last executing test programs: 1m3.66160047s ago: executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000003700)={[{@nls={'nls', 0x3d, 'cp869'}}, {@barrier}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@barrier}, {@barrier}]}, 0x3, 0x6ab, &(0x7f0000005d00)="$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") r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 1m1.009254648s ago: executing program 4: r0 = syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0xd7b1de9272f487d0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c726573697a6501007830243030303030363030300000000000000000000c3f978d6eeca958e9f4661d29adb068e3b19c79a330a968644b76cda961b112e33dda32fea83add88e9887218a90768beef45e1e207bc087c1bfb35d182972e4581ba6177ac245b3315687149e0a388155508a547b0ec41f5c48c44e84971684b9dc0f1be030d15f8708b9d52280afb0585e8ac6a54a063ebb72cb9fc8b48f70cda273ac8df190331ce71f65d78b78fb612563e3d83a5c38ada5070eb2068fc79330829fc974b03ec5588b7ffa4249f93", @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',defcontext=staff_u,\x00'], 0xfe, 0x612b, &(0x7f000000c540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000e00)=""/79, 0x4f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES64, @ANYRES64=r0, @ANYRES16=r1, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_ext_rm_leaf\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000100000000000000760f00001d"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_ext_rm_leaf\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0xfffffc18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000540)=0x259a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 56.638982847s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbdb}, 0x90) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000043c0)={0x0, 0x0, 0x0}, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0x800c5011, &(0x7f0000000180)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x0, 0x2003) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000013c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) 55.880891433s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000340)={'batadv_slave_0\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xadc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f000000c1c0)={0x2020}, 0x2020) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x0) 54.264980293s ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={r0}, 0xfffffffffffffe3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000471612db6bf091ac9500000000000000504aacf71e778b7e4a77cfaa0b7993b10c7faad214b49f40379002474d7a"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0xc00}, 0x48) syz_read_part_table(0x5a8, &(0x7f0000000000)="$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") r2 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r0, 0x3000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x5000)=nil, 0x5000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140), 0x20) unshare(0x22020400) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040086}, 0x0) 53.1775231s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x20000001, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000800000000000000010000850000000000000000020000000000000000000000da"], 0x0, 0x52}, 0x20) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[], 0x12, 0x9ef, &(0x7f0000004cc0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0x0) getdents(r2, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x0) 52.656892101s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) 52.244710747s ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x173, '\x00', 0x0, 0x0, 0x0, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={r0}, 0xfffffffffffffe3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0xc00}, 0x48) syz_read_part_table(0x5a8, &(0x7f0000000000)="$eJzs0r9LXFkUAOD7HjuMWywji2C5wspWsguzhRYzsCLjMI2KuGKROmChhZBCiIyM1kb/AcVfEGzEfspgAibCpBKLEMQmjZBgM9ULZl4ErUKMJpHva+a8c86dw+XcwE8tDmdJkkQhhCT7pWfaLqP/d0qDla6R/tGxEKIQRSG0ja++vKhEacfnf91Lv4fT70o231g/GPiw0/7qz9fV7s04rdfjEOZDCFMnW7lvckHutd3ifm5hcaa8NFucPCrPnf778L8QQml6pXejUB3vLEykD6se38387kbf9uGvabGRuezriW5nPt/X9f2vddSOa82hv54++qfn9+Nn1eV07+f2DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LLd4n5uYXGmvDRbnDwKv7SST0rTK70bhep4Z2EibqXq8dVzb98kn9x8/uOzd/mLqDh5VJ477W70bR8mw+9Xf/s787zRzL9I+3qiaweT3E1H8wPYLZ7+0Ypa+1/rqB3XmkMhXXd1OQ3Or+6/eeOHBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcW6XBStdI/+hYCFF4EEIYiNu3LvJJtlWP0r699Hc4zVey+cb6wUAmTW+OpPl6HMJ8CGHqZCtzpxfhq3wMAAD//woffgA=") socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r0, 0x3000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x5000)=nil, 0x5000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xf, {"a2e3ad21ed0d09f91b3d090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f31006c090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 50.047459318s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pimreg\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 48.054356681s ago: executing program 1: mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000500), 0x0, 0x0) chdir(&(0x7f0000000040)='./bus\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 47.648257219s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE}}, 0x7) getpgid(0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x66b, &(0x7f0000000900)="$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") ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) 47.554763714s ago: executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000740)={0x1, &(0x7f0000000000)=[{}]}) 47.417526559s ago: executing program 3: dup(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 47.346738714s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0xffffffffffffffc3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40000001ca100007988fff510080000000045950a00ff0000000095005fc0bf1de8fa4f8ca0e0d07d04cbe63bcc9ae3b4b611fb44d6c8938dec32a5159fcb4491ddcbf59d02206625f9b6fcbaa070"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000018007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES16=r4, @ANYRESDEC=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeab}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_ext_remove_space_done\x00', r8}, 0x10) write$cgroup_pid(r9, &(0x7f0000000340), 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000600)='ext4_free_blocks\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0xfffffffffffffe18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r11}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r12, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 46.540861408s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 45.706372012s ago: executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xd5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100), 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 40.314065721s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_freezer_state(r1, &(0x7f0000000040), 0x2, 0x0) 39.351339575s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040), 0x2, 0x1) 39.227181732s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0xc0189436, &(0x7f00000000c0)=0x13) 37.400921074s ago: executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20004081) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_batadv\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xc28}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB]) mount$bind(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x13c000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x40485404, &(0x7f0000000040)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x4000001) 37.146396848s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r3, @ANYBLOB="d565a3fe3e67541e2fe2c0a96f889faa66f79227aeecba7b588318c57d51df249034c2810095a51ed37bc2e67d72bd0463de6416536c23bf6a07fcc726e9ad874a8260bf5074ce9821175423f6de10a614330b85fe0e4eb103714481be106cf2fac429dec75b55de802dcfd47a1c24bc15771cdc2e8254f1db26912cc37a0623ffdc15d59cb9263f586ff232d36e8c50bcab2c87c05f14caea1c2ed5215c280e5b220f3b1bc6f3aca9f068f14eb8ebb9aaacb03e730a069b20ad2a8412e01cd0c3f06161056362d9827dae88ee"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 36.092596905s ago: executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000180)=""/166) 36.01441229s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 34.985572383s ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/19, 0x13}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x7ffffffc]}, 0x8) close(r1) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f00000004c0)=0x7f, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x1200440, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'ext4\x00'}}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@nodevmap}, {@cache_mmap}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'root'}}, {@subj_role}, {@flag='rw'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@seclabel}]}}) fcntl$setown(0xffffffffffffffff, 0x8, r2) fcntl$setown(r0, 0x8, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x13, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00220f0000000b449bab59030d34b68a0b0f4b99cb92927e66a0ec539e3d8a77ce91f5f88ac404698c8de768b89206a918f3c445be09227e02d3d5f0ebd3c4aabedc6d3d0ea5570240653180dbf00e97e5108c8bf72ff9a13a48dc4ebcb2d1aea86b"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) preadv(r9, &(0x7f0000002ac0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 32.788441808s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) poll(0x0, 0x0, 0x64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) close(r1) eventfd(0x0) rt_sigreturn() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, r2+60000000}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 32.530044413s ago: executing program 2: gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00'}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) rt_sigreturn() setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) poll(0x0, 0x0, 0x64) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) renameat2(0xffffffffffffff9c, 0x0, r1, 0x0, 0x0) 14.885223716s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f"], 0x1c}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000b00)) syz_open_procfs$pagemap(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r7, 0x609, 0xe, 0x0, &(0x7f0000000b40)="dd80000000000002000400000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 13.17407947s ago: executing program 1: timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}]}, 0x34) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x6c) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) semctl$GETALL(0xffffffffffffffff, 0x0, 0x13, 0x0) 4.604049285s ago: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) 0s ago: executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000006800010000000000000000000200", @ANYRES32=r2], 0x40}}, 0x0) socket$kcm(0x2, 0x2, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000400), 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) accept(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) bind$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x6000, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) kernel console output (not intermixed with test programs): mode [ 1028.270008][T14469] hsr_slave_1: entered promiscuous mode [ 1028.286889][T14469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1028.294541][T14469] Cannot create hsr debugfs directory [ 1028.407246][ T9654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.462190][ T9654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.490876][ T9654] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1028.507376][ T9654] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 1028.531415][ T9654] usb 4-1: Product: syz [ 1028.586128][ T9654] usb 4-1: config 0 descriptor?? [ 1028.638916][ T3923] bio_check_eod: 3 callbacks suppressed [ 1028.638941][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1028.638941][ T3923] loop0: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 1028.707321][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1028.707321][ T3923] loop0: rw=1, sector=1288, nr_sectors = 544 limit=256 [ 1028.708693][T14612] loop4: detected capacity change from 0 to 4096 [ 1028.752650][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1028.752650][ T3923] loop0: rw=1, sector=1864, nr_sectors = 2072 limit=256 [ 1028.820678][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1028.820678][ T3923] loop0: rw=1, sector=3936, nr_sectors = 2048 limit=256 [ 1028.859131][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1028.859131][ T3923] loop0: rw=1, sector=5984, nr_sectors = 2048 limit=256 [ 1028.947721][T14607] loop3: detected capacity change from 0 to 256 [ 1028.955045][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1028.955045][ T3923] loop0: rw=1, sector=8032, nr_sectors = 2048 limit=256 [ 1028.961529][T13603] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1028.983506][T13603] cp210x 5-1:0.0: querying part number failed [ 1029.003647][T13603] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1029.004080][T14607] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 1029.038509][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1029.038509][ T3923] loop0: rw=1, sector=10080, nr_sectors = 2048 limit=256 [ 1029.041161][T13603] usb 5-1: USB disconnect, device number 26 [ 1029.081964][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1029.081964][ T3923] loop0: rw=1, sector=12128, nr_sectors = 2048 limit=256 [ 1029.100161][ T29] audit: type=1800 audit(1717958895.007:728): pid=14607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=1048829 res=0 errno=0 [ 1029.135165][T13603] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1029.146845][ T3932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.161535][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1029.161535][ T3923] loop0: rw=1, sector=14176, nr_sectors = 3216 limit=256 [ 1029.164005][T13603] cp210x 5-1:0.0: device disconnected [ 1029.209871][ T3923] kworker/u8:9: attempt to access beyond end of device [ 1029.209871][ T3923] loop0: rw=1, sector=17392, nr_sectors = 4064 limit=256 [ 1029.243993][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1029.259320][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1029.271519][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1029.280672][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1029.290625][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1029.298429][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1029.402390][ T9654] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 1029.409715][ T9654] konepure 0003:1E7D:2DB4.0003: collection stack underflow [ 1029.454637][ T9654] konepure 0003:1E7D:2DB4.0003: item 0 2 0 12 parsing failed [ 1029.478478][ T9654] konepure 0003:1E7D:2DB4.0003: parse failed [ 1029.484625][ T9654] konepure 0003:1E7D:2DB4.0003: probe with driver konepure failed with error -22 [ 1029.546381][ T3932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.734610][ T9654] usb 4-1: USB disconnect, device number 29 [ 1029.795314][ T3932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.150593][ T3932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.648036][T14617] loop4: detected capacity change from 0 to 32768 [ 1030.683381][T14617] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: device 0: too many buckets (got 191310728265856, max 2147483583) [ 1030.683381][T14617] members_v2 (size 152): [ 1030.683381][T14617] Device: 0 [ 1030.683381][T14617] Label: (none) [ 1030.683381][T14617] UUID: 9b24efed-6a70-49cb-9057-2c46291a785d [ 1030.683381][T14617] Size: 6628735701552726016 [ 1030.683381][T14617] read errors: 0 [ 1030.683381][T14617] write errors: 0 [ 1030.683381][T14617] checksum errors: 0 [ 1030.683381][T14617] seqread iops: 0 [ 1030.683381][T14617] seqwrite iops: 0 [ 1030.683381][T14617] randread iops: 0 [ 1030.683381][T14617] randwrite iops: 0 [ 1030.683381][T14617] Bucket size: 131072 [ 1030.683381][T14617] First bucket: 0 [ 1030.683381][T14617] Buckets: 191310728265856 [ 1030.683381][T14617] Last mount: 1714681272 [ 1030.683381][T14617] Last superblock write: 41 [ 1030.683381][T14617] State: rw [ 1030.683381][T14617] Data allowed: journal,btree,user [ 1030.683381][T14617] Has data: journal,btree,user [ 1030.683381][T14617] Btree allocated bitmap blocksize:256 [ 1030.683381][T14617] Btree allocated bitmap: 00000000000000000000000 [ 1030.781122][T14624] loop3: detected capacity change from 0 to 2048 [ 1030.971248][T14617] loop4: detected capacity change from 0 to 1024 [ 1030.993388][ T3932] bridge_slave_1: left allmulticast mode [ 1031.000682][ T3932] bridge_slave_1: left promiscuous mode [ 1031.007352][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.045851][ T3932] bridge_slave_0: left allmulticast mode [ 1031.061743][ T3932] bridge_slave_0: left promiscuous mode [ 1031.090581][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.260505][T14617] hfsplus: xattr searching failed [ 1031.285651][T14617] hfsplus: xattr searching failed [ 1031.622971][T11497] Bluetooth: hci1: command tx timeout [ 1031.634720][T14617] hfsplus: xattr searching failed [ 1032.200781][T14632] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1032.926748][T14641] loop0: detected capacity change from 0 to 2048 [ 1034.183393][T11497] Bluetooth: hci1: command tx timeout [ 1034.364714][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.487475][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.572462][ T3932] bond0 (unregistering): Released all slaves [ 1034.865221][T14613] chnl_net:caif_netlink_parms(): no params data found [ 1035.548098][T14663] loop0: detected capacity change from 0 to 256 [ 1035.703158][T14613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.703915][T14663] FAT-fs (loop0): Directory bread(block 64) failed [ 1035.729172][T14613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.729301][T14663] FAT-fs (loop0): Directory bread(block 65) failed [ 1035.736513][T14613] bridge_slave_0: entered allmulticast mode [ 1035.747134][T14663] FAT-fs (loop0): Directory bread(block 66) failed [ 1035.761113][T14663] FAT-fs (loop0): Directory bread(block 67) failed [ 1035.772533][T14663] FAT-fs (loop0): Directory bread(block 68) failed [ 1035.782241][T14613] bridge_slave_0: entered promiscuous mode [ 1035.787238][T14663] FAT-fs (loop0): Directory bread(block 69) failed [ 1035.801492][ T3932] hsr_slave_0: left promiscuous mode [ 1035.814087][ T3932] hsr_slave_1: left promiscuous mode [ 1035.819977][T14663] FAT-fs (loop0): Directory bread(block 70) failed [ 1035.833523][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.842081][T14663] FAT-fs (loop0): Directory bread(block 71) failed [ 1035.851612][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.861114][T14663] FAT-fs (loop0): Directory bread(block 72) failed [ 1035.880755][T14663] FAT-fs (loop0): Directory bread(block 73) failed [ 1035.892259][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.899776][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.997863][ T3932] veth1_macvtap: left promiscuous mode [ 1036.003748][ T3932] veth0_macvtap: left promiscuous mode [ 1036.010971][ T3932] veth1_vlan: left promiscuous mode [ 1036.016521][ T3932] veth0_vlan: left promiscuous mode [ 1036.401393][T11497] Bluetooth: hci1: command tx timeout [ 1036.500380][ T51] kworker/u8:3: attempt to access beyond end of device [ 1036.500380][ T51] loop0: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 1036.562821][ T51] kworker/u8:3: attempt to access beyond end of device [ 1036.562821][ T51] loop0: rw=1, sector=1288, nr_sectors = 544 limit=256 [ 1036.625543][ T51] kworker/u8:3: attempt to access beyond end of device [ 1036.625543][ T51] loop0: rw=1, sector=1864, nr_sectors = 4088 limit=256 [ 1036.658209][ T51] kworker/u8:3: attempt to access beyond end of device [ 1036.658209][ T51] loop0: rw=1, sector=5952, nr_sectors = 5872 limit=256 [ 1036.755844][ T51] kworker/u8:3: attempt to access beyond end of device [ 1036.755844][ T51] loop0: rw=1, sector=11824, nr_sectors = 16384 limit=256 [ 1037.337631][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1037.878343][ T3932] team0 (unregistering): Port device team_slave_1 removed [ 1037.992641][ T3932] team0 (unregistering): Port device team_slave_0 removed [ 1038.643692][T11497] Bluetooth: hci1: command tx timeout [ 1039.166533][T14688] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1039.222330][T14613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.230979][T14613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.238330][T14613] bridge_slave_1: entered allmulticast mode [ 1039.249826][T14613] bridge_slave_1: entered promiscuous mode [ 1039.399232][T14613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.498514][T14613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.671471][T14469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1039.745354][T14690] sctp: [Deprecated]: syz-executor.3 (pid 14690) Use of int in maxseg socket option. [ 1039.745354][T14690] Use struct sctp_assoc_value instead [ 1039.832742][T14613] team0: Port device team_slave_0 added [ 1039.845527][T14469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1039.885910][T14613] team0: Port device team_slave_1 added [ 1039.929148][T14469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1039.942512][T14469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1039.998144][T14690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.118412][T14613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.125673][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.166224][T14613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.355576][T14613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.398487][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.425681][T14613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.374063][T14613] hsr_slave_0: entered promiscuous mode [ 1041.399925][T14613] hsr_slave_1: entered promiscuous mode [ 1041.419733][T14613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1041.436987][T14613] Cannot create hsr debugfs directory [ 1041.768724][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1041.775584][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1041.867119][T14469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.126956][T14469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.174227][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.181694][ T5231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.220384][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.227627][ T5231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.397735][T14703] loop3: detected capacity change from 0 to 32768 [ 1042.440193][T14703] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (14703) [ 1042.496916][T14703] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1042.535665][T14703] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1042.574993][T14703] BTRFS info (device loop3): using free-space-tree [ 1042.858723][T14469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.890177][T14613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1042.906613][T14613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1042.936697][T14613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1042.983880][T14613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1043.114617][T14710] loop4: detected capacity change from 0 to 32768 [ 1043.174899][T14710] [ 1043.174899][T14710] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.174899][T14710] [ 1043.199246][T13571] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1043.234060][T14469] veth0_vlan: entered promiscuous mode [ 1043.261977][T14710] [ 1043.261977][T14710] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.261977][T14710] [ 1043.307557][T14469] veth1_vlan: entered promiscuous mode [ 1043.354341][T14710] [ 1043.354341][T14710] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.354341][T14710] [ 1043.397134][T14613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.439148][T14733] [ 1043.439148][T14733] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.439148][T14733] [ 1043.459217][T14613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.550964][T14079] [ 1043.550964][T14079] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.550964][T14079] [ 1043.570412][ T9647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.577664][ T9647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.580060][T14079] [ 1043.580060][T14079] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.580060][T14079] [ 1043.659324][T14469] veth0_macvtap: entered promiscuous mode [ 1043.741958][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.749232][ T9675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.782599][T14469] veth1_macvtap: entered promiscuous mode [ 1043.936341][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1043.958131][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.994056][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.051181][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.109654][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.121022][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.131160][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.141713][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.169957][T14469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.194980][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.209091][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.219844][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.294787][ T29] audit: type=1800 audit(1717958909.009:729): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 1044.382536][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.522976][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.708016][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.811773][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.851404][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.896558][T14469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.966038][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1045.072131][T14469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.100304][T14469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.123966][T14469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.140093][T14469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.245853][T14748] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1045.587407][T11912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.617533][T11912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.797433][T11912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.813092][T11912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.123216][T14613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.322691][T14613] veth0_vlan: entered promiscuous mode [ 1046.337827][T14744] loop4: detected capacity change from 0 to 32768 [ 1046.363381][T14613] veth1_vlan: entered promiscuous mode [ 1046.489834][T14613] veth0_macvtap: entered promiscuous mode [ 1046.529795][T14613] veth1_macvtap: entered promiscuous mode [ 1046.603563][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.638484][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.666507][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.681341][T14766] loop1: detected capacity change from 0 to 256 [ 1046.687901][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.705181][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.707202][T14766] FAT-fs (loop1): Unrecognized mount option "shortnam" or missing value [ 1046.725784][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.738391][T14750] loop0: detected capacity change from 0 to 32768 [ 1046.746633][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.757652][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.767855][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.778650][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.794251][T14613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.821322][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.853563][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.875004][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.890477][T14766] loop1: detected capacity change from 0 to 4096 [ 1046.898293][T14766] nilfs2: Unknown parameter '' [ 1046.912146][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.934080][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.957418][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.980351][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.003628][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.024760][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.049855][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.078571][T14613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.117148][T14613] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.126258][T14613] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.136944][T14613] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.152977][T14613] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.180314][T14750] tmpfs: Unknown parameter 'ϚzB?#Y֓?js' [ 1047.210172][T14750] loop0: detected capacity change from 0 to 64 [ 1047.345895][T14750] afs: Unknown parameter '~R(:oN@.f88֞M [ 1047.345895][T14750] ' [ 1047.533684][T14764] loop3: detected capacity change from 0 to 32768 [ 1048.158358][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.185009][T14764] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1048.223433][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.358389][T14764] XFS (loop3): Ending clean mount [ 1048.415181][ T3923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.450837][ T3923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.656759][T14777] loop1: detected capacity change from 0 to 8192 [ 1048.663766][ T29] audit: type=1800 audit(1717958913.061:730): pid=14785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=1062 res=0 errno=0 [ 1048.692898][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1049.034335][T13571] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1049.098495][ T9654] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 1049.194756][T14791] loop2: detected capacity change from 0 to 256 [ 1049.221311][T14791] exfat: Deprecated parameter 'utf8' [ 1049.226902][T14791] exfat: Deprecated parameter 'utf8' [ 1049.295854][T14791] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 1049.330349][ T9654] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1049.344562][ T9654] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 1049.374609][ T29] audit: type=1800 audit(1717958913.716:731): pid=14791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048837 res=0 errno=0 [ 1049.409168][ T9654] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1049.439421][ T9654] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1049.476013][ T9654] usb 5-1: string descriptor 0 read error: -22 [ 1049.483633][ T9654] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1049.492891][ T9654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.529798][ T9654] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1049.849638][T14786] loop0: detected capacity change from 0 to 32768 [ 1049.872002][T14786] [ 1049.872002][T14786] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1049.872002][T14786] [ 1049.889845][T14786] [ 1049.889845][T14786] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1049.889845][T14786] [ 1049.939548][T14786] [ 1049.939548][T14786] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1049.939548][T14786] [ 1049.996996][T14803] [ 1049.996996][T14803] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1049.996996][T14803] [ 1050.014872][T14784] loop4: detected capacity change from 0 to 64 [ 1050.048252][T14804] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1050.079482][ T62] [ 1050.079482][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1050.079482][ T62] [ 1050.108293][ T62] [ 1050.108293][ T62] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1050.108293][ T62] [ 1050.164057][ T113] [ 1050.164057][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1050.164057][ T113] [ 1050.211364][T13802] [ 1050.211364][T13802] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1050.211364][T13802] [ 1050.222701][T14784] hfs: request for non-existent node 16777216 in B*Tree [ 1050.238896][T14784] hfs: request for non-existent node 16777216 in B*Tree [ 1050.243487][T14788] pimreg: entered allmulticast mode [ 1050.269264][T13802] [ 1050.269264][T13802] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1050.269264][T13802] [ 1050.581065][T14784] hfs: request for non-existent node 16777216 in B*Tree [ 1050.589089][T14784] hfs: request for non-existent node 16777216 in B*Tree [ 1050.880263][T14807] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1050.906572][T14807] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1051.003952][T14811] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1054.658211][T14819] loop3: detected capacity change from 0 to 64 [ 1054.713516][ T9654] usb 5-1: USB disconnect, device number 27 [ 1054.816703][T14822] loop2: detected capacity change from 0 to 512 [ 1054.855362][T14822] EXT4-fs: Ignoring removed mblk_io_submit option [ 1054.866401][T14822] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1054.981845][T14822] EXT4-fs (loop2): 1 truncate cleaned up [ 1054.989721][T14822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.098260][T14831] tipc: Can't bind to reserved service type 0 [ 1055.904875][T14847] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1055.965521][T14613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.046662][T14866] loop2: detected capacity change from 0 to 256 [ 1060.091550][T14866] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1060.146590][T14866] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe618a5da, utbl_chksum : 0xe619d30d) [ 1060.659148][ T4490] Bluetooth: hci4: command 0x0406 tx timeout [ 1060.870000][T14878] loop2: detected capacity change from 0 to 256 [ 1060.944948][T14878] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1061.129947][T14858] loop1: detected capacity change from 0 to 40427 [ 1061.186578][T14858] F2FS-fs (loop1): invalid crc value [ 1061.202866][T14858] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1061.361415][T14858] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1061.547613][T14865] loop0: detected capacity change from 0 to 40427 [ 1061.606795][T14865] F2FS-fs (loop0): invalid crc value [ 1061.638893][T14865] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1061.678511][T14469] syz-executor.1: attempt to access beyond end of device [ 1061.678511][T14469] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1061.715700][T14469] syz-executor.1: attempt to access beyond end of device [ 1061.715700][T14469] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1061.823284][T14865] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1061.847657][T14876] loop4: detected capacity change from 0 to 40427 [ 1061.859006][ T29] audit: type=1800 audit(1717958925.235:732): pid=14865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 1061.907524][T14876] F2FS-fs (loop4): invalid crc value [ 1061.940563][T14865] syz-executor.0: attempt to access beyond end of device [ 1061.940563][T14865] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1061.975452][T14876] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1062.000495][ T12] kworker/u8:1: attempt to access beyond end of device [ 1062.000495][ T12] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1062.041586][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1062.069841][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1062.083282][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1062.094714][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1062.157509][T13802] syz-executor.0: attempt to access beyond end of device [ 1062.157509][T13802] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1062.172701][T13802] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1062.217386][T14876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1062.712711][T11912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.055215][T11912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.326180][T14903] overlayfs: lower data-only dirs require metacopy support. [ 1063.580462][T11912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.741448][T14893] loop3: detected capacity change from 0 to 40427 [ 1063.800671][T14893] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 1063.821775][T11912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.191857][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1064.233926][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1064.261012][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1064.271731][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1064.278929][T11912] bridge_slave_1: left allmulticast mode [ 1064.284693][T11912] bridge_slave_1: left promiscuous mode [ 1064.299606][T11912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.307425][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1064.317610][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1064.347210][T11912] bridge_slave_0: left allmulticast mode [ 1064.360046][T11912] bridge_slave_0: left promiscuous mode [ 1064.366128][T11912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.570710][T14905] loop2: detected capacity change from 0 to 32768 [ 1064.797828][T14903] loop0: detected capacity change from 0 to 32768 [ 1064.900232][T14903] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1064.959421][T14905] tmpfs: Unknown parameter 'ϚzB?#Y֓?js' [ 1064.976377][T14905] loop2: detected capacity change from 0 to 64 [ 1065.121339][T14905] afs: Unknown parameter '~R(:oN@.f88֞M [ 1065.121339][T14905] ' [ 1065.340019][T14903] XFS (loop0): Ending clean mount [ 1066.153526][ T5162] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 1066.184940][ T5162] XFS (loop0): Unmount and run xfs_repair [ 1066.197993][ T5162] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1066.207715][ T5162] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 1066.226164][ T5162] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 1066.251361][ T5162] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1066.257375][T14926] loop4: detected capacity change from 0 to 256 [ 1066.287592][ T5162] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 1066.325882][ T5162] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 1066.334820][ T5162] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 1066.390497][ T5162] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 1066.420585][ T5162] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 1066.439094][T14925] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 1066.479708][T14925] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1066.532775][T14925] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 1066.564974][ T4490] Bluetooth: hci0: command tx timeout [ 1067.117897][T11912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.143042][T11912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.164366][T11912] bond0 (unregistering): Released all slaves [ 1067.249278][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1067.734837][ T29] audit: type=1804 audit(1717958930.588:733): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir101643866/syzkaller.BQIz9Z/90/bus" dev="sda1" ino=1948 res=1 errno=0 [ 1068.067147][T14955] Invalid ELF header magic: != ELF [ 1068.076722][ T29] audit: type=1800 audit(1717958930.588:734): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 1068.367247][T13802] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1068.839852][ T4490] Bluetooth: hci0: command tx timeout [ 1073.607470][ T4490] Bluetooth: hci0: command tx timeout [ 1074.048639][T11912] hsr_slave_0: left promiscuous mode [ 1074.080081][T14996] loop3: detected capacity change from 0 to 1024 [ 1074.157024][T11912] hsr_slave_1: left promiscuous mode [ 1074.226703][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.263143][T11912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.505930][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.543966][T11912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.721040][T11912] veth1_macvtap: left promiscuous mode [ 1074.750226][T11912] veth0_macvtap: left promiscuous mode [ 1074.779581][T11912] veth1_vlan: left promiscuous mode [ 1074.809342][T11912] veth0_vlan: left promiscuous mode [ 1075.241597][T15025] loop2: detected capacity change from 0 to 256 [ 1075.263159][T15025] exFAT-fs (loop2): bogus sector size bits : 0 [ 1075.269541][T15025] exFAT-fs (loop2): failed to read boot sector [ 1075.306430][T15025] exFAT-fs (loop2): failed to recognize exfat type [ 1075.433523][T14991] loop0: detected capacity change from 0 to 32768 [ 1075.533367][T14991] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 1075.560291][T15025] loop2: detected capacity change from 0 to 4096 [ 1075.591346][T15025] ntfs3: Unknown parameter 'iocha' [ 1075.669429][T14991] XFS (loop0): Ending clean mount [ 1075.703464][T14991] XFS (loop0): Quotacheck needed: Please wait. [ 1075.845814][T14991] XFS (loop0): Quotacheck: Done. [ 1075.942075][ T4490] Bluetooth: hci0: command tx timeout [ 1076.198610][ T29] audit: type=1800 audit(1717958938.480:735): pid=15044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1290 res=0 errno=0 [ 1076.223311][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1076.254358][ T9672] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1076.447169][ T9672] usb 3-1: device descriptor read/64, error -71 [ 1076.449967][T15035] loop4: detected capacity change from 0 to 128 [ 1076.496875][T11912] team0 (unregistering): Port device team_slave_1 removed [ 1076.612404][T15041] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 1076.615618][T11912] team0 (unregistering): Port device team_slave_0 removed [ 1076.768903][ T9672] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1076.931788][ T9672] usb 3-1: device descriptor read/64, error -71 [ 1077.075950][ T9672] usb usb3-port1: attempt power cycle [ 1077.555777][ T9672] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1077.609602][ T9672] usb 3-1: device descriptor read/8, error -71 [ 1077.883931][T13802] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 1077.920079][ T9672] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1077.943456][T14906] chnl_net:caif_netlink_parms(): no params data found [ 1077.983838][ T9672] usb 3-1: device descriptor read/8, error -71 [ 1078.144571][ T9672] usb usb3-port1: unable to enumerate USB device [ 1078.320596][T14906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.327982][T14906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.371203][T14906] bridge_slave_0: entered allmulticast mode [ 1078.410776][T14906] bridge_slave_0: entered promiscuous mode [ 1078.525773][T14906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.538985][T14906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.546814][T14906] bridge_slave_1: entered allmulticast mode [ 1078.554893][T14906] bridge_slave_1: entered promiscuous mode [ 1079.262303][T14906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.334388][T14906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.597885][T15069] sctp: [Deprecated]: syz-executor.0 (pid 15069) Use of int in maxseg socket option. [ 1079.597885][T15069] Use struct sctp_assoc_value instead [ 1079.849653][T15073] loop3: detected capacity change from 0 to 256 [ 1079.862600][T14906] team0: Port device team_slave_0 added [ 1079.947386][T14906] team0: Port device team_slave_1 added [ 1080.050455][T15069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1080.170582][T14906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.180079][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.180785][T15081] loop3: detected capacity change from 0 to 8 [ 1080.233092][T14906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.236759][T15081] squashfs: Unknown parameter '!e29%VW._Te-.wo$utNPBhUB"g ' [ 1080.276320][T14906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.290327][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.340661][T14906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.394205][T15081] xt_connbytes: Forcing CT accounting to be enabled [ 1080.401848][T15081] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1080.458891][T14906] hsr_slave_0: entered promiscuous mode [ 1080.476299][T14906] hsr_slave_1: entered promiscuous mode [ 1080.497566][T14906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1080.505373][T14906] Cannot create hsr debugfs directory [ 1080.596150][ T5173] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1080.810412][ T5173] usb 1-1: Using ep0 maxpacket: 8 [ 1080.821097][ T5173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.869014][ T5173] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1080.887697][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1080.909249][ T5173] usb 1-1: SerialNumber: syz [ 1080.935613][ T5173] usb 1-1: config 0 descriptor?? [ 1080.953342][ T5173] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1080.960352][ T5173] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized! [ 1081.017825][ T5173] usb 1-1: Failed to create links for entity 255 [ 1081.024424][ T5173] usb 1-1: Failed to register entities (-22). [ 1081.258266][ T5173] usb 1-1: USB disconnect, device number 37 [ 1081.329134][ T29] audit: type=1804 audit(1717958943.206:736): pid=15091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4138709408/syzkaller.YvkUdE/39/bus" dev="sda1" ino=1963 res=1 errno=0 [ 1081.364590][ T29] audit: type=1800 audit(1717958943.206:737): pid=15091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1081.394436][T15091] Invalid ELF header magic: != ELF [ 1081.757712][T14906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1081.762671][T15097] loop2: detected capacity change from 0 to 128 [ 1081.800597][T15097] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1081.843791][T14906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1081.875338][T14906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1081.941779][T14906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1081.989676][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1082.913027][ T4490] Bluetooth: hci5: command 0x0406 tx timeout [ 1083.108406][T15105] loop2: detected capacity change from 0 to 128 [ 1083.218019][T14906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.631856][T14906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.738819][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.746054][ T9672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.876606][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.883935][ T9666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.028654][ T9672] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1084.255952][ T9672] usb 4-1: Using ep0 maxpacket: 32 [ 1084.263035][ T9672] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.287711][ T9672] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1084.313086][ T9672] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1084.329554][ T9672] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1084.340389][ T9672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.348738][ T9672] usb 4-1: Product: syz [ 1084.353241][ T9672] usb 4-1: Manufacturer: syz [ 1084.357987][ T9672] usb 4-1: SerialNumber: syz [ 1084.390450][ T9672] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1084.427657][ T9672] cdc_ncm 4-1:1.0: bind() failure [ 1084.715555][T15099] loop0: detected capacity change from 0 to 32768 [ 1084.772736][T15099] [ 1084.772736][T15099] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1084.772736][T15099] [ 1084.870337][ T3923] read_mapping_page failed! [ 1084.904815][ T3923] ERROR: (device loop0): txCommit: [ 1084.904815][ T3923] [ 1084.939373][ T3923] jfs_write_inode: jfs_commit_inode failed! [ 1084.957797][T15099] [ 1084.957797][T15099] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1084.957797][T15099] [ 1084.991715][T15099] [ 1084.991715][T15099] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1084.991715][T15099] [ 1085.007105][T14906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.226443][T14906] veth0_vlan: entered promiscuous mode [ 1085.311457][T14906] veth1_vlan: entered promiscuous mode [ 1085.472549][T14906] veth0_macvtap: entered promiscuous mode [ 1085.518185][T14906] veth1_macvtap: entered promiscuous mode [ 1085.607811][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.648150][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.679780][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.710270][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.739009][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.869999][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.937151][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.989072][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.999049][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.067563][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.105118][T14906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.115320][T15136] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1086.155641][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.204071][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.214172][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.235710][ T29] audit: type=1326 audit(1717958947.738:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e48c7cf69 code=0x7ffc0000 [ 1086.279322][T15131] loop2: detected capacity change from 0 to 256 [ 1086.287767][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.313905][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.324499][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.347218][ T29] audit: type=1326 audit(1717958947.738:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e48c7cf69 code=0x7ffc0000 [ 1086.410891][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.430980][ T29] audit: type=1326 audit(1717958947.738:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e48c7cf69 code=0x7ffc0000 [ 1086.465588][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.475492][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.530559][ T29] audit: type=1326 audit(1717958947.738:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e48c7cf69 code=0x7ffc0000 [ 1086.549478][T15131] FAT-fs (loop2): Unrecognized mount option "utf8=03uni_xlate=1" or missing value [ 1086.553970][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.589359][T14906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.606442][ T29] audit: type=1326 audit(1717958947.738:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e48c7cf69 code=0x7ffc0000 [ 1086.654699][T15130] loop4: detected capacity change from 0 to 32768 [ 1086.662512][T14906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.678833][T14906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.690671][ T29] audit: type=1326 audit(1717958947.738:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e48c7cf69 code=0x7ffc0000 [ 1086.717512][T15130] jfs: Unrecognized mount option "discard=0x0000%00000000004" or missing value [ 1086.733795][T14906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.746362][T14906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.765267][ T29] audit: type=1326 audit(1717958947.738:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e48c7cf69 code=0x7ffc0000 [ 1086.840644][ T29] audit: type=1326 audit(1717958947.738:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e48c7a6e7 code=0x7ffc0000 [ 1086.869311][ T29] audit: type=1326 audit(1717958947.793:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e48c403b9 code=0x7ffc0000 [ 1086.988641][ T29] audit: type=1326 audit(1717958947.793:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e48c7a6e7 code=0x7ffc0000 [ 1086.990086][ T9654] usb 4-1: USB disconnect, device number 30 [ 1087.298722][ T3923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.333408][ T3923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.444275][ T3932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.482049][ T3932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.607923][T15141] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1087.644791][T15141] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1088.405819][T15154] Invalid ELF header magic: != ELF [ 1089.675171][T15173] Invalid ELF header magic: != ELF [ 1089.904517][T15183] Bluetooth: MGMT ver 1.23 [ 1089.916905][T15186] loop2: detected capacity change from 0 to 128 [ 1090.881500][T15204] Invalid ELF header magic: != ELF [ 1091.712815][T15206] Invalid ELF header magic: != ELF [ 1092.025796][T15208] loop3: detected capacity change from 0 to 4096 [ 1092.093206][T15208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.240635][ T5168] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1092.448628][ T5168] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1092.459410][T15230] loop4: detected capacity change from 0 to 512 [ 1092.488942][ T5168] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1092.514764][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1092.535341][ T5168] usb 1-1: SerialNumber: syz [ 1092.581189][T15230] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1092.632648][T15230] EXT4-fs (loop4): 1 truncate cleaned up [ 1092.688510][T15230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.062780][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 1093.062930][ T29] audit: type=1804 audit(1717958953.986:1120): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3945416633/syzkaller.cbNzc4/24/bus" dev="sda1" ino=1971 res=1 errno=0 [ 1094.341878][T15235] Invalid ELF header magic: != ELF [ 1094.541660][ T29] audit: type=1800 audit(1717958953.986:1121): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1971 res=0 errno=0 [ 1094.955296][T14079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.131452][ T29] audit: type=1804 audit(1717958955.943:1122): pid=15243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3945416633/syzkaller.cbNzc4/25/bus" dev="sda1" ino=1960 res=1 errno=0 [ 1095.188001][T15243] Invalid ELF header magic: != ELF [ 1095.225336][ T29] audit: type=1800 audit(1717958955.943:1123): pid=15243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 1095.337029][T13571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.405134][ T5168] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1095.430149][ T5168] usb 1-1: USB disconnect, device number 38 [ 1096.002239][T15256] loop4: detected capacity change from 0 to 128 [ 1096.339605][T15264] loop1: detected capacity change from 0 to 1024 [ 1096.504648][T15268] Invalid ELF header magic: != ELF [ 1096.704084][ T29] audit: type=1804 audit(1717958957.152:1124): pid=15268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3945416633/syzkaller.cbNzc4/27/bus" dev="sda1" ino=1972 res=1 errno=0 [ 1096.729372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1097.302826][T15262] hfsplus: bad catalog entry type [ 1097.346129][ T29] audit: type=1800 audit(1717958957.152:1125): pid=15268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 1098.046183][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1098.709692][ T29] audit: type=1800 audit(1717958959.229:1126): pid=15284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1099.339254][T15282] loop4: detected capacity change from 0 to 512 [ 1099.378685][T15282] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1099.392431][T15282] EXT4-fs (loop4): 1 truncate cleaned up [ 1099.406185][T15282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1100.310199][T15277] loop2: detected capacity change from 0 to 32768 [ 1100.322727][ T29] audit: type=1800 audit(1717958960.724:1127): pid=15297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 1100.425243][ T29] audit: type=1800 audit(1717958960.724:1128): pid=15297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 1100.465816][T15277] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1100.500460][T14079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.806643][T15277] XFS (loop2): Ending clean mount [ 1100.824056][T15277] XFS (loop2): Quotacheck needed: Please wait. [ 1101.113150][ T29] audit: type=1804 audit(1717958961.463:1129): pid=15318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4138709408/syzkaller.YvkUdE/58/bus" dev="sda1" ino=1952 res=1 errno=0 [ 1101.168722][T15318] Invalid ELF header magic: != ELF [ 1101.213558][ T29] audit: type=1800 audit(1717958961.463:1130): pid=15318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 1101.272927][T15277] XFS (loop2): Quotacheck: Done. [ 1101.371131][T14613] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1102.231373][T15334] loop0: detected capacity change from 0 to 512 [ 1102.375168][T15334] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 1102.386673][T15334] ext4_test_bit(bit=14, block=5) = 0 [ 1102.397047][T15334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1102.431876][T15336] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 1103.242108][T13802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.518419][ T29] audit: type=1800 audit(1717958963.604:1131): pid=15339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 1103.936751][T15343] loop2: detected capacity change from 0 to 2048 [ 1103.960496][T15346] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1104.040238][T15345] loop1: detected capacity change from 0 to 512 [ 1104.178077][T15345] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1104.263211][T15345] EXT4-fs (loop1): 1 truncate cleaned up [ 1104.320177][T15345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.378129][ T29] audit: type=1804 audit(1717958965.062:1132): pid=15359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3945416633/syzkaller.cbNzc4/30/bus" dev="sda1" ino=1966 res=1 errno=0 [ 1106.625396][T15359] Invalid ELF header magic: != ELF [ 1106.774756][ T29] audit: type=1800 audit(1717958965.081:1133): pid=15359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1106.999649][T14906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.012596][T15363] loop2: detected capacity change from 0 to 128 [ 1107.091017][T15363] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1107.117964][T15363] ext4 filesystem being mounted at /root/syzkaller-testdir3945416633/syzkaller.cbNzc4/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.239965][T15363] Bluetooth: MGMT ver 1.23 [ 1107.471828][T15375] loop3: detected capacity change from 0 to 1024 [ 1107.552490][T15377] loop1: detected capacity change from 0 to 2048 [ 1107.557099][T15375] hfsplus: failed to load root directory [ 1107.597597][T15377] EXT4-fs: Ignoring removed nobh option [ 1107.604974][T14613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1107.644619][T15377] EXT4-fs: Ignoring removed mblk_io_submit option [ 1107.710131][T15379] ieee802154 phy0 wpan0: encryption failed: -22 [ 1107.736828][T15377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.839844][T15377] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 1107.926520][T15377] EXT4-fs (loop1): Remounting filesystem read-only [ 1108.035035][T14906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.333354][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1108.340102][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1108.700445][ T29] audit: type=1800 audit(1717958968.302:1134): pid=15391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 1109.432790][T15396] loop2: detected capacity change from 0 to 2048 [ 1109.434784][T15392] loop1: detected capacity change from 0 to 128 [ 1109.462980][T15395] loop0: detected capacity change from 0 to 2048 [ 1109.508854][T15400] loop4: detected capacity change from 0 to 512 [ 1109.556704][T15392] hpfs: Bad magic ... probably not HPFS [ 1111.471351][ T4490] Bluetooth: hci2: command 0x0406 tx timeout [ 1111.537532][T15400] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1111.562232][T15400] EXT4-fs (loop4): 1 truncate cleaned up [ 1111.620171][T15392] loop1: detected capacity change from 0 to 1024 [ 1111.639990][T15400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.688516][T15392] hfsplus: unable to parse mount options [ 1111.953506][T15412] loop2: detected capacity change from 0 to 256 [ 1111.997755][T15392] block nbd1: shutting down sockets [ 1112.501257][T15412] FAT-fs (loop2): Directory bread(block 64) failed [ 1112.549957][T15412] FAT-fs (loop2): Directory bread(block 65) failed [ 1112.592780][T15412] FAT-fs (loop2): Directory bread(block 66) failed [ 1112.654416][T15412] FAT-fs (loop2): Directory bread(block 67) failed [ 1112.693008][T15412] FAT-fs (loop2): Directory bread(block 68) failed [ 1112.737618][T15412] FAT-fs (loop2): Directory bread(block 69) failed [ 1112.774661][T15412] FAT-fs (loop2): Directory bread(block 70) failed [ 1112.781986][T15412] FAT-fs (loop2): Directory bread(block 71) failed [ 1112.806117][T15412] FAT-fs (loop2): Directory bread(block 72) failed [ 1112.860981][T15412] FAT-fs (loop2): Directory bread(block 73) failed [ 1112.884195][T15424] loop1: detected capacity change from 0 to 512 [ 1112.892587][T15424] EXT4-fs: Ignoring removed i_version option [ 1113.046141][T15424] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 1 [ 1113.140978][T15424] EXT4-fs (loop1): Remounting filesystem read-only [ 1113.149061][T15424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.127473][T14906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.385773][T14079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.757984][T15444] loop0: detected capacity change from 0 to 256 [ 1115.794874][T15449] loop3: detected capacity change from 0 to 128 [ 1115.862178][T15449] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1115.891496][T15449] ext4 filesystem being mounted at /root/syzkaller-testdir101643866/syzkaller.BQIz9Z/111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1116.998000][T13571] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1117.153825][T15461] loop0: detected capacity change from 0 to 256 [ 1117.188769][T15463] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1117.202717][T15463] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1117.274761][T15465] loop3: detected capacity change from 0 to 512 [ 1117.334422][T15465] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1117.354416][T15465] EXT4-fs (loop3): 1 truncate cleaned up [ 1117.361476][T15465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.453043][ T4490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1117.466259][ T4490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1117.477339][ T4490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1117.489607][ T4490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1117.627315][ T4490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1117.634983][ T4490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1118.469398][T15481] usb usb8: usbfs: process 15481 (syz-executor.1) did not claim interface 0 before use [ 1118.513806][T13571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.875420][T15468] chnl_net:caif_netlink_parms(): no params data found [ 1119.313006][T15468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.357546][T15468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.386657][T15468] bridge_slave_0: entered allmulticast mode [ 1119.446010][T15468] bridge_slave_0: entered promiscuous mode [ 1119.490414][T15468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.523387][T15468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.566961][T15468] bridge_slave_1: entered allmulticast mode [ 1119.607909][T15468] bridge_slave_1: entered promiscuous mode [ 1119.788328][T15468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.856877][ T4490] Bluetooth: hci2: command tx timeout [ 1119.859904][T15468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.097766][T15468] team0: Port device team_slave_0 added [ 1120.155900][T15468] team0: Port device team_slave_1 added [ 1120.311132][T15468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.338164][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.444250][T15468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.487724][T15468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.494742][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.572803][T15485] loop2: detected capacity change from 0 to 40427 [ 1120.605258][T15485] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1120.631337][T15485] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1120.658681][T15468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.687575][T15485] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1120.812783][T15514] loop3: detected capacity change from 0 to 256 [ 1120.842875][T15495] loop1: detected capacity change from 0 to 40427 [ 1120.902134][T15485] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1120.926306][T15468] hsr_slave_0: entered promiscuous mode [ 1120.933453][T15485] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1120.964101][T15468] hsr_slave_1: entered promiscuous mode [ 1120.974234][T15468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.981974][T15468] Cannot create hsr debugfs directory [ 1121.779491][T15468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.958709][ T9675] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1122.037909][T15468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.121491][ T4490] Bluetooth: hci2: command tx timeout [ 1122.184377][T15468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.189804][ T9675] usb 2-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1122.207589][ T9675] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.218366][ T9675] usb 2-1: config 255 has no interfaces? [ 1122.224246][ T9675] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1122.233810][ T9675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.407592][T15468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.886341][T15468] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1122.910758][T15468] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1122.938769][T15529] loop0: detected capacity change from 0 to 32768 [ 1122.952364][T15468] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1122.975642][T15529] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1122.999774][T15468] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1123.029258][T15529] XFS (loop0): Ending clean mount [ 1123.082887][T15495] loop1: detected capacity change from 0 to 4096 [ 1123.105310][T15529] XFS (loop0): Quotacheck needed: Please wait. [ 1123.183151][ T9675] usb 2-1: string descriptor 0 read error: -71 [ 1123.190753][T15529] XFS (loop0): Quotacheck: Done. [ 1123.213817][ T29] audit: type=1800 audit(1717958981.870:1135): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 1123.236339][ T9675] usb 2-1: USB disconnect, device number 26 [ 1123.392777][T15468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.442630][T13802] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1123.470547][T15468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.510550][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.517852][ T9675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.587358][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.594701][ T9675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.842919][T15468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1123.862205][T15557] loop2: detected capacity change from 0 to 256 [ 1124.014110][T15559] loop3: detected capacity change from 0 to 2048 [ 1124.023092][T15562] overlayfs: failed to resolve './file0': -2 [ 1124.068141][T15563] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1124.242707][T15565] loop1: detected capacity change from 0 to 2048 [ 1124.265540][ T29] audit: type=1804 audit(1717958982.830:1136): pid=15559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir101643866/syzkaller.BQIz9Z/124/file0/bus" dev="loop3" ino=2097152 res=1 errno=0 [ 1124.341910][T15565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1124.364055][ T4490] Bluetooth: hci2: command tx timeout [ 1124.417686][ T29] audit: type=1800 audit(1717958982.876:1137): pid=15570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1942 res=0 errno=0 [ 1124.522621][T15468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.030698][T15565] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 1125.051352][T15565] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 1125.274008][T15565] overlayfs: failed to resolve './file0': -5 [ 1125.508221][ T29] audit: type=1804 audit(1717958983.882:1138): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir101643866/syzkaller.BQIz9Z/125/bus" dev="sda1" ino=1968 res=1 errno=0 [ 1126.036503][T15588] Invalid ELF header magic: != ELF [ 1126.143986][ T29] audit: type=1800 audit(1717958983.882:1139): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 1126.435192][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1126.529811][T15598] bond1: entered promiscuous mode [ 1126.577376][T15602] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1126.617674][ T4490] Bluetooth: hci2: command tx timeout [ 1126.659671][T15604] loop1: detected capacity change from 0 to 1764 [ 1126.670452][T15604] iso9660: Bad value for 'dmode' [ 1126.691074][T15602] ip6gretap1: entered promiscuous mode [ 1126.711140][T15602] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1126.761542][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1126.846406][T15598] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1126.901382][T15598] ip6gretap1: left promiscuous mode [ 1126.932361][T15604] loop1: detected capacity change from 0 to 4096 [ 1126.936210][T15598] bond1 (unregistering): Released all slaves [ 1126.954803][T15604] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1126.986584][T15604] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1127.153828][T15468] veth0_vlan: entered promiscuous mode [ 1127.199166][T15468] veth1_vlan: entered promiscuous mode [ 1127.217392][T15608] ntfs3: loop1: ino=22, "cgroup.controllers" mmap(write) compressed not supported [ 1127.360561][T15468] veth0_macvtap: entered promiscuous mode [ 1127.392279][T14968] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22. [ 1127.395619][T15468] veth1_macvtap: entered promiscuous mode [ 1127.456795][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.490537][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.520404][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.531337][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.541357][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.551982][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.563545][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.607108][T15613] loop3: detected capacity change from 0 to 1024 [ 1127.613586][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.626944][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.637706][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.648127][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1127.658789][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.672077][T15468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.739012][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.765780][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.782920][T15618] loop1: detected capacity change from 0 to 256 [ 1127.787498][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.805891][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.824459][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.854205][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.876398][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.895679][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.906192][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.925783][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.939471][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.950429][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.981618][T15468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.991166][T15613] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1128.005131][T15613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1128.032971][T15468] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.042086][T15468] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.062973][T15468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.075389][T15468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.278535][T11912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.288050][T15621] loop1: detected capacity change from 0 to 1024 [ 1128.307415][T11912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.380340][T11912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.403965][T11912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.774346][ T29] audit: type=1804 audit(1717958986.910:1140): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir101643866/syzkaller.BQIz9Z/129/bus" dev="sda1" ino=1941 res=1 errno=0 [ 1128.950277][T15625] Invalid ELF header magic: != ELF [ 1129.503013][ T29] audit: type=1800 audit(1717958986.910:1141): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 1129.742604][T15635] loop3: detected capacity change from 0 to 512 [ 1130.085963][T15635] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1130.120541][T15632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1130.167114][T15616] loop0: detected capacity change from 0 to 32768 [ 1130.185801][T15635] EXT4-fs (loop3): 1 truncate cleaned up [ 1130.205545][T15635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.518288][ T9675] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1131.753319][ T9675] usb 2-1: Using ep0 maxpacket: 8 [ 1131.771047][ T9675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1131.788168][ T9675] usb 2-1: New USB device found, idVendor=2001, idProduct=3a02, bcdDevice=ea.72 [ 1131.805564][ T9675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.849787][ T9675] usb 2-1: Product: syz [ 1131.872259][ T9675] usb 2-1: Manufacturer: syz [ 1131.876946][ T9675] usb 2-1: SerialNumber: syz [ 1131.909429][ T9675] usb 2-1: config 0 descriptor?? [ 1131.926642][ T9675] usb 2-1: Could not find all expected endpoints [ 1131.934771][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1131.975393][T15651] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1132.023882][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1132.116921][T13571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.023104][T15647] loop2: detected capacity change from 0 to 32768 [ 1133.065781][T15647] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (15647) [ 1133.109391][ T5168] usb 2-1: USB disconnect, device number 27 [ 1133.130436][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.171588][T15647] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 1133.214590][T15647] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1133.246548][T15647] BTRFS info (device loop2): using free-space-tree [ 1133.364709][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.461848][ T29] audit: type=1800 audit(1717958991.331:1142): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 1133.517428][ T29] audit: type=1804 audit(1717958991.359:1143): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3945416633/syzkaller.cbNzc4/48/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 1133.598610][ T29] audit: type=1804 audit(1717958991.368:1144): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3945416633/syzkaller.cbNzc4/48/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 1133.663069][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.681855][T15647] BTRFS info (device loop2 state M): max_inline set to 0 [ 1133.690185][ T29] audit: type=1804 audit(1717958991.377:1145): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3945416633/syzkaller.cbNzc4/48/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 1133.826303][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.866304][T15679] CIFS: VFS: Malformed UNC in devname [ 1133.906327][T15679] CIFS: VFS: Malformed UNC in devname [ 1133.986710][ T5168] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1134.176534][ T29] audit: type=1804 audit(1717958991.977:1146): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3945416633/syzkaller.cbNzc4/48/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 1134.352145][T15683] Invalid ELF header magic: != ELF [ 1134.401714][ T29] audit: type=1804 audit(1717958992.069:1147): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3681843163/syzkaller.7DgcPq/27/bus" dev="sda1" ino=1964 res=1 errno=0 [ 1134.910875][ T29] audit: type=1800 audit(1717958992.069:1148): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1134.959860][T11497] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1134.986606][T11497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1134.999465][T11497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1135.008590][T11497] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1135.050853][T11497] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1135.059506][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 1135.064869][T11497] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1135.076609][ T35] bridge_slave_1: left allmulticast mode [ 1135.113506][ T35] bridge_slave_1: left promiscuous mode [ 1135.140256][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1135.159327][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.194106][ T5168] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1135.201897][ T35] bridge_slave_0: left allmulticast mode [ 1135.214571][ T35] bridge_slave_0: left promiscuous mode [ 1135.232727][ T5168] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1135.233866][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.285367][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.312525][ T5168] usb 1-1: config 0 descriptor?? [ 1135.346749][ T5168] usb 1-1: can't set config #0, error -71 [ 1135.368390][ T5168] usb 1-1: USB disconnect, device number 39 [ 1135.406547][T14613] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 1136.079199][T15705] loop0: detected capacity change from 0 to 16 [ 1136.088554][T15705] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1136.469385][ T35] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1136.509842][ T9654] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1136.670241][T15724] loop0: detected capacity change from 0 to 2048 [ 1136.879135][ T9654] usb 3-1: no configurations [ 1136.879162][ T9654] usb 3-1: can't read configurations, error -22 [ 1137.018351][ T29] audit: type=1800 audit(1717958994.598:1149): pid=15726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1137.083746][ T9654] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1137.297508][T11497] Bluetooth: hci3: command tx timeout [ 1137.402544][ T9654] usb 3-1: no configurations [ 1137.463017][ T9654] usb 3-1: can't read configurations, error -22 [ 1137.525553][ T9654] usb usb3-port1: attempt power cycle [ 1137.994446][ T29] audit: type=1804 audit(1717958995.457:1150): pid=15730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2143141778/syzkaller.vmMlAP/87/bus" dev="sda1" ino=1966 res=1 errno=0 [ 1137.994633][ T29] audit: type=1800 audit(1717958995.457:1151): pid=15730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1138.079231][T15730] Invalid ELF header magic: != ELF [ 1138.351390][ T9654] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1138.399868][ T9654] usb 3-1: no configurations [ 1138.399944][ T9654] usb 3-1: can't read configurations, error -22 [ 1138.452187][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.539173][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.550103][ T35] bond0 (unregistering): Released all slaves [ 1138.584555][ T35] bond1 (unregistering): Released all slaves [ 1138.600056][ T9654] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1138.639837][ T9654] usb 3-1: no configurations [ 1138.639864][ T9654] usb 3-1: can't read configurations, error -22 [ 1138.640950][ T9654] usb usb3-port1: unable to enumerate USB device [ 1138.648384][T15734] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1138.648415][T15734] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 1138.648433][T15734] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1138.733680][T15688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1139.110480][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1139.122505][T15744] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 1139.139556][T15744] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (558345748613) [ 1139.319647][T15749] loop0: detected capacity change from 0 to 128 [ 1139.429664][T15749] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1139.729541][ T4490] Bluetooth: hci3: command tx timeout [ 1141.981043][T11497] Bluetooth: hci3: command tx timeout [ 1144.335395][T11497] Bluetooth: hci3: command tx timeout [ 1144.587594][ T29] audit: type=1800 audit(1717959000.275:1152): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1144.656552][T15776] Invalid ELF header magic: != ELF [ 1144.745138][ T29] audit: type=1804 audit(1717959001.346:1153): pid=15776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3681843163/syzkaller.7DgcPq/31/bus" dev="sda1" ino=1965 res=1 errno=0 [ 1144.771502][ T29] audit: type=1800 audit(1717959001.346:1154): pid=15776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1144.809397][T15684] chnl_net:caif_netlink_parms(): no params data found [ 1144.817197][T15778] loop0: detected capacity change from 0 to 2048 [ 1145.372275][T15787] loop4: detected capacity change from 0 to 24 [ 1145.379119][T15788] loop0: detected capacity change from 0 to 256 [ 1145.408768][T15787] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1145.418608][T15787] /dev/loop4: Can't open blockdev [ 1145.454319][T15789] loop4: detected capacity change from 0 to 24 [ 1145.552285][ T29] audit: type=1804 audit(1717959002.490:1155): pid=15791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972323134333134313737382F73797A6B616C6C65722E766D4D6C41502F39312FE91F7189591E9233614B2F627573 dev="loop0" ino=1048867 res=1 errno=0 [ 1145.718708][T15789] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1145.922655][T15789] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1145.980763][ T29] audit: type=1400 audit(1717959002.868:1156): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262F2FFC847C52A19B pid=15786 comm="syz-executor.4" [ 1146.001891][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.098992][T15795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1146.236110][T15799] loop4: detected capacity change from 0 to 512 [ 1146.245437][T15799] EXT4-fs: Ignoring removed oldalloc option [ 1146.253435][T15799] EXT4-fs: Ignoring removed bh option [ 1146.259292][ T35] hsr_slave_0: left promiscuous mode [ 1146.292460][ T35] hsr_slave_1: left promiscuous mode [ 1146.303459][T15799] EXT4-fs error (device loop4): __ext4_iget:4906: inode #11: block 1: comm syz-executor.4: invalid block [ 1146.319209][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.330833][T15799] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 1146.357502][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.368473][T15805] loop2: detected capacity change from 0 to 64 [ 1146.378035][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.387952][T15799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.402817][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.499385][ T35] veth1_macvtap: left promiscuous mode [ 1146.518558][ T35] veth0_macvtap: left promiscuous mode [ 1146.539807][ T35] veth1_vlan: left promiscuous mode [ 1146.562668][ T35] veth0_vlan: left promiscuous mode [ 1146.758611][T15815] loop0: detected capacity change from 0 to 16 [ 1146.770768][T15815] erofs: (device loop0): mounted with root inode @ nid 36. [ 1147.792652][T15822] loop0: detected capacity change from 0 to 512 [ 1148.084513][T15468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.169578][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1148.339083][T15828] loop1: detected capacity change from 0 to 2048 [ 1149.081429][ T29] audit: type=1804 audit(1717959005.268:1157): pid=15832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2143141778/syzkaller.vmMlAP/94/bus" dev="sda1" ino=1964 res=1 errno=0 [ 1149.607657][T15832] Invalid ELF header magic: != ELF [ 1149.745574][ T29] audit: type=1800 audit(1717959005.268:1158): pid=15832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1149.866513][ T29] audit: type=1800 audit(1717959006.071:1159): pid=15835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1150.779615][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1150.878712][T15844] loop4: detected capacity change from 0 to 40427 [ 1150.889986][T15844] F2FS-fs (loop4): invalid crc value [ 1150.904960][T15844] F2FS-fs (loop4): SIT is corrupted node# 0 vs 7 [ 1150.921535][T15844] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 1150.937643][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1152.949506][T15801] netlink: 50 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.961505][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1152.977763][T15837] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1152.982126][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1153.059327][T15855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1153.224198][T15684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.238745][T15684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.252923][T15684] bridge_slave_0: entered allmulticast mode [ 1153.299549][T15684] bridge_slave_0: entered promiscuous mode [ 1153.313892][T15864] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 1153.322223][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1153.331823][T15866] input: syz0 as /devices/virtual/input/input14 [ 1153.357516][T15866] input: failed to attach handler leds to device input14, error: -6 [ 1153.437395][T15684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.475499][T15684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.482863][T15684] bridge_slave_1: entered allmulticast mode [ 1153.490666][T15684] bridge_slave_1: entered promiscuous mode [ 1153.662023][T15684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.720607][T15684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.984250][T15874] loop1: detected capacity change from 0 to 4096 [ 1154.017692][T15874] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1154.204217][T15684] team0: Port device team_slave_0 added [ 1154.390155][T15880] Invalid ELF header magic: != ELF [ 1154.428742][ T29] audit: type=1804 audit(1717959010.576:1160): pid=15880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2701433303/syzkaller.BA3o1k/19/bus" dev="sda1" ino=1964 res=1 errno=0 [ 1154.454066][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.756446][ T29] audit: type=1800 audit(1717959010.576:1161): pid=15880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1155.125710][T15684] team0: Port device team_slave_1 added [ 1155.135894][T15874] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1155.168451][T15874] ntfs3: loop1: Failed to load $MFT (-22). [ 1155.283035][T15684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.303977][T15874] delete_channel: no stack [ 1155.306032][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.481434][T15684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.495366][T15882] loop4: detected capacity change from 0 to 2048 [ 1155.540585][T15684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.587014][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.613369][T15684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.910374][ T29] audit: type=1800 audit(1717959011.969:1162): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 1156.319871][T15860] loop2: detected capacity change from 0 to 40427 [ 1156.378235][T15895] loop1: detected capacity change from 0 to 1024 [ 1156.548740][T14965] hfsplus: b-tree write err: -5, ino 4 [ 1156.658171][T15684] hsr_slave_0: entered promiscuous mode [ 1156.692199][T15684] hsr_slave_1: entered promiscuous mode [ 1156.699556][T15684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1156.729022][T15684] Cannot create hsr debugfs directory [ 1156.780794][T15902] loop1: detected capacity change from 0 to 64 [ 1157.544430][T15908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1158.471991][T15916] loop1: detected capacity change from 0 to 2048 [ 1160.102356][T15923] input: syz1 as /devices/virtual/input/input15 [ 1160.190894][T15684] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1160.249866][T15684] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1160.268787][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1160.301035][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1160.313357][T15684] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1160.354319][T15684] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1160.818640][T15932] loop4: detected capacity change from 0 to 40427 [ 1160.826912][T15932] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1160.835003][T15932] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1160.880314][T15932] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1160.934490][T15932] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1160.942184][T15932] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1161.549776][T15684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.645782][T15684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.698022][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.705324][ T5231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.729606][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.736956][ T9675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.801775][ T29] audit: type=1800 audit(1717959017.821:1163): pid=15945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1163.075115][T15948] loop1: detected capacity change from 0 to 64 [ 1163.413616][T15684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.693482][T15684] veth0_vlan: entered promiscuous mode [ 1163.747130][T15684] veth1_vlan: entered promiscuous mode [ 1163.850921][T15684] veth0_macvtap: entered promiscuous mode [ 1163.862042][T15684] veth1_macvtap: entered promiscuous mode [ 1163.885754][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.896420][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.906412][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.917002][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.927454][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.938040][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.955086][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.988853][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.013504][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.046573][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.078025][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.110824][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.115294][T15965] loop4: detected capacity change from 0 to 1024 [ 1164.152967][T15684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.217646][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.254219][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.285175][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.309570][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.310774][T15967] loop2: detected capacity change from 0 to 2048 [ 1164.319547][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.363736][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.373672][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.387669][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.404797][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.416036][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.432389][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.449097][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.475467][T15684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.497347][ T3923] hfsplus: b-tree write err: -5, ino 4 [ 1164.534599][T15684] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.576675][T15684] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.602142][T15684] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.611092][T15684] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.852466][T15969] loop1: detected capacity change from 0 to 2048 [ 1166.086444][ T4490] Bluetooth: hci1: command 0x0406 tx timeout [ 1166.168053][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.213500][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.231631][T15963] loop0: detected capacity change from 0 to 32768 [ 1166.300007][T11912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.330006][T15963] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (15963) [ 1166.343467][T11912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.431108][T15963] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1166.431222][T15963] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1166.431259][T15963] BTRFS info (device loop0): using free-space-tree [ 1166.529409][T15992] loop3: detected capacity change from 0 to 256 [ 1166.582620][T15992] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x973db221, utbl_chksum : 0xe619d30d) [ 1168.044663][T13802] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1168.197239][T15972] loop4: detected capacity change from 0 to 32768 [ 1168.227693][T15978] loop2: detected capacity change from 0 to 32768 [ 1169.107355][T16003] loop0: detected capacity change from 0 to 40427 [ 1169.122400][T16003] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1169.130240][T16003] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1169.549783][ T29] audit: type=1800 audit(1717959024.577:1164): pid=16012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 1170.104760][T16003] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1170.228088][T16003] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1170.235210][T16003] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1170.869148][T16017] loop4: detected capacity change from 0 to 512 [ 1170.895117][T16017] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1170.912181][T16017] EXT4-fs (loop4): 1 truncate cleaned up [ 1170.953650][T16017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.023501][T16028] loop1: detected capacity change from 0 to 1024 [ 1171.136030][ T3923] hfsplus: b-tree write err: -5, ino 4 [ 1171.289447][T16031] loop3: detected capacity change from 0 to 2048 [ 1172.138313][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1172.528018][T15468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.807832][ T3923] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.973412][T16026] loop2: detected capacity change from 0 to 40427 [ 1173.028828][T16026] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1173.059714][T16026] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1173.133921][T16026] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1173.156356][ T3923] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.368705][T16026] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1173.375829][T16026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1173.437911][ T3923] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.601856][T16054] loop0: detected capacity change from 0 to 64 [ 1173.779252][ T29] audit: type=1800 audit(1717959028.509:1165): pid=16056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1174.654137][ T3923] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.692189][T16062] loop1: detected capacity change from 0 to 1024 [ 1174.908613][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1174.915169][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1175.037884][ T4490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1175.050812][ T4490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1175.062209][ T4490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1175.103985][ T4490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1175.112202][ T4490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1175.123066][ T4490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1175.187990][ T3923] bridge_slave_1: left allmulticast mode [ 1175.193700][ T3923] bridge_slave_1: left promiscuous mode [ 1175.216910][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.241854][ T3923] bridge_slave_0: left allmulticast mode [ 1175.247587][ T3923] bridge_slave_0: left promiscuous mode [ 1175.286206][ T3923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.093411][T16067] loop1: detected capacity change from 0 to 32768 [ 1176.116003][T16067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (16067) [ 1176.168836][T16067] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1176.213602][T16067] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1176.225472][T16065] loop0: detected capacity change from 0 to 40427 [ 1176.238254][T16067] BTRFS info (device loop1): using free-space-tree [ 1176.266094][T16065] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1176.280008][T16065] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1176.327472][T16065] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1176.431068][T16065] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1176.447169][T16065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1176.701735][T13802] syz-executor.0: attempt to access beyond end of device [ 1176.701735][T13802] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1176.736171][T13802] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1177.034160][ T3923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.098433][T16067] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 1177.127232][ T3923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.156971][ T3923] bond0 (unregistering): Released all slaves [ 1177.170103][T16077] loop2: detected capacity change from 0 to 32768 [ 1177.186176][T16077] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (16077) [ 1177.214623][T14906] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1177.219106][T16077] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1177.275635][T16077] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1177.310636][T16077] BTRFS info (device loop2): using free-space-tree [ 1177.416001][T11497] Bluetooth: hci2: command tx timeout [ 1177.773222][T16120] loop3: detected capacity change from 0 to 164 [ 1178.255455][T14613] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1179.661747][T11497] Bluetooth: hci2: command tx timeout [ 1179.958843][T16141] loop2: detected capacity change from 0 to 32768 [ 1179.981289][T16141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (16141) [ 1180.024748][T16141] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1180.044420][T16141] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1180.059890][T16141] BTRFS info (device loop2): using free-space-tree [ 1180.229676][ T29] audit: type=1800 audit(1717959034.500:1166): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 1180.283042][ T29] audit: type=1800 audit(1717959034.527:1167): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 1180.384870][T16141] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1180.416277][T16141] File: /root/syzkaller-testdir3945416633/syzkaller.cbNzc4/67/file0/bus PID: 16141 Comm: syz-executor.2 [ 1180.526255][ T29] audit: type=1800 audit(1717959034.767:1168): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 1180.798122][T14613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1181.915325][T11497] Bluetooth: hci2: command tx timeout [ 1182.059664][T16165] loop2: detected capacity change from 0 to 32768 [ 1182.178978][T11497] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1182.190042][T11497] Bluetooth: hci3: Injecting HCI hardware error event [ 1182.202567][T11497] Bluetooth: hci3: hardware error 0x00 [ 1182.426854][T16165] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 1182.469554][T16165] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 1182.490000][T16165] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 1182.490000][T16165] running recovery passes: check_allocations [ 1182.636808][T16165] bcachefs (loop2): accounting_read... done [ 1182.651997][T16165] bcachefs (loop2): alloc_read... done [ 1182.657700][T16165] bcachefs (loop2): stripes_read... done [ 1182.673592][T16165] bcachefs (loop2): snapshots_read... done [ 1182.695400][T16165] bcachefs (loop2): check_allocations... [ 1182.737676][T16165] btree ptr not marked in member info btree allocated bitmap [ 1182.749577][T16165] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1818ce08861e3527 written 40 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 1182.799584][T16165] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 13 [ 1182.813971][T16165] bcachefs (loop2): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 1182.822316][T16165] bcachefs (loop2): bch2_gc_btree(): error fsck_errors_not_fixed [ 1182.838771][T16165] bcachefs (loop2): bch2_gc_btrees(): error fsck_errors_not_fixed [ 1182.864438][T16165] bcachefs (loop2): bch2_check_allocations(): error fsck_errors_not_fixed [ 1182.894304][T16165] bcachefs (loop2): bch2_fs_recovery(): error fsck_errors_not_fixed [ 1182.911117][T16165] bcachefs (loop2): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 1182.933705][T16165] bcachefs (loop2): shutting down [ 1182.976410][T16165] bcachefs (loop2): shutdown complete [ 1183.646511][T16177] loop0: detected capacity change from 0 to 7 [ 1183.698247][T16177] Dev loop0: unable to read RDB block 7 [ 1183.704308][T16177] loop0: unable to read partition table [ 1183.714320][T16177] loop0: partition table beyond EOD, truncated [ 1183.720555][T16177] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 1183.720555][T16177] ) failed (rc=-5) [ 1184.169931][ T4490] Bluetooth: hci2: command tx timeout [ 1184.429021][T11497] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1184.529166][ T45] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1184.735371][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.769847][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1184.798440][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1184.817283][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.837910][ T45] usb 3-1: config 0 descriptor?? [ 1184.854320][ T45] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1187.512531][ T9675] usb 3-1: USB disconnect, device number 36 [ 1187.833951][T16204] loop2: detected capacity change from 0 to 8 [ 1187.911283][T16206] loop0: detected capacity change from 0 to 512 [ 1187.919955][T16206] EXT4-fs: Ignoring removed oldalloc option [ 1187.940156][T16206] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1187.995205][T16206] EXT4-fs (loop0): 1 truncate cleaned up [ 1188.002615][T16206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.170560][T13802] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1188.234106][T13802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.524275][T16222] loop2: detected capacity change from 0 to 2048 [ 1189.604397][T16222] Alternate GPT is invalid, using primary GPT. [ 1189.611372][T16222] loop2: p1 p2 p3 [ 1190.756068][ T5206] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1190.954220][ T5206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1190.970694][ T5206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1190.992186][ T5206] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1191.013376][ T5206] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1191.023859][ T5206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.040497][ T5206] usb 3-1: config 0 descriptor?? [ 1191.046363][T16224] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1191.514321][ T5206] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1191.523594][ T5206] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1191.570311][ T5206] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1191.868626][ T5206] usb 3-1: USB disconnect, device number 37 [ 1199.349429][T11497] Bluetooth: hci0: command 0x0406 tx timeout [ 1210.813801][T11497] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1210.829355][T11497] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1210.840608][T11497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1210.851289][T11497] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1210.859344][T11497] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1210.866856][T11497] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1212.552622][T11497] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1212.580377][T11497] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1212.592321][T11497] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1212.602988][T11497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1212.614210][T11497] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1212.621858][T11497] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1213.117936][T11497] Bluetooth: hci4: command tx timeout [ 1214.859374][T11497] Bluetooth: hci6: command tx timeout [ 1215.371543][T11497] Bluetooth: hci4: command tx timeout [ 1217.105103][T11497] Bluetooth: hci6: command tx timeout [ 1217.635662][T11497] Bluetooth: hci4: command tx timeout [ 1219.358462][T11497] Bluetooth: hci6: command tx timeout [ 1219.889318][T11497] Bluetooth: hci4: command tx timeout [ 1221.068804][ T4490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1221.090782][ T4490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1221.101843][ T4490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1221.118031][ T4490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1221.130749][ T4490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1221.138442][ T4490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1221.611923][ T4490] Bluetooth: hci6: command tx timeout [ 1223.345628][ T4490] Bluetooth: hci7: command tx timeout [ 1225.607333][ T4490] Bluetooth: hci7: command tx timeout [ 1225.736000][T11497] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1225.758953][T11497] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1225.769004][T11497] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1225.779675][T11497] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1225.791802][T11497] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1225.807974][T11497] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1227.856337][T11497] Bluetooth: hci7: command tx timeout [ 1228.026196][T11497] Bluetooth: hci8: command tx timeout [ 1230.106062][T11497] Bluetooth: hci7: command tx timeout [ 1230.279592][T11497] Bluetooth: hci8: command tx timeout [ 1232.532907][T11497] Bluetooth: hci8: command tx timeout [ 1234.797084][T11497] Bluetooth: hci8: command tx timeout [ 1241.466244][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.481843][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.034720][ T4490] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1244.048953][ T4490] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1244.058943][ T4490] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1244.067572][ T4490] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1244.075515][ T4490] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1244.091555][ T4490] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1246.314236][T11497] Bluetooth: hci9: command tx timeout [ 1248.578547][T11497] Bluetooth: hci9: command tx timeout [ 1250.821252][T11497] Bluetooth: hci9: command tx timeout [ 1253.085386][T11497] Bluetooth: hci9: command tx timeout [ 1281.557962][T16252] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1281.571696][T16252] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1281.582191][T16252] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1281.597129][T16252] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1281.605351][T16252] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1281.621763][T16252] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1282.906935][T16252] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1282.925515][T16252] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1282.946506][T16252] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1282.977200][T16252] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1282.985176][T16252] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1282.995152][T16252] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1283.844221][T16252] Bluetooth: hci10: command tx timeout [ 1285.230780][T16252] Bluetooth: hci11: command tx timeout [ 1286.097589][T16252] Bluetooth: hci10: command tx timeout [ 1287.484143][T16252] Bluetooth: hci11: command tx timeout [ 1288.351061][T16252] Bluetooth: hci10: command tx timeout [ 1289.746817][T16252] Bluetooth: hci11: command tx timeout [ 1290.604792][T16252] Bluetooth: hci10: command tx timeout [ 1291.524155][T11497] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1291.548224][T11497] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1291.567675][T11497] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1291.591021][T11497] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1291.599084][T11497] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1291.606945][T11497] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1291.991194][T11497] Bluetooth: hci11: command tx timeout [ 1293.811476][T11497] Bluetooth: hci12: command tx timeout [ 1296.072851][T11497] Bluetooth: hci12: command tx timeout [ 1296.155242][T16252] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1296.168865][T16252] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1296.187657][T16252] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1296.202319][T16252] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1296.211505][T16252] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1296.219304][T16252] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1298.329314][T11497] Bluetooth: hci12: command tx timeout [ 1298.492148][T11497] Bluetooth: hci13: command tx timeout [ 1300.582979][T11497] Bluetooth: hci12: command tx timeout [ 1300.755854][T11497] Bluetooth: hci13: command tx timeout [ 1302.999329][T11497] Bluetooth: hci13: command tx timeout [ 1305.256762][T11497] Bluetooth: hci13: command tx timeout [ 1308.037453][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1308.043848][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.292262][T16252] Bluetooth: hci2: command 0x0406 tx timeout [ 1314.581070][T16252] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1314.604495][T16252] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1314.632993][T16252] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1314.642915][T16252] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1314.654207][T16252] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1314.667503][T16252] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1316.964074][T16252] Bluetooth: hci14: command tx timeout [ 1319.206727][T16252] Bluetooth: hci14: command tx timeout [ 1321.460142][T16252] Bluetooth: hci14: command tx timeout [ 1323.716343][T16252] Bluetooth: hci14: command tx timeout [ 1343.562532][T11497] Bluetooth: hci4: command 0x0406 tx timeout [ 1349.110132][T11497] Bluetooth: hci6: command 0x0406 tx timeout [ 1352.143401][T11497] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1352.169601][T11497] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1352.182796][T11497] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1352.200111][T11497] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1352.209278][T11497] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1352.220417][T11497] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1353.448486][ T4490] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1353.472279][ T4490] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1353.483020][ T4490] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1353.499331][ T4490] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1353.507366][ T4490] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1353.518997][ T4490] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1354.483578][ T4490] Bluetooth: hci15: command tx timeout [ 1354.673027][ T4490] Bluetooth: hci7: command 0x0406 tx timeout [ 1355.177518][ T30] INFO: task kworker/u8:9:3923 blocked for more than 143 seconds. [ 1355.185396][ T30] Not tainted 6.10.0-rc2-next-20240607-syzkaller #0 [ 1355.201047][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.214504][ T30] task:kworker/u8:9 state:D stack:20856 pid:3923 tgid:3923 ppid:2 flags:0x00004000 2024/06/09 18:53:16 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1355.228143][ T30] Workqueue: netns cleanup_net [ 1355.284515][ T30] Call Trace: [ 1355.287976][ T30] [ 1355.291131][ T30] __schedule+0x17e8/0x4a20 [ 1355.306225][ T30] ? __pfx___schedule+0x10/0x10 [ 1355.311348][ T30] ? __pfx_lock_release+0x10/0x10 [ 1355.316437][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1355.349771][ T30] ? kthread_data+0x52/0xd0 [ 1355.354369][ T30] ? schedule+0x90/0x320 [ 1355.358653][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1355.389934][ T30] ? schedule+0x90/0x320 [ 1355.403979][ T30] schedule+0x14b/0x320 [ 1355.408214][ T30] schedule_preempt_disabled+0x13/0x30 [ 1355.413824][ T30] __mutex_lock+0x6a4/0xd70 [ 1355.427486][ T30] ? __mutex_lock+0x527/0xd70 [ 1355.432246][ T30] ? wiphy_unregister+0x236/0xb00 [ 1355.443569][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1355.448809][ T30] ? __up_read+0x2c2/0x6b0 [ 1355.453277][ T30] ? __pfx___up_read+0x10/0x10 [ 1355.466599][ T30] wiphy_unregister+0x236/0xb00 [ 1355.471625][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1355.477568][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 1355.490418][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 1355.496228][ T30] ? kfree+0x149/0x360 [ 1355.500462][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 1355.513780][ T30] mac80211_hwsim_del_radio+0x2c2/0x4c0 [ 1355.519420][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1355.531681][ T30] hwsim_exit_net+0x5c1/0x670 [ 1355.540285][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1355.566395][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 1355.572302][ T30] cleanup_net+0x802/0xcc0 [ 1355.576779][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1355.598879][ T30] ? process_scheduled_works+0x945/0x1830 [ 1355.604786][ T30] process_scheduled_works+0xa2c/0x1830 [ 1355.620435][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1355.626601][ T30] ? assign_work+0x364/0x3d0 [ 1355.642070][ T30] worker_thread+0x86d/0xd50 [ 1355.646820][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1355.651896][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1355.674571][ T30] kthread+0x2f0/0x390 [ 1355.678740][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1355.683937][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.696841][ T30] ret_from_fork+0x4b/0x80 [ 1355.701438][ T30] ? __pfx_kthread+0x10/0x10 [ 1355.738830][ T30] ret_from_fork_asm+0x1a/0x30 [ 1355.750663][ T30] [ 1355.753956][ T30] INFO: task kworker/1:3:5162 blocked for more than 143 seconds. [ 1355.781056][ T30] Not tainted 6.10.0-rc2-next-20240607-syzkaller #0 [ 1355.803333][T16252] Bluetooth: hci16: command tx timeout [ 1355.815435][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.824173][ T30] task:kworker/1:3 state:D stack:21128 pid:5162 tgid:5162 ppid:2 flags:0x00004000 [ 1355.834718][ T30] Workqueue: events linkwatch_event [ 1355.840254][ T30] Call Trace: [ 1355.843576][ T30] [ 1355.846629][ T30] __schedule+0x17e8/0x4a20 [ 1355.851415][ T30] ? __pfx___schedule+0x10/0x10 [ 1355.856318][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1355.865339][ T30] ? __pfx_lock_release+0x10/0x10 [ 1355.870871][ T30] ? kick_pool+0x45c/0x620 [ 1355.875440][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1355.8