last executing test programs: 21.506986783s ago: executing program 2 (id=3962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000e0087000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b22, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x4a8200, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000019300)={{r4}, r6, 0x12, @inherit={0x88, &(0x7f000001a300)=ANY=[@ANYBLOB="0100000000800000000000000000000008000000000000005ec900000000000024000001000000000300000000b20947b8bcaf0769ffffff080000000000000001000000000000000200000000000000050300000000000076060000000080000800b1b13168000005000000000000000000000000000000010400000000000003000000000000001f7fce2b5c81e88f67173c9977994689fa84df39f180ac39d9037b8388309baca523e6be439c839220c5061d425942d77d70606072b40598498068787da9ce5d62e2bc903dcefb6ca9708815728787"]}, @subvolid=0x52}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000000c0)=0xc, 0x9, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x90000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 17.938472695s ago: executing program 0 (id=3971): r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8010) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d466454b7f6e8420cfee66039bfbb4dff", 0x20000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x90) delete_module(&(0x7f00000000c0)='S*\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x20000000) setreuid(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$nfs(&(0x7f00000003c0)='GPL\x00', 0x0, &(0x7f0000000440), 0x40, &(0x7f0000000540)={[{'\xf1&\\^'}, {}], [{@flag='dirsync'}, {@uid_gt}, {@uid_eq={'uid', 0x3d, r4}}, {@appraise_type}]}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x3}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xb0}, [@map_fd]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) socket$rxrpc(0x21, 0x2, 0xa) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='hfsplus\x00', 0x0, 0x0) getpid() 12.36843835s ago: executing program 4 (id=3983): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) finit_module(r1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2004c841, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000440)={{}, "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"}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 12.355639991s ago: executing program 2 (id=3984): r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8010) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d466454b7f6e8420cfee66039bfbb4dff", 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x90) delete_module(&(0x7f00000000c0)='S*\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) setregid(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 9.720207956s ago: executing program 2 (id=3990): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x1, 0x20000000}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000002040), &(0x7f0000000100)=@tcp6}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/176, 0xb0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000780)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 8.738127816s ago: executing program 4 (id=3991): socket(0x840000000002, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x62) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x70) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000980)=0x59) r4 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)={r6}, &(0x7f0000000880)=0x8) epoll_create1(0x80000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000380)='>', 0x1) setsockopt$inet6_int(r8, 0x29, 0x38, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x0) shutdown(r7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 8.717283698s ago: executing program 3 (id=3992): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af00000000000000000100000004000300040002800c0001800800010005"], 0x28}}, 0x0) 8.644061524s ago: executing program 1 (id=3993): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x6, 0x402c1) fcntl$setstatus(r1, 0x4, 0x4c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x20000000) setreuid(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$nfs(&(0x7f00000003c0)='GPL\x00', 0x0, &(0x7f0000000440), 0x40, &(0x7f0000000540)={[{'\xf1&\\^'}, {}], [{@flag='dirsync'}, {@uid_gt}, {@uid_eq={'uid', 0x3d, r4}}, {@appraise_type}]}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x3}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xb0}, [@map_fd]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) socket$rxrpc(0x21, 0x2, 0xa) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='hfsplus\x00', 0x0, 0x0) getpid() 8.547544292s ago: executing program 0 (id=3994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000e0087000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b22, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x4a8200, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000019300)={{r4}, r6, 0x12, @inherit={0x88, &(0x7f000001a300)=ANY=[@ANYBLOB="0100000000800000000000000000000008000000000000005ec900000000000024000001000000000300000000b20947b8bcaf0769ffffff080000000000000001000000000000000200000000000000050300000000000076060000000080000800b1b13168000005000000000000000000000000000000010400000000000003000000000000001f7fce2b5c81e88f67173c9977994689fa84df39f180ac39d9037b8388309baca523e6be439c839220c5061d425942d77d70606072b40598498068787da9ce5d62e2bc903dcefb6ca9708815728787"]}, @subvolid=0x52}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000000c0)=0xc, 0x9, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x90000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 7.322808342s ago: executing program 1 (id=3995): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1949, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000040)='./file0\x00') rt_sigreturn() socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet_nvme_icreq_pdu(r1, &(0x7f00000000c0), 0xfffffeaa, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c66232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d9da697cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e2a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e8494312f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de3f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba178fb03a467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d9de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ef2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdf12c2287bfb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802144f1dfbc114cee5ba322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462d9f9182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5572d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa96bea872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e25fc7b0a371d1bf7e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e60ffff48bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a227660fbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3f42a957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f0000000500)={0x50, 0xffffffffffffff89, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.322479542s ago: executing program 2 (id=3996): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000150000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000086dd636169663000000000000000e0ff000076657468315f746f5f7465616d00400073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c2004994f6d3000000000000e8000000e800000018010000697036000000000000000000000000000000000000000000000000000000000050000000000000e4f05cffa707a40cb664c67af36e139d00fe800000000000000000000000000000e06fb232b2421d9f8882ae3685100000000000000000ff00000000000000000000115e000000f90000001900000000004155444954000000000000000000080000000000001000"/424]}, 0x220) 6.73192578s ago: executing program 1 (id=3997): inotify_init1(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30d140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x5, 0xd90d}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00032cbd7000fddbdf2538000000080c0300", @ANYRES32=0x0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x80c1}, 0xd6075d51d3a4b64a) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) r6 = openat$cgroup_int(r2, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffe, 0x40000) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ioctl$SG_BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000300)={'\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffff4ee15fa, r8}) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r6, r6, 0x0, 0xff) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r9, 0x29, 0xd3, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='projid_map\x00') read$FUSE(r10, &(0x7f00000020c0)={0x2020}, 0x2020) 6.73151658s ago: executing program 3 (id=3998): r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8010) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d466454b7f6e8420cfee66039bfbb4dff", 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x90) delete_module(&(0x7f00000000c0)='S*\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}], 0x3, 0x1) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) 5.185183176s ago: executing program 4 (id=4000): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) io_setup(0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd63a34e786cbc325, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x4240) 5.030986389s ago: executing program 2 (id=4001): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xfc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220500000009e68299e6"], 0x0}, 0x0) 5.029309339s ago: executing program 3 (id=4002): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r5, 0x2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.433516478s ago: executing program 1 (id=4003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0xff, 0xc}, &(0x7f0000000380)=0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)}, &(0x7f00000004c0)=0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef25bae80066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.354040304s ago: executing program 3 (id=4004): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 3.67238499s ago: executing program 0 (id=4005): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) 2.876029805s ago: executing program 3 (id=4006): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000080)="b3019c28", 0x4, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r1}) 2.657639163s ago: executing program 1 (id=4007): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x6, 0x402c1) fcntl$setstatus(r1, 0x4, 0x4c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x0, 0x4, 0x0, 0x0}, 0x90) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x20000000) setreuid(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$nfs(&(0x7f00000003c0)='GPL\x00', 0x0, &(0x7f0000000440), 0x40, &(0x7f0000000540)={[{'\xf1&\\^'}, {}], [{@flag='dirsync'}, {@uid_gt}, {@uid_eq={'uid', 0x3d, r4}}, {@appraise_type}]}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000005c0)={0x7, 0x7, 0x3}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xb0}, [@map_fd]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) socket$rxrpc(0x21, 0x2, 0xa) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='hfsplus\x00', 0x0, 0x0) getpid() 2.443359431s ago: executing program 0 (id=4008): pipe(0x0) io_setup(0x0, &(0x7f0000000500)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x3, 0x8b}, 0x0) syz_clone3(&(0x7f00000004c0)={0x200001000, &(0x7f0000000180), &(0x7f0000000300), 0x0, {0xe}, &(0x7f0000000740)=""/238, 0xee, &(0x7f0000000100)=""/54, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000194, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x1, 0xf36, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(r0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x6) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000380)={&(0x7f0000ffb000/0x1000)=nil}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f00000001c0)=0x10001) socket(0x23, 0x3, 0xfe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7ff, 0x7, 0xf060, 0x2, r1, 0x0, '\x00', r3, r4, 0x3, 0x3, 0xfffffffe, 0x4}, 0xfffffffffffffd43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=4009): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x1, 0x20000000}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000002040), &(0x7f0000000100)=@tcp6}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/176, 0xb0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000780)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): l=45 compat=0 ip=0x7fcc74b796c4 code=0x7ffc0000 [ 796.225444][ T26] audit: type=1326 audit(1723416098.172:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.1.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcc74b7668a code=0x7ffc0000 [ 798.763612][T13177] tmpfs: Unknown parameter 'usrquota' [ 799.253529][T13193] netlink: 'syz.1.2776': attribute type 4 has an invalid length. [ 799.261487][T13193] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2776'. [ 800.155995][T13199] trusted_key: encrypted_key: insufficient parameters specified [ 803.446763][T13238] hfsplus: unable to find HFS+ superblock [ 803.614985][T13241] usb usb8: usbfs: process 13241 (syz.1.2791) did not claim interface 0 before use [ 803.667341][T13241] loop1: detected capacity change from 0 to 164 [ 803.709204][T13241] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=164 [ 805.122406][T13257] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 805.122406][T13257] 葆' [ 805.520217][T13259] trusted_key: encrypted_key: insufficient parameters specified [ 806.213796][ T154] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 806.659075][ T154] usb 3-1: Using ep0 maxpacket: 8 [ 806.907768][ T154] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 806.917041][ T154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.927579][ T154] usb 3-1: config 0 descriptor?? [ 807.269042][T13285] hfsplus: unable to find HFS+ superblock [ 807.528404][T13289] fuse: Bad value for 'fd' [ 808.183863][ T154] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 808.241234][ T154] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 808.527403][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.537372][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.697372][ T154] asix: probe of 3-1:0.0 failed with error -71 [ 808.796101][ T154] usb 3-1: USB disconnect, device number 21 [ 808.947636][T13305] netlink: 'syz.2.2811': attribute type 29 has an invalid length. [ 809.045945][T13305] netlink: 'syz.2.2811': attribute type 29 has an invalid length. [ 809.100176][T13307] netlink: 'syz.2.2811': attribute type 29 has an invalid length. [ 810.443990][T13328] hfsplus: unable to find HFS+ superblock [ 810.784608][T13336] fuse: Bad value for 'fd' [ 811.613888][T13345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2820'. [ 812.987745][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2826'. [ 813.390069][T13384] CIFS: Unable to determine destination address [ 819.020291][T13449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2841'. [ 819.288997][T13452] loop1: detected capacity change from 0 to 1024 [ 819.394158][T13452] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 819.515775][T13452] EXT4-fs (loop1): orphan cleanup on readonly fs [ 819.734480][T13452] EXT4-fs error (device loop1): ext4_free_blocks:6213: comm syz.1.2846: Freeing blocks not in datazone - block = 0, count = 4096 [ 819.790955][T13452] EXT4-fs (loop1): 1 orphan inode deleted [ 819.823989][T13452] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 819.944616][ T7279] EXT4-fs (loop1): unmounting filesystem. [ 820.108181][T13470] loop3: detected capacity change from 0 to 1024 [ 821.445249][T13485] netlink: 'syz.2.2854': attribute type 4 has an invalid length. [ 821.489032][T13485] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2854'. [ 823.170187][T13506] loop2: detected capacity change from 0 to 1024 [ 823.315066][T13506] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 823.323642][T13506] EXT4-fs (loop2): orphan cleanup on readonly fs [ 823.539181][T13506] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.2861: Freeing blocks not in datazone - block = 0, count = 4096 [ 823.708097][T13506] EXT4-fs (loop2): 1 orphan inode deleted [ 824.235036][T13506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 824.316159][T10521] EXT4-fs (loop2): unmounting filesystem. [ 824.432906][T13529] netlink: 'syz.2.2867': attribute type 4 has an invalid length. [ 824.441768][T13529] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2867'. [ 824.510290][T13527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2862'. [ 826.971807][T13560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 827.013438][T13560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 827.144838][T13560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 827.784136][T13557] loop1: detected capacity change from 0 to 32768 [ 827.820703][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2880'. [ 827.842632][T13557] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 827.851621][T13557] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 827.955667][T13557] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 828.186796][T12427] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 828.194975][T12427] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 829.028032][T12427] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 833ms [ 829.059300][T12427] gfs2: fsid=syz:syz.0: jid=0: Done [ 829.094208][T13557] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 829.504544][T13606] hfsplus: unable to find HFS+ superblock [ 831.340761][T13630] netlink: 'syz.0.2895': attribute type 2 has an invalid length. [ 832.228199][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2900'. [ 832.493916][ T3891] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 832.625158][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 832.625174][ T26] audit: type=1326 audit(1723416136.742:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.2.2902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0b19779f9 code=0x0 [ 832.653024][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.797852][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2901'. [ 833.144038][ T3891] usb 1-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 833.166652][ T3891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.201987][ T3891] usb 1-1: Product: syz [ 833.220686][ T3891] usb 1-1: Manufacturer: syz [ 833.237604][ T3891] usb 1-1: SerialNumber: syz [ 833.282883][ T3891] usb 1-1: config 0 descriptor?? [ 833.354623][ T3891] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 833.853027][ T4111] usb 1-1: USB disconnect, device number 23 [ 834.817742][T13678] netlink: 'syz.4.2906': attribute type 2 has an invalid length. [ 835.166499][ C0] eth0: bad gso: type: 1, size: 1408 [ 835.592225][T13682] netlink: 'syz.2.2907': attribute type 4 has an invalid length. [ 836.346118][T13689] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 836.346118][T13689] 葆' [ 836.515291][T13682] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2907'. [ 836.630266][T13695] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 837.863793][T12427] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 837.983412][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2917'. [ 838.070012][T13717] netlink: 'syz.1.2918': attribute type 2 has an invalid length. [ 838.133870][T12427] usb 5-1: Using ep0 maxpacket: 8 [ 838.414218][T12427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.468558][T12427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.521395][T12427] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 838.616677][T12427] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 838.660064][T12427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.722137][T13728] loop1: detected capacity change from 0 to 1024 [ 838.742070][T12427] usb 5-1: config 0 descriptor?? [ 838.903975][T13728] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 839.227596][T13728] EXT4-fs (loop1): orphan cleanup on readonly fs [ 839.832373][T13728] EXT4-fs error (device loop1): ext4_free_blocks:6213: comm syz.1.2920: Freeing blocks not in datazone - block = 0, count = 4096 [ 839.864495][T13728] EXT4-fs (loop1): 1 orphan inode deleted [ 839.872649][T13728] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 839.900504][T13736] netlink: 'syz.0.2922': attribute type 4 has an invalid length. [ 839.988719][T13736] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2922'. [ 840.014603][T12427] ntrig 0003:1B96:0010.0008: unbalanced delimiter at end of report description [ 840.044451][T12427] ntrig 0003:1B96:0010.0008: parse failed [ 840.092697][T12427] ntrig: probe of 0003:1B96:0010.0008 failed with error -22 [ 840.157738][ T7279] EXT4-fs (loop1): unmounting filesystem. [ 840.240208][T12427] usb 5-1: USB disconnect, device number 18 [ 840.264323][ C0] eth0: bad gso: type: 1, size: 1408 [ 840.484755][T13749] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 841.811634][T13764] netlink: 'syz.4.2929': attribute type 2 has an invalid length. [ 843.053038][T13776] loop2: detected capacity change from 0 to 1024 [ 843.108559][T13776] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 843.109184][T13776] EXT4-fs (loop2): orphan cleanup on readonly fs [ 843.109510][T13776] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.2935: Freeing blocks not in datazone - block = 0, count = 4096 [ 843.118174][T13776] EXT4-fs (loop2): 1 orphan inode deleted [ 843.118199][T13776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 843.258629][ T3645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 843.261982][ T3645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 843.263408][ T3645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 843.265302][ T3645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 843.265794][ T3645] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 843.266037][ T3645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 843.328257][T10521] EXT4-fs (loop2): unmounting filesystem. [ 844.152365][T13781] chnl_net:caif_netlink_parms(): no params data found [ 844.276703][T13800] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 845.135426][T13798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.235751][T13781] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.240816][T13781] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.242326][T13781] device bridge_slave_0 entered promiscuous mode [ 845.252311][T13781] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.260018][T13781] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.261196][T13781] device bridge_slave_1 entered promiscuous mode [ 845.334283][ T3636] Bluetooth: hci4: command tx timeout [ 845.430552][ T102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.433241][ T8673] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 845.455657][T13781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.458064][T13781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.519790][T13781] team0: Port device team_slave_0 added [ 845.522755][T13781] team0: Port device team_slave_1 added [ 845.665000][ T102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.511752][T13818] tmpfs: Unknown parameter 'usrquota' [ 846.560166][T13781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.560217][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.560277][T13781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.562813][T13781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.562828][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.562884][T13781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.681869][ T102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.733236][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.778343][T13781] device hsr_slave_0 entered promiscuous mode [ 846.779115][T13781] device hsr_slave_1 entered promiscuous mode [ 846.779652][T13781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.779764][T13781] Cannot create hsr debugfs directory [ 846.809530][ T102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.894099][ T8673] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 846.934045][ T8673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.943245][ T8673] usb 3-1: Product: syz [ 846.943267][ T8673] usb 3-1: Manufacturer: syz [ 846.943283][ T8673] usb 3-1: SerialNumber: syz [ 846.960252][ T8673] usb 3-1: config 0 descriptor?? [ 847.018705][ T8673] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 847.213830][ T8673] gspca_sunplus: reg_r err -71 [ 847.218106][ T8673] usb 3-1: USB disconnect, device number 22 [ 847.432984][ T3645] Bluetooth: hci4: command tx timeout [ 849.353292][T13781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 849.490232][T13781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 849.498499][ T3645] Bluetooth: hci4: command tx timeout [ 849.559993][T13781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 849.643648][T13781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 850.300036][T13874] loop1: detected capacity change from 0 to 512 [ 850.356950][T13874] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 850.394517][T13877] netlink: 'syz.2.2952': attribute type 2 has an invalid length. [ 850.444403][T13781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.468982][T13874] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 850.564897][T13874] EXT4-fs (loop1): 1 truncate cleaned up [ 850.570619][T13874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 850.617275][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 850.654531][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 850.694857][T13781] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.763398][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 850.785019][T13892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2959'. [ 850.795065][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.803550][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.810713][T13298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.839696][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 850.853377][ T7279] EXT4-fs (loop1): unmounting filesystem. [ 850.866749][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 851.000951][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.008280][T13298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.330024][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 851.411033][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 851.544257][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 851.563800][ T3645] Bluetooth: hci4: command tx timeout [ 851.674983][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 851.694494][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 851.764752][T13909] tmpfs: Unknown parameter 'usrquota' [ 851.775164][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 851.792817][T13781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 851.834307][T13781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 851.957159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 851.974106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 851.996154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 852.066815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 852.867419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 852.897999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 852.974071][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 853.342808][ T102] device hsr_slave_0 left promiscuous mode [ 853.353148][ T102] device hsr_slave_1 left promiscuous mode [ 853.406478][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.423548][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.461213][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.490190][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.527215][ T102] device bridge_slave_1 left promiscuous mode [ 853.546510][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.594217][ T102] device bridge_slave_0 left promiscuous mode [ 853.600668][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.742834][ T102] device veth1_macvtap left promiscuous mode [ 853.765575][ T102] device veth0_macvtap left promiscuous mode [ 853.788202][T13945] loop2: detected capacity change from 0 to 4096 [ 853.797125][ T102] device veth1_vlan left promiscuous mode [ 853.816201][ T102] device veth0_vlan left promiscuous mode [ 855.594925][T13970] netlink: 'syz.2.2979': attribute type 2 has an invalid length. [ 855.809456][ T102] team0 (unregistering): Port device team_slave_1 removed [ 855.870497][ T102] team0 (unregistering): Port device team_slave_0 removed [ 855.949234][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.063009][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.803211][ T102] bond0 (unregistering): Released all slaves [ 857.663349][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 857.714486][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 857.756633][T13781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.966267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 858.975787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 858.991541][T13988] loop1: detected capacity change from 0 to 4096 [ 859.028070][T13781] device veth0_vlan entered promiscuous mode [ 859.039960][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 859.055773][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 859.113031][T13996] tmpfs: Unknown parameter 'usrquota' [ 859.186789][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 859.228909][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 859.350200][T13781] device veth1_vlan entered promiscuous mode [ 859.495743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 859.507992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 859.560860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 859.811772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 859.833574][T13781] device veth0_macvtap entered promiscuous mode [ 859.871720][T13781] device veth1_macvtap entered promiscuous mode [ 859.946295][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.969474][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.990509][T14010] netlink: 'syz.0.2989': attribute type 2 has an invalid length. [ 860.007761][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.083099][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.133443][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.187942][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.227994][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.263738][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.273626][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.308830][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.354586][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.394463][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.426287][T13781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.437952][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 860.458067][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 860.504539][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 860.513292][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 860.559188][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.579857][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.604519][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.635310][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.665898][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.723276][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.752644][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.783579][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.822244][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.843675][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.863993][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.883754][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.904496][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.932674][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.958018][T13781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.984212][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 861.008868][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 861.061713][T13781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.112852][T13781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.139083][T13781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.158311][T13781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.523207][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.551993][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.642909][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 861.883492][T14035] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 861.883492][T14035] 葆' [ 862.391882][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.413834][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.505788][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 863.361178][T14060] tmpfs: Unknown parameter 'usrquota' [ 864.065176][T14068] netlink: 'syz.4.3010': attribute type 2 has an invalid length. [ 864.326139][T14078] serio: Serial port pts0 [ 864.435186][T14054] loop1: detected capacity change from 0 to 32768 [ 864.465169][T14054] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 864.527867][T14054] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 864.674343][T14054] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 864.947432][ T154] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 864.965023][ T154] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 865.206690][ T154] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 241ms [ 865.231139][ T154] gfs2: fsid=syz:syz.0: jid=0: Done [ 865.246978][T14054] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 865.577735][T14101] tmpfs: Unknown parameter 'usrquota' [ 866.122472][T14054] gfs2: Unknown parameter ' Z*鹂 m.Dc8'馌' [ 866.800054][T14121] netlink: 'syz.1.3031': attribute type 4 has an invalid length. [ 866.871645][T14121] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3031'. [ 867.469852][T14140] tmpfs: Unknown parameter 'usrquota' [ 868.053948][T14150] netlink: 'syz.0.3042': attribute type 2 has an invalid length. [ 868.278798][T14156] netlink: 'syz.2.3046': attribute type 4 has an invalid length. [ 868.303586][T14156] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3046'. [ 868.567202][T14166] netlink: 'syz.3.3049': attribute type 2 has an invalid length. [ 868.806055][T14170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 869.014309][T14138] loop1: detected capacity change from 0 to 32768 [ 869.055376][T14138] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 869.120830][T14138] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 869.180850][T14138] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 869.220735][ T8669] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 869.230101][ T8669] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 869.422463][ T8669] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 192ms [ 869.450837][ T8669] gfs2: fsid=syz:syz.0: jid=0: Done [ 869.468301][T14138] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 869.697355][T14192] netlink: 'syz.4.3060': attribute type 4 has an invalid length. [ 869.743807][T14192] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3060'. [ 869.973294][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.979734][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.984613][T14138] gfs2: Unknown parameter ' Z*鹂 m.Dc8'馌' [ 870.634791][T14215] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 870.634791][T14215] 葆' [ 871.486955][T14225] netlink: 'syz.3.3074': attribute type 4 has an invalid length. [ 871.574229][T14225] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3074'. [ 871.655330][T14228] hfsplus: unable to find HFS+ superblock [ 873.284211][T14248] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 873.284211][T14248] 葆' [ 874.133652][T14257] netlink: 'syz.4.3086': attribute type 4 has an invalid length. [ 874.157068][T14257] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3086'. [ 874.330492][T14260] netlink: 'syz.2.3080': attribute type 2 has an invalid length. [ 875.176859][T14238] loop1: detected capacity change from 0 to 32768 [ 875.239062][T14238] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 875.294164][T14238] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 875.361604][T14238] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 875.394452][ T8675] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 875.405379][ T8675] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 875.505652][ T8675] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 875.545826][ T8675] gfs2: fsid=syz:syz.0: jid=0: Done [ 875.558969][T14238] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 875.600368][T14238] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 875.778386][T14282] netlink: 'syz.0.3095': attribute type 2 has an invalid length. [ 876.954992][T14294] netlink: 'syz.4.3100': attribute type 4 has an invalid length. [ 876.962753][T14294] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3100'. [ 877.658252][T14307] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 877.658252][T14307] 葆' [ 881.708937][T14312] netlink: 'syz.0.3103': attribute type 2 has an invalid length. [ 885.617302][T14364] netlink: 'syz.4.3115': attribute type 2 has an invalid length. [ 885.906151][T14366] loop0: detected capacity change from 0 to 1024 [ 885.955412][T14366] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 885.985695][T14366] EXT4-fs (loop0): orphan cleanup on readonly fs [ 886.002454][T14366] EXT4-fs error (device loop0): ext4_free_blocks:6213: comm syz.0.3120: Freeing blocks not in datazone - block = 0, count = 4096 [ 886.022358][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3123'. [ 886.040436][T14366] EXT4-fs (loop0): 1 orphan inode deleted [ 886.047183][T14366] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 886.155183][ T8522] EXT4-fs (loop0): unmounting filesystem. [ 886.174429][T14372] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3122'. [ 889.183130][T14423] loop3: detected capacity change from 0 to 1024 [ 889.244938][T14423] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 889.277914][T14423] EXT4-fs (loop3): orphan cleanup on readonly fs [ 889.294306][T14423] EXT4-fs error (device loop3): ext4_free_blocks:6213: comm syz.3.3137: Freeing blocks not in datazone - block = 0, count = 4096 [ 889.388568][T14423] EXT4-fs (loop3): 1 orphan inode deleted [ 889.420748][T14423] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 889.564822][T14429] netlink: 'syz.4.3136': attribute type 2 has an invalid length. [ 889.586597][T13781] EXT4-fs (loop3): unmounting filesystem. [ 890.690384][T14409] loop2: detected capacity change from 0 to 32768 [ 890.707733][T14409] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 890.724420][T14409] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 890.754660][T14409] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 890.767651][ T3992] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 890.775756][ T3992] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 890.839170][ T3992] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms [ 890.848758][ T3992] gfs2: fsid=syz:syz.0: jid=0: Done [ 890.854452][T14409] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 892.551647][T14469] loop1: detected capacity change from 0 to 1024 [ 892.561026][T14465] hfsplus: unable to find HFS+ superblock [ 892.574533][T14469] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 892.599243][T14469] EXT4-fs (loop1): orphan cleanup on readonly fs [ 892.610852][T14469] EXT4-fs error (device loop1): ext4_free_blocks:6213: comm syz.1.3152: Freeing blocks not in datazone - block = 0, count = 4096 [ 892.632402][T14469] EXT4-fs (loop1): 1 orphan inode deleted [ 892.639837][T14469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 893.907354][ T7279] EXT4-fs (loop1): unmounting filesystem. [ 896.294971][T14513] netlink: 'syz.1.3158': attribute type 2 has an invalid length. [ 899.870153][T14554] hfsplus: unable to find HFS+ superblock [ 905.612319][T14601] netlink: 'syz.4.3187': attribute type 2 has an invalid length. [ 906.385089][T14605] fuse: Bad value for 'fd' [ 906.568029][T14612] loop0: detected capacity change from 0 to 1024 [ 906.642981][T14612] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 906.675488][T14612] EXT4-fs (loop0): orphan cleanup on readonly fs [ 906.802570][T14612] EXT4-fs error (device loop0): ext4_free_blocks:6213: comm syz.0.3193: Freeing blocks not in datazone - block = 0, count = 4096 [ 907.097707][T14612] EXT4-fs (loop0): 1 orphan inode deleted [ 907.192684][T14612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 907.415505][ T8522] EXT4-fs (loop0): unmounting filesystem. [ 908.144159][T14641] hfsplus: unable to find HFS+ superblock [ 910.149963][T14659] trusted_key: encrypted_key: insufficient parameters specified [ 912.645181][T14696] trusted_key: encrypted_key: insufficient parameters specified [ 913.793519][T14718] hfsplus: unable to find HFS+ superblock [ 916.112664][T14736] loop2: detected capacity change from 0 to 1024 [ 916.169582][T14736] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 916.225012][T14736] EXT4-fs (loop2): orphan cleanup on readonly fs [ 916.231575][T14736] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.3236: Freeing blocks not in datazone - block = 0, count = 4096 [ 916.344257][T14736] EXT4-fs (loop2): 1 orphan inode deleted [ 916.353758][T14736] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 916.475290][T10521] EXT4-fs (loop2): unmounting filesystem. [ 917.126748][T14754] trusted_key: encrypted_key: insufficient parameters specified [ 919.190943][T14775] loop2: detected capacity change from 0 to 1024 [ 919.212783][T14775] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 919.231864][T14775] EXT4-fs (loop2): orphan cleanup on readonly fs [ 919.259105][T14775] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.3251: Freeing blocks not in datazone - block = 0, count = 4096 [ 919.284260][T14775] EXT4-fs (loop2): 1 orphan inode deleted [ 919.290104][T14775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 919.332722][T10521] EXT4-fs (loop2): unmounting filesystem. [ 920.712739][T14806] trusted_key: encrypted_key: insufficient parameters specified [ 921.833625][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 922.103777][ T3690] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 923.143817][ T3690] usb 2-1: Using ep0 maxpacket: 32 [ 923.274068][ T3690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.300195][ T3690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.350822][ T3690] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 923.372225][T14856] trusted_key: encrypted_key: insufficient parameters specified [ 923.379399][ T3690] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 923.414502][ T3690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.438807][ T3690] usb 2-1: config 0 descriptor?? [ 923.721789][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'. [ 924.033893][ T3690] usbhid 2-1:0.0: can't add hid device: -71 [ 924.127511][ T3690] usbhid: probe of 2-1:0.0 failed with error -71 [ 924.195938][ T3690] usb 2-1: USB disconnect, device number 21 [ 926.393832][ T8671] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 926.609296][T14887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.638831][T14891] loop1: detected capacity change from 0 to 1024 [ 926.674960][T14891] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 926.696486][T14891] EXT4-fs (loop1): orphan cleanup on readonly fs [ 926.703062][T14891] EXT4-fs error (device loop1): ext4_free_blocks:6213: comm syz.1.3292: Freeing blocks not in datazone - block = 0, count = 4096 [ 926.733230][T14891] EXT4-fs (loop1): 1 orphan inode deleted [ 926.752004][T14891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 926.833965][ T8671] usb 3-1: not running at top speed; connect to a high speed hub [ 926.847239][ T7279] EXT4-fs (loop1): unmounting filesystem. [ 927.024494][ T8674] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 927.091664][ T8671] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.683621][ T8671] usb 3-1: config 1 interface 0 has no altsetting 0 [ 927.953906][ T8671] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.40 [ 927.962990][ T8671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.976744][ T8671] usb 3-1: Product: syz [ 927.988325][ T8671] usb 3-1: Manufacturer: syz [ 927.993075][ T8671] usb 3-1: SerialNumber: syz [ 928.147497][T14910] trusted_key: encrypted_key: insufficient parameters specified [ 928.314710][ T8674] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 928.417198][ T8674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.546217][ T8674] usb 4-1: Product: syz [ 928.593927][ T8671] usbhid 3-1:1.0: can't add hid device: -71 [ 928.603482][ T8674] usb 4-1: Manufacturer: syz [ 928.631666][T14915] loop0: detected capacity change from 0 to 2048 [ 928.691154][ T8671] usbhid: probe of 3-1:1.0 failed with error -71 [ 928.697804][ T8674] usb 4-1: SerialNumber: syz [ 928.712007][ T8671] usb 3-1: USB disconnect, device number 23 [ 928.719285][ T8674] usb 4-1: config 0 descriptor?? [ 928.757726][T14915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 928.766300][ T8674] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 928.773900][T14915] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038 (0x7fffffff) [ 928.984750][ T8674] gspca_sunplus: reg_r err -71 [ 929.063439][ T8674] usb 4-1: USB disconnect, device number 21 [ 929.355446][ T8522] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /370/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 929.552958][ T8522] EXT4-fs (loop0): unmounting filesystem. [ 931.340612][T14949] loop3: detected capacity change from 0 to 1024 [ 931.358632][T14949] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 931.405578][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.412032][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.426594][T14949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 931.923600][T14964] loop1: detected capacity change from 0 to 1024 [ 931.995891][T14964] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 932.109510][T14964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 932.426754][T13781] EXT4-fs (loop3): unmounting filesystem. [ 932.514535][ T7279] EXT4-fs (loop1): unmounting filesystem. [ 932.573927][T14972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 933.777860][ T8671] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 934.143389][T14982] loop2: detected capacity change from 0 to 1024 [ 934.219338][T14982] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 934.238584][T14982] EXT4-fs (loop2): orphan cleanup on readonly fs [ 934.279394][T14982] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.3322: Freeing blocks not in datazone - block = 0, count = 4096 [ 934.324896][ T8671] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 934.351808][ T8671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.364590][T14982] EXT4-fs (loop2): 1 orphan inode deleted [ 934.371605][T14982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 934.421655][ T8671] usb 5-1: Product: syz [ 934.458309][ T8671] usb 5-1: Manufacturer: syz [ 934.485385][ T8671] usb 5-1: SerialNumber: syz [ 934.531294][ T8671] usb 5-1: config 0 descriptor?? [ 934.623910][T10521] EXT4-fs (loop2): unmounting filesystem. [ 934.630103][ T8671] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 934.824043][ T8671] gspca_sunplus: reg_r err -71 [ 934.844085][ T8671] usb 5-1: USB disconnect, device number 19 [ 937.987579][T15028] binder: 15027:15028 ioctl c0306201 0 returned -14 [ 938.584710][T15039] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 938.584710][T15039] 葆' [ 939.448011][T15048] netlink: 'syz.2.3345': attribute type 2 has an invalid length. [ 940.148631][T15050] loop2: detected capacity change from 0 to 1024 [ 940.347887][T15050] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 940.378233][T15050] EXT4-fs (loop2): orphan cleanup on readonly fs [ 940.406306][T15050] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.3347: Freeing blocks not in datazone - block = 0, count = 4096 [ 940.518150][T15050] EXT4-fs (loop2): 1 orphan inode deleted [ 940.564498][T15050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 940.828647][T10521] EXT4-fs (loop2): unmounting filesystem. [ 942.105568][T15070] binder: 15065:15070 ioctl c0306201 0 returned -14 [ 942.564536][T15072] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 942.564536][T15072] 葆' [ 942.627704][T15077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3354'. [ 944.177686][T15112] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 945.116142][T15116] loop0: detected capacity change from 0 to 6 [ 945.516007][T15116] Dev loop0: unable to read RDB block 6 [ 945.522134][T15116] loop0: unable to read partition table [ 945.528076][T15116] loop0: partition table beyond EOD, truncated [ 945.534823][T15116] loop_reread_partitions: partition scan of loop0 (x熝鵂诂Ыd皮脆杻荨夥 [ 945.534823][T15116] ) failed (rc=-5) [ 945.957379][T15119] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 945.957379][T15119] 葆' [ 946.249169][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3369'. [ 948.529370][T15159] loop2: detected capacity change from 0 to 1024 [ 950.472509][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3381'. [ 951.802126][T15185] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 951.802126][T15185] 葆' [ 953.266100][T15206] CIFS: Unable to determine destination address [ 953.841965][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3397'. [ 957.009743][T15235] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 957.009743][T15235] 葆' [ 959.208419][T15271] tmpfs: Unknown parameter 'usrquota' [ 962.111199][T15311] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 963.469174][T15312] tmpfs: Unknown parameter 'usrquota' [ 966.400289][T15350] CIFS: Unable to determine destination address [ 967.421252][T15357] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 967.966333][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3439'. [ 968.091579][T15361] netlink: 884 bytes leftover after parsing attributes in process `syz.2.3440'. [ 968.118748][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3443'. [ 969.299282][T15385] CIFS: Unable to determine destination address [ 969.403985][ T3645] Bluetooth: hci4: command 0x0406 tx timeout [ 969.607883][T15386] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3449'. [ 970.251868][T15399] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 975.126434][T15412] loop0: detected capacity change from 0 to 512 [ 975.166255][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3455'. [ 975.301285][T15412] EXT4-fs error (device loop0): ext4_do_update_inode:5221: inode #16: comm syz.0.3457: corrupted inode contents [ 975.459162][T15412] EXT4-fs error (device loop0): ext4_dirty_inode:6083: inode #16: comm syz.0.3457: mark_inode_dirty error [ 975.802302][T15433] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 975.802302][T15433] 葆' [ 975.803018][T15412] EXT4-fs error (device loop0): ext4_do_update_inode:5221: inode #16: comm syz.0.3457: corrupted inode contents [ 976.258762][T15412] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.3457: mark_inode_dirty error [ 976.302567][T15412] EXT4-fs error (device loop0): ext4_do_update_inode:5221: inode #16: comm syz.0.3457: corrupted inode contents [ 976.661905][T15412] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 976.684754][T15412] EXT4-fs error (device loop0): ext4_do_update_inode:5221: inode #16: comm syz.0.3457: corrupted inode contents [ 976.687134][T15442] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3462'. [ 976.707514][T15412] EXT4-fs error (device loop0): ext4_truncate:4311: inode #16: comm syz.0.3457: mark_inode_dirty error [ 976.724558][T15412] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 976.744813][T15412] EXT4-fs (loop0): 1 truncate cleaned up [ 976.779236][T14902] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 976.829567][T15412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 976.844500][T14902] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:1: Failed to release dquot type 1 [ 976.875034][T15412] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038 (0x7fffffff) [ 977.058034][ T3645] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 977.074581][ T8522] EXT4-fs (loop0): unmounting filesystem. [ 977.469799][T15448] CIFS: Unable to determine destination address [ 978.282684][T15459] netlink: 368 bytes leftover after parsing attributes in process `syz.4.3467'. [ 979.369064][T15455] loop3: detected capacity change from 0 to 40427 [ 979.444522][T15455] F2FS-fs (loop3): invalid crc value [ 979.800847][T15455] F2FS-fs (loop3): Found nat_bits in checkpoint [ 980.077820][T15485] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 980.077820][T15485] 葆' [ 980.908691][T15455] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 981.091690][ T3645] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 981.467042][ T3645] Bluetooth: hci0: Injecting HCI hardware error event [ 981.476727][T15493] CIFS: Unable to determine destination address [ 981.492164][ T3636] Bluetooth: hci0: hardware error 0x00 [ 983.572605][ T3636] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 983.833057][T15529] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 983.833057][T15529] 葆' [ 984.321957][T15503] loop1: detected capacity change from 0 to 40427 [ 984.538159][T15534] binder: 15533:15534 ioctl c0306201 0 returned -14 [ 984.596426][T15503] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 984.606660][T15503] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 984.648759][T15541] tmpfs: Unknown parameter 'usrquota' [ 984.782702][T15503] F2FS-fs (loop1): Found nat_bits in checkpoint [ 986.313425][T15572] binder: 15570:15572 ioctl c0306201 0 returned -14 [ 988.771547][T15616] binder: 15613:15616 ioctl c0306201 0 returned -14 [ 989.643894][T15631] CIFS: Unable to determine destination address [ 992.397972][T15668] netlink: 'syz.1.3526': attribute type 2 has an invalid length. [ 992.445348][ T3636] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 992.452098][ T3645] Bluetooth: hci5: command 0x1003 tx timeout [ 992.884903][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.891230][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.102490][T15687] CIFS: Unable to determine destination address [ 995.064951][T15709] tmpfs: Unknown parameter 'usrquota' [ 996.649470][T15711] loop0: detected capacity change from 0 to 32768 [ 996.733388][T15711] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3544 (15711) [ 996.775931][T15711] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 996.968447][T15711] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 997.654058][T15711] BTRFS info (device loop0): enabling auto defrag [ 997.660600][T15711] BTRFS info (device loop0): max_inline at 0 [ 997.673916][T15711] BTRFS info (device loop0): enabling ssd optimizations [ 997.680930][T15711] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 997.719370][T15736] CIFS: Unable to determine destination address [ 997.858482][T15735] loop1: detected capacity change from 0 to 32768 [ 997.869792][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3548'. [ 997.885297][T15735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3550 (15735) [ 997.907976][T15735] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 997.918255][T15735] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 997.927238][T15735] BTRFS info (device loop1): using free space tree [ 997.939013][T15711] BTRFS info (device loop0): use lzo compression, level 0 [ 997.946381][T15711] BTRFS info (device loop0): using free space tree [ 998.258067][T15711] BTRFS error (device loop0): open_ctree failed [ 998.408549][T15735] BTRFS info (device loop1): enabling ssd optimizations [ 998.541572][T15783] tmpfs: Unknown parameter 'usrquota' [ 1001.224386][ T7279] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1001.615311][T15806] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3559'. [ 1001.624571][ T3685] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1002.123215][T15813] netlink: 'syz.0.3560': attribute type 2 has an invalid length. [ 1002.294038][ T3685] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1002.311622][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.333965][ T3685] usb 5-1: Product: syz [ 1002.338262][ T3685] usb 5-1: Manufacturer: syz [ 1002.344785][ T3685] usb 5-1: SerialNumber: syz [ 1002.352407][ T3685] usb 5-1: config 0 descriptor?? [ 1002.395171][ T3685] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1002.613983][ T3685] gspca_sunplus: reg_r err -71 [ 1002.625780][ T3685] usb 5-1: USB disconnect, device number 20 [ 1004.144271][ T3645] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1004.583812][ T3685] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1005.272347][T15861] netlink: 'syz.4.3578': attribute type 2 has an invalid length. [ 1005.341857][ T3685] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1005.377054][ T3685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.393973][ T3685] usb 4-1: Product: syz [ 1005.398241][ T3685] usb 4-1: Manufacturer: syz [ 1005.403013][ T3685] usb 4-1: SerialNumber: syz [ 1005.431266][ T3685] usb 4-1: config 0 descriptor?? [ 1005.495962][ T3685] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1005.683918][T15868] netlink: 'syz.2.3582': attribute type 2 has an invalid length. [ 1005.703980][ T3685] gspca_sunplus: reg_r err -71 [ 1005.735265][ T3685] usb 4-1: USB disconnect, device number 22 [ 1005.891025][T15850] loop1: detected capacity change from 0 to 32768 [ 1005.899980][T15850] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1005.909130][T15850] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1005.938227][T15850] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1005.987319][ T3685] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1005.994415][ T3685] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1006.091500][ T3685] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 97ms [ 1006.118314][ T3685] gfs2: fsid=syz:syz.0: jid=0: Done [ 1006.150586][T15850] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1006.629757][T15877] tmpfs: Unknown parameter 'usrquota' [ 1006.802981][T15867] loop0: detected capacity change from 0 to 32768 [ 1006.971112][T15867] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1007.041798][T15867] CPU: 0 PID: 15867 Comm: syz.0.3583 Not tainted 6.1.104-syzkaller #0 [ 1007.050031][T15867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1007.060104][T15867] Call Trace: [ 1007.063399][T15867] [ 1007.066337][T15867] dump_stack_lvl+0x1e3/0x2cb [ 1007.071036][T15867] ? nf_tcp_handle_invalid+0x642/0x642 [ 1007.076550][T15867] ? panic+0x764/0x764 [ 1007.080646][T15867] sysfs_create_dir_ns+0x2c6/0x390 [ 1007.085775][T15867] ? sysfs_warn_dup+0xa0/0xa0 [ 1007.090481][T15867] kobject_add_internal+0x6df/0xd10 [ 1007.095715][T15867] kobject_init_and_add+0x120/0x190 [ 1007.100923][T15867] ? lockdep_softirqs_off+0x420/0x420 [ 1007.106305][T15867] ? widen_string+0x3a/0x310 [ 1007.110919][T15867] ? kobject_add+0x210/0x210 [ 1007.115528][T15867] ? __init_swait_queue_head+0xaa/0x140 [ 1007.121092][T15867] gfs2_sys_fs_add+0x237/0x4a0 [ 1007.125870][T15867] ? gfs2_recover_set+0x240/0x240 [ 1007.130902][T15867] ? snprintf+0xd6/0x120 [ 1007.135158][T15867] ? vscnprintf+0x80/0x80 [ 1007.139499][T15867] ? read_word_at_a_time+0xe/0x20 [ 1007.144539][T15867] ? strscpy+0x89/0x220 [ 1007.148702][T15867] gfs2_fill_super+0x1228/0x26e0 [ 1007.153656][T15867] ? bdev_name+0x1d7/0x3a0 [ 1007.158084][T15867] ? vsnprintf+0xe31/0x1c70 [ 1007.162605][T15867] ? gfs2_reconfigure+0xcf0/0xcf0 [ 1007.167647][T15867] ? ptr_to_hashval+0x70/0x70 [ 1007.172418][T15867] ? up_write+0x19d/0x580 [ 1007.176778][T15867] ? set_blocksize+0x1c6/0x350 [ 1007.181559][T15867] get_tree_bdev+0x3fe/0x620 [ 1007.186161][T15867] ? gfs2_reconfigure+0xcf0/0xcf0 [ 1007.191200][T15867] gfs2_get_tree+0x50/0x210 [ 1007.195717][T15867] ? bpf_lsm_capable+0x5/0x10 [ 1007.200446][T15867] vfs_get_tree+0x88/0x270 [ 1007.204882][T15867] do_new_mount+0x2ba/0xb40 [ 1007.209393][T15867] ? ns_capable+0x85/0xe0 [ 1007.213732][T15867] ? do_move_mount_old+0x160/0x160 [ 1007.218861][T15867] __se_sys_mount+0x2d5/0x3c0 [ 1007.223558][T15867] ? __x64_sys_mount+0xc0/0xc0 [ 1007.228333][T15867] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1007.234322][T15867] ? lockdep_hardirqs_on+0x94/0x130 [ 1007.239530][T15867] ? __x64_sys_mount+0x1c/0xc0 [ 1007.244306][T15867] do_syscall_64+0x3b/0xb0 [ 1007.248730][T15867] ? clear_bhb_loop+0x45/0xa0 [ 1007.253417][T15867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.259327][T15867] RIP: 0033:0x7f9cb93790fa [ 1007.263750][T15867] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.283367][T15867] RSP: 002b:00007f9cba0f4e68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1007.291790][T15867] RAX: ffffffffffffffda RBX: 00007f9cba0f4ef0 RCX: 00007f9cb93790fa [ 1007.299767][T15867] RDX: 00000000200124c0 RSI: 0000000020012500 RDI: 00007f9cba0f4eb0 [ 1007.307750][T15867] RBP: 00000000200124c0 R08: 00007f9cba0f4ef0 R09: 0000000000004840 [ 1007.315733][T15867] R10: 0000000000004840 R11: 0000000000000202 R12: 0000000020012500 [ 1007.323712][T15867] R13: 00007f9cba0f4eb0 R14: 00000000000124ab R15: 0000000020000000 [ 1007.331715][T15867] [ 1007.568397][T15850] gfs2: Unknown parameter ' Z*鹂 m.Dc8'馌' [ 1007.700104][T15867] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1007.776316][T15867] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1013.419516][T15912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3592'. [ 1015.660949][T15983] kernel read not supported for file /$ (pid: 15983 comm: syz.3.3613) [ 1015.673069][ T26] audit: type=1800 audit(1723416319.782:32): pid=15983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3613" name=9924D4 dev="mqueue" ino=80153 res=0 errno=0 [ 1016.422611][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'. [ 1016.895818][T16010] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1016.951622][T16013] trusted_key: encrypted_key: insufficient parameters specified [ 1017.104890][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1017.322736][T16029] loop1: detected capacity change from 0 to 1024 [ 1017.600440][T16029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1019.559827][T16029] loop1: detected capacity change from 1024 to 11 [ 1019.580951][T16053] syz.1.3624: attempt to access beyond end of device [ 1019.580951][T16053] loop1: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 1019.698408][T16053] syz.1.3624: attempt to access beyond end of device [ 1019.698408][T16053] loop1: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 1019.754712][T16053] syz.1.3624: attempt to access beyond end of device [ 1019.754712][T16053] loop1: rw=524288, sector=16, nr_sectors = 2 limit=11 [ 1019.844939][T16053] syz.1.3624: attempt to access beyond end of device [ 1019.844939][T16053] loop1: rw=524288, sector=20, nr_sectors = 2 limit=11 [ 1019.874001][T16053] syz.1.3624: attempt to access beyond end of device [ 1019.874001][T16053] loop1: rw=524288, sector=22, nr_sectors = 2 limit=11 [ 1019.975958][T16053] syz.1.3624: attempt to access beyond end of device [ 1019.975958][T16053] loop1: rw=12288, sector=18, nr_sectors = 2 limit=11 [ 1020.054895][T16053] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #18: block 9: comm syz.1.3624: unable to read itable block [ 1020.236840][T16053] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5879: IO failure [ 1020.282071][T16053] EXT4-fs error (device loop1): ext4_dirty_inode:6083: inode #18: comm syz.1.3624: mark_inode_dirty error [ 1020.300644][T16053] syz.1.3624: attempt to access beyond end of device [ 1020.300644][T16053] loop1: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 1020.398244][T16053] syz.1.3624: attempt to access beyond end of device [ 1020.398244][T16053] loop1: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 1020.443988][T16053] syz.1.3624: attempt to access beyond end of device [ 1020.443988][T16053] loop1: rw=524288, sector=16, nr_sectors = 2 limit=11 [ 1020.482546][T16053] syz.1.3624: attempt to access beyond end of device [ 1020.482546][T16053] loop1: rw=524288, sector=20, nr_sectors = 2 limit=11 [ 1020.503307][T16073] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3634'. [ 1020.523002][T16053] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #18: block 9: comm syz.1.3624: unable to read itable block [ 1020.544181][T16053] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5879: IO failure [ 1020.622435][T16053] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #18: comm syz.1.3624: mark_inode_dirty error [ 1020.654646][T16053] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #18: block 9: comm syz.1.3624: unable to read itable block [ 1020.674630][T16053] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5879: IO failure [ 1020.765231][T16053] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #18: comm syz.1.3624: mark_inode_dirty error [ 1020.790169][T16053] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #18: block 9: comm syz.1.3624: unable to read itable block [ 1021.114554][ T7279] EXT4-fs (loop1): unmounting filesystem. [ 1021.148697][T16035] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 1021.566522][ T3645] Bluetooth: hci5: command 0x1003 tx timeout [ 1021.566597][ T3636] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1023.563817][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1023.570962][ C0] EXT4-fs (loop4): initial error at time 1723416025: ext4_release_dquot:6800 [ 1023.579792][ C0] EXT4-fs (loop4): last error at time 1723416025: ext4_release_dquot:6800 [ 1025.679130][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 1025.744193][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3655'. [ 1026.279057][ T3649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1026.295964][ T3649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1026.331161][ T3649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1026.364344][ T3649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1026.373054][ T3649] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1026.383640][ T3649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1028.412191][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3659'. [ 1028.524185][T16092] Bluetooth: hci5: command tx timeout [ 1028.689116][ T3952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.753454][T16181] CIFS: Unable to determine destination address [ 1029.487449][T16175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3662'. [ 1029.612902][T16152] chnl_net:caif_netlink_parms(): no params data found [ 1030.624765][T16092] Bluetooth: hci5: command tx timeout [ 1030.834215][ T3952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.856324][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 1030.927390][ T3952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.154960][ T3952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.169118][T16209] loop2: detected capacity change from 0 to 1024 [ 1031.311702][T16152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.359440][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.451289][T16152] device bridge_slave_0 entered promiscuous mode [ 1031.797945][T16152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.853871][T16152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.869105][T16152] device bridge_slave_1 entered promiscuous mode [ 1031.919869][T16219] loop2: detected capacity change from 0 to 256 [ 1031.976978][T16152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.046959][T16152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.395832][T16228] CIFS: Unable to determine destination address [ 1033.415316][T16092] Bluetooth: hci5: command tx timeout [ 1033.602605][T16232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3676'. [ 1033.662040][T16152] team0: Port device team_slave_0 added [ 1033.716358][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1033.986175][T16152] team0: Port device team_slave_1 added [ 1035.074801][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 1035.158894][T16152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.193953][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.533938][T16092] Bluetooth: hci5: command tx timeout [ 1035.660338][T16152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1037.168103][T16152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.787766][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.937324][T16152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.401699][T16152] device hsr_slave_0 entered promiscuous mode [ 1038.746950][T16152] device hsr_slave_1 entered promiscuous mode [ 1038.764667][T16152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1038.776970][T16152] Cannot create hsr debugfs directory [ 1038.938898][T16300] CIFS: Unable to determine destination address [ 1039.398070][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1039.575666][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1039.845508][T16317] trusted_key: encrypted_key: insufficient parameters specified [ 1041.317587][T16336] netlink: 884 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1041.634030][ T3952] IPVS: stopping backup sync thread 11040 ... [ 1042.440439][T16350] CIFS: Unable to determine destination address [ 1043.851685][T16152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1043.890622][T16152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1043.927988][T16152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1043.941967][T16152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1044.077935][T16359] loop2: detected capacity change from 0 to 512 [ 1044.084783][ T3952] device hsr_slave_0 left promiscuous mode [ 1044.140922][T16359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1044.165634][ T3952] device hsr_slave_1 left promiscuous mode [ 1044.181424][ T3952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.191135][T16359] ext4 filesystem being mounted at /360/bus supports timestamps until 2038 (0x7fffffff) [ 1044.201961][ T3952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.227187][ T3952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.259721][ T3952] device bridge_slave_1 left promiscuous mode [ 1044.269050][ T3952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.312459][ T3952] device bridge_slave_0 left promiscuous mode [ 1044.335854][T16367] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz.2.3706: path /360/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1044.353866][ T3952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.451679][ T3952] device veth1_macvtap left promiscuous mode [ 1044.470092][ T3952] device veth0_macvtap left promiscuous mode [ 1044.494599][ T3952] device veth1_vlan left promiscuous mode [ 1044.516196][ T3952] device veth0_vlan left promiscuous mode [ 1044.958697][T10521] EXT4-fs (loop2): unmounting filesystem. [ 1046.254027][T16384] loop2: detected capacity change from 0 to 65536 [ 1046.356661][T16384] XFS (loop2): Mounting V5 Filesystem [ 1046.382009][ T3952] team0 (unregistering): Port device team_slave_1 removed [ 1046.409205][T16384] XFS (loop2): Ending clean mount [ 1046.476290][ T3952] team0 (unregistering): Port device team_slave_0 removed [ 1046.535695][ T3952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.587164][T10521] XFS (loop2): Unmounting Filesystem [ 1046.632976][ T3952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.868440][ T3952] bond0 (unregistering): Released all slaves [ 1048.008212][T16364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3705'. [ 1048.021903][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 1048.392849][T16152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.195653][T16412] netlink: 'syz.0.3717': attribute type 2 has an invalid length. [ 1049.265058][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1049.304310][T13298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.341515][T16152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.420064][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.440388][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.471439][T12427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.478614][T12427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.573404][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.582248][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.758903][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.767974][T14798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.775149][T14798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.783823][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.792844][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.801901][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.813244][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.832010][T16152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1049.886331][T16152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1049.928768][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.944619][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1049.953417][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.974747][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1049.994641][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.003282][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.032480][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.059411][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.231388][T16420] loop3: detected capacity change from 0 to 32768 [ 1050.326260][T16420] XFS (loop3): Mounting V5 Filesystem [ 1050.587180][T16420] XFS (loop3): Ending clean mount [ 1050.595295][T16451] trusted_key: encrypted_key: insufficient parameters specified [ 1050.640030][T16420] XFS (loop3): Quotacheck needed: Please wait. [ 1050.834141][T16420] XFS (loop3): Quotacheck: Done. [ 1051.644736][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1051.652268][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1051.712709][T16152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.719652][ T26] audit: type=1326 audit(1723416355.822:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1051.781756][ T26] audit: type=1326 audit(1723416355.822:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1051.915645][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1051.937195][ T26] audit: type=1326 audit(1723416355.832:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.3.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1051.944564][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1052.302569][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1052.341810][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1052.396675][T16152] device veth0_vlan entered promiscuous mode [ 1052.430856][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1052.452957][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1052.509906][T16152] device veth1_vlan entered promiscuous mode [ 1052.606424][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1052.620628][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1052.638375][T13781] XFS (loop3): Unmounting Filesystem [ 1052.646743][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1052.656955][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1052.668213][T16152] device veth0_macvtap entered promiscuous mode [ 1052.700642][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1052.733579][T16152] device veth1_macvtap entered promiscuous mode [ 1052.811553][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.944175][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.990825][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.010708][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.020617][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.036163][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.046074][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.056830][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.073599][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.086465][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.278540][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.427616][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.565975][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.694090][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.747767][T16152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.792682][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.838490][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.883936][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.931957][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.941899][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.952453][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.962345][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.974405][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.999163][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.032119][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.051163][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.062135][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.080913][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.093111][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.128357][T16152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.183977][T15802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1054.192864][T15802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1054.281850][T15802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1054.303182][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.309587][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.328275][T15802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1054.374032][T16152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.397410][T16152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.437123][T16152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.460012][T16152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.830083][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.885784][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.989579][T15207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.015330][T15207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.095178][T15797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1055.205140][T15797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1056.560928][ T26] audit: type=1326 audit(1723416360.672:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1056.585155][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1056.783840][ T26] audit: type=1326 audit(1723416360.672:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1056.876903][T16537] trusted_key: encrypted_key: insufficient parameters specified [ 1056.987849][ T26] audit: type=1326 audit(1723416360.672:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1057.237608][ T26] audit: type=1326 audit(1723416360.672:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1057.264206][ T26] audit: type=1326 audit(1723416360.672:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1057.286490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.330691][ T26] audit: type=1326 audit(1723416360.672:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1057.357601][ T26] audit: type=1326 audit(1723416360.672:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1057.386698][ T26] audit: type=1326 audit(1723416360.672:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1057.411206][ T26] audit: type=1326 audit(1723416360.672:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1057.435638][ T26] audit: type=1326 audit(1723416360.672:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1057.457915][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.703958][ T26] audit: type=1326 audit(1723416360.672:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.3.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe852f779f9 code=0x7ffc0000 [ 1058.059681][T16554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3746'. [ 1058.327884][T16559] loop2: detected capacity change from 0 to 512 [ 1058.405040][T16559] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1058.594818][T16559] UDF-fs: Scanning with blocksize 512 failed [ 1059.985728][T16559] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1059.993269][T16559] UDF-fs: Scanning with blocksize 1024 failed [ 1060.124854][T16559] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1060.221429][T16559] UDF-fs: Scanning with blocksize 2048 failed [ 1060.323666][T16559] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1060.450953][T16559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1060.740454][T16580] loop0: detected capacity change from 0 to 32768 [ 1060.760826][T16580] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.3754 (16580) [ 1060.833570][T16580] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1060.844489][T16580] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1060.853278][T16580] BTRFS info (device loop0): using free space tree [ 1061.214433][T16580] BTRFS info (device loop0): enabling ssd optimizations [ 1062.290765][T16616] trusted_key: encrypted_key: insufficient parameters specified [ 1062.308351][ T8522] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1062.374444][T16620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3759'. [ 1062.815774][T16628] loop2: detected capacity change from 0 to 1024 [ 1062.867725][T16628] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1062.952279][T16628] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1063.004056][T16628] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.3762: Freeing blocks not in datazone - block = 0, count = 4096 [ 1063.079633][T16628] EXT4-fs (loop2): 1 orphan inode deleted [ 1063.087220][T16628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1063.165241][T10521] EXT4-fs (loop2): unmounting filesystem. [ 1063.935748][T16643] CIFS: Unable to determine destination address [ 1064.783303][T16654] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1066.160760][T16677] loop0: detected capacity change from 0 to 1024 [ 1066.237372][T16677] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1066.257206][T16677] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1066.328353][T16677] EXT4-fs error (device loop0): ext4_free_blocks:6213: comm syz.0.3777: Freeing blocks not in datazone - block = 0, count = 4096 [ 1066.351382][T16677] EXT4-fs (loop0): 1 orphan inode deleted [ 1066.357609][T16677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1066.507849][ T8522] EXT4-fs (loop0): unmounting filesystem. [ 1066.726519][T16689] CIFS: Unable to determine destination address [ 1067.625808][T16700] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1068.893907][T12427] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1069.564295][T12427] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1069.596652][T12427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.640371][T12427] usb 2-1: Product: syz [ 1069.651476][T12427] usb 2-1: Manufacturer: syz [ 1069.671764][T12427] usb 2-1: SerialNumber: syz [ 1069.792370][T12427] usb 2-1: config 0 descriptor?? [ 1069.898385][T12427] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1070.554033][T12427] gspca_sunplus: reg_r err -71 [ 1070.577282][T12427] usb 2-1: USB disconnect, device number 22 [ 1070.693180][T16725] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1070.900275][T16092] Bluetooth: hci6: sending frame failed (-49) [ 1070.908253][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1071.166339][T16734] CIFS: Unable to determine destination address [ 1072.091936][T16745] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1073.871532][T16758] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3803'. [ 1075.192868][T16092] Bluetooth: hci6: sending frame failed (-49) [ 1075.205352][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1075.439584][T16783] CIFS: Unable to determine destination address [ 1076.477870][T16799] loop2: detected capacity change from 0 to 32768 [ 1076.489359][T16799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3815 (16799) [ 1076.507045][T16799] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1076.517204][T16799] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1076.525951][T16799] BTRFS info (device loop2): using free space tree [ 1077.431273][T16821] loop1: detected capacity change from 0 to 1024 [ 1077.810360][T16821] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1077.869538][T16799] BTRFS info (device loop2): enabling ssd optimizations [ 1077.885785][T16821] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1077.902775][T16821] EXT4-fs error (device loop1): ext4_free_blocks:6213: comm syz.1.3820: Freeing blocks not in datazone - block = 0, count = 4096 [ 1077.925009][T16821] EXT4-fs (loop1): 1 orphan inode deleted [ 1077.930782][T16821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1078.096692][T16152] EXT4-fs (loop1): unmounting filesystem. [ 1078.183860][T14798] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1078.288489][T16844] mmap: syz.3.3825 (16844) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1078.319711][T10521] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1078.383942][T16846] CIFS: Unable to determine destination address [ 1079.244298][T14798] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1079.304175][T14798] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1079.343564][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3826'. [ 1079.351514][T14798] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1079.410225][T14798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.464157][T16837] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1081.942900][ T8675] usb 5-1: USB disconnect, device number 21 [ 1082.213532][T16881] loop0: detected capacity change from 0 to 32768 [ 1082.220752][T16881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.3836 (16881) [ 1082.239420][T16881] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1082.249591][T16881] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1082.258302][T16881] BTRFS info (device loop0): using free space tree [ 1082.316655][T16882] loop3: detected capacity change from 0 to 1024 [ 1082.514409][T16882] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1082.584173][T16906] CIFS: Unable to determine destination address [ 1083.241095][T15435] udevd[15435]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1083.241756][T16882] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1083.305768][T16882] EXT4-fs error (device loop3): ext4_free_blocks:6213: comm syz.3.3835: Freeing blocks not in datazone - block = 0, count = 4096 [ 1083.395647][T16882] EXT4-fs (loop3): 1 orphan inode deleted [ 1083.401420][T16882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1083.412041][T10255] EXT4-fs (loop4): unmounting filesystem. [ 1083.543908][T16881] BTRFS info (device loop0): enabling ssd optimizations [ 1083.946602][ T8522] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1083.995020][T13781] EXT4-fs (loop3): unmounting filesystem. [ 1084.078412][T16092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1084.103558][T16092] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1084.111751][T16092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1084.120844][T16092] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1084.128940][T16092] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1084.136227][T16092] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1085.826125][ T7603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.216509][T16092] Bluetooth: hci6: command tx timeout [ 1086.954207][T16957] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 1086.954207][T16957] 葆' [ 1087.137817][ T7603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.321673][ T7603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.353317][T16964] tmpfs: Unknown parameter 'usrquota' [ 1088.293898][ T3649] Bluetooth: hci6: command tx timeout [ 1088.435876][T16962] CIFS: Unable to determine destination address [ 1088.590533][ T7603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.611180][T16970] loop2: detected capacity change from 0 to 32768 [ 1088.618879][T16970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3851 (16970) [ 1088.637859][T16970] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1088.648162][T16970] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1088.657034][T16970] BTRFS info (device loop2): using free space tree [ 1088.717677][T16970] BTRFS info (device loop2): enabling ssd optimizations [ 1088.938759][T16923] chnl_net:caif_netlink_parms(): no params data found [ 1089.816017][T17005] loop1: detected capacity change from 0 to 256 [ 1089.902996][T17005] FAT-fs (loop1): Unrecognized mount option "00000000000000000003" or missing value [ 1090.365392][T16092] Bluetooth: hci6: command tx timeout [ 1090.393839][T16923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.400952][T16923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.408609][T10521] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1090.478083][T16923] device bridge_slave_0 entered promiscuous mode [ 1091.677357][T16923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.711836][T16923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.748574][T16923] device bridge_slave_1 entered promiscuous mode [ 1091.973854][T17040] netlink: 'syz.0.3860': attribute type 2 has an invalid length. [ 1092.581555][T16092] Bluetooth: hci6: command tx timeout [ 1092.752443][T17044] tmpfs: Unknown parameter 'usrquota' [ 1092.905530][T16923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.970522][T17046] CIFS: Unable to determine destination address [ 1093.154031][T16923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.664626][T16923] team0: Port device team_slave_0 added [ 1093.764987][T16923] team0: Port device team_slave_1 added [ 1094.790001][T16923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.817471][T16923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.956602][T16923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.044073][T16923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.051079][T16923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.184223][T16923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.068453][T16092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1096.079781][T16092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1096.090509][T16092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1096.101569][T16092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1096.189281][T16092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1096.198114][T16092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1096.316270][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3871'. [ 1096.470578][T16923] device hsr_slave_0 entered promiscuous mode [ 1096.477709][T16923] device hsr_slave_1 entered promiscuous mode [ 1096.515290][T16923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.598850][T17090] CIFS: Unable to determine destination address [ 1096.741975][T16923] Cannot create hsr debugfs directory [ 1097.239344][ T7603] device bridge0 left promiscuous mode [ 1097.254347][ T7603] device batadv0 left promiscuous mode [ 1097.291683][ T7603] device hsr_slave_0 left promiscuous mode [ 1097.330352][ T7603] device hsr_slave_1 left promiscuous mode [ 1097.352497][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.360815][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.369431][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.377146][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.397872][ T7603] device bridge_slave_1 left promiscuous mode [ 1098.295565][ T3649] Bluetooth: hci4: command tx timeout [ 1098.325118][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.430285][ T7603] device bridge_slave_0 left promiscuous mode [ 1098.451213][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.889898][ T7603] device veth1_macvtap left promiscuous mode [ 1098.909741][ T7603] device veth0_macvtap left promiscuous mode [ 1098.924322][ T7603] device veth1_vlan left promiscuous mode [ 1098.938477][ T7603] device veth0_vlan left promiscuous mode [ 1100.384016][ T3645] Bluetooth: hci4: command tx timeout [ 1100.517349][T17125] CIFS: Unable to determine destination address [ 1102.109457][T17131] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3886'. [ 1102.130976][ T7603] team0 (unregistering): Port device team_slave_1 removed [ 1102.291076][ T7603] team0 (unregistering): Port device team_slave_0 removed [ 1102.444156][ T3645] Bluetooth: hci4: command tx timeout [ 1103.103412][ T7603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.212052][ T7603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.985902][ T7603] bond0 (unregistering): Released all slaves [ 1104.083515][T17146] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3888'. [ 1104.484858][T17155] loop0: detected capacity change from 0 to 1024 [ 1104.495502][T17079] chnl_net:caif_netlink_parms(): no params data found [ 1104.514823][T17155] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1104.523956][ T3645] Bluetooth: hci4: command tx timeout [ 1104.584157][T17155] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1104.700659][T17155] EXT4-fs error (device loop0): ext4_free_blocks:6213: comm syz.0.3889: Freeing blocks not in datazone - block = 0, count = 4096 [ 1104.725971][T17155] EXT4-fs (loop0): 1 orphan inode deleted [ 1104.732190][T17155] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1104.802323][T17168] CIFS: Unable to determine destination address [ 1105.639561][ T8522] EXT4-fs (loop0): unmounting filesystem. [ 1105.976893][T17079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.987749][T17079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.024987][T17079] device bridge_slave_0 entered promiscuous mode [ 1106.512321][T17198] netlink: 'syz.0.3897': attribute type 1 has an invalid length. [ 1108.099165][T17079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.125624][T17079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.210666][T17079] device bridge_slave_1 entered promiscuous mode [ 1108.452607][T17079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.537804][T17079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.787351][T17079] team0: Port device team_slave_0 added [ 1108.807965][T17216] netlink: 'syz.1.3899': attribute type 2 has an invalid length. [ 1108.863100][T17079] team0: Port device team_slave_1 added [ 1109.128285][T17079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.215798][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.372000][T17079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.426867][T16923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1109.542011][T17079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.654587][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.688691][T17079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.701532][T17221] hfsplus: unable to find HFS+ superblock [ 1109.707606][T16923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1109.826207][T16923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1109.859240][T17079] device hsr_slave_0 entered promiscuous mode [ 1109.988860][T17079] device hsr_slave_1 entered promiscuous mode [ 1110.001854][T17079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1110.019100][T17079] Cannot create hsr debugfs directory [ 1110.036532][T16923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1110.096538][T17233] CIFS: Unable to determine destination address [ 1111.049383][T17239] loop0: detected capacity change from 0 to 1024 [ 1111.174797][T17239] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1111.309274][T17239] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1111.513413][T17239] EXT4-fs error (device loop0): ext4_free_blocks:6213: comm syz.0.3903: Freeing blocks not in datazone - block = 0, count = 4096 [ 1111.764204][T17239] EXT4-fs (loop0): 1 orphan inode deleted [ 1111.769986][T17239] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1111.917160][ T8522] EXT4-fs (loop0): unmounting filesystem. [ 1111.944192][ T3645] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1113.346120][T17079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.429011][T16923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.541180][T17079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.684872][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1113.715711][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1113.733824][T17272] hfsplus: unable to find HFS+ superblock [ 1113.775449][T16923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.876025][T17079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.028760][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1114.039697][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1114.060921][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.068082][ T8675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.103311][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1114.117381][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1114.147837][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1114.176398][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.184035][ T8670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.194411][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1114.216743][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1114.351406][T17079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.598681][T17282] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3910'. [ 1114.673471][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1114.708518][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1114.758726][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1114.799323][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1114.832616][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1114.903360][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1114.964623][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1115.001304][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1115.033562][T16923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1115.078048][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1115.336294][T14798] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1115.386818][T17310] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1115.728109][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.734587][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.260811][T17079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1116.313439][T17079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1116.391272][T17318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3920'. [ 1116.393879][T14798] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 1116.413548][T17079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1116.439803][T17079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1116.445180][T14798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.508367][T14798] usb 1-1: Product: syz [ 1116.519299][T14798] usb 1-1: Manufacturer: syz [ 1116.534151][T14798] usb 1-1: SerialNumber: syz [ 1116.572556][T14798] usb 1-1: config 0 descriptor?? [ 1116.646742][T14798] ums-usbat 1-1:0.0: USB Mass Storage device detected [ 1116.855122][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1116.857870][ T8675] usb 1-1: USB disconnect, device number 24 [ 1116.863210][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1116.882087][T16923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.935570][T17079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.057015][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1117.080576][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1117.126705][T17079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.246758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1117.272839][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1117.336146][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.343291][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.400331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1117.435355][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1117.505273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1117.559709][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.566856][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.626191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1117.688157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1117.727253][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1117.819117][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1118.061979][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1118.080336][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1118.129662][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1118.159378][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1118.192170][T16934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1118.277375][T17079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1118.357200][T17079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1118.697130][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1118.713527][T17355] [U] 紉w6&焳sz蓠=KoZ炱盻z躬晌. Z<蠟>P瑤C帰d仚q陇遰q-卆. [ 1118.784294][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1119.093810][T17377] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3925'. [ 1119.145586][T17353] [U] o縔霷3OK瑦天5kl放2Z夙;o3)W\ [ 1119.185326][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1119.205044][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1119.403452][T16923] device veth0_vlan entered promiscuous mode [ 1119.457095][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1119.475731][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1120.386096][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1120.418372][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1120.445565][T17400] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3929'. [ 1120.467439][T16923] device veth1_vlan entered promiscuous mode [ 1120.574284][T17404] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1121.437015][T17079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.479236][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1121.506930][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1121.597614][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1121.631407][T16923] device veth0_macvtap entered promiscuous mode [ 1121.657083][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1121.690670][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1121.713068][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1121.729543][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1121.768151][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1121.811254][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1121.854960][T16923] device veth1_macvtap entered promiscuous mode [ 1121.861781][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1121.887077][T15782] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1121.901237][T15782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1121.919999][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1121.922941][T15782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1121.943509][T15782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1121.951242][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1121.983155][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1121.995253][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.005997][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.020231][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.038729][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.063605][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.081894][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.115573][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.135443][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.176886][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.189236][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.198228][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.224047][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.237402][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.248573][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.266764][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.278669][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.307645][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.339006][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.379999][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.409094][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.431393][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.461525][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.472952][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.485360][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.493549][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.504578][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.515621][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.526052][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.537509][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.547839][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.557689][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.567571][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.579126][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.592505][T12427] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1122.640958][T17079] device veth0_vlan entered promiscuous mode [ 1122.647495][T12427] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1122.694306][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1122.720076][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1122.750248][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1122.770628][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1122.868517][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.886661][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.911105][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.932331][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.950052][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.960997][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.973783][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.984532][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.995850][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.006920][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.031437][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.043805][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.059514][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.070656][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.106353][T16923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.177539][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1123.191031][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1123.225043][T17079] device veth1_vlan entered promiscuous mode [ 1123.325365][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.363103][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.426037][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.510595][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.522156][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.542409][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.543298][T17451] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1123.563526][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.594757][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.258909][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.304030][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.337254][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.438980][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.504013][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.546139][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.608359][T16923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.684610][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1124.693322][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1124.761842][T17461] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3938'. [ 1125.142389][T16923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.172974][T16923] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.209906][T16923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.260067][T16923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.294003][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1125.313657][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1125.454337][T17079] device veth0_macvtap entered promiscuous mode [ 1125.739019][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1125.770700][T17079] device veth1_macvtap entered promiscuous mode [ 1125.892657][ T7603] device hsr_slave_0 left promiscuous mode [ 1125.904411][ T7603] device hsr_slave_1 left promiscuous mode [ 1125.928667][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.965122][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.030583][T17492] tmpfs: Unknown parameter 'usrquota' [ 1126.863507][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.872206][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.907634][ T7603] device bridge_slave_1 left promiscuous mode [ 1126.924084][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.974400][ T7603] device bridge_slave_0 left promiscuous mode [ 1126.981449][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.149467][T17501] binder: 17499:17501 ioctl c0306201 0 returned -14 [ 1127.425284][ T7603] device veth1_macvtap left promiscuous mode [ 1127.453944][ T7603] device veth0_macvtap left promiscuous mode [ 1127.468021][ T7603] device veth1_vlan left promiscuous mode [ 1127.488825][ T7603] device veth0_vlan left promiscuous mode [ 1128.648073][ T7603] team0 (unregistering): Port device team_slave_1 removed [ 1128.724754][ T7603] team0 (unregistering): Port device team_slave_0 removed [ 1128.805601][ T7603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.899572][ T7603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.587216][ T7603] bond0 (unregistering): Released all slaves [ 1129.748588][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.750283][T15207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.824700][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.834556][T15207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.960116][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.973807][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.985446][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.998337][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.018766][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.034661][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.048991][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.068898][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.084030][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.135795][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.196480][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.241350][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.267597][T17079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.279989][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1130.294522][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1130.388710][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1130.453940][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.557320][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.583922][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.624968][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.652642][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.663475][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.696279][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.711704][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.735327][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.759124][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.791177][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.803803][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.827351][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.857667][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.961170][T17079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.995455][T17520] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3953'. [ 1131.015982][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1131.025251][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1131.044716][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.057853][T17079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.077261][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.093813][T17079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.122929][T17079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.190893][T17079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.212448][T16933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1131.433167][T12721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.526173][T12721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.589948][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1131.615677][ T3952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.626356][ T3952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.641111][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1132.017563][T17556] loop3: detected capacity change from 0 to 32768 [ 1132.040680][T17556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3867 (17556) [ 1132.060137][T17556] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1132.070441][T17556] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1132.079249][T17556] BTRFS info (device loop3): using free space tree [ 1132.527898][T17556] BTRFS info (device loop3): enabling ssd optimizations [ 1134.121025][T17079] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1134.671590][T17605] hfsplus: unable to find HFS+ superblock [ 1137.613132][T17615] CIFS: Unable to determine destination address [ 1139.583580][T17642] loop1: detected capacity change from 0 to 32768 [ 1139.592393][T17642] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3978 (17642) [ 1139.609693][T17642] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1139.620317][T17642] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1139.629102][T17642] BTRFS info (device loop1): using free space tree [ 1140.007955][T17660] fuse: Bad value for 'fd' [ 1140.334130][T17674] hfsplus: unable to find HFS+ superblock [ 1141.015770][T17642] BTRFS info (device loop1): enabling ssd optimizations [ 1141.844193][T16152] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1142.125705][T17692] CIFS: Unable to determine destination address [ 1142.767749][T17697] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1143.583814][T17666] [U] 紉w6&焳sz蓠=KoZ炱盻z躬晌. Z<蠟>P瑤C帰d仚q陇遰q-卆. [ 1143.741615][T17665] [U] o縔霷3OK瑦天5kl放2Z夙;o3)W\ [ 1145.240746][T17716] hfsplus: unable to find HFS+ superblock [ 1146.350408][T17730] loop2: detected capacity change from 0 to 32768 [ 1146.357751][T17730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3996 (17730) [ 1146.373137][T17730] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1146.383309][T17730] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1146.392044][T17730] BTRFS info (device loop2): using free space tree [ 1146.778460][T17730] BTRFS info (device loop2): enabling ssd optimizations [ 1147.874184][T17761] CIFS: Unable to determine destination address [ 1148.304133][T10521] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1148.318221][T17764] netlink: 'syz.1.3997': attribute type 2 has an invalid length. [ 1148.588604][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4002'. [ 1149.193827][ T8670] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1149.472929][T17778] kvm: pic: non byte write [ 1149.573998][ T8670] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1149.586414][ T8670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.619883][ T8670] usb 3-1: config 0 descriptor?? [ 1149.936270][T17782] tmpfs: Unknown parameter 'usrquota' [ 1151.242605][T17793] hfsplus: unable to find HFS+ superblock [ 1152.853651][ T8670] hid-u2fzero 0003:10C4:8ACF.000A: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 1153.281349][ T8670] hid-u2fzero 0003:10C4:8ACF.000A: U2F Zero LED initialised [ 1153.294846][ T8670] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 1153.306584][ T8670] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 1153.315002][ T8670] CPU: 1 PID: 8670 Comm: kworker/1:5 Not tainted 6.1.104-syzkaller #0 [ 1153.323165][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1153.333220][ T8670] Workqueue: usb_hub_wq hub_event [ 1153.338240][ T8670] RIP: 0010:u2fzero_rng_read+0x27d/0x710 [ 1153.343862][ T8670] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 a2 ad c6 f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 04 ae c6 f9 48 8d 84 24 80 00 00 [ 1153.363462][ T8670] RSP: 0018:ffffc900039be720 EFLAGS: 00010202 [ 1153.369540][ T8670] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 1153.377526][ T8670] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff8880293e1269 [ 1153.385499][ T8670] RBP: ffffc900039be8d0 R08: dffffc0000000000 R09: ffff8880293e122e [ 1153.393461][ T8670] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8880606973e0 [ 1153.401420][ T8670] R13: 1ffff1100c0d2e06 R14: ffff888060697030 R15: dffffc0000000000 [ 1153.409373][ T8670] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1153.418280][ T8670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1153.424841][ T8670] CR2: 00007f9cba0d4d58 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 1153.432788][ T8670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1153.440734][ T8670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1153.448686][ T8670] Call Trace: [ 1153.451964][ T8670] [ 1153.454888][ T8670] ? __die_body+0x5e/0xa0 [ 1153.459242][ T8670] ? die_addr+0x95/0xc0 [ 1153.463414][ T8670] ? exc_general_protection+0x3ae/0x590 [ 1153.468971][ T8670] ? asm_exc_general_protection+0x22/0x30 [ 1153.474684][ T8670] ? u2fzero_rng_read+0x27d/0x710 [ 1153.479698][ T8670] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1153.485237][ T8670] ? mutex_lock_nested+0x10/0x10 [ 1153.490166][ T8670] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1153.495695][ T8670] add_early_randomness+0x78/0x140 [ 1153.500792][ T8670] hwrng_register+0x3a0/0x440 [ 1153.505463][ T8670] devm_hwrng_register+0x43/0xb0 [ 1153.510411][ T8670] u2fzero_probe+0x31a/0x410 [ 1153.514998][ T8670] ? hid_map_usage_clear+0x180/0x180 [ 1153.520292][ T8670] hid_device_probe+0x298/0x3a0 [ 1153.525141][ T8670] ? hid_uevent+0x310/0x310 [ 1153.529633][ T8670] really_probe+0x2ab/0xcb0 [ 1153.534128][ T8670] __driver_probe_device+0x1a2/0x3d0 [ 1153.539402][ T8670] driver_probe_device+0x50/0x420 [ 1153.544419][ T8670] __device_attach_driver+0x2cf/0x510 [ 1153.549777][ T8670] ? coredump_store+0x90/0x90 [ 1153.554439][ T8670] bus_for_each_drv+0x183/0x200 [ 1153.559275][ T8670] ? subsys_find_device_by_id+0x310/0x310 [ 1153.564980][ T8670] __device_attach+0x359/0x570 [ 1153.569728][ T8670] ? device_attach+0x20/0x20 [ 1153.574300][ T8670] ? kobject_uevent_env+0x54a/0x8c0 [ 1153.579483][ T8670] ? kobject_uevent_env+0x54a/0x8c0 [ 1153.584670][ T8670] bus_probe_device+0xba/0x1e0 [ 1153.589421][ T8670] ? device_add+0xab9/0xfd0 [ 1153.593915][ T8670] device_add+0xb48/0xfd0 [ 1153.598235][ T8670] hid_add_device+0x3a5/0x510 [ 1153.602903][ T8670] usbhid_probe+0xb2d/0xeb0 [ 1153.607396][ T8670] usb_probe_interface+0x5c0/0xaf0 [ 1153.612499][ T8670] ? usb_register_driver+0x3d0/0x3d0 [ 1153.617766][ T8670] really_probe+0x2ab/0xcb0 [ 1153.622263][ T8670] __driver_probe_device+0x1a2/0x3d0 [ 1153.627533][ T8670] driver_probe_device+0x50/0x420 [ 1153.632541][ T8670] __device_attach_driver+0x2cf/0x510 [ 1153.637899][ T8670] ? coredump_store+0x90/0x90 [ 1153.642560][ T8670] bus_for_each_drv+0x183/0x200 [ 1153.647398][ T8670] ? subsys_find_device_by_id+0x310/0x310 [ 1153.653103][ T8670] __device_attach+0x359/0x570 [ 1153.657858][ T8670] ? device_attach+0x20/0x20 [ 1153.662432][ T8670] ? kobject_uevent_env+0x54a/0x8c0 [ 1153.667619][ T8670] ? kobject_uevent_env+0x54a/0x8c0 [ 1153.672805][ T8670] bus_probe_device+0xba/0x1e0 [ 1153.677553][ T8670] ? device_add+0xab9/0xfd0 [ 1153.682043][ T8670] device_add+0xb48/0xfd0 [ 1153.686361][ T8670] usb_set_configuration+0x19dd/0x2020 [ 1153.691811][ T8670] usb_generic_driver_probe+0x84/0x140 [ 1153.697256][ T8670] usb_probe_device+0x130/0x260 [ 1153.702089][ T8670] ? usb_register_device_driver+0x240/0x240 [ 1153.707965][ T8670] really_probe+0x2ab/0xcb0 [ 1153.712455][ T8670] __driver_probe_device+0x1a2/0x3d0 [ 1153.717727][ T8670] driver_probe_device+0x50/0x420 [ 1153.722736][ T8670] __device_attach_driver+0x2cf/0x510 [ 1153.728093][ T8670] ? coredump_store+0x90/0x90 [ 1153.732755][ T8670] bus_for_each_drv+0x183/0x200 [ 1153.737589][ T8670] ? subsys_find_device_by_id+0x310/0x310 [ 1153.743292][ T8670] __device_attach+0x359/0x570 [ 1153.748053][ T8670] ? device_attach+0x20/0x20 [ 1153.752627][ T8670] ? kobject_uevent_env+0x54a/0x8c0 [ 1153.757821][ T8670] ? kobject_uevent_env+0x54a/0x8c0 [ 1153.763010][ T8670] bus_probe_device+0xba/0x1e0 [ 1153.767757][ T8670] ? device_add+0xab9/0xfd0 [ 1153.772250][ T8670] device_add+0xb48/0xfd0 [ 1153.776569][ T8670] usb_new_device+0xbdd/0x18f0 [ 1153.781329][ T8670] ? usb_disconnect+0x8c0/0x8c0 [ 1153.786163][ T8670] ? do_raw_spin_unlock+0x137/0x8a0 [ 1153.791355][ T8670] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1153.796580][ T8670] ? lockdep_hardirqs_on+0x94/0x130 [ 1153.801803][ T8670] hub_event+0x2efe/0x5730 [ 1153.806237][ T8670] ? led_work+0x700/0x700 [ 1153.810576][ T8670] ? read_lock_is_recursive+0x10/0x10 [ 1153.815959][ T8670] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1153.821941][ T8670] ? print_irqtrace_events+0x210/0x210 [ 1153.827406][ T8670] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1153.833300][ T8670] ? do_raw_spin_unlock+0x137/0x8a0 [ 1153.838484][ T8670] ? process_one_work+0x7a9/0x11d0 [ 1153.843590][ T8670] process_one_work+0x8a9/0x11d0 [ 1153.848537][ T8670] ? worker_detach_from_pool+0x260/0x260 [ 1153.854179][ T8670] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1153.859736][ T8670] ? kthread_data+0x4e/0xc0 [ 1153.864244][ T8670] ? wq_worker_running+0x97/0x190 [ 1153.869264][ T8670] worker_thread+0xa47/0x1200 [ 1153.873949][ T8670] kthread+0x28d/0x320 [ 1153.878011][ T8670] ? worker_clr_flags+0x190/0x190 [ 1153.883028][ T8670] ? kthread_blkcg+0xd0/0xd0 [ 1153.887619][ T8670] ret_from_fork+0x1f/0x30 [ 1153.892046][ T8670] [ 1153.895049][ T8670] Modules linked in: [ 1153.898963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1153.906614][ T3649] Bluetooth: hci5: command 0x0406 tx timeout [ 1154.160784][ T8670] ---[ end trace 0000000000000000 ]--- [ 1154.184939][ T8670] RIP: 0010:u2fzero_rng_read+0x27d/0x710 [ 1154.197453][ T8670] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 a2 ad c6 f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 04 ae c6 f9 48 8d 84 24 80 00 00 [ 1154.217091][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.235899][ T8670] RSP: 0018:ffffc900039be720 EFLAGS: 00010202 [ 1154.242082][ T8670] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 1154.250425][ T8670] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff8880293e1269 [ 1154.259055][ T8670] RBP: ffffc900039be8d0 R08: dffffc0000000000 R09: ffff8880293e122e [ 1154.267261][ T8670] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8880606973e0 [ 1154.275473][ T8670] R13: 1ffff1100c0d2e06 R14: ffff888060697030 R15: dffffc0000000000 [ 1154.283495][ T8670] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1154.292924][ T8670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1154.299777][ T8670] CR2: 00007f8a9c39c440 CR3: 000000007ad1e000 CR4: 00000000003506e0 [ 1154.307989][ T8670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1154.316225][ T8670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1154.324450][ T8670] Kernel panic - not syncing: Fatal exception [ 1154.331082][ T8670] Kernel Offset: disabled [ 1154.335397][ T8670] Rebooting in 86400 seconds..