last executing test programs: 24.16601717s ago: executing program 4: setitimer(0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000001500)=""/21, 0x15}], 0x1, 0x69, 0x0) 23.805287376s ago: executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e660d031a0000aaaaaaaaaa10b8020802414f2a05ffffffff8c92009d84df1b32d4ffffc51b1628b22db808bd5f19a18d4b8d7b3c2450d1d871d65603c8a65f15809424677f2e7fb50fc516f56d4078b46130987c791d91927d330d32a510a6654eba029a13858616c0f10f4ac63762020000000000000043fbaeee410e879d49542eac38a51cdf46d10046ddd9f605a17ae6fe1e8f555812416967982834afb0d2cc70edea7b52b5dc43cd1500609f793a0b17"], 0x169) 23.51079388s ago: executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffff70, &(0x7f0000000400)={&(0x7f0000000000)="ffffffffffffff7f1f61fe9753cdf423503613d2f18ca7db49bbb479df631f22865d3dc18921f52339230e981f936f536690b192f4b5a2c0ed0ab487d168b943b4938e9accdab2430a584b0e357f723636147ac9f7e50eb4ed8f5194b033346622ed5bd0b47629c47103cc34d4e5edb7f90894857b65e19cadf84e1353b8eb90c740efe1b509b534fa275d97142c36f8576ab75dcf4d1fff3ee2cf9972afc40dbe3db09f147b34ce27a0f8e2d5bb36ac4b1ca5", 0x7}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 23.219996884s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000009007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000e2", @ANYBLOB='H'], 0x0, 0x32}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22.282842017s ago: executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42}, 0x10) 21.771298808s ago: executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) listen(r0, 0x4) accept(r0, 0x0, 0x0) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), 0x0, 0x0) 21.689616327s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0}) 21.206615481s ago: executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="626172726965722c756d61736b3d30303030303030303030303030303030303030303034302c6e6f626172726965722c747970653d883b7f382c6e6c733d63703835302c006d61736b3d30303030303030303030323030303030303030303031312c666f7263652c6e6f6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030303030352c00"], 0x2, 0x6da, &(0x7f0000000580)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="ff", 0x1}, {&(0x7f0000000180)="3e3946ec662088f20414cb1de99f02fb13050aa5ab92c4b7483eec317ac89ee74061c151ef3d20bdba16a6c0e89637a17132aa166c65ccdfa5fded4219d0a977717328ecf581b2cfde913a8895a4761b9a67e5", 0x53}, {&(0x7f0000000800)="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", 0x1000}], 0x3) 20.473810533s ago: executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) close(r0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80000c, &(0x7f0000000140)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703933362c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d93ad23522c747970653d1f02ae0e2c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723df5da8e942c6e6f6465636f6d706f73652c747970653dc796ae322c666f7263652c706172743d3078303030303030303030303034303030332c6e6c733d63703933362c63726561746f723da806f41d2c626172726965722c6f626a5f757365723d756d61736b2c6f626a5f757365723d245d212c00"], 0x3, 0x6da, &(0x7f0000004980)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlink(&(0x7f0000006a00)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)=0x0) ptrace$setregset(0x4205, r3, 0x6, &(0x7f0000000440)={&(0x7f0000000380)}) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r4) inotify_init1(0x0) epoll_create(0x6) mount$9p_fd(0x0, &(0x7f0000000040)='./control\x00', &(0x7f0000000100), 0x0, 0x0) close(r4) open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='T', 0x1}], 0x1}, 0x4dc) 19.352263072s ago: executing program 2: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffff70, &(0x7f0000000400)={&(0x7f0000000000)="ffffffffffffff7f1f61fe9753cdf423503613d2f18ca7db49bbb479df631f22865d3dc18921f52339230e981f936f536690b192f4b5a2c0ed0ab487d168b943b4938e9accdab2430a584b0e357f723636147ac9f7e50eb4ed8f5194b033346622ed5bd0b47629c47103cc34d4e5edb7f90894857b65e19cadf84e1353b8eb90c740efe1b509b534fa275d97142c36f8576ab75dcf4d1fff3ee2cf9972afc40dbe3db09f147b34ce27a0f8e2d5bb36ac4b1ca5", 0x7}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 18.633616355s ago: executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ppoll(&(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="ff", 0x1}, {&(0x7f0000000180)="3e3946ec662088f20414cb1de99f02fb13050aa5ab92c4b7483eec317ac89ee74061c151ef3d20bdba16a6c0e89637a17132aa166c65ccdfa5fded4219d0a977717328ecf581b2cfde913a8895a4761b9a67e5", 0x53}, {&(0x7f0000000800)="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", 0x1000}], 0x3) 17.480858715s ago: executing program 2: syz_mount_image$nilfs2(&(0x7f0000000540), &(0x7f0000000600)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa8e, &(0x7f0000000640)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x7) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfefc) 7.635923082s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x98, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x4}]]}, 0x98}}, 0x0) 7.506770051s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000009007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000e2", @ANYBLOB='H'], 0x0, 0x32}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.687553183s ago: executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) 6.379046205s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x98, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, ' '}]}]]}, 0x98}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 5.799044461s ago: executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpriority(0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}}, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'sit0\x00', @ifru_hwaddr=@broadcast}}) 5.739330253s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$usbmon(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x6f2, &(0x7f0000001200)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, 0x0, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0, 0xee, &(0x7f0000000600), &(0x7f00000006c0)=""/238, 0x0, 0x0, 0x0, 0x1e, &(0x7f00000007c0), &(0x7f0000000300)="699324dce731e6a5aab39eea6c2caf3cfc4f660ef4b1357e0067f6ec976c", 0x3, 0x0, 0x8}, 0x50) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000240)='./file0\x00') userfaultfd(0x80800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) 3.450928371s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@kfunc]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.901327236s ago: executing program 3: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffff70, &(0x7f0000000400)={&(0x7f0000000000)="ffffffffffffff7f1f61fe9753cdf423503613d2f18ca7db49bbb479df631f22865d3dc18921f52339230e981f936f536690b192f4b5a2c0ed0ab487d168b943b4938e9accdab2430a584b0e357f723636147ac9f7e50eb4ed8f5194b033346622ed5bd0b47629c47103cc34d4e5edb7f90894857b65e19cadf84e1353b8eb90c740efe1b509b534fa275d97142c36f8576ab75dcf4d1fff3ee2cf9972afc40dbe3db09f147b34ce27a0f8e2d5bb36ac4b1ca5", 0x7}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 2.836356743s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0}) 2.440040792s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 1.773166191s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x1c, "0f65af4fe52a3d9e4deb996f68472f382fae9f0fd8460eb9cf83eb7f"}, &(0x7f0000000240)=0x24) 1.460778165s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x98, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x4}]]}, 0x98}}, 0x0) 1.407784578s ago: executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) 1.295710537s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0xfc, 0x0, &(0x7f0000000000)) keyctl$read(0xb, 0x0, &(0x7f0000000180)=""/140, 0x8c) add_key$user(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000080)}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x4b67, &(0x7f0000000000)) 892.394925ms ago: executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNv3szue98dvZ03MzuaAEprKhulEfsi4lwSMdmybCIaC6eK9R5+fft8NiRRr///qySSIq+5/qNiujsbJY3XfHwy4neV9eUu3bx1cbZWb7gTcXj50tXDSzdvHVq8NHth/sL85Zkj/zx6bPpfMx9uTZy7i+mp0//70+svv/iPhU9qh5I4HmdHX5qLtji2ylTj040sxNb8kYg4liU6fC6wnSrF3+NoRPwhJqOSzzVMxuJrA60c0Ff1SmP/VB+rA6WTxKBrAAxGsx/QPLbvx3HwMHtwIhvf6BD/SHH0vjM/Ntr1MGk5MspyI/ZsQfkrEfHj7f1vZ0N0OQ8xsgXldC3/bkT8sdP2T/L49+SRZvGnkba8LktPF+c2svr9ZxN1SFrSvf393dlEaT/3S+Jv3Q5Z/MeLaZZ/ssv7P+0Uz1TbfNnaHwCDsXqi2JFnHZFY2/9lPcNm/yfa+z/19/NrQ+37ro3ovv9Lt+Ddny7v/4102v839/c783142tYPS2Ll2zOd33K0PePzV0+92a38qZb+XzZk5Tf7gj3YdNfwwd2I/W3xv5J/9Mnj7Z906P9mq5zrsYz/fvrlqW7LNhn/ptXvRRzoePyz1ivNUm3XJ5NoXp88OnN4YbE2P90Ydyzjg49eeLdb+YOOP9v+u7rE/6Ttn+Vd7bGM987cu9RI7Vi3bOKp8adfjCVn89RYPl5rXmPJ6WKVxuTG7PLytSNPrktznXw604j/4F87t/8u8ecHH+PNr8weXH3u4sNuyza5/R/Ve1yxmyz+uQ1u/zd6LOO756//uduy9fGvnZMY32hQAAAAAAAAUFJpfg02SauP02laLS68/T52pbUrS8t/W7hy/fJcxMH895CjafNK92RjPsnmZ4rfwzbnj7TN/z0i9kbEW5XxfL56/kptbtDBAwAAAAAAAAAAAAAAAAAAwJDYXdz//6h4Htg3lTStVgddK2Db9PMBc8Bw0/6hvPL2vz3PWwOGjP0/lFfH9u9LAUpBU4fy0v6hvLR/KC/tH8pL+4fy6t7+1y252++6AAAAAABbZu9fVu+PRMTKv8fzITNWLBsdaM2AftPGobwqg64AMDCPL/C7/R9Kp6f+//fFPwfsf3WAAUg6Zeadg/qTG/9qx1cCAAAAAAAAAAAAAH1wYN/q/cT9/1BKbvuD8trY/f+Vjb8UGBqd/vW/x4FAOTjGh5Lr4STAzm4L3P8PAAAAAAAAAAAAANtmIh+StFr8DHgi0rRajfhNROyJ0WRhsTY/HRG/jYjPKqM7svmZQVcaAAAAAAAAAAAAAAAAAAAAnjFLN29dnK3V5q+1Jn5Yl/NsJ5pPPB2W+rQmIul7EWm05YxHxDDE3p/ESEtOErGSbfmteOdk838/MQyfT5EY8BcTAAAAAAAAAAAAAAAAAACUUMu9x53tf2ebawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA22/t+f/9Sww6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+mnAAAA//+EYjvS") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) unshare(0x2c060000) unshare(0x24020400) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_dev$audion(0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, 0x0, 0x0, r6) add_key$keyring(0x0, 0x0, 0x0, 0x0, r6) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) setsockopt$inet6_dccp_int(r5, 0x21, 0x4, &(0x7f00000000c0)=0xfffffc00, 0x4) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x0, r7, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) 600.892697ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}]}, &(0x7f0000000100)=0x10) shutdown(r0, 0x1) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) socket$inet6(0xa, 0x803, 0x2) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@local, @dev, 0x0}, &(0x7f0000000280)=0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xca03, 0x10}, 0xc) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r8, 0x400, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xd79, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)={0x190, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xdb251f92d178c642}, 0x1) r9 = dup(r6) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) 461.628265ms ago: executing program 3: syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0xa) 0s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000011a40)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="737472686173683d73697051050000006d657461643f74615f636865636b73756d3d7878686173682c6e6f636f772c00"/64], 0x1, 0x119fc, &(0x7f0000011ac0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r1, &(0x7f0000000100)="9f1109919cfb07b5", 0x8, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x6, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000200)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): dProduct=006d, bcdDevice= 0.00 [ 623.248211][ T781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.290316][ T781] usb 1-1: config 0 descriptor?? [ 623.464163][ T29] audit: type=1804 audit(1717883195.125:120): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir589169007/syzkaller.ic4b9g/15/bus/file0" dev="sda1" ino=1943 res=1 errno=0 [ 624.204257][ T5085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 624.222247][ T5085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 624.236276][ T5085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 624.278687][ T5085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 624.295491][ T5085] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 624.309182][ T5085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 624.333449][ T781] usb 1-1: string descriptor 0 read error: -71 [ 624.368028][ T781] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 624.384183][ T781] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 624.392553][ T781] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 624.402317][ T781] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 624.410512][ T781] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 624.649406][ T781] usb 1-1: USB disconnect, device number 5 [ 625.657908][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 626.439453][ T8705] chnl_net:caif_netlink_parms(): no params data found [ 626.484282][ T781] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 626.585949][ T5068] Bluetooth: hci5: command tx timeout [ 626.776031][ T781] usb 4-1: Using ep0 maxpacket: 32 [ 626.843660][ T3376] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.906702][ T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.918826][ T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.929029][ T781] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 626.938506][ T781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.024521][ T781] usb 4-1: config 0 descriptor?? [ 627.107856][ T781] hub 4-1:0.0: USB hub found [ 627.155487][ T3376] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.360361][ T3376] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.413505][ T781] hub 4-1:0.0: 1 port detected [ 627.552642][ T3376] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.974178][ T3376] bridge_slave_1: left allmulticast mode [ 627.980109][ T3376] bridge_slave_1: left promiscuous mode [ 627.987570][ T3376] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.023424][ T5127] hub 4-1:0.0: activate --> -90 [ 628.058418][ T3376] bridge_slave_0: left allmulticast mode [ 628.064587][ T3376] bridge_slave_0: left promiscuous mode [ 628.071143][ T3376] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.405376][ T8733] loop1: detected capacity change from 0 to 512 [ 628.432146][ T8733] EXT4-fs: Ignoring removed mblk_io_submit option [ 628.519080][ T8733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 628.538068][ T29] audit: type=1326 audit(1717883200.245:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 628.564318][ T29] audit: type=1326 audit(1717883200.255:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 628.588563][ T29] audit: type=1326 audit(1717883200.255:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 628.611839][ T29] audit: type=1326 audit(1717883200.255:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 628.635181][ T29] audit: type=1326 audit(1717883200.265:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 628.661356][ T29] audit: type=1326 audit(1717883200.265:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 628.685362][ T29] audit: type=1326 audit(1717883200.275:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 628.712378][ T29] audit: type=1326 audit(1717883200.285:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b85c7a6e7 code=0x7ffc0000 [ 628.734419][ T5068] Bluetooth: hci5: command tx timeout [ 628.737614][ T29] audit: type=1326 audit(1717883200.365:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b85c403b9 code=0x7ffc0000 [ 628.766918][ T29] audit: type=1326 audit(1717883200.365:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b85c7a6e7 code=0x7ffc0000 [ 628.888069][ T3376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.926385][ T3376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.019718][ T3376] bond0 (unregistering): Released all slaves [ 629.142548][ T8733] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 629.383639][ T10] usb 4-1: USB disconnect, device number 4 [ 629.436337][ T5127] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 629.452688][ T8733] EXT4-fs (loop1): 1 truncate cleaned up [ 629.458716][ T8733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.938488][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.946428][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.954315][ T8705] bridge_slave_0: entered allmulticast mode [ 629.963509][ T8705] bridge_slave_0: entered promiscuous mode [ 630.211872][ T3376] hsr_slave_0: left promiscuous mode [ 630.242640][ T3376] hsr_slave_1: left promiscuous mode [ 630.272945][ T3376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.280839][ T3376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.320372][ T3376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.328307][ T3376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.384248][ T3376] veth1_macvtap: left promiscuous mode [ 630.392646][ T3376] veth0_macvtap: left promiscuous mode [ 630.398629][ T3376] veth1_vlan: left promiscuous mode [ 630.404258][ T3376] veth0_vlan: left promiscuous mode [ 630.773329][ T5085] Bluetooth: hci5: command tx timeout [ 631.468956][ T3376] team0 (unregistering): Port device team_slave_1 removed [ 631.535918][ T3376] team0 (unregistering): Port device team_slave_0 removed [ 631.863011][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.874769][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.883779][ T8705] bridge_slave_1: entered allmulticast mode [ 631.896729][ T8705] bridge_slave_1: entered promiscuous mode [ 632.276930][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.365191][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.631161][ T8705] team0: Port device team_slave_0 added [ 632.705546][ T8705] team0: Port device team_slave_1 added [ 632.870196][ T5085] Bluetooth: hci5: command tx timeout [ 632.962327][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.969735][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.996412][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.168831][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.176278][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.202629][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.388975][ T781] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 633.714553][ T8705] hsr_slave_0: entered promiscuous mode [ 633.804601][ T8705] hsr_slave_1: entered promiscuous mode [ 636.468057][ T8705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 636.615086][ T8705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 636.772033][ T8705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 636.937573][ T8705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 637.784257][ T3376] IPVS: stop unused estimator thread 0... [ 638.219329][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.421092][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.429877][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 638.429952][ T29] audit: type=1326 audit(1717883210.175:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 638.459924][ T29] audit: type=1326 audit(1717883210.175:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 638.485322][ T29] audit: type=1326 audit(1717883210.205:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 638.509056][ T29] audit: type=1326 audit(1717883210.205:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 638.534630][ T29] audit: type=1326 audit(1717883210.215:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 638.613944][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.621601][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.688175][ T29] audit: type=1326 audit(1717883210.365:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 638.711797][ T29] audit: type=1326 audit(1717883210.385:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 638.722206][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.742566][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.879326][ T29] audit: type=1326 audit(1717883210.515:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 638.907419][ T29] audit: type=1326 audit(1717883210.515:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 638.932421][ T29] audit: type=1326 audit(1717883210.515:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b85c7a6e7 code=0x7ffc0000 [ 638.983078][ T781] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 639.354700][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.324592][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.654219][ T8705] veth0_vlan: entered promiscuous mode [ 642.727505][ T8705] veth1_vlan: entered promiscuous mode [ 642.965518][ T8705] veth0_macvtap: entered promiscuous mode [ 643.056146][ T8705] veth1_macvtap: entered promiscuous mode [ 643.201894][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.213650][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.223963][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.234808][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.244994][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.255832][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.265988][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.279534][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.302430][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.364670][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.375733][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.385951][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.404720][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.418020][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.428840][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.439026][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.449847][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.465015][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.633107][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 643.633200][ T29] audit: type=1326 audit(1717883215.385:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 643.662908][ T29] audit: type=1326 audit(1717883215.385:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 643.687082][ T29] audit: type=1326 audit(1717883215.395:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 643.715097][ T29] audit: type=1326 audit(1717883215.395:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 643.739900][ T29] audit: type=1326 audit(1717883215.395:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 643.779201][ T8705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.788785][ T8705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.797882][ T8705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.810040][ T8705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.032510][ T29] audit: type=1326 audit(1717883215.605:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 644.062599][ T29] audit: type=1326 audit(1717883215.605:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 644.089678][ T29] audit: type=1326 audit(1717883215.675:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 644.117675][ T29] audit: type=1326 audit(1717883215.675:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b85c7cf69 code=0x7ffc0000 [ 644.142754][ T29] audit: type=1326 audit(1717883215.685:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b85c7a6e7 code=0x7ffc0000 [ 645.512062][ T5127] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 645.764175][ T5127] usb 3-1: Using ep0 maxpacket: 32 [ 645.883496][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.894876][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.905031][ T5127] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 645.914453][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.985040][ T5127] usb 3-1: config 0 descriptor?? [ 646.088325][ T5127] hub 3-1:0.0: USB hub found [ 646.281274][ T5127] hub 3-1:0.0: 1 port detected [ 647.056681][ T5127] hub 3-1:0.0: activate --> -90 [ 647.858863][ T25] usb 3-1: USB disconnect, device number 5 [ 647.873594][ T5127] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 649.071485][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.080332][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.201279][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.208320][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.226172][ T3310] bridge_slave_1: left allmulticast mode [ 649.235424][ T3310] bridge_slave_1: left promiscuous mode [ 649.242016][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.279865][ T3310] bridge_slave_0: left allmulticast mode [ 649.286455][ T3310] bridge_slave_0: left promiscuous mode [ 649.296097][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.892358][ T3310] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 650.308292][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.482671][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.568603][ T3310] bond0 (unregistering): Released all slaves [ 650.643627][ T3376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.651718][ T3376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.610328][ T8925] loop1: detected capacity change from 0 to 40427 [ 651.634049][ T8925] F2FS-fs (loop1): Invalid segment/section count (31, 0 x 1) [ 651.641718][ T8925] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 652.328430][ T3310] hsr_slave_0: left promiscuous mode [ 652.467910][ T3310] hsr_slave_1: left promiscuous mode [ 652.544067][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.551923][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.666661][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.674773][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.871660][ T3310] veth1_macvtap: left promiscuous mode [ 652.877901][ T3310] veth0_macvtap: left promiscuous mode [ 652.884016][ T3310] veth1_vlan: left promiscuous mode [ 652.889573][ T3310] veth0_vlan: left promiscuous mode [ 653.693128][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 653.906298][ T8943] loop3: detected capacity change from 0 to 512 [ 653.931851][ T8943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 653.963540][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 654.050731][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 654.190634][ T8943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.204379][ T8943] ext4 filesystem being mounted at /root/syzkaller-testdir1702687016/syzkaller.DszAnH/272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.410601][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.422082][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.433675][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 654.443943][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.545442][ T10] usb 3-1: config 0 descriptor?? [ 654.563246][ T8941] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 654.588624][ T10] hub 3-1:0.0: USB hub found [ 654.672291][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.682245][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.833271][ T10] hub 3-1:0.0: 1 port detected [ 654.922524][ T5074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.059878][ T8950] loop0: detected capacity change from 0 to 512 [ 655.159367][ T8950] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 655.289847][ T8950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.303173][ T8950] ext4 filesystem being mounted at /root/syzkaller-testdir943667556/syzkaller.NiaAvN/95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.360498][ T8953] loop1: detected capacity change from 0 to 512 [ 655.463519][ T5125] hub 3-1:0.0: activate --> -90 [ 655.483736][ T8953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.497035][ T8953] ext4 filesystem being mounted at /root/syzkaller-testdir651961642/syzkaller.p0iPsC/97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.836953][ T7295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.313957][ T10] usb 3-1: USB disconnect, device number 6 [ 656.323732][ T5125] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 656.429803][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.111521][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 657.111595][ T29] audit: type=1800 audit(1717883228.865:247): pid=8975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1953 res=0 errno=0 [ 660.007414][ T8996] loop0: detected capacity change from 0 to 256 [ 660.667897][ T9001] loop3: detected capacity change from 0 to 512 [ 660.928243][ T9001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.941704][ T9001] ext4 filesystem being mounted at /root/syzkaller-testdir1702687016/syzkaller.DszAnH/279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.207535][ T9011] loop1: detected capacity change from 0 to 736 [ 661.334720][ T7295] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 661.342548][ T7295] FAT-fs (loop0): Filesystem has been set read-only [ 661.421658][ T7295] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 661.596228][ T5074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.435756][ T29] audit: type=1804 audit(1717883234.155:248): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1702687016/syzkaller.DszAnH/280/bus/file0" dev="overlay" ino=1969 res=1 errno=0 [ 662.674590][ T9019] loop1: detected capacity change from 0 to 2048 [ 662.803107][ T9019] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 662.813188][ T9019] NILFS (loop1): mounting unchecked fs [ 662.818868][ T9019] NILFS (loop1): recovery required for readonly filesystem [ 662.826582][ T9019] NILFS (loop1): write access will be enabled during recovery [ 662.967043][ T9019] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 664.021265][ T9031] loop1: detected capacity change from 0 to 512 [ 664.070667][ T9031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 664.619492][ T9031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.632920][ T9031] ext4 filesystem being mounted at /root/syzkaller-testdir651961642/syzkaller.p0iPsC/103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.707520][ T9031] lo: entered allmulticast mode [ 665.025559][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.278019][ T3310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.293923][ T9044] ALSA: seq fatal error: cannot create timer (-22) [ 665.300970][ T5068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 665.315565][ T5068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 665.324983][ T5068] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 665.338262][ T5068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 665.360222][ T5068] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 665.369660][ T5068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 665.709354][ T3310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.853282][ T5127] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 665.897327][ T3310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.049974][ T3310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.275622][ T5127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.287092][ T5127] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 666.300687][ T5127] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.310294][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.351469][ T5127] usb 5-1: config 0 descriptor?? [ 666.589230][ T3310] bridge_slave_1: left allmulticast mode [ 666.595354][ T3310] bridge_slave_1: left promiscuous mode [ 666.602020][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.651764][ T3310] bridge_slave_0: left allmulticast mode [ 666.658043][ T3310] bridge_slave_0: left promiscuous mode [ 666.664760][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.706503][ T29] audit: type=1804 audit(1717883238.385:249): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1702687016/syzkaller.DszAnH/285/bus/file0" dev="overlay" ino=1964 res=1 errno=0 [ 666.988242][ T5127] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 666.997332][ T5127] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 667.005126][ T5127] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 667.012986][ T5127] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 667.020746][ T5127] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 667.319810][ T5127] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 667.379140][ T5127] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 667.409066][ T5127] usb 5-1: USB disconnect, device number 4 [ 667.462259][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.493298][ T5068] Bluetooth: hci0: command tx timeout [ 667.530297][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.569256][ T3310] bond0 (unregistering): Released all slaves [ 667.598361][ T9068] loop1: detected capacity change from 0 to 2048 [ 667.706305][ T3310] tipc: Left network mode [ 667.723559][ T9068] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 667.737445][ T9068] NILFS (loop1): mounting unchecked fs [ 667.746339][ T9068] NILFS (loop1): recovery required for readonly filesystem [ 667.754290][ T9068] NILFS (loop1): write access will be enabled during recovery [ 667.884116][ T9068] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 668.205771][ T9045] chnl_net:caif_netlink_parms(): no params data found [ 668.314478][ T3310] hsr_slave_0: left promiscuous mode [ 668.389469][ T3310] hsr_slave_1: left promiscuous mode [ 668.428020][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.436236][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.468922][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.476996][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.563662][ T3310] veth1_macvtap: left promiscuous mode [ 668.569514][ T3310] veth0_macvtap: left promiscuous mode [ 668.576150][ T3310] veth1_vlan: left promiscuous mode [ 668.586192][ T3310] veth0_vlan: left promiscuous mode [ 668.600017][ T9079] loop3: detected capacity change from 0 to 512 [ 668.649040][ T9079] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 668.908759][ T9079] EXT4-fs (loop3): 1 truncate cleaned up [ 668.915223][ T9079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.972180][ T9079] EXT4-fs warning (device loop3): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 668.984411][ T9079] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 669.589582][ T5068] Bluetooth: hci0: command tx timeout [ 669.724793][ T5074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.012299][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 670.084722][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 670.389132][ T29] audit: type=1804 audit(1717883242.065:250): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2045754826/syzkaller.UpWZDG/7/bus/file0" dev="overlay" ino=1959 res=1 errno=0 [ 670.839240][ T5123] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 671.224425][ T5123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.235831][ T5123] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 671.252482][ T5123] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.263107][ T5123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.275782][ T9110] loop3: detected capacity change from 0 to 512 [ 671.319384][ T9110] EXT4-fs: Ignoring removed mblk_io_submit option [ 671.328263][ T5123] usb 2-1: config 0 descriptor?? [ 671.408747][ T9110] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 671.557334][ T9110] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.3: corrupted in-inode xattr: e_value out of bounds [ 671.623715][ T9110] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 671.663502][ T5068] Bluetooth: hci0: command tx timeout [ 671.684581][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.692289][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.701244][ T9045] bridge_slave_0: entered allmulticast mode [ 671.710502][ T9045] bridge_slave_0: entered promiscuous mode [ 671.725769][ T9119] loop2: detected capacity change from 0 to 512 [ 671.730174][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.740157][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.742070][ T9110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.748029][ T9045] bridge_slave_1: entered allmulticast mode [ 671.773916][ T9045] bridge_slave_1: entered promiscuous mode [ 671.852700][ T5123] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 671.866313][ T5123] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 671.875639][ T5123] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 671.883458][ T5123] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 671.891160][ T5123] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 671.900933][ T9119] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 671.941218][ T9119] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 671.975254][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.975769][ T9118] loop4: detected capacity change from 0 to 2048 [ 672.003996][ T9119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.038395][ T5123] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 672.061248][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.088128][ T9118] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 672.098400][ T9118] NILFS (loop4): mounting unchecked fs [ 672.104227][ T9118] NILFS (loop4): recovery required for readonly filesystem [ 672.111658][ T9118] NILFS (loop4): write access will be enabled during recovery [ 672.123179][ T5074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.147588][ T9119] process 'syz-executor.2' launched './file0' with NULL argv: empty string added [ 672.158967][ T5123] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 672.220022][ T5123] usb 2-1: USB disconnect, device number 3 [ 672.278705][ T9118] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 672.326134][ T9045] team0: Port device team_slave_0 added [ 672.352036][ T9045] team0: Port device team_slave_1 added [ 672.632545][ T8127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.687437][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.694695][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.721013][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.897729][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.905732][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.938449][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.266604][ T9045] hsr_slave_0: entered promiscuous mode [ 673.301642][ T9045] hsr_slave_1: entered promiscuous mode [ 673.349153][ T9045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.357042][ T9045] Cannot create hsr debugfs directory [ 673.737790][ T5068] Bluetooth: hci0: command tx timeout [ 674.984561][ T29] audit: type=1804 audit(1717883246.715:251): pid=9151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir589169007/syzkaller.ic4b9g/48/bus/file0" dev="sda1" ino=1945 res=1 errno=0 [ 675.130792][ T9045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 675.197249][ T9045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 675.266403][ T9045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 675.319132][ T9045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 676.491897][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.644481][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.711724][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.719522][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.089047][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.096842][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.495626][ T9167] loop1: detected capacity change from 0 to 2048 [ 678.393470][ T9167] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 678.405518][ T9167] NILFS (loop1): mounting unchecked fs [ 678.415356][ T9167] NILFS (loop1): recovery required for readonly filesystem [ 678.424101][ T9167] NILFS (loop1): write access will be enabled during recovery [ 678.861153][ T9167] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 680.028035][ T9185] loop3: detected capacity change from 0 to 2048 [ 680.070519][ T9189] fuse: Bad value for 'fd' [ 680.394002][ T9191] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 681.870006][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.317196][ T9045] veth0_vlan: entered promiscuous mode [ 682.419991][ T9045] veth1_vlan: entered promiscuous mode [ 682.537297][ T29] audit: type=1804 audit(1717883254.245:252): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2045754826/syzkaller.UpWZDG/12/bus/file0" dev="overlay" ino=1964 res=1 errno=0 [ 682.568580][ T9199] loop1: detected capacity change from 0 to 2048 [ 682.668098][ T9199] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 682.718966][ T9045] veth0_macvtap: entered promiscuous mode [ 682.799226][ T9045] veth1_macvtap: entered promiscuous mode [ 683.017408][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.033298][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.044948][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.055750][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.065927][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.076724][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.091875][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.161193][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.172218][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.184484][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.195739][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.205896][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.216973][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.237515][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.301395][ T9045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.310924][ T9045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.320124][ T9045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.333755][ T9045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.783339][ T29] audit: type=1326 audit(1717883255.485:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 683.806960][ T29] audit: type=1326 audit(1717883255.485:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 683.831219][ T29] audit: type=1326 audit(1717883255.505:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 683.858097][ T29] audit: type=1326 audit(1717883255.505:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 683.882744][ T29] audit: type=1326 audit(1717883255.505:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 683.906888][ T29] audit: type=1326 audit(1717883255.535:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 683.930590][ T29] audit: type=1326 audit(1717883255.535:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 683.957587][ T29] audit: type=1326 audit(1717883255.535:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 683.981906][ T29] audit: type=1326 audit(1717883255.535:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 685.267403][ T25] libceph: connect (1)[c::]:6789 error -101 [ 685.278360][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 685.449726][ T9236] ceph: No mds server is up or the cluster is laggy [ 686.555677][ T9268] Illegal XDP return value 4294967289 on prog (id 219) dev N/A, expect packet loss! [ 689.715303][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 689.725196][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 689.739930][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.747663][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.748358][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.755994][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.772430][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 689.823651][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 689.840326][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 689.855968][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 689.958918][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 689.958993][ T29] audit: type=1804 audit(1717883261.715:266): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2045754826/syzkaller.UpWZDG/18/bus/file0" dev="overlay" ino=1959 res=1 errno=0 [ 690.646490][ T9321] syz_tun: entered promiscuous mode [ 690.652062][ T9321] vlan2: entered promiscuous mode [ 690.658318][ T9321] vlan2: entered allmulticast mode [ 690.663743][ T9321] syz_tun: entered allmulticast mode [ 690.710454][ T9321] syz_tun: left allmulticast mode [ 690.716920][ T9321] syz_tun: left promiscuous mode [ 691.209466][ T9309] chnl_net:caif_netlink_parms(): no params data found [ 691.290661][ T2855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.423545][ T2855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.560914][ T2855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.818232][ T2855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.943555][ T5085] Bluetooth: hci1: command tx timeout [ 692.548720][ T2855] bridge_slave_1: left allmulticast mode [ 692.554807][ T2855] bridge_slave_1: left promiscuous mode [ 692.561363][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.253835][ T5085] Bluetooth: hci1: command tx timeout [ 695.518360][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 695.609505][ T2855] bridge_slave_0: left allmulticast mode [ 695.620591][ T2855] bridge_slave_0: left promiscuous mode [ 695.627416][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.275273][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880440d6a00: rx timeout, send abort [ 696.296150][ T5068] Bluetooth: hci1: command tx timeout [ 696.594272][ T2855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.718741][ T2855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.783865][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880440d6a00: abort rx timeout. Force session deactivation [ 696.786414][ T2855] bond0 (unregistering): Released all slaves [ 697.240593][ T29] audit: type=1804 audit(1717883268.855:267): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2045754826/syzkaller.UpWZDG/21/bus/file0" dev="overlay" ino=1962 res=1 errno=0 [ 698.373003][ T5068] Bluetooth: hci1: command tx timeout [ 698.432066][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 698.857108][ T2855] hsr_slave_0: left promiscuous mode [ 698.878859][ T2855] hsr_slave_1: left promiscuous mode [ 698.912156][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.920166][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.973961][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.981678][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.075073][ T2855] veth1_macvtap: left promiscuous mode [ 699.080855][ T2855] veth0_macvtap: left promiscuous mode [ 699.086966][ T2855] veth1_vlan: left promiscuous mode [ 699.092532][ T2855] veth0_vlan: left promiscuous mode [ 700.033749][ T2855] team0 (unregistering): Port device team_slave_1 removed [ 700.085523][ T2855] team0 (unregistering): Port device team_slave_0 removed [ 700.396319][ T29] audit: type=1804 audit(1717883272.065:268): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir651961642/syzkaller.p0iPsC/129/bus/file0" dev="sda1" ino=1965 res=1 errno=0 [ 701.078028][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.088786][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.096792][ T9309] bridge_slave_0: entered allmulticast mode [ 701.106078][ T9309] bridge_slave_0: entered promiscuous mode [ 701.198882][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.206889][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.294006][ T9309] bridge_slave_1: entered allmulticast mode [ 701.303197][ T9309] bridge_slave_1: entered promiscuous mode [ 701.524765][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.587770][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.450434][ T9309] team0: Port device team_slave_0 added [ 702.598878][ T9309] team0: Port device team_slave_1 added [ 703.060244][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.068321][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.098880][ T9309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.465431][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.472615][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.499278][ T9309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.925802][ T9309] hsr_slave_0: entered promiscuous mode [ 703.989972][ T9309] hsr_slave_1: entered promiscuous mode [ 704.024485][ T9309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.032424][ T9309] Cannot create hsr debugfs directory [ 704.349214][ T5125] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 704.358639][ T29] audit: type=1804 audit(1717883276.005:269): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3042810058/syzkaller.K1k0FS/7/bus/file0" dev="sda1" ino=1956 res=1 errno=0 [ 704.773716][ T5125] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.785002][ T5125] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.941091][ T5125] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 704.950773][ T5125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 704.959383][ T5125] usb 5-1: SerialNumber: syz [ 705.299486][ T5125] usb 5-1: 0:2 : does not exist [ 705.401356][ T9448] loop1: detected capacity change from 0 to 512 [ 705.468934][ T4498] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 705.639659][ T5125] usb 5-1: USB disconnect, device number 5 [ 705.805921][ T9309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 705.869929][ T9309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 705.884595][ T4498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.896677][ T4498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.906894][ T4498] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 705.916498][ T4498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.936726][ T9309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 705.963759][ T4498] usb 1-1: config 0 descriptor?? [ 706.022160][ T9309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 706.199369][ T9448] EXT4-fs (loop1): Test dummy encryption mode enabled [ 706.305037][ T9448] EXT4-fs error (device loop1): __ext4_iget:4913: inode #11: block 1: comm syz-executor.1: invalid block [ 706.339373][ T9448] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 706.359989][ T9448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.977879][ T4498] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 706.991193][ T4498] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 707.000089][ T4498] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 707.011379][ T9309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.071064][ T4498] usb 1-1: USB disconnect, device number 8 [ 707.172712][ T9309] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.237921][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.245935][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.303044][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.310712][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.930888][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.024554][ T9309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.490314][ T9309] veth0_vlan: entered promiscuous mode [ 709.594969][ T9309] veth1_vlan: entered promiscuous mode [ 709.884366][ T9309] veth0_macvtap: entered promiscuous mode [ 709.933906][ T9309] veth1_macvtap: entered promiscuous mode [ 710.100949][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.113080][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.123323][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.136370][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.146912][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.160258][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.176083][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.273633][ T29] audit: type=1804 audit(1717883281.995:270): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1702687016/syzkaller.DszAnH/314/bus/file0" dev="overlay" ino=1962 res=1 errno=0 [ 710.358599][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.372087][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.383002][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.395601][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.406555][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.417358][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.434145][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.629502][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.636621][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.679564][ T9309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.691158][ T9309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.700614][ T9309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.710186][ T9309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.312609][ T9488] loop4: detected capacity change from 0 to 512 [ 711.337588][ T9488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 711.346714][ T9488] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 711.356347][ T9488] EXT4-fs (loop4): blocks per group (3008) and clusters per group (32768) inconsistent [ 711.703913][ T5119] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 711.973273][ T5119] usb 4-1: Using ep0 maxpacket: 32 [ 712.097087][ T5119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.111854][ T5119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.123140][ T5119] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 712.132484][ T5119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.785439][ T5119] usb 4-1: config 0 descriptor?? [ 713.439667][ T5119] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 713.553089][ T781] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 713.622016][ T5119] usb 4-1: USB disconnect, device number 5 [ 713.984328][ T781] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 713.993920][ T781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.066259][ T781] usb 1-1: config 0 descriptor?? [ 714.768957][ T781] usb 1-1: Cannot read MAC address [ 714.776748][ T781] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 714.916066][ T781] usb 1-1: USB disconnect, device number 9 [ 715.998742][ T29] audit: type=1804 audit(1717883287.665:271): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3042810058/syzkaller.K1k0FS/12/bus/file0" dev="overlay" ino=1958 res=1 errno=0 [ 717.914130][ T9555] loop0: detected capacity change from 0 to 128 [ 718.010992][ T9556] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 718.322351][ T5119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.330817][ T5119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.630354][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.639166][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.340619][ T9560] netlink: 'syz-executor.1': attribute type 41 has an invalid length. [ 721.875590][ T29] audit: type=1804 audit(1717883293.605:272): pid=9590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir651961642/syzkaller.p0iPsC/142/bus/file0" dev="sda1" ino=1971 res=1 errno=0 [ 725.729121][ T29] audit: type=1804 audit(1717883297.435:273): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2045754826/syzkaller.UpWZDG/41/bus/file0" dev="sda1" ino=1971 res=1 errno=0 [ 727.753396][ T9651] loop1: detected capacity change from 0 to 4096 [ 727.845521][ T9651] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 728.082093][ T9651] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 728.099472][ T9651] ntfs3: loop1: Failed to load $Extend (-22). [ 728.106029][ T9651] ntfs3: loop1: Failed to initialize $Extend. [ 729.608628][ T29] audit: type=1804 audit(1717883301.325:274): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1702687016/syzkaller.DszAnH/328/bus/file0" dev="overlay" ino=1964 res=1 errno=0 [ 730.686692][ T9685] loop1: detected capacity change from 0 to 1024 [ 731.278043][ T2855] hfsplus: b-tree write err: -5, ino 4 [ 733.442324][ T29] audit: type=1804 audit(1717883305.155:275): pid=9717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2045754826/syzkaller.UpWZDG/46/bus/file0" dev="overlay" ino=1958 res=1 errno=0 [ 735.850382][ T29] audit: type=1804 audit(1717883307.565:276): pid=9757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2045754826/syzkaller.UpWZDG/50/bus/file0" dev="overlay" ino=1948 res=1 errno=0 [ 737.931686][ T9796] loop1: detected capacity change from 0 to 2048 [ 737.961760][ T9796] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 738.005269][ T9797] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 738.630574][ T9805] loop1: detected capacity change from 0 to 1024 [ 738.679290][ T9805] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 738.747822][ T9805] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 738.783038][ T9805] EXT4-fs (loop1): orphan cleanup on readonly fs [ 738.790555][ T9805] EXT4-fs error (device loop1): ext4_free_blocks:6576: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 738.810293][ T9805] EXT4-fs (loop1): 1 orphan inode deleted [ 738.816497][ T9805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 739.154562][ T5068] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 739.154663][ T5068] CPU: 0 PID: 5068 Comm: kworker/u9:2 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 739.154807][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 739.154930][ T5068] Workqueue: hci0 hci_rx_work [ 739.155115][ T5068] Call Trace: [ 739.155168][ T5068] [ 739.155221][ T5068] dump_stack_lvl+0x216/0x2d0 [ 739.155430][ T5068] dump_stack+0x1e/0x30 [ 739.155595][ T5068] sysfs_create_dir_ns+0x45f/0x4c0 [ 739.155769][ T5068] kobject_add_internal+0xfe7/0x1900 [ 739.155937][ T5068] kobject_add+0x28c/0x3c0 [ 739.156139][ T5068] ? kmsan_get_metadata+0x146/0x1d0 [ 739.156308][ T5068] device_add+0xa93/0x1c90 [ 739.156487][ T5068] hci_conn_add_sysfs+0x161/0x2c0 [ 739.156692][ T5068] le_conn_complete_evt+0x1975/0x1f40 [ 739.156883][ T5068] ? kmsan_get_metadata+0x146/0x1d0 [ 739.157038][ T5068] hci_le_enh_conn_complete_evt+0x15e/0x210 [ 739.157235][ T5068] hci_le_meta_evt+0x600/0x850 [ 739.157404][ T5068] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 739.157607][ T5068] hci_event_packet+0x1118/0x1bc0 [ 739.157764][ T5068] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 739.157961][ T5068] hci_rx_work+0x687/0x1130 [ 739.158132][ T5068] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 739.158290][ T5068] ? __pfx_hci_rx_work+0x10/0x10 [ 739.158454][ T5068] ? __pfx_hci_rx_work+0x10/0x10 [ 739.158615][ T5068] process_scheduled_works+0xa81/0x1bd0 [ 739.158811][ T5068] worker_thread+0xea5/0x1560 [ 739.158993][ T5068] kthread+0x3e2/0x540 [ 739.159154][ T5068] ? __pfx_worker_thread+0x10/0x10 [ 739.159323][ T5068] ? __pfx_kthread+0x10/0x10 [ 739.159484][ T5068] ret_from_fork+0x6d/0x90 [ 739.159625][ T5068] ? __pfx_kthread+0x10/0x10 [ 739.159791][ T5068] ret_from_fork_asm+0x1a/0x30 [ 739.159977][ T5068] [ 739.160093][ T5068] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 739.160262][ T5068] Bluetooth: hci0: failed to register connection device [ 739.175504][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.444716][ T9822] loop4: detected capacity change from 0 to 2048 [ 740.582293][ T9825] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 740.639798][ T29] audit: type=1800 audit(1717883312.375:277): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 740.660890][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.173112][ T5085] Bluetooth: hci0: command tx timeout [ 741.951541][ T29] audit: type=1804 audit(1717883313.685:278): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2045754826/syzkaller.UpWZDG/53/bus" dev="sda1" ino=1959 res=1 errno=0 [ 741.976965][ C1] vkms_vblank_simulate: vblank timer overrun [ 742.078993][ T29] audit: type=1804 audit(1717883313.785:279): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2045754826/syzkaller.UpWZDG/53/bus" dev="sda1" ino=1959 res=1 errno=0 [ 742.966482][ T781] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 743.413715][ T781] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 743.425333][ T781] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 743.434785][ T781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.074302][ T781] usb 5-1: string descriptor 0 read error: -71 [ 744.081636][ T781] hub 5-1:32.0: USB hub found [ 744.160239][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 744.213498][ T781] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 744.366823][ T781] usb 5-1: USB disconnect, device number 6 [ 744.626069][ T9888] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 745.819661][ T29] audit: type=1804 audit(1717883317.515:280): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2673108654/syzkaller.gRWrbb/15/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 747.216095][ T9946] pim6reg1: entered promiscuous mode [ 747.221738][ T9946] pim6reg1: entered allmulticast mode [ 748.534654][ T5068] Bluetooth: hci5: command 0x0406 tx timeout [ 752.166773][T10001] loop0: detected capacity change from 0 to 1024 [ 752.747493][ T2855] hfsplus: b-tree write err: -5, ino 4 [ 759.724821][ T29] audit: type=1326 audit(1717883331.435:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 759.748498][ T29] audit: type=1326 audit(1717883331.435:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 759.772239][ T29] audit: type=1326 audit(1717883331.455:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 759.795603][ T29] audit: type=1326 audit(1717883331.475:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 759.819205][ T29] audit: type=1326 audit(1717883331.475:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 760.049557][T10111] loop2: detected capacity change from 0 to 256 [ 760.082417][T10111] exfat: Deprecated parameter 'utf8' [ 760.206089][T10111] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0xe756071b, utbl_chksum : 0xe619d30d) [ 760.297217][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 761.436439][T10124] loop1: detected capacity change from 0 to 1024 [ 761.453369][T10125] loop2: detected capacity change from 0 to 1024 [ 761.514654][T10124] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 761.576996][T10125] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 761.616021][T10124] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 761.708852][T10125] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 761.724886][T10125] EXT4-fs (loop2): orphan cleanup on readonly fs [ 761.734608][T10125] EXT4-fs error (device loop2): ext4_free_blocks:6576: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 761.751306][T10125] EXT4-fs (loop2): 1 orphan inode deleted [ 761.757996][T10125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 761.801836][T10124] EXT4-fs (loop1): orphan cleanup on readonly fs [ 761.897471][T10124] EXT4-fs error (device loop1): ext4_free_blocks:6576: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 761.985570][T10124] EXT4-fs (loop1): 1 orphan inode deleted [ 761.991617][T10124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 762.496613][T10125] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 762.595391][T10139] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 762.947655][T10140] loop0: detected capacity change from 0 to 64 [ 763.369660][ T9309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.486852][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.365571][T10178] loop1: detected capacity change from 0 to 1024 [ 766.436083][T10178] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 766.480789][T10178] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 766.501112][T10178] EXT4-fs (loop1): orphan cleanup on readonly fs [ 766.515634][T10178] EXT4-fs error (device loop1): ext4_free_blocks:6576: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 766.536433][T10178] EXT4-fs (loop1): 1 orphan inode deleted [ 766.542312][T10178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 767.200295][T10178] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 767.758759][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.445606][T10189] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 768.455262][T10189] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 768.463792][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 770.222955][T10200] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 772.100794][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.125295][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 774.355712][T10223] loop2: detected capacity change from 0 to 1024 [ 774.466077][T10223] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 774.546980][T10223] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 774.558409][T10223] EXT4-fs (loop2): orphan cleanup on readonly fs [ 774.585088][T10223] EXT4-fs error (device loop2): ext4_free_blocks:6576: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 774.630467][T10223] EXT4-fs (loop2): 1 orphan inode deleted [ 774.636553][T10223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 775.064014][T10229] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 775.628835][ T9309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.244601][T10240] loop1: detected capacity change from 0 to 1024 [ 779.426433][T10242] hfsplus: xattr search failed [ 782.543312][T10253] loop2: detected capacity change from 0 to 4096 [ 782.668854][T10253] NILFS (loop2): invalid segment: Checksum error in segment payload [ 782.677213][T10253] NILFS (loop2): trying rollback from an earlier position [ 782.866315][T10253] NILFS (loop2): recovery complete [ 782.896957][T10266] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 784.385290][T10279] loop2: detected capacity change from 0 to 1024 [ 784.493389][T10279] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 784.578805][T10279] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 784.762144][T10279] EXT4-fs (loop2): orphan cleanup on readonly fs [ 784.771270][T10279] EXT4-fs error (device loop2): ext4_free_blocks:6576: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 784.798292][T10279] EXT4-fs (loop2): 1 orphan inode deleted [ 784.804453][T10279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 784.954965][T10288] loop0: detected capacity change from 0 to 64 [ 785.297543][T10279] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 785.813921][ T9309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.187307][T10299] loop1: detected capacity change from 0 to 2048 [ 786.359911][T10299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 788.310246][T10328] loop0: detected capacity change from 0 to 512 [ 788.366337][T10328] EXT4-fs (loop0): Test dummy encryption mode enabled [ 788.466522][T10328] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 788.504468][T10328] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 2 len 1 [ 788.523280][T10328] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 788.551134][T10328] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 788.602687][T10328] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 788.647972][T10328] EXT4-fs (loop0): 1 truncate cleaned up [ 788.654112][T10328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.894781][T10335] loop3: detected capacity change from 0 to 1024 [ 789.023273][T10335] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 789.077627][ T9045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.128587][T10335] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 789.158897][T10335] EXT4-fs (loop3): orphan cleanup on readonly fs [ 789.182599][T10335] EXT4-fs error (device loop3): ext4_free_blocks:6576: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 789.237289][T10335] EXT4-fs (loop3): 1 orphan inode deleted [ 789.244800][T10335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 789.493960][ T5068] Bluetooth: hci0: command 0x0406 tx timeout [ 789.718821][T10335] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 790.493772][ T5074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.750972][T10357] loop0: detected capacity change from 0 to 2048 [ 790.864803][T10357] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 791.272050][ T29] audit: type=1326 audit(1717883362.985:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 791.295985][ T29] audit: type=1326 audit(1717883362.995:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 791.319014][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.325699][ T29] audit: type=1326 audit(1717883363.025:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 791.350750][ T29] audit: type=1326 audit(1717883363.025:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 791.376274][ T29] audit: type=1326 audit(1717883363.025:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 791.399660][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.406574][ T29] audit: type=1326 audit(1717883363.135:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6b95c7cf69 code=0x7ffc0000 [ 791.430301][ T29] audit: type=1326 audit(1717883363.135:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b95c7cfa3 code=0x7ffc0000 [ 791.453274][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.643479][ T29] audit: type=1326 audit(1717883363.355:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b95c7bcaf code=0x7ffc0000 [ 791.858571][ T29] audit: type=1326 audit(1717883363.585:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6b95c7cff7 code=0x7ffc0000 [ 791.906357][T10372] loop3: detected capacity change from 0 to 4096 [ 791.913467][ T29] audit: type=1326 audit(1717883363.665:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10370 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b95c7bb60 code=0x7ffc0000 [ 794.819514][T10402] loop3: detected capacity change from 0 to 4096 [ 795.582134][T10406] loop4: detected capacity change from 0 to 2048 [ 795.741964][T10406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 795.892924][T10407] loop2: detected capacity change from 0 to 32768 [ 795.989582][T10407] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 796.315974][T10407] XFS (loop2): Ending clean mount [ 796.334497][T10407] XFS (loop2): Quotacheck needed: Please wait. [ 796.426947][T10407] XFS (loop2): Quotacheck: Done. [ 799.362676][ T9309] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 800.253308][ T5123] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 800.663940][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 800.664016][ T29] audit: type=1326 audit(1717883372.415:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe7a7cf69 code=0x7ffc0000 [ 800.693827][ T5123] usb 2-1: config index 0 descriptor too short (expected 546, got 34) [ 800.693982][ T5123] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.694173][ T5123] usb 2-1: New USB device found, idVendor=06f8, idProduct=3009, bcdDevice=37.1d [ 800.694330][ T5123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.709241][ T5123] usb 2-1: config 0 descriptor?? [ 800.717365][ T29] audit: type=1326 audit(1717883372.455:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe7a7cf69 code=0x7ffc0000 [ 800.794536][ T5123] gspca_main: gspca_pac7302-2.14.0 probing 06f8:3009 [ 800.826831][ T29] audit: type=1326 audit(1717883372.575:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5fe7a7cf69 code=0x7ffc0000 [ 800.850222][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.857123][ T29] audit: type=1326 audit(1717883372.575:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5fe7a7cfa3 code=0x7ffc0000 [ 801.034303][ T29] audit: type=1326 audit(1717883372.735:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5fe7a7bcaf code=0x7ffc0000 [ 801.049783][ T5123] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 801.064966][ T5123] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 801.116697][ T5123] usb 2-1: USB disconnect, device number 4 [ 801.267531][T10459] loop0: detected capacity change from 0 to 4096 [ 801.283548][ T29] audit: type=1326 audit(1717883372.975:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5fe7a7cff7 code=0x7ffc0000 [ 801.308820][ T29] audit: type=1326 audit(1717883373.025:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fe7a7bb60 code=0x7ffc0000 [ 801.332708][ T29] audit: type=1326 audit(1717883373.025:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fe7a7cccb code=0x7ffc0000 [ 801.356318][ T29] audit: type=1326 audit(1717883373.095:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5fe7a7be5a code=0x7ffc0000 [ 801.379670][ T29] audit: type=1326 audit(1717883373.095:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5fe7a7be5a code=0x7ffc0000 [ 801.402542][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.122143][T10476] loop2: detected capacity change from 0 to 512 [ 802.210264][T10476] EXT4-fs error (device loop2): ext4_get_journal_inode:5771: comm syz-executor.2: inode #196608: comm syz-executor.2: iget: illegal inode # [ 802.251299][T10476] EXT4-fs (loop2): no journal found [ 804.549240][T10506] loop0: detected capacity change from 0 to 4096 [ 805.745720][T10532] loop1: detected capacity change from 0 to 256 [ 805.836468][T10537] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 805.885935][T10535] loop0: detected capacity change from 0 to 256 [ 805.987347][T10532] FAT-fs (loop1): Directory bread(block 64) failed [ 805.994458][T10532] FAT-fs (loop1): Directory bread(block 65) failed [ 806.007085][T10532] FAT-fs (loop1): Directory bread(block 66) failed [ 806.015629][T10532] FAT-fs (loop1): Directory bread(block 67) failed [ 806.022745][T10532] FAT-fs (loop1): Directory bread(block 68) failed [ 806.029818][T10532] FAT-fs (loop1): Directory bread(block 69) failed [ 806.036883][T10532] FAT-fs (loop1): Directory bread(block 70) failed [ 806.043786][T10532] FAT-fs (loop1): Directory bread(block 71) failed [ 806.050729][T10532] FAT-fs (loop1): Directory bread(block 72) failed [ 806.057667][T10532] FAT-fs (loop1): Directory bread(block 73) failed [ 806.078834][T10535] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 806.703879][ T5085] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 806.712463][ T5085] Bluetooth: hci1: Injecting HCI hardware error event [ 806.722686][ T5068] Bluetooth: hci1: hardware error 0x00 [ 809.532963][ T5068] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 810.501402][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 810.501480][ T29] audit: type=1326 audit(1717883382.255:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faceea7cf69 code=0x7ffc0000 [ 810.541401][ T29] audit: type=1326 audit(1717883382.265:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faceea7cf69 code=0x7ffc0000 [ 810.635496][ T29] audit: type=1326 audit(1717883382.335:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faceea7cf69 code=0x7ffc0000 [ 810.658861][ T29] audit: type=1326 audit(1717883382.345:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faceea7cfa3 code=0x7ffc0000 [ 811.414013][T10566] loop4: detected capacity change from 0 to 4096 [ 811.422979][ T29] audit: type=1326 audit(1717883382.685:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faceea7bcaf code=0x7ffc0000 [ 811.450025][ T29] audit: type=1326 audit(1717883383.095:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faceea7cff7 code=0x7ffc0000 [ 811.474502][ T29] audit: type=1326 audit(1717883383.165:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faceea7bb60 code=0x7ffc0000 [ 811.497873][ T29] audit: type=1326 audit(1717883383.175:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faceea7cccb code=0x7ffc0000 [ 811.521247][ T29] audit: type=1326 audit(1717883383.185:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faceea7be5a code=0x7ffc0000 [ 811.551141][ T29] audit: type=1326 audit(1717883383.185:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faceea7be5a code=0x7ffc0000 [ 812.363117][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 812.406408][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 812.415301][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 812.433101][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 812.463707][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 812.484923][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 812.521074][T10580] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 814.636014][ T5068] Bluetooth: hci4: command tx timeout [ 816.262137][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.373640][T10577] chnl_net:caif_netlink_parms(): no params data found [ 816.455004][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.598134][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.694650][ T5068] Bluetooth: hci4: command tx timeout [ 816.754681][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.025051][ T58] bridge_slave_1: left allmulticast mode [ 817.031053][ T58] bridge_slave_1: left promiscuous mode [ 817.037651][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.263682][ T58] bridge_slave_0: left allmulticast mode [ 817.271887][ T58] bridge_slave_0: left promiscuous mode [ 817.278447][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.919184][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.995860][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.043247][ T58] bond0 (unregistering): Released all slaves [ 818.167970][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 818.168046][ T29] audit: type=1326 audit(1717883389.925:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 818.301142][ T29] audit: type=1326 audit(1717883389.985:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 818.324842][ T29] audit: type=1326 audit(1717883389.995:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 818.348212][ T29] audit: type=1326 audit(1717883389.995:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 818.371569][ T29] audit: type=1800 audit(1717883390.025:399): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 818.792918][ T5068] Bluetooth: hci4: command tx timeout [ 818.839774][ T58] hsr_slave_0: left promiscuous mode [ 818.860218][ T58] hsr_slave_1: left promiscuous mode [ 818.889813][ T58] veth1_macvtap: left promiscuous mode [ 818.895979][ T58] veth0_macvtap: left promiscuous mode [ 818.901947][ T58] veth1_vlan: left promiscuous mode [ 818.913099][ T58] veth0_vlan: left promiscuous mode [ 819.950231][ T58] team0 (unregistering): Port device team_slave_1 removed [ 819.979977][ T58] team0 (unregistering): Port device team_slave_0 removed [ 820.595346][T10577] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.603186][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.610965][T10577] bridge_slave_0: entered allmulticast mode [ 820.622520][T10577] bridge_slave_0: entered promiscuous mode [ 820.684214][T10657] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 820.690847][T10577] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.700029][T10577] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.708084][T10577] bridge_slave_1: entered allmulticast mode [ 820.717713][T10577] bridge_slave_1: entered promiscuous mode [ 820.786535][T10657] kvm: pic: non byte read [ 820.792039][T10657] kvm: pic: non byte read [ 820.859172][ T5068] Bluetooth: hci4: command tx timeout [ 820.914249][T10657] kvm: pic: non byte read [ 820.919556][T10657] kvm: pic: single mode not supported [ 820.919655][T10657] kvm: pic: level sensitive irq not supported [ 821.003715][T10657] kvm: pic: non byte read [ 821.033449][T10657] kvm: pic: non byte read [ 821.040652][T10657] kvm: pic: level sensitive irq not supported [ 821.040969][T10657] kvm: pic: non byte read [ 821.091823][T10577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.094311][T10657] kvm: pic: non byte read [ 821.175311][T10577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.227863][T10657] kvm: pic: non byte read [ 821.297513][T10657] kvm: pic: single mode not supported [ 821.297955][T10657] kvm: pic: non byte read [ 821.311312][ T29] audit: type=1326 audit(1717883392.965:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe7a7cf69 code=0x7ffc0000 [ 821.335732][ T29] audit: type=1326 audit(1717883392.965:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe7a7cf69 code=0x7ffc0000 [ 821.359593][ T29] audit: type=1326 audit(1717883392.975:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f5fe7a7cf69 code=0x7ffc0000 [ 821.391075][ T29] audit: type=1326 audit(1717883392.975:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe7a7cf69 code=0x7ffc0000 [ 821.416247][ T29] audit: type=1326 audit(1717883392.975:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe7a7cf69 code=0x7ffc0000 [ 821.441328][T10657] kvm: pic: non byte read [ 821.593189][ T5123] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 821.747868][T10577] team0: Port device team_slave_0 added [ 821.789156][T10577] team0: Port device team_slave_1 added [ 821.955229][ T5123] usb 5-1: Using ep0 maxpacket: 8 [ 822.025011][T10577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.032173][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.060325][T10577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.145922][ T5123] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 822.156708][ T5123] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 822.166591][ T5123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.325020][T10577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.332187][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.359901][T10577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.374884][ T5123] hub 5-1:32.0: bad descriptor, ignoring hub [ 822.381136][ T5123] hub 5-1:32.0: probe with driver hub failed with error -5 [ 822.734803][T10577] hsr_slave_0: entered promiscuous mode [ 822.744854][T10682] loop2: detected capacity change from 0 to 256 [ 822.751841][ T4498] usb 5-1: USB disconnect, device number 7 [ 822.775305][T10577] hsr_slave_1: entered promiscuous mode [ 822.810798][T10577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.818843][T10577] Cannot create hsr debugfs directory [ 825.462726][T10577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 825.620089][T10577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 825.856540][T10577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 826.013552][T10577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 826.494001][ T29] audit: type=1326 audit(1717883398.185:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 826.517765][ T29] audit: type=1326 audit(1717883398.185:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 826.541156][ T29] audit: type=1326 audit(1717883398.195:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e4e7cf69 code=0x7ffc0000 [ 826.999773][T10577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.139254][T10711] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 827.330857][T10577] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.380459][T10720] picdev_read: 2 callbacks suppressed [ 827.380538][T10720] kvm: pic: non byte read [ 827.479485][T10720] kvm: pic: non byte read [ 827.512073][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.520497][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.537850][T10720] kvm: pic: non byte read [ 827.542718][T10720] kvm: pic: single mode not supported [ 827.543767][T10720] kvm: pic: level sensitive irq not supported [ 827.596712][T10720] kvm: pic: non byte read [ 827.678403][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.686827][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.854105][T10720] kvm: pic: non byte read [ 827.859416][T10720] kvm: pic: level sensitive irq not supported [ 827.859745][T10720] kvm: pic: non byte read [ 828.899507][T10741] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 829.564336][T10577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.981472][T10577] veth0_vlan: entered promiscuous mode [ 830.082599][T10577] veth1_vlan: entered promiscuous mode [ 830.352428][T10577] veth0_macvtap: entered promiscuous mode [ 830.380220][T10749] loop1: detected capacity change from 0 to 4096 [ 830.412547][T10577] veth1_macvtap: entered promiscuous mode [ 830.570776][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.587901][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.599384][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.610211][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.620337][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.631052][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.641195][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.651946][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.667028][T10577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.833863][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.845110][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.855269][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.865977][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.876507][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.892334][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.903877][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.914741][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.969569][T10577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.072711][T10577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.085183][T10577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.099798][T10577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.110317][T10577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.364819][T10765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 831.503116][T10765] kvm: pic: non byte read [ 831.549123][T10765] kvm: pic: non byte read [ 831.620409][T10765] kvm: pic: non byte read [ 831.666464][T10765] kvm: pic: single mode not supported [ 831.666542][T10765] kvm: pic: level sensitive irq not supported [ 831.733663][T10765] kvm: pic: non byte read [ 831.853613][T10765] kvm: pic: level sensitive irq not supported [ 831.855764][T10765] kvm: pic: single mode not supported [ 833.526878][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.541548][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.134219][T10805] loop2: detected capacity change from 0 to 4096 [ 834.349281][T10815] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 834.467380][T10815] picdev_read: 8 callbacks suppressed [ 834.467459][T10815] kvm: pic: non byte read [ 834.577370][T10815] kvm: pic: non byte read [ 834.650902][T10815] kvm: pic: non byte read [ 834.693769][T10815] kvm: pic: single mode not supported [ 834.693843][T10815] kvm: pic: level sensitive irq not supported [ 834.720364][T10815] kvm: pic: non byte read [ 834.770316][T10815] kvm: pic: non byte read [ 834.820520][T10815] kvm: pic: level sensitive irq not supported [ 834.820872][T10815] kvm: pic: non byte read [ 834.867450][T10815] kvm: pic: non byte read [ 834.949525][T10815] kvm: pic: non byte read [ 834.989291][T10815] kvm: pic: single mode not supported [ 834.989636][T10815] kvm: pic: non byte read [ 835.054530][T10815] kvm: pic: non byte read [ 836.664470][T10856] loop2: detected capacity change from 0 to 4096 [ 837.083734][ T3376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.091796][ T3376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.130236][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.141135][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.368364][T10955] loop4: detected capacity change from 0 to 1024 [ 845.056754][ T58] hfsplus: b-tree write err: -5, ino 4 [ 845.698141][T10989] loop4: detected capacity change from 0 to 512 [ 845.866954][T10989] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 845.935543][T10989] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 845.983327][T10989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.734439][T11011] loop0: detected capacity change from 0 to 1024 [ 847.201920][T11013] ptrace attach of "/root/syz-executor.3 exec"[10577] was attempted by "/root/syz-executor.3 exec"[11013] [ 847.219300][ T29] audit: type=1326 audit(1717883418.955:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 847.243189][ T29] audit: type=1326 audit(1717883418.955:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 847.266802][ T29] audit: type=1326 audit(1717883418.955:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 847.290379][ T29] audit: type=1326 audit(1717883419.015:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 847.316542][ T29] audit: type=1326 audit(1717883419.015:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11012 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 847.510748][ T6472] hfsplus: b-tree write err: -5, ino 4 [ 847.877958][T11019] ptrace attach of "/root/syz-executor.3 exec"[10577] was attempted by "/root/syz-executor.3 exec"[11019] [ 847.914921][ T29] audit: type=1326 audit(1717883419.615:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 847.938585][ T29] audit: type=1326 audit(1717883419.615:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 847.961921][ T29] audit: type=1326 audit(1717883419.625:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 848.042171][ T29] audit: type=1326 audit(1717883419.755:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 848.066076][ T29] audit: type=1326 audit(1717883419.755:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fbbcf47cf69 code=0x7ffc0000 [ 850.065488][ T8705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.929761][T11050] loop0: detected capacity change from 0 to 1024 [ 852.760346][ T79] hfsplus: b-tree write err: -5, ino 4 [ 856.162020][T11074] loop2: detected capacity change from 0 to 512 [ 856.338843][T11074] EXT4-fs: Ignoring removed mblk_io_submit option [ 856.404067][T11074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 856.495085][T11074] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 856.495438][T11074] EXT4-fs: failed to create workqueue [ 856.510822][T11074] EXT4-fs (loop2): mount failed [ 856.750154][T11087] loop4: detected capacity change from 0 to 256 [ 857.687716][T11096] loop4: detected capacity change from 0 to 1024 [ 857.739780][T11096] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 857.750213][T11096] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 857.813047][T11096] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 857.964801][T11096] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 858.034554][T11096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 858.100367][T11098] loop0: detected capacity change from 0 to 1024 [ 858.355035][ T8705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.804301][ T2855] hfsplus: b-tree write err: -5, ino 4 [ 865.637694][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 865.637770][ T29] audit: type=1326 audit(1717883437.245:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fe7a7cf69 code=0x0 [ 865.771646][T11135] loop1: detected capacity change from 0 to 1024 [ 867.704838][T11149] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 867.778787][T11149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.793728][T11149] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 867.837062][ T79] hfsplus: b-tree write err: -5, ino 4 [ 868.975901][T11159] loop1: detected capacity change from 0 to 4096 [ 869.496140][ T5068] Bluetooth: unknown link type 129 [ 870.389320][T11190] loop4: detected capacity change from 0 to 1024 [ 871.194916][ T3431] hfsplus: b-tree write err: -5, ino 4 [ 871.440498][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 871.574393][ T5068] Bluetooth: hci3: command 0x0406 tx timeout [ 872.356083][T11224] loop2: detected capacity change from 0 to 256 [ 873.761812][T11236] loop0: detected capacity change from 0 to 1024 [ 874.552047][ T79] hfsplus: b-tree write err: -5, ino 4 [ 876.384808][T11273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 878.132046][T11312] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd [ 878.263398][ T29] audit: type=1800 audit(1717883449.995:421): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 878.529824][T11319] syz-executor.3[11319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 878.530384][T11319] syz-executor.3[11319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.538282][T11335] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 881.294959][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 881.825975][T11371] loop3: detected capacity change from 0 to 256 [ 883.958506][T11412] loop3: detected capacity change from 0 to 256 [ 884.361123][T11416] loop3: detected capacity change from 0 to 64 [ 885.219019][T11423] loop2: detected capacity change from 0 to 64 [ 885.283519][T11424] hfs: request for non-existent node 237 in B*Tree [ 885.290333][T11424] hfs: request for non-existent node 237 in B*Tree [ 885.299800][T11422] hfs: request for non-existent node 237 in B*Tree [ 885.306638][T11422] hfs: request for non-existent node 237 in B*Tree [ 885.695270][T11429] loop4: detected capacity change from 0 to 256 [ 887.184609][ T3431] hfs: request for non-existent node 237 in B*Tree [ 887.191334][ T3431] hfs: request for non-existent node 237 in B*Tree [ 887.357626][T11443] loop1: detected capacity change from 0 to 256 [ 887.605900][T11451] loop3: detected capacity change from 0 to 256 [ 890.734860][T11481] loop1: detected capacity change from 0 to 64 [ 891.976488][T11487] loop0: detected capacity change from 0 to 256 [ 894.014765][T11514] loop1: detected capacity change from 0 to 256 [ 894.965812][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 894.972481][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 895.637539][T11545] loop0: detected capacity change from 0 to 256 [ 896.206101][T11554] 9pnet_virtio: no channels available for device 127.0.0.1 [ 896.884783][ T782] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 896.983435][ T5123] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 897.154026][ T782] usb 4-1: Using ep0 maxpacket: 32 [ 897.275351][ T5123] usb 1-1: Using ep0 maxpacket: 32 [ 897.293868][ T782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 897.305451][ T782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 897.317261][ T782] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 897.326771][ T782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.379038][ T782] usb 4-1: config 0 descriptor?? [ 897.405856][T11557] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 897.444307][ T5123] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 897.458895][ T5123] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.472284][ T5123] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 897.481750][ T5123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.532577][ T782] hub 4-1:0.0: USB hub found [ 897.540818][ T5123] usb 1-1: config 0 descriptor?? [ 897.612551][ T5123] hub 1-1:0.0: bad descriptor, ignoring hub [ 897.619039][ T5123] hub 1-1:0.0: probe with driver hub failed with error -5 [ 897.633103][ T5123] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 897.727896][T11578] loop4: detected capacity change from 0 to 256 [ 900.894406][ T5168] usb 1-1: USB disconnect, device number 10 [ 901.423886][ T782] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 901.608165][ T782] usbhid 4-1:0.0: can't add hid device: -71 [ 901.614985][ T782] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 901.690152][ T782] usb 4-1: USB disconnect, device number 6 [ 901.859228][ T5168] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 902.170599][ T5168] usb 1-1: Using ep0 maxpacket: 32 [ 902.323999][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 902.335853][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 902.347501][ T5168] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 902.356948][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.407441][ T4498] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 902.418583][ T5168] usb 1-1: config 0 descriptor?? [ 902.457217][T11591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 902.595878][ T5168] hub 1-1:0.0: USB hub found [ 902.748094][T11613] loop1: detected capacity change from 0 to 256 [ 902.828903][ T4498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.840394][ T4498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.850652][ T4498] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 902.860085][ T4498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.918233][ T4498] usb 4-1: config 0 descriptor?? [ 904.863682][ T4498] usb 4-1: language id specifier not provided by device, defaulting to English [ 906.437071][ T5168] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 906.704025][ T5168] usbhid 1-1:0.0: can't add hid device: -71 [ 906.710745][ T5168] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 906.760326][ T4498] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 906.774197][ T4498] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 906.783436][ T4498] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 906.784586][ T5168] usb 1-1: USB disconnect, device number 11 [ 906.791804][ T4498] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 906.806823][ T4498] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 906.934762][ T4498] usb 4-1: USB disconnect, device number 7 [ 907.264333][T11636] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 908.131424][T11653] loop3: detected capacity change from 0 to 256 [ 909.382364][T11666] loop2: detected capacity change from 0 to 2048 [ 909.488639][T11666] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 909.624689][T11671] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 916.346747][T11727] loop3: detected capacity change from 0 to 8 [ 917.560885][ T781] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 917.865029][ T781] usb 4-1: Using ep0 maxpacket: 32 [ 918.016710][ T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.031501][ T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.043006][ T781] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 918.052343][ T781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.154228][ T781] usb 4-1: config 0 descriptor?? [ 918.672645][ T781] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 918.928158][ T781] usb 4-1: USB disconnect, device number 8 [ 920.677932][ T5068] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 923.936454][ T5068] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 927.545599][ T5068] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 928.141940][ T29] audit: type=1804 audit(1717883499.815:422): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1675103430/syzkaller.7hCoXJ/68/file0" dev="sda1" ino=1954 res=1 errno=0 [ 928.481149][T11844] loop3: detected capacity change from 0 to 1764 [ 928.825653][ T29] audit: type=1804 audit(1717883500.495:423): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1675103430/syzkaller.7hCoXJ/68/file0" dev="sda1" ino=1954 res=1 errno=0 [ 929.970222][T11859] loop2: detected capacity change from 0 to 1024 [ 931.082529][ T2855] hfsplus: b-tree write err: -5, ino 4 [ 933.265626][T11904] loop0: detected capacity change from 0 to 1024 [ 934.028897][ T6472] hfsplus: b-tree write err: -5, ino 4 [ 934.624123][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 935.439565][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 936.124301][T11955] loop3: detected capacity change from 0 to 256 [ 936.163611][T11955] exfat: Deprecated parameter 'utf8' [ 936.169337][T11955] exfat: Deprecated parameter 'namecase' [ 936.175712][T11955] exfat: Deprecated parameter 'utf8' [ 936.377008][T11955] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 936.668787][ T29] audit: type=1800 audit(1717883508.355:424): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048726 res=0 errno=0 [ 937.011372][T11969] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 937.078861][T11967] exFAT-fs (loop3): error, invalid size(size(4096) > aligned(0) [ 937.078861][T11967] [ 937.534440][ T2855] kworker/u8:8: attempt to access beyond end of device [ 937.534440][ T2855] loop3: rw=1, sector=34359738488, nr_sectors = 8 limit=256 [ 937.973896][T11951] Bluetooth: hci4: command 0x0406 tx timeout [ 939.500467][T11986] loop4: detected capacity change from 0 to 32768 [ 939.576708][T11986] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 939.585296][T11986] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 939.686178][T11986] gfs2: fsid=syz:syz.0: journal 0 mapped with 22 extents in 1ms [ 939.706091][ T782] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 939.713510][ T782] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 939.961681][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 940.185392][ T782] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 471ms [ 940.194615][ T782] gfs2: fsid=syz:syz.0: jid=0: Done [ 940.200146][T11986] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 940.853566][T12012] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.654391][ T4498] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 941.918367][ T4498] usb 3-1: Using ep0 maxpacket: 32 [ 942.045705][ T4498] usb 3-1: config 1 has an invalid interface number: 6 but max is 0 [ 942.054406][ T4498] usb 3-1: config 1 has no interface number 0 [ 942.060750][ T4498] usb 3-1: config 1 interface 6 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 942.070847][ T4498] usb 3-1: config 1 interface 6 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 942.284276][ T4498] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 942.293930][ T4498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.304963][ T4498] usb 3-1: Product: syz [ 942.309370][ T4498] usb 3-1: Manufacturer: syz [ 942.315393][ T4498] usb 3-1: SerialNumber: syz [ 942.656193][T12046] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.695100][ T4498] usblp 3-1:1.6: usblp0: USB Unidirectional printer dev 7 if 6 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 943.383846][ T4498] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 943.633832][ T782] usb 3-1: USB disconnect, device number 7 [ 943.684910][ T782] usblp0: removed [ 943.773996][ T4498] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 943.784102][ T4498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.823157][ T4498] usb 2-1: config 0 descriptor?? [ 943.883727][ T4498] cp210x 2-1:0.0: cp210x converter detected [ 943.951859][ T5068] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 943.952004][ T5068] Bluetooth: hci0: unexpected subevent 0x0d length: 357 > 260 [ 943.967360][ T5068] Bluetooth: hci0: Unknown advertising packet type: 0x1d [ 943.967470][ T5068] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 944.128170][ T4498] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 944.147658][ T4498] cp210x 2-1:0.0: querying part number failed [ 944.199939][ T4498] usb 2-1: cp210x converter now attached to ttyUSB0 [ 944.339958][ T781] usb 2-1: USB disconnect, device number 5 [ 944.383930][ T781] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 944.394462][ T781] cp210x 2-1:0.0: device disconnected [ 944.395265][T12076] ieee802154 phy0 wpan0: encryption failed: -22 [ 945.662192][ T5068] Bluetooth: hci5: unexpected event 0x3e length: 358 > 260 [ 945.662428][ T5068] Bluetooth: hci5: unexpected subevent 0x0d length: 357 > 260 [ 945.680473][ T5068] Bluetooth: hci5: Unknown advertising packet type: 0x1d [ 945.680585][ T5068] Bluetooth: hci5: Unknown advertising packet type: 0x1f [ 947.346709][T12130] tipc: Started in network mode [ 947.359219][T12130] tipc: Node identity 5, cluster identity 4711 [ 947.366282][T12130] tipc: Node number set to 5 [ 949.132583][T12150] loop2: detected capacity change from 0 to 1024 [ 949.339658][T12157] loop4: detected capacity change from 0 to 1024 [ 950.012060][ T2855] hfsplus: b-tree write err: -5, ino 4 [ 950.065130][T12170] tipc: Started in network mode [ 950.070289][T12170] tipc: Node identity 5, cluster identity 4711 [ 950.077195][T12170] tipc: Node number set to 5 [ 952.179890][T12192] loop0: detected capacity change from 0 to 512 [ 952.919666][T12194] loop2: detected capacity change from 0 to 2048 [ 952.959409][T12192] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 953.065538][T12194] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 953.081573][T12192] EXT4-fs (loop0): 1 truncate cleaned up [ 953.088613][T12192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.260616][T12205] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 954.618896][ T9045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.461970][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.468644][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 956.624804][T12231] loop1: detected capacity change from 0 to 1024 [ 961.157493][ T58] hfsplus: b-tree write err: -5, ino 4 [ 965.980213][T12276] loop0: detected capacity change from 0 to 1024 [ 967.843462][ T6472] hfsplus: b-tree write err: -5, ino 4 [ 969.359977][T12304] loop0: detected capacity change from 0 to 1024 [ 969.429895][T12304] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 969.494122][T12304] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 969.524613][T12304] EXT4-fs (loop0): orphan cleanup on readonly fs [ 969.538533][T12304] EXT4-fs error (device loop0): ext4_free_blocks:6576: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096 [ 970.028360][T12315] loop3: detected capacity change from 0 to 32768 [ 970.079883][T12304] EXT4-fs (loop0): 1 orphan inode deleted [ 970.086411][T12304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 970.213805][T12315] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 970.228194][T12315] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 970.427321][T12315] bcachefs (loop3): alloc_read... done [ 970.433361][T12315] bcachefs (loop3): stripes_read... done [ 970.439232][T12315] bcachefs (loop3): snapshots_read... done [ 970.453462][T12315] bcachefs (loop3): journal_replay... done [ 970.462608][T12315] bcachefs (loop3): resume_logged_ops... done [ 970.469243][T12315] bcachefs (loop3): going read-write [ 970.601285][T12315] bcachefs (loop3): done starting filesystem [ 970.643166][T12304] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 970.668176][T12315] ===================================================== [ 970.676726][T12315] BUG: KMSAN: uninit-value in bch2_inode_unpack+0xaf0/0x4c40 [ 970.684304][T12315] bch2_inode_unpack+0xaf0/0x4c40 [ 970.689444][T12315] bch2_inode_peek_nowarn+0x4ec/0x5a0 [ 970.695337][T12315] bch2_inode_find_by_inum_trans+0xb3/0x3d0 [ 970.701460][T12315] bch2_inode_find_by_inum+0x17b/0x4f0 [ 970.707356][T12315] bchfs_truncate+0x437/0x1420 [ 970.712331][T12315] bch2_setattr+0x29f/0x2f0 [ 970.717113][T12315] notify_change+0x1a07/0x1af0 [ 970.722067][T12315] do_truncate+0x22a/0x2b0 [ 970.726820][T12315] path_openat+0x50d9/0x5b00 [ 970.731602][T12315] do_filp_open+0x20e/0x590 [ 970.736436][T12315] do_sys_openat2+0x1bf/0x2f0 [ 970.741215][T12315] __x64_sys_creat+0xe6/0x140 [ 970.747213][T12315] x64_sys_call+0x2966/0x3b50 [ 970.752003][T12315] do_syscall_64+0xcf/0x1e0 [ 970.756686][T12315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.762693][T12315] [ 970.768447][T12315] Uninit was stored to memory at: [ 970.773720][T12315] bch2_btree_path_traverse_cached_slowpath+0x5f02/0x79f0 [ 970.780958][T12315] bch2_btree_path_traverse_cached+0xd1a/0x1140 [ 970.787423][T12315] bch2_btree_path_traverse_one+0x737/0x5290 [ 970.793674][T12315] bch2_btree_iter_peek_slot+0x128c/0x3840 [ 970.799577][T12315] bch2_inode_peek_nowarn+0x208/0x5a0 [ 970.805144][T12315] bch2_inode_find_by_inum_trans+0xb3/0x3d0 [ 970.811166][T12315] bch2_inode_find_by_inum+0x17b/0x4f0 [ 970.816814][T12315] bchfs_truncate+0x437/0x1420 [ 970.821693][T12315] bch2_setattr+0x29f/0x2f0 [ 970.826352][T12315] notify_change+0x1a07/0x1af0 [ 970.831217][T12315] do_truncate+0x22a/0x2b0 [ 970.835824][T12315] path_openat+0x50d9/0x5b00 [ 970.840518][T12315] do_filp_open+0x20e/0x590 [ 970.845187][T12315] do_sys_openat2+0x1bf/0x2f0 [ 970.849961][T12315] __x64_sys_creat+0xe6/0x140 [ 970.854887][T12315] x64_sys_call+0x2966/0x3b50 [ 970.859673][T12315] do_syscall_64+0xcf/0x1e0 [ 970.864349][T12315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.873124][T12315] [ 970.875493][T12315] Uninit was created at: [ 970.879861][T12315] __kmalloc_large_node+0x231/0x370 [ 970.886024][T12315] __kmalloc_node+0xb10/0x10c0 [ 970.890871][T12315] kvmalloc_node+0xc0/0x2d0 [ 970.895533][T12315] bch2_btree_node_read_done+0x4e68/0x75e0 [ 970.901454][T12315] btree_node_read_work+0x8a5/0x1eb0 [ 970.906919][T12315] bch2_btree_node_read+0x3d42/0x4b50 [ 970.912433][T12315] bch2_btree_root_read+0xa6c/0x13d0 [ 970.917983][T12315] read_btree_roots+0x454/0xee0 [ 970.923062][T12315] bch2_fs_recovery+0x7b6a/0x93e0 [ 970.928230][T12315] bch2_fs_start+0x7b2/0xbd0 [ 970.933226][T12315] bch2_fs_open+0x152a/0x15f0 [ 970.938061][T12315] bch2_mount+0x90d/0x1d90 [ 970.942583][T12315] legacy_get_tree+0x114/0x290 [ 970.947569][T12315] vfs_get_tree+0xa7/0x570 [ 970.952104][T12315] do_new_mount+0x71f/0x15e0 [ 970.956889][T12315] path_mount+0x742/0x1f20 [ 970.961409][T12315] __se_sys_mount+0x725/0x810 [ 970.966276][T12315] __x64_sys_mount+0xe4/0x150 [ 970.973865][T12315] x64_sys_call+0x2bf4/0x3b50 [ 970.978659][T12315] do_syscall_64+0xcf/0x1e0 [ 970.984195][T12315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.990213][T12315] [ 970.992573][T12315] CPU: 1 PID: 12315 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 971.002988][T12315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 971.013255][T12315] ===================================================== [ 971.020238][T12315] Disabling lock debugging due to kernel taint [ 971.026514][T12315] Kernel panic - not syncing: kmsan.panic set ... [ 971.033002][T12315] CPU: 1 PID: 12315 Comm: syz-executor.3 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 971.044695][T12315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 971.054821][T12315] Call Trace: [ 971.058152][T12315] [ 971.061141][T12315] dump_stack_lvl+0x216/0x2d0 [ 971.065938][T12315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 971.071897][T12315] dump_stack+0x1e/0x30 [ 971.076183][T12315] panic+0x4e2/0xcd0 [ 971.080205][T12315] ? kmsan_get_metadata+0xf1/0x1d0 [ 971.085436][T12315] kmsan_report+0x2d5/0x2e0 [ 971.090044][T12315] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 971.095996][T12315] ? __msan_warning+0x95/0x120 [ 971.100843][T12315] ? bch2_inode_unpack+0xaf0/0x4c40 [ 971.106165][T12315] ? bch2_inode_peek_nowarn+0x4ec/0x5a0 [ 971.111850][T12315] ? bch2_inode_find_by_inum_trans+0xb3/0x3d0 [ 971.118060][T12315] ? bch2_inode_find_by_inum+0x17b/0x4f0 [ 971.123833][T12315] ? bchfs_truncate+0x437/0x1420 [ 971.128887][T12315] ? bch2_setattr+0x29f/0x2f0 [ 971.133661][T12315] ? notify_change+0x1a07/0x1af0 [ 971.138704][T12315] ? do_truncate+0x22a/0x2b0 [ 971.143405][T12315] ? path_openat+0x50d9/0x5b00 [ 971.148275][T12315] ? do_filp_open+0x20e/0x590 [ 971.153053][T12315] ? do_sys_openat2+0x1bf/0x2f0 [ 971.157999][T12315] ? __x64_sys_creat+0xe6/0x140 [ 971.162970][T12315] ? x64_sys_call+0x2966/0x3b50 [ 971.167932][T12315] ? do_syscall_64+0xcf/0x1e0 [ 971.172745][T12315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.178991][T12315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.185196][T12315] ? kmsan_get_metadata+0x146/0x1d0 [ 971.190492][T12315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 971.196402][T12315] ? filter_irq_stacks+0x164/0x1a0 [ 971.201636][T12315] ? stack_depot_save_flags+0x2c/0x6e0 [ 971.207185][T12315] ? kmsan_get_metadata+0x146/0x1d0 [ 971.212494][T12315] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 971.218884][T12315] ? kmsan_get_metadata+0x146/0x1d0 [ 971.224184][T12315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 971.230119][T12315] __msan_warning+0x95/0x120 [ 971.234807][T12315] bch2_inode_unpack+0xaf0/0x4c40 [ 971.239967][T12315] bch2_inode_peek_nowarn+0x4ec/0x5a0 [ 971.245485][T12315] bch2_inode_find_by_inum_trans+0xb3/0x3d0 [ 971.251520][T12315] ? bch2_inode_peek_nowarn+0x1e4/0x5a0 [ 971.257201][T12315] bch2_inode_find_by_inum+0x17b/0x4f0 [ 971.262887][T12315] bchfs_truncate+0x437/0x1420 [ 971.267780][T12315] ? kmsan_get_metadata+0x146/0x1d0 [ 971.273073][T12315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 971.278996][T12315] ? setattr_prepare+0x63a/0x14b0 [ 971.284150][T12315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 971.290063][T12315] bch2_setattr+0x29f/0x2f0 [ 971.294675][T12315] ? __pfx_bch2_setattr+0x10/0x10 [ 971.299793][T12315] notify_change+0x1a07/0x1af0 [ 971.304658][T12315] ? kmsan_get_metadata+0x146/0x1d0 [ 971.309963][T12315] do_truncate+0x22a/0x2b0 [ 971.314605][T12315] path_openat+0x50d9/0x5b00 [ 971.319341][T12315] do_filp_open+0x20e/0x590 [ 971.323975][T12315] do_sys_openat2+0x1bf/0x2f0 [ 971.328757][T12315] __x64_sys_creat+0xe6/0x140 [ 971.333542][T12315] x64_sys_call+0x2966/0x3b50 [ 971.338331][T12315] do_syscall_64+0xcf/0x1e0 [ 971.342953][T12315] ? clear_bhb_loop+0x25/0x80 [ 971.347743][T12315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.353771][T12315] RIP: 0033:0x7fbbcf47cf69 [ 971.358291][T12315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 971.378039][T12315] RSP: 002b:00007fbbd02230c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 971.386619][T12315] RAX: ffffffffffffffda RBX: 00007fbbcf5b3f80 RCX: 00007fbbcf47cf69 [ 971.394690][T12315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 971.402727][T12315] RBP: 00007fbbcf4da6fe R08: 0000000000000000 R09: 0000000000000000 [ 971.410796][T12315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.418834][T12315] R13: 000000000000000b R14: 00007fbbcf5b3f80 R15: 00007ffeac219ad8 [ 971.426891][T12315] [ 971.430203][T12315] Kernel Offset: disabled [ 971.434592][T12315] Rebooting in 86400 seconds..