660beba157fab04efe0"], 0x28}}, 0x0) socketpair(0x2, 0xa, 0x2850, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000100)={r8, @empty, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) 11.499397064s ago: executing program 2 (id=1069): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x8) 9.916905054s ago: executing program 1 (id=1073): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r0) 9.86371979s ago: executing program 2 (id=1075): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000001c0)="fbffffff", 0x4) 8.50684667s ago: executing program 2 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400230300000008000100000a000000", @ANYRES32=r2, @ANYBLOB="080008000004000014000100ff"], 0x34}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat(r3, 0x0, 0x0, 0x40) fdatasync(r4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_uring_setup(0x4f05, &(0x7f00000002c0)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{}, @host, 0x0, 0x4, 0x0, 0x3, 0x7, 0xffffffe0}) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002700)=ANY=[], 0x1, 0x270, &(0x7f00000008c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r6, &(0x7f0000000040)="c0", 0x1, 0x0) pwritev2(r6, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.505501746s ago: executing program 5 (id=1088): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29}, 0x20) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) futex(0x0, 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x3ffffffa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000100)={0x0, 0x2, '\x00', [@generic, @calipso={0x7, 0x8}, @jumbo]}, 0x20) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000740)=@ccm_128={{0x303}, "6494f7eeb79b5923", "6fcd0000001e702497f4cce6a700", "05800160", "640ab7e1604d75c8"}, 0x28) 6.871793673s ago: executing program 1 (id=1080): sched_setaffinity(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r4 = socket(0xf, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1fb17077eede42305c1dc5f6263b7458ca427203ec714d14c54c63b41f88ac45b380e3144c5baf568715fedb2a0ac7a6c56d77c018", @ANYRES32=r2, @ANYRES32=r4], 0x44}}, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 6.871607436s ago: executing program 3 (id=1081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x400) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x3}]}, 0x18}, 0x1, 0x7}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000019c5bbcbc9738727bc0245070781f533912c3c86ca732"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setreuid(0xee00, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) 6.765707904s ago: executing program 5 (id=1082): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x4, 0x0) 5.325687053s ago: executing program 4 (id=1084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x125}, 0x14}}, 0x0) 5.185940518s ago: executing program 4 (id=1085): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.725036839s ago: executing program 4 (id=1086): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x7, &(0x7f0000000000), 0xa0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffffffa, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000180)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}, 'tunl0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {}]}, 0x10) syz_emit_ethernet(0x1df, &(0x7f0000000840)={@multicast, @local, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv6={0x86dd, @udp={0xc, 0x6, "f82920", 0x1a5, 0x11, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x73, 0x0, 0xa, 0x0, 0x0, 0x6, 0x8001}, @srh={0x5e, 0x12, 0x4, 0x9, 0x2, 0x48, 0x5, [@private1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x7d, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @ra={0x5, 0x2, 0x1}, @ra]}, @fragment={0x33, 0x0, 0x8, 0x0, 0x0, 0xd, 0x67}, @fragment={0x1d, 0x0, 0x1, 0x0, 0x0, 0x7, 0x67}], {0x4e23, 0x4e23, 0xdd, 0x0, @opaque="32d698e38b324218646eb5264dc7eb04ad39b0a6ff7b948193cf227911373cbe035556af5fc29b159c8ed05ac74a7f604a82ebbd041c57ab6f04b6216a7a70145c73dc06ce2e002098f544f5bc975336f009045c8c6bd934d6bdd539f1c4aabc6b464fbf3e3a1c35cdc060684ad4203febfa07177ef1e58650cdbd84be1652dd19045af560c5f234868fa773ee3cbc613a9b5a335d4d1d047102b03cbe1f5d5abb3c210088c0a3654ca966f96307f0cdd0832d828cf0a25e2dc064be8b430b9410a036c93da4e196b941eaf48d0f99a957ad66705d"}}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="ec448506d4e9a160a056b43aaf3d9ea65a351ebef55dc622413dc7379c6a4b4b596037cf8df95ce5ac92f3800db2769addf31a3977cb0f43f41dada4c51a806359970b11f3207e22b4a7e618650300418ccad65569b38cc464d374a54ea7d830e2913eb2e03aa04121e5ac4e480069afef6ebae2417e49a205", 0x79) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @remote, 0xfffffffa}, 0x1c) 4.567330103s ago: executing program 1 (id=1087): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff07000000ffe7ee000000deff0000000200000000", 0x58}], 0x1) 4.383739949s ago: executing program 1 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4, @remote}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e20, @multicast2}], 0x6c) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x0, &(0x7f0000001140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r2, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x0, 0x0) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000140)=""/155) recvmsg(r2, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) 3.336851884s ago: executing program 5 (id=1090): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7d}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) 1.571403236s ago: executing program 2 (id=1091): syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file1\x00', 0x2003084c, &(0x7f0000000840)=ANY=[@ANYBLOB='umask=00000000000000000000011,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00ce6fb92f3b6892859719d513fb2b72b215d86c32a84d78e448737571f435f5dc7ac494c7c5eb9c5beb42ea5f0d8ebba95eb45de7e28e4f3de48c458ac42a36d259c1947b981eec266c1568a7b1911a194200b826832913e757be4c05000000000000"], 0x0, 0x14f4, &(0x7f0000001580)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x2c5, &(0x7f0000000540)="$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") kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, r0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x64c, &(0x7f0000001500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000055c0)='./bus\x00', &(0x7f0000005600), 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x26}, 0x20) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r2, 0x0) unshare(0x20020680) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)=""/29) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000000)=@device_a={0x8, 0x2, 0x11, 0x68}, &(0x7f0000000100)=@mgmt_frame=@reassoc_resp={{}, 0x0, 0x0, @default, @void, @void}, 0x1e) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x223216, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {0x5}, {}, {}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1}, 0x20) mount$tmpfs(0x0, 0x0, 0x0, 0x11d4424, 0x0) r5 = accept$unix(r3, &(0x7f00000003c0)=@abs, &(0x7f00000002c0)=0x6e) bind$unix(r5, &(0x7f0000000080)=@file={0x0, './bus\x00'}, 0x6e) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x7, {{0x2, 0x4c20, @loopback}}}, 0x88) 1.56576687s ago: executing program 4 (id=1092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}}, 0x0) 1.511649267s ago: executing program 3 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 1.392505125s ago: executing program 5 (id=1094): setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) 1.332817837s ago: executing program 4 (id=1095): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa0}}, 0x0) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r4, 0x401, 0x0) getpid() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x98}}, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x199, &(0x7f0000000380)="$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") socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.176456469s ago: executing program 3 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) 1.155642878s ago: executing program 5 (id=1097): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.097471972s ago: executing program 1 (id=1098): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, 0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 841.561653ms ago: executing program 3 (id=1099): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), 0x4) 720.879984ms ago: executing program 3 (id=1100): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x1, 0xa53, &(0x7f0000000bc0)="$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") mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='btrfs\x00', 0x22004c0, 0x0) 575.242076ms ago: executing program 1 (id=1101): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @local}}) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000001380), 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) io_setup(0x202, &(0x7f00000001c0)) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000600)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r0) unshare(0x400) 346.158867ms ago: executing program 3 (id=1102): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$qrtr(0x2a, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 740.36µs ago: executing program 4 (id=1103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400230300000008000100000a000000", @ANYRES32=r2, @ANYBLOB="080008000004000014000100ff"], 0x34}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat(r3, 0x0, 0x0, 0x40) fdatasync(r4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_uring_setup(0x4f05, &(0x7f00000002c0)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{}, @host, 0x0, 0x4, 0x0, 0x3, 0x7, 0xffffffe0}) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002700)=ANY=[], 0x1, 0x270, &(0x7f00000008c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r6, &(0x7f0000000040)="c0", 0x1, 0x0) pwritev2(r6, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1114): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)="7f", 0x1}]) kernel console output (not intermixed with test programs): h1_vlan: left promiscuous mode [ 310.945531][ T12] veth0_vlan: left promiscuous mode [ 311.596742][ T12] team0 (unregistering): Port device team_slave_1 removed [ 311.639907][ T12] team0 (unregistering): Port device team_slave_0 removed [ 312.511890][ T12] team0 (unregistering): Port device team_slave_1 removed [ 312.549725][ T12] team0 (unregistering): Port device team_slave_0 removed [ 313.087800][ T7462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.109594][ T6573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.122901][ T6573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.204713][ T7470] veth0_vlan: entered promiscuous mode [ 313.230349][ T7470] veth1_vlan: entered promiscuous mode [ 313.365069][ T7560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.388004][ T7560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.432128][ T7560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.544263][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.579225][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.609337][ T7560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.621910][ T7604] loop3: detected capacity change from 0 to 1764 [ 313.658865][ T7470] veth0_macvtap: entered promiscuous mode [ 313.723066][ T7470] veth1_macvtap: entered promiscuous mode [ 313.730107][ T7562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.847199][ T7562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.871630][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.875051][ T7562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.907740][ T7604] netlink: 'syz.3.599': attribute type 10 has an invalid length. [ 313.911888][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.923819][ T7604] netlink: 2 bytes leftover after parsing attributes in process `syz.3.599'. [ 313.938379][ T7604] bond0: entered promiscuous mode [ 313.945651][ T7604] bond_slave_0: entered promiscuous mode [ 313.953783][ T7604] bond_slave_1: entered promiscuous mode [ 313.961194][ T7604] bridge0: port 3(bond0) entered blocking state [ 313.969817][ T7604] bridge0: port 3(bond0) entered disabled state [ 313.977228][ T7604] bond0: entered allmulticast mode [ 313.982569][ T7604] bond_slave_0: entered allmulticast mode [ 313.988335][ T7604] bond_slave_1: entered allmulticast mode [ 314.006539][ T7604] bridge0: port 3(bond0) entered blocking state [ 314.013212][ T7604] bridge0: port 3(bond0) entered forwarding state [ 314.034361][ T7562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.081281][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.101361][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.111366][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.137107][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.178496][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.244063][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.263925][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.274478][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.286946][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.311785][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.401473][ T7470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.424802][ T7470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.441566][ T7470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.450841][ T7470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.688619][ T7462] veth0_vlan: entered promiscuous mode [ 314.779743][ T7462] veth1_vlan: entered promiscuous mode [ 314.940775][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.991715][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.135046][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.186249][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.218644][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.314176][ T7462] veth0_macvtap: entered promiscuous mode [ 315.387537][ T7562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.430300][ T7560] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.472036][ T7462] veth1_macvtap: entered promiscuous mode [ 315.559810][ T7616] loop0: detected capacity change from 0 to 4096 [ 315.593508][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.600670][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.721076][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.728317][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.739096][ T7616] ntfs3: loop0: ino=3, ntfs_iget5 [ 315.750186][ T7616] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 315.785903][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.896598][ T7622] loop4: detected capacity change from 0 to 512 [ 315.908244][ T7622] EXT4-fs: Ignoring removed nobh option [ 317.717216][ T7621] sched: RT throttling activated [ 317.748734][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.758287][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.879572][ T7622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 317.967430][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.977437][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.989389][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.002186][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.028456][ T7622] EXT4-fs (loop4): 1 truncate cleaned up [ 318.035679][ T7622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.036333][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.126083][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.158205][ T7562] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.194419][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.233981][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.257626][ T7626] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 318.277696][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.296213][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.308452][ T7462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.321790][ T7462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.340738][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.346423][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.398353][ T7462] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.414327][ T7462] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.442886][ T7462] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.457253][ T7632] loop4: detected capacity change from 0 to 512 [ 318.463826][ T7462] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.474372][ T7632] journal_path: Lookup failure for './file1' [ 318.480488][ T7632] EXT4-fs: error: could not find journal device path [ 318.496376][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.503585][ T5290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.555865][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.563089][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.563179][ T7632] loop4: detected capacity change from 0 to 1024 [ 318.597356][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.631961][ T7632] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.4.686: corrupted in-inode xattr: bad e_name length [ 318.654181][ T7632] EXT4-fs (loop4): Remounting filesystem read-only [ 318.668608][ T29] audit: type=1326 audit(1723095016.281:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.4.686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e513779f9 code=0x0 [ 318.885743][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.914168][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.997634][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.046409][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.512551][ T7560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.567083][ T7647] loop3: detected capacity change from 0 to 512 [ 319.595336][ T7647] EXT4-fs: Ignoring removed oldalloc option [ 319.658455][ T7562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.746441][ T7647] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.689: Parent and EA inode have the same ino 15 [ 319.769575][ T7647] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.689: Parent and EA inode have the same ino 15 [ 319.791939][ T7647] EXT4-fs (loop3): 1 orphan inode deleted [ 319.831627][ T7652] netlink: 'syz.0.690': attribute type 4 has an invalid length. [ 319.848793][ T7647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.046896][ T7560] veth0_vlan: entered promiscuous mode [ 320.135477][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.323905][ T6265] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.583534][ T7560] veth1_vlan: entered promiscuous mode [ 320.654277][ T7309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.675912][ T6265] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.729211][ T7562] veth0_vlan: entered promiscuous mode [ 320.866636][ T6265] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.937959][ T7562] veth1_vlan: entered promiscuous mode [ 320.971141][ T7665] loop0: detected capacity change from 0 to 128 [ 322.055507][ T7673] loop5: detected capacity change from 0 to 512 [ 322.066353][ T7673] EXT4-fs: Ignoring removed orlov option [ 322.237527][ T7673] EXT4-fs (loop5): Test dummy encryption mode enabled [ 322.304875][ T7673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0102] [ 322.314592][ T7673] System zones: 1-12 [ 322.333754][ T7673] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.697: casefold flag without casefold feature [ 322.347920][ T7673] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.697: couldn't read orphan inode 15 (err -117) [ 322.369175][ T7673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.485675][ T7670] EXT4-fs error (device loop5): ext4_add_entry:2435: inode #2: comm syz.5.697: Directory hole found for htree leaf block 0 [ 322.631670][ T6265] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.911263][ T7462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.979805][ T7560] veth0_macvtap: entered promiscuous mode [ 322.993160][ T7560] veth1_macvtap: entered promiscuous mode [ 323.428901][ T7562] veth0_macvtap: entered promiscuous mode [ 323.596355][ T7562] veth1_macvtap: entered promiscuous mode [ 323.756062][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 323.898078][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.962509][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.971694][ T7685] loop5: detected capacity change from 0 to 512 [ 323.978770][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.011540][ T7685] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 324.013375][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.062536][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.075135][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.085617][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.099888][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.111916][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 324.119625][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.148187][ T7685] EXT4-fs (loop5): 1 truncate cleaned up [ 324.158815][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.178287][ T7685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.222399][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.259062][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.273818][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.280603][ T7694] xt_hashlimit: max too large, truncated to 1048576 [ 324.299976][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.359304][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.389215][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.400747][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.451377][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.482588][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.502569][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.514324][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.520545][ T7697] loop0: detected capacity change from 0 to 1024 [ 324.531326][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.546062][ T7697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 324.560272][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.575314][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.588337][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.599315][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.626332][ T7697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.682444][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.722332][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.734238][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.744139][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.762367][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.776416][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.786997][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.798963][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.851581][ T7560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.886937][ T7560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.904248][ T7560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.917212][ T7560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.930552][ T7470] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.986466][ T7700] fuse: Unknown parameter '' [ 325.000267][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.008058][ T7700] loop3: detected capacity change from 0 to 512 [ 325.011655][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.045263][ T7700] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.705: corrupted in-inode xattr: invalid ea_ino [ 325.054726][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.072914][ T7700] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.705: couldn't read orphan inode 15 (err -117) [ 325.093320][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.111673][ T7700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.130956][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.147766][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.159205][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.179276][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.189374][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.202260][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.229841][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.320251][ T7708] loop0: detected capacity change from 0 to 512 [ 325.327478][ T7708] EXT4-fs: Ignoring removed nobh option [ 325.338660][ T7562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.347752][ T7708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 325.365499][ T7708] EXT4-fs (loop0): 1 truncate cleaned up [ 325.372216][ T7708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.395382][ T7562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.429535][ T7562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.439747][ T7562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.659305][ T7462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.692206][ T6265] bridge_slave_1: left allmulticast mode [ 325.731373][ T6265] bridge_slave_1: left promiscuous mode [ 325.760354][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.889642][ T6265] bridge_slave_0: left allmulticast mode [ 325.905958][ T7309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.915326][ T6265] bridge_slave_0: left promiscuous mode [ 325.921076][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.192560][ T5236] Bluetooth: hci4: command tx timeout [ 327.331508][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.405124][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.414051][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.424899][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.434216][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.441711][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.522063][ T7470] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.332497][ T5236] Bluetooth: hci4: command tx timeout [ 328.408527][ T6265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.463021][ T6265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.510332][ T6265] bond0 (unregistering): Released all slaves [ 329.128231][ T7686] chnl_net:caif_netlink_parms(): no params data found [ 329.499842][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.522167][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.557715][ T5236] Bluetooth: hci0: command tx timeout [ 329.584417][ T6265] hsr_slave_0: left promiscuous mode [ 329.642355][ T6265] hsr_slave_1: left promiscuous mode [ 329.661211][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.691818][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.723524][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.737694][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.819729][ T6265] veth1_macvtap: left promiscuous mode [ 329.845274][ T6265] veth0_macvtap: left promiscuous mode [ 329.864007][ T6265] veth1_vlan: left promiscuous mode [ 329.884001][ T6265] veth0_vlan: left promiscuous mode [ 330.352958][ T5236] Bluetooth: hci4: command tx timeout [ 331.144817][ T7761] mmap: syz.3.727 (7761) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 331.633134][ T5236] Bluetooth: hci0: command tx timeout [ 331.840759][ T6265] team0 (unregistering): Port device team_slave_1 removed [ 331.973665][ T6265] team0 (unregistering): Port device team_slave_0 removed [ 331.988176][ T7757] loop0: detected capacity change from 0 to 32768 [ 332.008927][ T7757] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 332.045064][ T7771] input: syz0 as /devices/virtual/input/input17 [ 332.114768][ T7757] XFS (loop0): Ending clean mount [ 332.137696][ T7757] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 332.159062][ T7757] XFS (loop0): Unmount and run xfs_repair [ 332.172416][ T7757] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 332.179842][ T7757] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 332.192367][ T7757] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 332.226138][ T7757] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 332.265158][ T7757] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 332.299627][ T7757] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 332.341868][ T7757] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 332.409841][ T7757] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 332.436306][ T5236] Bluetooth: hci4: command tx timeout [ 332.502443][ T7757] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 332.555633][ T7757] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 332.627399][ T7757] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 332.692396][ T7757] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 332.753104][ T7757] syz.0.726 (7757) used greatest stack depth: 18360 bytes left [ 332.827111][ T7470] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 333.268040][ T29] audit: type=1326 audit(1723095030.881:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.0.729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37a5779f9 code=0x0 [ 333.433858][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.434935][ T7783] loop0: detected capacity change from 0 to 2048 [ 333.441727][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.449483][ T7783] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.506057][ T7783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.678550][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.697389][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.711937][ T7686] bridge_slave_0: entered allmulticast mode [ 333.722608][ T5236] Bluetooth: hci0: command tx timeout [ 333.728346][ T7686] bridge_slave_0: entered promiscuous mode [ 333.758160][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.771848][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.793257][ T7794] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.729: bg 0: block 234: padding at end of block bitmap is not set [ 333.803494][ T7686] bridge_slave_1: entered allmulticast mode [ 333.810140][ T7794] EXT4-fs (loop0): Remounting filesystem read-only [ 333.834311][ T7686] bridge_slave_1: entered promiscuous mode [ 333.963222][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.986809][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.065008][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.093835][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.101673][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.105039][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.329357][ T7686] team0: Port device team_slave_0 added [ 334.359872][ T7686] team0: Port device team_slave_1 added [ 334.506542][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.531008][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.569178][ T7686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.779362][ T7817] loop3: detected capacity change from 0 to 256 [ 334.819157][ T7817] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 334.909996][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.935701][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.966869][ T7686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.153406][ T7686] hsr_slave_0: entered promiscuous mode [ 335.169171][ T7686] hsr_slave_1: entered promiscuous mode [ 335.598565][ T6265] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.812647][ T5236] Bluetooth: hci0: command tx timeout [ 335.970005][ T7832] input: syz1 as /devices/virtual/input/input18 [ 335.994854][ T6265] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.064000][ T7722] chnl_net:caif_netlink_parms(): no params data found [ 336.655761][ T6265] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.712459][ T5289] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 336.963285][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 336.998525][ T7840] loop3: detected capacity change from 0 to 512 [ 337.014805][ T6265] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.027576][ T5289] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.042104][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.050575][ T5289] usb 3-1: Product: syz [ 337.057805][ T5289] usb 3-1: Manufacturer: syz [ 337.068026][ T7840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 337.081726][ T5289] usb 3-1: SerialNumber: syz [ 337.090383][ T7840] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.113475][ T5289] usb 3-1: config 0 descriptor?? [ 337.337240][ T5289] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 337.339796][ T29] audit: type=1326 audit(1723095034.931:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f641c5779f9 code=0x0 [ 337.361288][ T7470] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.387483][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.405090][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.417177][ T7722] bridge_slave_0: entered allmulticast mode [ 337.425885][ T7722] bridge_slave_0: entered promiscuous mode [ 337.448499][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.463997][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.483184][ T7722] bridge_slave_1: entered allmulticast mode [ 337.490798][ T7722] bridge_slave_1: entered promiscuous mode [ 337.730428][ T7722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.734739][ T7722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.808128][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 338.021809][ T7722] team0: Port device team_slave_0 added [ 338.065189][ T7722] team0: Port device team_slave_1 added [ 338.071695][ T6265] bridge_slave_1: left allmulticast mode [ 338.091024][ T6265] bridge_slave_1: left promiscuous mode [ 338.098130][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.128500][ T6265] bridge_slave_0: left allmulticast mode [ 338.134988][ T6265] bridge_slave_0: left promiscuous mode [ 338.141072][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.162757][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 338.647676][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.658221][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.670366][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.689022][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.849944][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.860313][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.532592][ T5289] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 339.575380][ T5289] usb 3-1: USB disconnect, device number 8 [ 339.780941][ T7866] netlink: 'syz.1.751': attribute type 5 has an invalid length. [ 339.850408][ T6265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.869221][ T6265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.882230][ T6265] bond0 (unregistering): Released all slaves [ 339.982436][ T7866] : entered promiscuous mode [ 340.101105][ T7686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.124672][ T7309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 340.139566][ T7686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.163301][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.170264][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.222726][ T7722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.378544][ T7868] tipc: Started in network mode [ 340.386114][ T7868] tipc: Node identity 1, cluster identity 4711 [ 340.393709][ T7868] tipc: Node number set to 1 [ 340.402890][ T7868] tipc: Cannot configure node identity twice [ 340.410957][ T7686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.439811][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.457579][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.552471][ T7722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.605527][ T7686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.679771][ T7880] loop3: detected capacity change from 0 to 64 [ 340.960755][ T6265] hsr_slave_0: left promiscuous mode [ 340.976186][ T6265] hsr_slave_1: left promiscuous mode [ 340.988360][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.997737][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.011193][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.020034][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.120811][ T6265] veth1_macvtap: left promiscuous mode [ 341.138023][ T6265] veth0_macvtap: left promiscuous mode [ 341.161318][ T6265] veth1_vlan: left promiscuous mode [ 341.170353][ T6265] veth0_vlan: left promiscuous mode [ 341.275153][ T7890] loop2: detected capacity change from 0 to 256 [ 341.553384][ T5243] Bluetooth: hci3: command tx timeout [ 341.932951][ T5295] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 342.162398][ T5295] usb 3-1: Using ep0 maxpacket: 8 [ 342.170185][ T5295] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 342.189690][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.206090][ T5295] usb 3-1: config 0 descriptor?? [ 342.311206][ T6265] team0 (unregistering): Port device team_slave_1 removed [ 342.376655][ T6265] team0 (unregistering): Port device team_slave_0 removed [ 342.433939][ T5295] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 342.462816][ T5295] asix 3-1:0.0: probe with driver asix failed with error -61 [ 342.974449][ T7907] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 342.983075][ T7907] netlink: 40 bytes leftover after parsing attributes in process `syz.1.765'. [ 342.997411][ T7907] bridge0: port 3(syz_tun) entered blocking state [ 343.006724][ T7907] bridge0: port 3(syz_tun) entered disabled state [ 343.013594][ T7907] syz_tun: entered allmulticast mode [ 343.020316][ T7907] syz_tun: entered promiscuous mode [ 343.028059][ T7907] bridge0: port 3(syz_tun) entered blocking state [ 343.034780][ T7907] bridge0: port 3(syz_tun) entered forwarding state [ 343.069288][ T7722] hsr_slave_0: entered promiscuous mode [ 343.113188][ T7722] hsr_slave_1: entered promiscuous mode [ 343.140095][ T7722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.158991][ T7722] Cannot create hsr debugfs directory [ 343.230981][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 343.359590][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.400418][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.462815][ T5295] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 343.632661][ T5243] Bluetooth: hci3: command tx timeout [ 343.676230][ T5295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.686963][ T5295] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 343.696154][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.709965][ T5295] usb 4-1: config 0 descriptor?? [ 343.753337][ T58] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 343.786244][ T7859] chnl_net:caif_netlink_parms(): no params data found [ 343.847604][ T6265] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.883860][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.936984][ T6265] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.943174][ T937] usb 4-1: USB disconnect, device number 7 [ 343.958415][ T58] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.972516][ T58] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 344.000081][ T58] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.009382][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.035617][ T7924] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 344.047268][ T58] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.096622][ T6265] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.127973][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.159226][ T7930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'. [ 344.216394][ T6265] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.316999][ T5295] usb 2-1: USB disconnect, device number 12 [ 344.329067][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.336272][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.356866][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.365732][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.373245][ T7859] bridge_slave_0: entered allmulticast mode [ 344.380467][ T7859] bridge_slave_0: entered promiscuous mode [ 344.397188][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.404372][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.423858][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.431716][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.451628][ T7859] bridge_slave_1: entered allmulticast mode [ 344.458888][ T7859] bridge_slave_1: entered promiscuous mode [ 344.554570][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.574366][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.799183][ T7859] team0: Port device team_slave_0 added [ 344.898014][ T7722] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.929703][ T7722] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.959848][ T7722] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.980511][ T7722] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.030079][ T7859] team0: Port device team_slave_1 added [ 345.036410][ T6265] bridge_slave_1: left allmulticast mode [ 345.042068][ T6265] bridge_slave_1: left promiscuous mode [ 345.049895][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.075936][ T6265] bridge_slave_0: left allmulticast mode [ 345.082033][ T6265] bridge_slave_0: left promiscuous mode [ 345.088946][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.181899][ T7937] loop3: detected capacity change from 0 to 512 [ 345.192882][ T7937] EXT4-fs: Ignoring removed orlov option [ 345.249825][ T7937] EXT4-fs (loop3): Test dummy encryption mode enabled [ 345.336865][ T7937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0102] [ 345.345931][ T7937] System zones: 1-12 [ 345.360788][ T7937] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.773: casefold flag without casefold feature [ 345.376962][ T7937] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.773: couldn't read orphan inode 15 (err -117) [ 345.398363][ T7937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.510602][ T7937] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.773: Directory hole found for htree leaf block 0 [ 345.772634][ T5243] Bluetooth: hci3: command tx timeout [ 345.948567][ T5289] usb 3-1: USB disconnect, device number 9 [ 345.960962][ T7309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.003358][ T7941] loop2: detected capacity change from 0 to 1024 [ 346.028183][ T7941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.081819][ T7941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.124637][ T7941] fuse: Unexpected value for 'default_permissions' [ 346.290123][ T7562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.697586][ T5243] Bluetooth: hci5: unexpected cc 0x2007 length: 100 > 2 [ 347.813922][ T5243] Bluetooth: hci3: command tx timeout [ 348.006216][ T7964] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 348.147429][ T6265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.183175][ T6265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.208321][ T6265] bond0 (unregistering): Released all slaves [ 348.390362][ T29] audit: type=1326 audit(1723095046.001:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641c5779f9 code=0x7ffc0000 [ 348.418502][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.439132][ T29] audit: type=1326 audit(1723095046.001:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641c5779f9 code=0x7ffc0000 [ 348.452339][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.521932][ T29] audit: type=1326 audit(1723095046.031:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641c5779f9 code=0x7ffc0000 [ 348.522310][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.583675][ T29] audit: type=1326 audit(1723095046.031:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641c5779f9 code=0x7ffc0000 [ 348.649245][ T7974] nullb0: AHDI p1 p2 [ 348.655277][ T29] audit: type=1326 audit(1723095046.031:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641c5779f9 code=0x7ffc0000 [ 348.686739][ T29] audit: type=1326 audit(1723095046.031:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641c5779f9 code=0x7ffc0000 [ 348.750097][ T29] audit: type=1326 audit(1723095046.031:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641c5779f9 code=0x7ffc0000 [ 348.832161][ T29] audit: type=1326 audit(1723095046.031:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f641c56e9a7 code=0x7ffc0000 [ 349.110344][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.118049][ T29] audit: type=1326 audit(1723095046.031:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f641c513379 code=0x7ffc0000 [ 349.154444][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.645747][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.661821][ T29] audit: type=1326 audit(1723095046.031:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f641c56e9a7 code=0x7ffc0000 [ 350.858333][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.790'. [ 350.878736][ T7859] hsr_slave_0: entered promiscuous mode [ 350.892784][ T7859] hsr_slave_1: entered promiscuous mode [ 350.903790][ T7988] loop2: detected capacity change from 0 to 2048 [ 350.914441][ T7859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.922015][ T7859] Cannot create hsr debugfs directory [ 351.107349][ T7993] loop3: detected capacity change from 0 to 16 [ 351.123278][ T7993] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 351.753294][ T5243] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 351.762831][ T5243] Bluetooth: hci5: Injecting HCI hardware error event [ 351.777072][ T5236] Bluetooth: hci5: hardware error 0x00 [ 352.120525][ T6265] hsr_slave_0: left promiscuous mode [ 352.192395][ T6265] hsr_slave_1: left promiscuous mode [ 352.218073][ T8003] loop1: detected capacity change from 0 to 512 [ 352.229424][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.257410][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.285672][ T8003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.298540][ T8003] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.343582][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.375972][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.824886][ T6265] veth1_macvtap: left promiscuous mode [ 353.830473][ T6265] veth0_macvtap: left promiscuous mode [ 353.850936][ T6265] veth1_vlan: left promiscuous mode [ 353.863671][ T6265] veth0_vlan: left promiscuous mode [ 353.872484][ T5236] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 354.108433][ T7560] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.335606][ T6265] team0 (unregistering): Port device team_slave_1 removed [ 355.427454][ T6265] team0 (unregistering): Port device team_slave_0 removed [ 355.652664][ T1065] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 355.871763][ T1065] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 355.892073][ T1065] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 355.914631][ T1065] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 355.923759][ T1065] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 355.950079][ T1065] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 355.963620][ T1065] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 355.987415][ T1065] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.000629][ T1065] usb 4-1: Product: syz [ 356.004885][ T1065] usb 4-1: Manufacturer: syz [ 356.027948][ T1065] cdc_wdm 4-1:1.0: skipping garbage [ 356.033345][ T1065] cdc_wdm 4-1:1.0: skipping garbage [ 356.047225][ T1065] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 356.055529][ T1065] cdc_wdm 4-1:1.0: Unknown control protocol [ 356.174855][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.806'. [ 356.243076][ T5281] usb 4-1: USB disconnect, device number 8 [ 356.347083][ T8048] loop2: detected capacity change from 0 to 64 [ 356.438563][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.575383][ T7722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.697883][ T7722] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.794176][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.801392][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.827573][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.834796][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.995025][ T5281] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 357.241049][ T5281] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 357.429123][ T5281] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 357.642531][ T5281] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 357.679057][ T5281] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 357.758041][ T5281] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 357.812419][ T5281] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 357.833246][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 357.841261][ T5281] usb 4-1: Product: syz [ 357.870767][ T5281] usb 4-1: Manufacturer: syz [ 357.917167][ T5281] cdc_wdm 4-1:1.0: skipping garbage [ 357.932385][ T5281] cdc_wdm 4-1:1.0: skipping garbage [ 357.958624][ T5281] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 357.984015][ T7859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.991066][ T5281] cdc_wdm 4-1:1.0: Unknown control protocol [ 358.042983][ T7859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 358.095001][ T7859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 358.163249][ T7859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 358.170180][ T5281] usb 4-1: USB disconnect, device number 9 [ 358.988190][ T7686] veth0_vlan: entered promiscuous mode [ 359.037048][ T7722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.099491][ T7686] veth1_vlan: entered promiscuous mode [ 359.359513][ T7686] veth0_macvtap: entered promiscuous mode [ 359.821696][ T7686] veth1_macvtap: entered promiscuous mode [ 360.434346][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.472304][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.500405][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.524708][ T8096] loop1: detected capacity change from 0 to 8 [ 360.535575][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.560633][ T8096] SQUASHFS error: xz decompression failed, data probably corrupt [ 360.572348][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.588134][ T8096] SQUASHFS error: Failed to read block 0x91: -5 [ 360.600710][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.611904][ T8096] SQUASHFS error: Unable to read metadata cache entry [8f] [ 360.621715][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.629724][ T8096] SQUASHFS error: Unable to read inode 0x11f [ 360.656829][ T8093] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 360.666022][ T8093] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 360.677396][ T8093] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 360.687889][ T8093] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 360.697952][ T8093] geneve2: entered promiscuous mode [ 360.706601][ T8093] geneve2: entered allmulticast mode [ 360.729471][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.762906][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.782333][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.808566][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.853024][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.892310][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.932039][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.954549][ T8107] netlink: 'syz.1.824': attribute type 9 has an invalid length. [ 360.998054][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.006154][ T8107] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.824'. [ 361.012825][ T8108] syz.2.826[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.021039][ T8108] syz.2.826[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.058147][ T7686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.088961][ T8108] loop2: detected capacity change from 0 to 128 [ 361.108562][ T7686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.174507][ T8108] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.194455][ T8108] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.211459][ T7686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.223976][ T7686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.136284][ T7859] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.171029][ T7722] veth0_vlan: entered promiscuous mode [ 362.375982][ T5295] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.383201][ T5295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.394226][ T5295] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.401415][ T5295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.535954][ T8122] loop3: detected capacity change from 0 to 2048 [ 362.584546][ T7722] veth1_vlan: entered promiscuous mode [ 362.620059][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.631161][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.671873][ T8122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.796084][ T7722] veth0_macvtap: entered promiscuous mode [ 362.866190][ T7722] veth1_macvtap: entered promiscuous mode [ 362.882393][ T6563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.911661][ T6563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.952062][ T7859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.051239][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.095092][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.118984][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.133396][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.155123][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.175232][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.192456][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.215873][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.244059][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.300549][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.351792][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.371838][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.421832][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.457405][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.492306][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.519210][ T7722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.543218][ T7722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.579804][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.591519][ T8136] loop1: detected capacity change from 0 to 4096 [ 363.640587][ T7722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.657967][ T8136] NILFS (loop1): invalid segment: Checksum error in segment payload [ 363.667431][ T7722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.687025][ T7722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.702343][ T8136] NILFS (loop1): trying rollback from an earlier position [ 363.719760][ T7722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.750149][ T8136] NILFS (loop1): recovery complete [ 363.777290][ T8143] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.921153][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.985065][ T8136] overlayfs: upper fs does not support tmpfile. [ 364.048808][ T8136] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 364.057195][ T8136] overlayfs: failed to set xattr on upper [ 364.063089][ T8136] overlayfs: ...falling back to redirect_dir=nofollow. [ 364.080564][ T8136] overlayfs: ...falling back to index=off. [ 364.099674][ T8136] overlayfs: ...falling back to uuid=null. [ 364.108968][ T7309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.150713][ T8145] IPv6: Can't replace route, no match found [ 364.235074][ T6567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.269121][ T6567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.444690][ T7859] veth0_vlan: entered promiscuous mode [ 364.454786][ T3966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.484233][ T3966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.507561][ T7859] veth1_vlan: entered promiscuous mode [ 364.661460][ T7859] veth0_macvtap: entered promiscuous mode [ 364.671506][ T8153] loop3: detected capacity change from 0 to 256 [ 364.711306][ T7859] veth1_macvtap: entered promiscuous mode [ 364.724155][ T8153] exfat: Deprecated parameter 'namecase' [ 364.794652][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.836445][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.958728][ T8153] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 367.835444][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.972318][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.984143][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.999212][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.009088][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.019661][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.029510][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.041154][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.053992][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.187141][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.242812][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.295896][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.349866][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.402412][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.426878][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.449323][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.469504][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.488069][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.537289][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.581954][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.596305][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 368.742086][ T7859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.772132][ T7859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.802176][ T7859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.830031][ T7859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.082347][ T5295] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 369.111265][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.144419][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.172344][ T5289] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 369.250995][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.251018][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.283658][ T5295] usb 5-1: Using ep0 maxpacket: 16 [ 369.326579][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.339684][ T5295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 369.360153][ T5295] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 369.397891][ T5289] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 369.422315][ T5289] usb 2-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 369.437494][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.453016][ T5289] usb 2-1: Manufacturer: syz [ 369.470576][ T5295] usb 5-1: config 0 descriptor?? [ 369.491420][ T5289] usb 2-1: config 0 descriptor?? [ 369.536395][ T5289] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 369.550673][ T5289] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 369.897183][ T8192] loop5: detected capacity change from 0 to 40427 [ 369.913294][ T8192] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 369.921091][ T8192] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 369.970144][ T8192] F2FS-fs (loop5): Found nat_bits in checkpoint [ 370.004154][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.055618][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.122841][ T5295] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 370.140895][ T8181] netlink: 'syz.1.847': attribute type 4 has an invalid length. [ 370.154473][ T8192] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 370.161545][ T8192] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 370.177789][ T8196] loop0: detected capacity change from 0 to 2048 [ 370.178279][ T5295] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 370.196101][ T8181] netlink: 17 bytes leftover after parsing attributes in process `syz.1.847'. [ 370.202444][ T5295] microsoft 0003:045E:07DA.0009: no inputs found [ 370.211819][ T5295] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 370.306749][ T8196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.233983][ T5295] usb 5-1: USB disconnect, device number 7 [ 371.297612][ T8196] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.748: bg 0: block 136: padding at end of block bitmap is not set [ 371.339183][ T5281] usb 2-1: USB disconnect, device number 13 [ 371.353455][ T5281] ftdi_sio 2-1:0.0: device disconnected [ 371.420112][ T7859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.855155][ T8213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.732881][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.746415][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.754528][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.780221][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 373.796685][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 373.805214][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.819570][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'. [ 373.836557][ T8237] netlink: 'syz.4.864': attribute type 3 has an invalid length. [ 373.892456][ T937] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 374.125763][ T937] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 374.147065][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.200051][ T937] usb 2-1: config 0 descriptor?? [ 374.211245][ T63] tipc: Subscription rejected, illegal request [ 374.442335][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 374.442358][ T29] audit: type=1326 audit(1723095072.051:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b745779f9 code=0x7ffc0000 [ 374.470606][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.572368][ T29] audit: type=1326 audit(1723095072.051:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b745779f9 code=0x7ffc0000 [ 374.724618][ T29] audit: type=1326 audit(1723095072.051:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b745779f9 code=0x7ffc0000 [ 374.784546][ T8256] loop4: detected capacity change from 0 to 2048 [ 374.834899][ T8256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.839612][ T29] audit: type=1326 audit(1723095072.061:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3b745779f9 code=0x7ffc0000 [ 374.922641][ T8256] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.103626][ T29] audit: type=1326 audit(1723095072.061:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b745779f9 code=0x7ffc0000 [ 375.168013][ T8256] fs-verity: sha512 using implementation "sha512-avx2" [ 375.232758][ T29] audit: type=1326 audit(1723095072.061:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b745779f9 code=0x7ffc0000 [ 375.254959][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.266812][ T937] usb 2-1: Cannot read MAC address [ 375.268864][ T8234] chnl_net:caif_netlink_parms(): no params data found [ 375.272114][ T937] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 375.279952][ T29] audit: type=1326 audit(1723095072.061:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3b745779f9 code=0x7ffc0000 [ 375.761936][ T937] usb 2-1: USB disconnect, device number 14 [ 375.772464][ T29] audit: type=1326 audit(1723095072.061:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b745779f9 code=0x7ffc0000 [ 375.872465][ T5236] Bluetooth: hci6: command tx timeout [ 375.896820][ T7686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.936734][ T29] audit: type=1326 audit(1723095072.061:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f3b745779f9 code=0x7ffc0000 [ 376.086920][ T8274] ubi0: attaching mtd0 [ 376.091526][ T8274] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 376.292130][ T29] audit: type=1326 audit(1723095072.071:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b7456e9a7 code=0x7ffc0000 [ 376.325401][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.032988][ T5236] Bluetooth: hci6: command tx timeout [ 378.057392][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.074606][ T8289] loop4: detected capacity change from 0 to 256 [ 378.102020][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.116730][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.124606][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.159906][ T8292] binder: 8279:8292 ioctl 4018620d 0 returned -22 [ 378.225956][ T8292] binder: 8279:8292 ioctl 4018620d 0 returned -22 [ 378.619210][ T8234] bridge_slave_0: entered allmulticast mode [ 379.116601][ T8289] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 379.137200][ T8234] bridge_slave_0: entered promiscuous mode [ 379.176718][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.209502][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.251414][ T8234] bridge_slave_1: entered allmulticast mode [ 379.293247][ T8234] bridge_slave_1: entered promiscuous mode [ 379.505615][ T8234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.573347][ T8234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.795545][ T8234] team0: Port device team_slave_0 added [ 379.855006][ T8234] team0: Port device team_slave_1 added [ 380.131835][ T5236] Bluetooth: hci6: command tx timeout [ 380.185880][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.277091][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.445886][ T8309] loop3: detected capacity change from 0 to 4096 [ 380.475850][ T8234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.487030][ T8309] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 380.499740][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.512379][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.537500][ T8316] loop4: detected capacity change from 0 to 128 [ 380.840506][ T8309] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 380.958278][ T8234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.230779][ T8295] loop5: detected capacity change from 0 to 32768 [ 381.238898][ T8309] ntfs3: loop3: Failed to load $LogFile (-22). [ 381.438238][ T8295] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 381.650067][ T8295] XFS (loop5): Ending clean mount [ 381.674592][ T8234] hsr_slave_0: entered promiscuous mode [ 381.704498][ T8234] hsr_slave_1: entered promiscuous mode [ 381.737192][ T8234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.782436][ T8234] Cannot create hsr debugfs directory [ 381.845684][ T5290] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 381.921278][ T7722] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 381.936670][ T8332] loop0: detected capacity change from 0 to 4096 [ 382.069362][ T8332] NILFS (loop0): invalid segment: Checksum error in segment payload [ 382.092695][ T8332] NILFS (loop0): trying rollback from an earlier position [ 382.123647][ T5290] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 382.158466][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.168394][ T8332] NILFS (loop0): recovery complete [ 382.202937][ T5236] Bluetooth: hci6: command tx timeout [ 382.213196][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 382.243162][ T8341] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.286786][ T5290] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 382.306255][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.334004][ T5290] usb 2-1: config 0 descriptor?? [ 382.346523][ T8329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 382.402457][ T5290] gspca_main: spca561-2.14.0 probing abcd:cdee [ 382.639371][ T5290] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 382.665819][ T5290] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.716676][ T5290] usb 2-1: MIDIStreaming interface descriptor not found [ 382.823614][ T5290] usb 2-1: USB disconnect, device number 15 [ 382.943130][ T8234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.193437][ T8234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 383.218674][ T8348] loop4: detected capacity change from 0 to 512 [ 383.667634][ T8348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.032574][ T8348] ext4 filesystem being mounted at /17/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.216627][ T8108] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.248222][ T8348] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 384.455853][ T8358] binder: 8356:8358 ioctl c018620c 0 returned -14 [ 385.260214][ T8357] loop1: detected capacity change from 0 to 256 [ 385.312927][ T8234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.327115][ T8363] loop0: detected capacity change from 0 to 256 [ 385.360982][ T8357] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 385.387497][ T7686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.397324][ T8234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 385.414887][ T8363] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 385.683622][ T8234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.717203][ T8234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 385.858608][ T8234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.869388][ T8234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 385.902744][ T5295] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 385.992492][ T5289] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 386.058001][ T3966] bridge_slave_1: left allmulticast mode [ 386.067622][ T3966] bridge_slave_1: left promiscuous mode [ 386.095614][ T3966] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.162740][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 116, setting to 64 [ 386.202554][ T5295] usb 1-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 386.229380][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.256097][ T5289] usb 5-1: Using ep0 maxpacket: 32 [ 386.318181][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.318222][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.318273][ T5289] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 386.318305][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.329249][ T8379] loop1: detected capacity change from 0 to 256 [ 386.331898][ T5289] usb 5-1: config 0 descriptor?? [ 386.333412][ T5295] usb 1-1: config 0 descriptor?? [ 386.337925][ T5289] hub 5-1:0.0: USB hub found [ 386.341074][ T5295] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.457562][ T5295] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 386.916156][ T3966] bridge_slave_0: left allmulticast mode [ 386.921847][ T3966] bridge_slave_0: left promiscuous mode [ 386.941352][ T5289] hub 5-1:0.0: 1 port detected [ 386.958678][ T3966] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.592528][ T5289] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 387.953653][ T5392] usb 1-1: USB disconnect, device number 16 [ 388.062372][ T5289] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 388.092398][ T5289] usbhid 5-1:0.0: can't add hid device: -71 [ 388.114924][ T5289] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 388.159610][ T5289] usb 5-1: USB disconnect, device number 8 [ 388.527179][ T8396] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 388.587729][ T8390] loop1: detected capacity change from 0 to 8192 [ 388.688917][ T8390] loop1: AHDI p1 p3 p4 [ 388.709015][ T8390] loop1: p1 start 458752 is beyond EOD, truncated [ 388.756023][ T8390] loop1: p3 start 33587200 is beyond EOD, truncated [ 388.813589][ T8402] bio_check_eod: 12 callbacks suppressed [ 388.813611][ T8402] syz.0.913: attempt to access beyond end of device [ 388.813611][ T8402] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 388.868146][ T8402] syz.0.913: attempt to access beyond end of device [ 388.868146][ T8402] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 388.952984][ T8399] loop3: detected capacity change from 0 to 8192 [ 389.033881][ T8399] loop3: p1 p2 p4 [ 389.037665][ T8399] loop3: partition table partially beyond EOD, truncated [ 389.045057][ T8407] overlayfs: lower data-only dirs require metacopy support. [ 389.052445][ T8399] loop3: p1 size 108922248 extends beyond EOD, truncated [ 389.062800][ T8399] loop3: p2 start 861536256 is beyond EOD, truncated [ 389.069510][ T8399] loop3: p4 start 4194304 is beyond EOD, truncated [ 389.160648][ T5290] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 389.352364][ T5290] usb 4-1: Using ep0 maxpacket: 8 [ 389.368544][ T5290] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 389.389741][ T8410] loop0: detected capacity change from 0 to 256 [ 389.424839][ T5290] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 389.457403][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.469848][ T5290] usb 4-1: Product: syz [ 389.471695][ T8410] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 389.482367][ T5290] usb 4-1: Manufacturer: syz [ 389.502473][ T5290] usb 4-1: SerialNumber: syz [ 389.513161][ T3966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.519724][ T5290] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 389.561715][ T3966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.755339][ T3966] bond0 (unregistering): Released all slaves [ 390.884564][ T1065] usb 4-1: USB disconnect, device number 10 [ 391.009886][ T8417] input: syz0 as /devices/virtual/input/input20 [ 391.220408][ T7560] bridge0: port 3(syz_tun) entered disabled state [ 391.302699][ T7560] syz_tun (unregistering): left allmulticast mode [ 391.309648][ T7560] syz_tun (unregistering): left promiscuous mode [ 391.321286][ T7560] bridge0: port 3(syz_tun) entered disabled state [ 391.636505][ T8234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 391.716665][ T8234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 391.867341][ T8234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 391.964206][ T8234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.019975][ T3966] hsr_slave_0: left promiscuous mode [ 392.034327][ T3966] hsr_slave_1: left promiscuous mode [ 392.042566][ T3966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.053798][ T3966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.063120][ T3966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.070564][ T3966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.197658][ T8427] loop3: detected capacity change from 0 to 2048 [ 392.248657][ T8431] loop0: detected capacity change from 0 to 2048 [ 392.267204][ T3966] veth1_macvtap: left promiscuous mode [ 392.285478][ T8427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.301019][ T3966] veth0_macvtap: left promiscuous mode [ 392.309024][ T3966] veth1_vlan: left promiscuous mode [ 392.322604][ T3966] veth0_vlan: left promiscuous mode [ 392.334290][ T8431] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 392.401415][ T8431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.772370][ T5289] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 392.784521][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 392.804678][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.815912][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.824248][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.836987][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.862107][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 392.892016][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.014459][ T5289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.033551][ T5289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.081445][ T5289] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 393.094758][ T8448] loop4: detected capacity change from 0 to 1024 [ 393.113566][ T5289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.134492][ T5289] usb 6-1: config 0 descriptor?? [ 393.439694][ T8452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.590139][ T5289] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 393.997042][ T8460] Failed to get privilege flags for destination (handle=0x0:0x0) [ 394.067942][ T5290] usb 6-1: USB disconnect, device number 12 [ 394.198794][ T8448] loop4: detected capacity change from 0 to 2048 [ 394.268451][ T8448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.341978][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.942'. [ 394.465823][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 394.465845][ T29] audit: type=1804 audit(394.440:345): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.932" name="/newroot/25/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 394.511177][ T8448] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 394.536424][ T8448] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 394.572551][ T8448] EXT4-fs (loop4): This should not happen!! Data will be lost [ 394.572551][ T8448] [ 394.586225][ T8448] EXT4-fs (loop4): Total free blocks count 0 [ 394.615700][ T8448] EXT4-fs (loop4): Free/Dirty block details [ 394.635643][ T8448] EXT4-fs (loop4): free_blocks=2415919104 [ 394.663549][ T8448] EXT4-fs (loop4): dirty_blocks=16 [ 394.668701][ T8448] EXT4-fs (loop4): Block reservation details [ 394.682564][ T8448] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 394.834947][ T8480] loop3: detected capacity change from 0 to 16 [ 394.846155][ T8481] netlink: 'syz.5.946': attribute type 1 has an invalid length. [ 394.863886][ T8480] erofs: (device loop3): erofs_read_superblock: blkszbits 0 isn't supported [ 394.874472][ T8481] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.946'. [ 394.886875][ T8477] loop0: detected capacity change from 0 to 2048 [ 394.893448][ T8481] netlink: 'syz.5.946': attribute type 1 has an invalid length. [ 394.916466][ T8477] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 394.940529][ T8477] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 394.954452][ T8477] UDF-fs: Scanning with blocksize 512 failed [ 394.995518][ T5236] Bluetooth: hci1: command tx timeout [ 395.078511][ T7686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.093619][ T8477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.106726][ T3966] team0 (unregistering): Port device team_slave_1 removed [ 395.291325][ T3966] team0 (unregistering): Port device team_slave_0 removed [ 396.172667][ T8490] Bluetooth: MGMT ver 1.23 [ 396.449475][ T8496] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 396.483995][ T8496] binder: 8493:8496 ioctl c018620c 20002380 returned -1 [ 397.132657][ T5236] Bluetooth: hci0: command tx timeout [ 397.138334][ T5236] Bluetooth: hci1: command tx timeout [ 398.244905][ T8516] loop3: detected capacity change from 0 to 128 [ 398.491632][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.243804][ T5236] Bluetooth: hci1: command tx timeout [ 399.258410][ T8234] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.434915][ T8522] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 399.446075][ T8522] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 399.462031][ T8522] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 399.492589][ T8522] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 399.517921][ T8522] geneve2: entered promiscuous mode [ 399.527432][ T8529] loop0: detected capacity change from 0 to 512 [ 399.533977][ T8522] geneve2: entered allmulticast mode [ 399.549204][ T8529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.609179][ T8533] raw_sendmsg: syz.3.963 forgot to set AF_INET. Fix it! [ 399.612766][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.623338][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.689319][ T8529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 399.852502][ T5295] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 399.928549][ T8234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.969716][ T8234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.019621][ T8533] loop3: detected capacity change from 0 to 1024 [ 400.047038][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.054279][ T5290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.101243][ T8533] hfsplus: bad catalog entry type [ 400.482144][ T5295] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 400.524922][ T5295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.547652][ T7859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 400.581585][ T5295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.600022][ T5295] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 400.653564][ T5295] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 400.668362][ T5295] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 400.693538][ T5295] usb 6-1: Manufacturer: syz [ 400.711127][ T5295] usb 6-1: config 0 descriptor?? [ 400.788789][ T3966] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.836405][ T8444] chnl_net:caif_netlink_parms(): no params data found [ 400.864585][ T5289] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 400.923061][ T63] hfsplus: b-tree write err: -5, ino 4 [ 400.971319][ T3966] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.068219][ T5289] usb 5-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 401.086254][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.096217][ T5289] usb 5-1: Product: syz [ 401.100454][ T5289] usb 5-1: Manufacturer: syz [ 401.119846][ T5289] usb 5-1: SerialNumber: syz [ 401.127997][ T5289] usb 5-1: config 0 descriptor?? [ 401.151511][ T5289] r8712u: register rtl8712_netdev_ops to netdev_ops [ 401.163610][ T5295] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 401.171390][ T5295] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 401.179189][ T3966] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.179272][ T5289] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 401.193861][ T8562] loop3: detected capacity change from 0 to 65 [ 401.207250][ T5295] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 401.211526][ T8562] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 401.237197][ T8562] BFS-fs: bfs_fill_super(): Last block not available on loop3: 262208 [ 401.290650][ T8234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.313174][ T5236] Bluetooth: hci1: command tx timeout [ 401.378360][ T8562] loop3: detected capacity change from 0 to 2048 [ 401.445838][ T3966] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.496470][ T1065] usb 6-1: USB disconnect, device number 13 [ 401.565688][ T5289] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 401.581436][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.582504][ T5289] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 401.602432][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.609680][ T8444] bridge_slave_0: entered allmulticast mode [ 401.622855][ T5289] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 401.626615][ T8444] bridge_slave_0: entered promiscuous mode [ 401.661729][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.669535][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.678747][ T8444] bridge_slave_1: entered allmulticast mode [ 401.687624][ T8444] bridge_slave_1: entered promiscuous mode [ 401.841422][ T1065] usb 5-1: USB disconnect, device number 9 [ 401.881171][ T8444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.903319][ T8444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.059121][ T8562] loop3: detected capacity change from 0 to 32768 [ 402.091502][ T8562] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.971 (8562) [ 402.149210][ T8444] team0: Port device team_slave_0 added [ 402.172516][ T8562] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 402.188588][ T8444] team0: Port device team_slave_1 added [ 402.212602][ T8562] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 402.247703][ T8562] BTRFS info (device loop3): using free-space-tree [ 402.329248][ T8574] netlink: 'syz.0.972': attribute type 6 has an invalid length. [ 402.395316][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.413140][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.447173][ T8444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.464978][ T8234] veth0_vlan: entered promiscuous mode [ 402.553513][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.581866][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.661089][ T8444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.692316][ T8234] veth1_vlan: entered promiscuous mode [ 402.725896][ T3966] bridge_slave_1: left allmulticast mode [ 402.753389][ T3966] bridge_slave_1: left promiscuous mode [ 402.759173][ T3966] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.759477][ T7309] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 402.820467][ T3966] bridge_slave_0: left allmulticast mode [ 402.840277][ T3966] bridge_slave_0: left promiscuous mode [ 402.853470][ T3966] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.596978][ T8617] loop5: detected capacity change from 0 to 256 [ 403.608997][ T8622] loop0: detected capacity change from 0 to 512 [ 403.668872][ T8622] ext4: Bad value for 'init_itable' [ 403.974250][ T8627] loop3: detected capacity change from 0 to 4096 [ 403.987378][ T8631] binder: 8630:8631 ioctl c018620c 0 returned -14 [ 405.099526][ T8636] loop5: detected capacity change from 0 to 4096 [ 405.107871][ T8636] ntfs3: Unknown parameter 'noacsrules' [ 405.162937][ T3966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.181980][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 405.199479][ T3966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.220226][ T3966] bond0 (unregistering): Released all slaves [ 405.403228][ T3966] : left promiscuous mode [ 405.737319][ T8652] loop3: detected capacity change from 0 to 16 [ 405.747321][ T3966] tipc: Left network mode [ 405.802499][ T5290] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 405.812204][ T8652] erofs: (device loop3): mounted with root inode @ nid 36. [ 405.829682][ T8444] hsr_slave_0: entered promiscuous mode [ 405.855637][ T8444] hsr_slave_1: entered promiscuous mode [ 405.870375][ T8444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.892719][ T8444] Cannot create hsr debugfs directory [ 405.932606][ T1065] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 406.022387][ T5290] usb 6-1: Using ep0 maxpacket: 8 [ 406.039089][ T5290] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 406.058482][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.081805][ T5290] usb 6-1: config 0 descriptor?? [ 406.091606][ T5290] usb 6-1: bad CDC descriptors [ 406.132693][ T1065] usb 1-1: Using ep0 maxpacket: 8 [ 406.149481][ T1065] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 406.177970][ T1065] usb 1-1: config 0 has no interface number 1 [ 406.203185][ T1065] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.282120][ T1065] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 406.301592][ T1065] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 406.332726][ T1065] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 406.352319][ T1065] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.372628][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 406.387892][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 406.418487][ T1065] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 406.444585][ T1065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.469333][ T1065] usb 1-1: Product: syz [ 406.489463][ T1065] usb 1-1: Manufacturer: syz [ 406.500441][ T1065] usb 1-1: SerialNumber: syz [ 406.516156][ T1065] usb 1-1: config 0 descriptor?? [ 406.530702][ T8234] veth0_macvtap: entered promiscuous mode [ 406.546021][ T8650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 406.553697][ T5289] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 406.564976][ T8234] veth1_macvtap: entered promiscuous mode [ 406.589049][ T1065] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.607462][ T1065] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.615109][ T1065] usb 1-1: invalid MIDI in EP 0 [ 406.711585][ T1065] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 406.762369][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 406.774737][ T5289] usb 4-1: New USB device found, idVendor=079b, idProduct=000f, bcdDevice=57.ce [ 406.798268][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.825104][ T1065] usb 1-1: USB disconnect, device number 17 [ 406.831655][ T5289] usb 4-1: Product: syz [ 406.844194][ T3966] hsr_slave_0: left promiscuous mode [ 406.844410][ T5289] usb 4-1: Manufacturer: syz [ 406.854881][ T5289] usb 4-1: SerialNumber: syz [ 406.871104][ T3966] hsr_slave_1: left promiscuous mode [ 406.888248][ T5289] usb 4-1: config 0 descriptor?? [ 406.898210][ T3966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.910645][ T3966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.944789][ T3966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.953625][ T3966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.989265][ T3966] veth1_macvtap: left promiscuous mode [ 406.999955][ T3966] veth0_macvtap: left promiscuous mode [ 407.011505][ T3966] veth1_vlan: left promiscuous mode [ 407.017346][ T3966] veth0_vlan: left promiscuous mode [ 407.141870][ T7617] usb 4-1: USB disconnect, device number 11 [ 408.799152][ T5289] usb 6-1: USB disconnect, device number 14 [ 408.833518][ T8666] loop3: detected capacity change from 0 to 64 [ 409.074673][ T937] IPVS: starting estimator thread 0... [ 409.174254][ T8671] IPVS: using max 16 ests per chain, 38400 per kthread [ 409.294629][ T3966] team0 (unregistering): Port device team_slave_1 removed [ 409.427471][ T3966] team0 (unregistering): Port device team_slave_0 removed [ 409.865600][ T8673] loop3: detected capacity change from 0 to 32768 [ 409.876796][ T8673] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1005 (8673) [ 409.901206][ T8673] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 409.914363][ T8673] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 409.922896][ T8673] BTRFS info (device loop3): using free-space-tree [ 410.243303][ T7309] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 410.452042][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.492346][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.502190][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.532337][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.542164][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.585625][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.622169][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.643905][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.671429][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.708887][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1007'. [ 410.879210][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.913312][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.952601][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.972338][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.982478][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.996820][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.011346][ T8234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.022782][ T8234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.054491][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.082766][ T8234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.093579][ T8234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.103931][ T8234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.112704][ T8234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.278943][ T8703] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1020'. [ 411.456419][ T6046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.492370][ T6046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.555478][ T8706] virtio-fs: tag <(null)> not found [ 411.589858][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.620326][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.632991][ T1065] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 411.669223][ T8444] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.731634][ T8444] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.770487][ T8444] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.799623][ T8444] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 411.842477][ T1065] usb 6-1: Using ep0 maxpacket: 16 [ 411.856702][ T1065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.882429][ T1065] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 411.922523][ T1065] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 411.944128][ T1065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.985461][ T1065] usb 6-1: config 0 descriptor?? [ 412.011312][ T8718] vlan2: entered promiscuous mode [ 412.024756][ T8718] bond0: (slave vlan2): Opening slave failed [ 412.103637][ T7617] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 412.980241][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.010809][ T8724] loop0: detected capacity change from 0 to 256 [ 413.063973][ T8444] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.074437][ T7617] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 413.090527][ T7617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.093641][ T1065] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 413.119885][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.125279][ T8724] FAT-fs (loop0): Directory bread(block 64) failed [ 413.127147][ T5392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.142472][ T1065] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 413.146819][ T7617] usb 3-1: config 0 descriptor?? [ 413.164618][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.166529][ T8724] FAT-fs (loop0): Directory bread(block 65) failed [ 413.171866][ T5392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.188967][ T1065] microsoft 0003:045E:07DA.000C: no inputs found [ 413.209981][ T8724] FAT-fs (loop0): Directory bread(block 66) failed [ 413.216909][ T1065] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 413.231614][ T8724] FAT-fs (loop0): Directory bread(block 67) failed [ 413.251166][ T8724] FAT-fs (loop0): Directory bread(block 68) failed [ 413.264320][ T8724] FAT-fs (loop0): Directory bread(block 69) failed [ 413.271721][ T8724] FAT-fs (loop0): Directory bread(block 70) failed [ 413.292806][ T8724] FAT-fs (loop0): Directory bread(block 71) failed [ 413.299444][ T8724] FAT-fs (loop0): Directory bread(block 72) failed [ 413.315181][ T8724] FAT-fs (loop0): Directory bread(block 73) failed [ 413.492370][ C1] hrtimer: interrupt took 149051 ns [ 413.598636][ T7617] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 413.607339][ T7617] [drm] Initialized udl on minor 2 [ 413.659525][ T58] usb 6-1: USB disconnect, device number 15 [ 413.846142][ T7617] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 413.857953][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.869210][ T7617] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 413.890787][ T5392] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 413.909580][ T7617] usb 3-1: USB disconnect, device number 10 [ 413.918198][ T5392] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 414.004552][ T8444] veth0_vlan: entered promiscuous mode [ 414.033838][ T1065] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 414.069085][ T8444] veth1_vlan: entered promiscuous mode [ 414.166353][ T8444] veth0_macvtap: entered promiscuous mode [ 414.188036][ T8444] veth1_macvtap: entered promiscuous mode [ 414.219806][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.238330][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.249691][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.270585][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.284486][ T1065] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.301033][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.311615][ T1065] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.324594][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.343593][ T1065] usb 1-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 414.359234][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.371281][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 414.379050][ T8726] loop4: detected capacity change from 0 to 32768 [ 414.395018][ T1065] usb 1-1: SerialNumber: syz [ 414.399677][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.417751][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.445429][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.464821][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.498112][ T8726] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 414.510273][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.539651][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.571869][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.610680][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.628252][ T8726] XFS (loop4): Ending clean mount [ 414.648300][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.671910][ T8733] loop0: detected capacity change from 0 to 512 [ 414.673547][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.711940][ T8733] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1021: invalid indirect mapped block 256 (level 2) [ 414.719790][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.746140][ T8733] EXT4-fs (loop0): 2 truncates cleaned up [ 414.764009][ T8733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.776699][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.812478][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.838090][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.865971][ T7686] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 414.884788][ T8733] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1021: bg 0: block 5: invalid block bitmap [ 414.898285][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.938153][ T8444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.948973][ T8444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.958053][ T8444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.967226][ T8444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.017611][ T1065] usb 1-1: USB disconnect, device number 18 [ 415.060305][ T8735] loop3: detected capacity change from 0 to 32768 [ 415.243970][ T8758] loop2: detected capacity change from 0 to 256 [ 415.251053][ T8758] msdos: Bad value for 'time_offset' [ 415.351913][ T8735] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 415.367557][ T8758] loop2: detected capacity change from 0 to 764 [ 415.373022][ T8735] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 415.394297][ T8735] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 415.394297][ T8735] running recovery passes: check_allocations [ 415.426265][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.440309][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.472421][ T8758] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 415.526770][ T8735] bcachefs (loop3): accounting_read... done [ 415.582354][ T8735] bcachefs (loop3): alloc_read... done [ 415.595918][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.618205][ T8735] bcachefs (loop3): stripes_read... done [ 415.638485][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.694350][ T8735] bcachefs (loop3): snapshots_read... done [ 415.734793][ T8735] bcachefs (loop3): check_allocations... [ 415.796432][ T8735] btree ptr not marked in member info btree allocated bitmap [ 415.796527][ T8735] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 416.202340][ T8735] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 7 [ 416.295048][ T8735] bcachefs (loop3): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 416.362376][ T8735] bcachefs (loop3): bch2_gc_btree(): error fsck_errors_not_fixed [ 416.542875][ T8735] bcachefs (loop3): bch2_gc_btrees(): error fsck_errors_not_fixed [ 416.570713][ T7859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.598920][ T8735] bcachefs (loop3): bch2_check_allocations(): error fsck_errors_not_fixed [ 416.633137][ T8735] bcachefs (loop3): bch2_fs_recovery(): error fsck_errors_not_fixed [ 416.649577][ T8735] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 416.699799][ T8735] bcachefs (loop3): shutting down [ 416.998181][ T8735] bcachefs (loop3): shutdown complete [ 417.395377][ T8785] loop1: detected capacity change from 0 to 256 [ 418.837451][ T8785] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 419.436493][ T29] audit: type=1804 audit(419.420:346): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1034" name="/newroot/1/bus/file0" dev="overlay" ino=31 res=1 errno=0 [ 419.500753][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.731242][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.072445][ T8804] loop2: detected capacity change from 0 to 64 [ 420.073173][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.166123][ T8735] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 420.395500][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.722496][ T63] bridge_slave_1: left allmulticast mode [ 420.752738][ T63] bridge_slave_1: left promiscuous mode [ 420.776768][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.822037][ T63] bridge_slave_0: left allmulticast mode [ 420.844963][ T63] bridge_slave_0: left promiscuous mode [ 420.865759][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.901548][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.912591][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.924867][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.943442][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.951251][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 420.958785][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.051315][ T8814] loop4: detected capacity change from 0 to 512 [ 421.135206][ T8814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 421.435793][ T29] audit: type=1326 audit(421.400:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.4.1046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89455779f9 code=0x0 [ 421.506951][ T8826] loop5: detected capacity change from 0 to 764 [ 421.764663][ T8808] loop1: detected capacity change from 0 to 32768 [ 421.775418][ T8808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1044 (8808) [ 421.794920][ T8808] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.844395][ T8808] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 421.868897][ T8808] BTRFS info (device loop1): using free-space-tree [ 421.897113][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 422.907439][ T8857] loop2: detected capacity change from 0 to 512 [ 422.974011][ T8444] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 422.993294][ T5236] Bluetooth: hci2: command tx timeout [ 423.039253][ T8857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.535240][ T5290] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 423.744909][ T5290] usb 4-1: Using ep0 maxpacket: 32 [ 423.822990][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.281581][ T5290] usb 4-1: New USB device found, idVendor=1e2d, idProduct=0055, bcdDevice=43.89 [ 424.323178][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.331200][ T5290] usb 4-1: Product: syz [ 424.407335][ T5290] usb 4-1: Manufacturer: syz [ 424.415870][ T8234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.430553][ T5290] usb 4-1: SerialNumber: syz [ 424.466866][ T5290] usb 4-1: config 0 descriptor?? [ 424.500345][ T5290] cdc_ether 4-1:0.0: invalid descriptor buffer length [ 424.521917][ T5290] usb 4-1: bad CDC descriptors [ 424.625326][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.655968][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.670799][ T63] bond0 (unregistering): Released all slaves [ 424.793145][ T7617] usb 4-1: USB disconnect, device number 12 [ 424.835993][ T5289] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 424.880672][ T8881] loop5: detected capacity change from 0 to 64 [ 424.937612][ T7686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 425.058100][ T5289] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 425.072351][ T5236] Bluetooth: hci2: command tx timeout [ 425.101784][ T5289] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 425.122351][ T5289] usb 3-1: Manufacturer: syz [ 425.187103][ T5289] usb 3-1: config 0 descriptor?? [ 425.654150][ T5289] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 425.750840][ T63] hsr_slave_0: left promiscuous mode [ 425.790834][ T63] hsr_slave_1: left promiscuous mode [ 425.820476][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.835912][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.857501][ T5289] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 425.874666][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.890155][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.903000][ T5289] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 425.957203][ T63] veth1_macvtap: left promiscuous mode [ 425.970098][ T63] veth0_macvtap: left promiscuous mode [ 425.987311][ T63] veth1_vlan: left promiscuous mode [ 426.008899][ T63] veth0_vlan: left promiscuous mode [ 426.100353][ T5290] usb 3-1: USB disconnect, device number 11 [ 427.152375][ T5236] Bluetooth: hci2: command tx timeout [ 428.065809][ T8899] Falling back ldisc for ttyprintk. [ 428.238205][ T8918] loop3: detected capacity change from 0 to 128 [ 428.292307][ T29] audit: type=1800 audit(428.240:348): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1072" name="file0" dev="loop3" ino=1048715 res=0 errno=0 [ 428.612403][ T5392] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 428.751867][ T8924] loop4: detected capacity change from 0 to 40427 [ 428.783894][ T8924] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 428.791704][ T8924] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 428.827017][ T8924] F2FS-fs (loop4): Found nat_bits in checkpoint [ 428.900051][ T8924] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 428.907202][ T8924] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 429.060262][ T5392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.143463][ T5392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.232826][ T5236] Bluetooth: hci2: command tx timeout [ 429.610179][ T5392] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 429.662293][ T5392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.712490][ T5392] usb 2-1: config 0 descriptor?? [ 430.139057][ T5392] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 430.157685][ T5392] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 430.176831][ T5392] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000D/input/input22 [ 430.200918][ T8939] loop2: detected capacity change from 0 to 64 [ 430.288015][ T5392] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 430.360537][ T5392] usb 2-1: USB disconnect, device number 16 [ 430.505595][ T63] team0 (unregistering): Port device team_slave_1 removed [ 430.704872][ T63] team0 (unregistering): Port device team_slave_0 removed [ 430.902965][ T8941] tls_set_device_offload_rx: netdev not found [ 436.483669][ T8976] syz.1.1089 (8976) used greatest stack depth: 18128 bytes left [ 436.827190][ T8986] loop2: detected capacity change from 0 to 256 [ 436.857440][ T8986] loop2: detected capacity change from 0 to 256 [ 436.865374][ T8986] FAT-fs (loop2): bogus sectors per cluster 30 [ 436.871558][ T8986] FAT-fs (loop2): Can't find a valid FAT filesystem [ 436.985796][ T8986] loop2: detected capacity change from 0 to 1024 [ 437.051368][ T8986] hfsplus: unable to parse mount options [ 437.118016][ T8815] chnl_net:caif_netlink_parms(): no params data found [ 437.195154][ T8986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.422397][ T7617] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 437.596312][ T9006] loop3: detected capacity change from 0 to 2048 [ 437.632870][ T7617] usb 6-1: Using ep0 maxpacket: 8 [ 437.640211][ T9006] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 437.657426][ T7617] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 437.689656][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.698860][ T7617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.698996][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.722649][ T8815] bridge_slave_0: entered allmulticast mode [ 437.728676][ T9009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 437.746539][ T8815] bridge_slave_0: entered promiscuous mode [ 437.750814][ T7617] usb 6-1: Product: syz [ 437.759090][ T8992] loop4: detected capacity change from 0 to 8 [ 437.774197][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.790693][ T7617] usb 6-1: Manufacturer: syz [ 437.791591][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.810980][ T7617] usb 6-1: SerialNumber: syz [ 437.814972][ T8815] bridge_slave_1: entered allmulticast mode [ 437.845877][ T7617] usb 6-1: config 0 descriptor?? [ 437.848773][ T8815] bridge_slave_1: entered promiscuous mode [ 437.879986][ T9011] loop1: detected capacity change from 0 to 1024 [ 437.898915][ T63] IPVS: stop unused estimator thread 0... [ 438.028064][ T8815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.062198][ T8815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.087474][ T7617] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 438.205110][ T9013] ================================================================== [ 438.213210][ T9013] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 438.220687][ T9013] Read of size 8 at addr ffff88802ad78d30 by task syz.3.1102/9013 [ 438.228500][ T9013] [ 438.230832][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.3.1102 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 438.241517][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 438.251585][ T9013] Call Trace: [ 438.254875][ T9013] [ 438.257817][ T9013] dump_stack_lvl+0x241/0x360 [ 438.262535][ T9013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.267768][ T9013] ? __pfx__printk+0x10/0x10 [ 438.272388][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.278047][ T9013] ? _printk+0xd5/0x120 [ 438.282232][ T9013] ? __virt_addr_valid+0x183/0x530 [ 438.287363][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.293021][ T9013] print_report+0x169/0x550 [ 438.297545][ T9013] ? __virt_addr_valid+0x183/0x530 [ 438.302669][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.308311][ T9013] ? __virt_addr_valid+0x45f/0x530 [ 438.313423][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.319064][ T9013] ? __phys_addr+0xba/0x170 [ 438.323574][ T9013] ? uprobe_mmap+0xb9a/0x11a0 [ 438.328257][ T9013] kasan_report+0x143/0x180 [ 438.332782][ T9013] ? uprobe_mmap+0xb9a/0x11a0 [ 438.337474][ T9013] uprobe_mmap+0xb9a/0x11a0 [ 438.341999][ T9013] ? __pfx_uprobe_mmap+0x10/0x10 [ 438.346950][ T9013] mmap_region+0x1891/0x2090 [ 438.351562][ T9013] ? mark_lock+0x9a/0x350 [ 438.355932][ T9013] ? __pfx_mmap_region+0x10/0x10 [ 438.360890][ T9013] ? mm_get_unmapped_area+0xa5/0xd0 [ 438.366102][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.371748][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.377390][ T9013] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 438.383042][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.388690][ T9013] ? cap_mmap_addr+0x163/0x2c0 [ 438.393467][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.399106][ T9013] ? __get_unmapped_area+0x2f0/0x360 [ 438.404409][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.410055][ T9013] do_mmap+0x8f9/0x1010 [ 438.414228][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.419876][ T9013] ? __pfx_do_mmap+0x10/0x10 [ 438.424480][ T9013] ? __pfx_down_write_killable+0x10/0x10 [ 438.430119][ T9013] ? __pfx_ima_file_mmap+0x10/0x10 [ 438.435241][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.440883][ T9013] ? security_mmap_file+0x178/0x1a0 [ 438.446092][ T9013] vm_mmap_pgoff+0x1dd/0x3d0 [ 438.450707][ T9013] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 438.455840][ T9013] ? __fget_files+0x29/0x470 [ 438.460451][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.466096][ T9013] ? __fget_files+0x3f6/0x470 [ 438.470798][ T9013] ksys_mmap_pgoff+0x4f1/0x720 [ 438.475584][ T9013] ? __x64_sys_mmap+0x7f/0x140 [ 438.480372][ T9013] do_syscall_64+0xf3/0x230 [ 438.484897][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.490544][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.496449][ T9013] RIP: 0033:0x7f641c5779f9 [ 438.500868][ T9013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.520481][ T9013] RSP: 002b:00007f641d42e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 438.528904][ T9013] RAX: ffffffffffffffda RBX: 00007f641c705f80 RCX: 00007f641c5779f9 [ 438.536880][ T9013] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000000020000000 [ 438.544883][ T9013] RBP: 00007f641c5e58ee R08: 0000000000000010 R09: 0000000000000000 [ 438.552856][ T9013] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 438.560828][ T9013] R13: 0000000000000000 R14: 00007f641c705f80 R15: 00007ffc02f645c8 [ 438.568816][ T9013] [ 438.571836][ T9013] [ 438.574152][ T9013] Allocated by task 8924: [ 438.578493][ T9013] kasan_save_track+0x3f/0x80 [ 438.583196][ T9013] __kasan_kmalloc+0x98/0xb0 [ 438.587805][ T9013] __kmalloc_node_noprof+0x22a/0x440 [ 438.593100][ T9013] __kvmalloc_node_noprof+0x72/0x190 [ 438.598408][ T9013] f2fs_build_node_manager+0x1385/0x2870 [ 438.604046][ T9013] f2fs_fill_super+0x5328/0x7b80 [ 438.608994][ T9013] mount_bdev+0x20c/0x2d0 [ 438.613337][ T9013] legacy_get_tree+0xf0/0x190 [ 438.618025][ T9013] vfs_get_tree+0x92/0x2a0 [ 438.622458][ T9013] do_new_mount+0x2be/0xb40 [ 438.626970][ T9013] __se_sys_mount+0x2d6/0x3c0 [ 438.631685][ T9013] do_syscall_64+0xf3/0x230 [ 438.636207][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.642113][ T9013] [ 438.644430][ T9013] Freed by task 7686: [ 438.648402][ T9013] kasan_save_track+0x3f/0x80 [ 438.653089][ T9013] kasan_save_free_info+0x40/0x50 [ 438.658116][ T9013] poison_slab_object+0xe0/0x150 [ 438.663067][ T9013] __kasan_slab_free+0x37/0x60 [ 438.667843][ T9013] kfree+0x149/0x360 [ 438.671739][ T9013] f2fs_destroy_node_manager+0xad1/0xd20 [ 438.677377][ T9013] f2fs_put_super+0xad9/0x1150 [ 438.682153][ T9013] generic_shutdown_super+0x138/0x2d0 [ 438.687531][ T9013] kill_block_super+0x44/0x90 [ 438.692222][ T9013] kill_f2fs_super+0x344/0x690 [ 438.697005][ T9013] deactivate_locked_super+0xc6/0x130 [ 438.702384][ T9013] cleanup_mnt+0x41f/0x4b0 [ 438.706802][ T9013] task_work_run+0x251/0x310 [ 438.711393][ T9013] syscall_exit_to_user_mode+0x168/0x370 [ 438.717041][ T9013] do_syscall_64+0x100/0x230 [ 438.721649][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.727547][ T9013] [ 438.729871][ T9013] The buggy address belongs to the object at ffff88802ad78d00 [ 438.729871][ T9013] which belongs to the cache kmalloc-64 of size 64 [ 438.743750][ T9013] The buggy address is located 48 bytes inside of [ 438.743750][ T9013] freed 64-byte region [ffff88802ad78d00, ffff88802ad78d40) [ 438.757375][ T9013] [ 438.759693][ T9013] The buggy address belongs to the physical page: [ 438.766093][ T9013] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802ad78480 pfn:0x2ad78 [ 438.776156][ T9013] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 438.784218][ T9013] page_type: 0xfdffffff(slab) [ 438.788897][ T9013] raw: 00fff00000000200 ffff8880158418c0 ffffea0000802210 ffffea000097bbd0 [ 438.797487][ T9013] raw: ffff88802ad78480 000000000020001c 00000001fdffffff 0000000000000000 [ 438.806071][ T9013] page dumped because: kasan: bad access detected [ 438.812479][ T9013] page_owner tracks the page as allocated [ 438.818186][ T9013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 18286026774, free_ts 0 [ 438.835814][ T9013] post_alloc_hook+0x1f3/0x230 [ 438.840597][ T9013] get_page_from_freelist+0x2e4c/0x2f10 [ 438.846157][ T9013] __alloc_pages_noprof+0x256/0x6c0 [ 438.851372][ T9013] alloc_slab_page+0x5f/0x120 [ 438.856062][ T9013] allocate_slab+0x5a/0x2f0 [ 438.860575][ T9013] ___slab_alloc+0xcd1/0x14b0 [ 438.865260][ T9013] __slab_alloc+0x58/0xa0 [ 438.869595][ T9013] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 438.874972][ T9013] rtnl_register_internal+0x22a/0x590 [ 438.880345][ T9013] cgw_module_init+0xde/0x1c0 [ 438.885032][ T9013] do_one_initcall+0x24a/0x880 [ 438.889811][ T9013] do_initcall_level+0x157/0x210 [ 438.894760][ T9013] do_initcalls+0x3f/0x80 [ 438.899106][ T9013] kernel_init_freeable+0x435/0x5d0 [ 438.904324][ T9013] kernel_init+0x1d/0x2b0 [ 438.908658][ T9013] ret_from_fork+0x4d/0x80 [ 438.913092][ T9013] page_owner free stack trace missing [ 438.918458][ T9013] [ 438.920778][ T9013] Memory state around the buggy address: [ 438.926408][ T9013] ffff88802ad78c00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 438.934464][ T9013] ffff88802ad78c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 438.942523][ T9013] >ffff88802ad78d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 438.950584][ T9013] ^ [ 438.956227][ T9013] ffff88802ad78d80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 438.964292][ T9013] ffff88802ad78e00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 438.972350][ T9013] ================================================================== [ 439.023700][ T9013] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 439.030929][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.3.1102 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 439.041611][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 439.051678][ T9013] Call Trace: [ 439.054971][ T9013] [ 439.057909][ T9013] dump_stack_lvl+0x241/0x360 [ 439.062629][ T9013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.067869][ T9013] ? __pfx__printk+0x10/0x10 [ 439.072491][ T9013] ? preempt_schedule+0xe1/0xf0 [ 439.077376][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.083031][ T9013] ? vscnprintf+0x5d/0x90 [ 439.087371][ T9013] panic+0x349/0x860 [ 439.091279][ T9013] ? check_panic_on_warn+0x21/0xb0 [ 439.096393][ T9013] ? __pfx_panic+0x10/0x10 [ 439.100817][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.106466][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.112121][ T9013] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 439.118114][ T9013] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 439.124454][ T9013] ? print_report+0x502/0x550 [ 439.129151][ T9013] check_panic_on_warn+0x86/0xb0 [ 439.134092][ T9013] ? uprobe_mmap+0xb9a/0x11a0 [ 439.138786][ T9013] end_report+0x77/0x160 [ 439.143043][ T9013] kasan_report+0x154/0x180 [ 439.147566][ T9013] ? uprobe_mmap+0xb9a/0x11a0 [ 439.152260][ T9013] uprobe_mmap+0xb9a/0x11a0 [ 439.156788][ T9013] ? __pfx_uprobe_mmap+0x10/0x10 [ 439.161761][ T9013] mmap_region+0x1891/0x2090 [ 439.166365][ T9013] ? mark_lock+0x9a/0x350 [ 439.170727][ T9013] ? __pfx_mmap_region+0x10/0x10 [ 439.175677][ T9013] ? mm_get_unmapped_area+0xa5/0xd0 [ 439.180889][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.186536][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.192174][ T9013] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 439.197826][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.203469][ T9013] ? cap_mmap_addr+0x163/0x2c0 [ 439.208247][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.213892][ T9013] ? __get_unmapped_area+0x2f0/0x360 [ 439.219192][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.224837][ T9013] do_mmap+0x8f9/0x1010 [ 439.229017][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.234666][ T9013] ? __pfx_do_mmap+0x10/0x10 [ 439.239268][ T9013] ? __pfx_down_write_killable+0x10/0x10 [ 439.244904][ T9013] ? __pfx_ima_file_mmap+0x10/0x10 [ 439.250022][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.255662][ T9013] ? security_mmap_file+0x178/0x1a0 [ 439.260876][ T9013] vm_mmap_pgoff+0x1dd/0x3d0 [ 439.265489][ T9013] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 439.270615][ T9013] ? __fget_files+0x29/0x470 [ 439.275219][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.280861][ T9013] ? __fget_files+0x3f6/0x470 [ 439.285588][ T9013] ksys_mmap_pgoff+0x4f1/0x720 [ 439.290370][ T9013] ? __x64_sys_mmap+0x7f/0x140 [ 439.295154][ T9013] do_syscall_64+0xf3/0x230 [ 439.299677][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.305323][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.311218][ T9013] RIP: 0033:0x7f641c5779f9 [ 439.315641][ T9013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.335250][ T9013] RSP: 002b:00007f641d42e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 439.343671][ T9013] RAX: ffffffffffffffda RBX: 00007f641c705f80 RCX: 00007f641c5779f9 [ 439.351666][ T9013] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000000020000000 [ 439.359638][ T9013] RBP: 00007f641c5e58ee R08: 0000000000000010 R09: 0000000000000000 [ 439.367612][ T9013] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 439.375587][ T9013] R13: 0000000000000000 R14: 00007f641c705f80 R15: 00007ffc02f645c8 [ 439.383599][ T9013] [ 439.386836][ T9013] Kernel Offset: disabled [ 439.391150][ T9013] Rebooting in 86400 seconds..