last executing test programs: 3m49.302036548s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000040)={0x1}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000304"], 0x0, 0x0, 0x0}, 0x0) 3m46.333868523s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 3m45.82629689s ago: executing program 1: syz_mount_image$xfs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@nodiscard}]}, 0x1, 0x98d1, &(0x7f0000000a00)="$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") ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x10000, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)) 3m43.712509375s ago: executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x3) 3m43.028294101s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f0000006940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000140)='./file0\x00', 0x810, &(0x7f0000004800)=ANY=[@ANYBLOB='dmask=00000000000000000000007,utf8,iocharset=iso8859-1,allow_utime=00000000000000000002001,fmask=00000000000000000000002,allow_utime=00000000000000000000005,umask=00000000000000000000001,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX, @ANYRESHEX=r1], 0x1, 0x14fe, &(0x7f0000002a40)="$eJzs3AuYjVX7MPB1r7UexjSxm+QwrHvdDzsNlkOSHJLkkCRJkuSUkDRJkpAYckoakpDjJIkhJIdpTBrn8yHnJHmlSZKccgrru6be9/N/39736/t/b9/f9/3n/l3Xuva6Z+977Xvte8/s53nmuvYPPUfVa1G/djMiEv8W+O0mWQgRI4QYJoQoIIQIhBCV4yvH59yfT0Hyv/ck7M/1SNq1roBdS9z/3I37n7tx/3M37n/uxv3P3bj/uRv3P3fj/jOWm22bXfQGHrl38PX/3Iw///8byS43+ZsN5W7q9Z9I4f7nbtz/3I37n7tx/3M37n/uxv3P3bj/uRv3n7Hc7Fpff+Zxbce1fv8xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMsdzvurtBAi5zb4Vw9O/q+tjTHGGGOMMcYYY38On/daV8AYY4wxxhhjjLH/+0BIoYQWgcgj8ooYkU/EiutEnLhe5BcFRETcIOLFjaKguEkUEoVFEVFUJIhiorgwAoUVJEJRQpQUUXGzKCVuEYmitCgjygonyonyooKoKG4VlcRtorK4XVQRd4iqopqoLmqIO0VNcZeoJe4WtcU9oo6oK+qJ+uJe0UDcJxqK+0Uj8YBoLB4UTcRDoql4WDQTj4jm4lHRQjwmWorHRSvRWrQRbUW7/6P8l0Vf8YroJ/qLZDFADBSvikFisBgihoph4jUxXLwuRog3RIoYKUaJN8Vo8ZYYI94WY8U4MV68IyaIiWKSmCymiKkiVbwrpon3xHTx/si/vaJpYraYIz4Uc8U8MV98JBaIj8VCsUgsFktEuvhEZIilIlN8KpaJz0SWWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im/hcbBc7xE6xS+wWe8Re8YXYJ74U+8VX4oD4+j+Zf+4f8nuBAAESJGjQkAfyQAzEQCzEQhzEQX7IDxGIQDzEQ0EoCIWgEBSBIpAACVAcigMCAgFBCSgBUYhCKSgFiZAIZaAMOHBQHspDRbgVKkElqAyVoQpUgapQDapBDagBNaEm1IJaUBtqQx2oA/WgHtwL98J90BAaQiNoBI2hMTSBJtAUmkIzaAbNoTm0gBbQElpCK2gFbaANtIN20B7aQwfoAJ2gE3SGztAFukASJEFX6ArdoBt0h+7QA3pAT+gJvaA39IaX4WV4BV6B/lBHDoCBMBAGwSAYAkNhKLwGw+F1eB3egBQYCaPgTXgT3oIxcBbGwjgYD+OhppwIk2AykJwKqZAK02AaTIfpMAM+gA9gFqTBbJgDc2AuzIN58BEsgI/hY1gEi2AJpEM6ZMBSyIRMWAbnIAuWwwpYCatgNayCtbAO1sIG2AgbYDNshq2wFT6Hz2EH7IBdsAv2wB74Ar6AL+FLSIEDAPq3d9whOAyHIRuy4QgcgaNwFI7BMTgOx+EEnIRTcBLOwBk4C+fgPJyHi3ARLsGLCd8131N6fYqQObTUMo/MI2NkjIyVsTJOxsn8Mr+MyIiMl/GyoCwoC8lCsogsIhNkgiwui0uUKEmGsoQsIaMyKkvJUjJRJsoysox00snysrysKCvKSrKSrCxvl1XkHbKqrCY7uhqyhqwpO7la8m5ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUT+ZBsKgfAEHhE5nSmhRwJLeUoaCVbyzayrXwLnpDt5RjoIDvKTvIpOQ7GQhfZ3iXJZ2VXOQm6yeflZHhB9pBToad8SfaSvWUf+bLsKzu4frK/nAED5EA5CwbJwXKIHCrnQl2Z07F68g2ZIkfKUfJNuQTekmPk23KsHCfHy3fkBDlRTpKT5RQ5VabKd+U0+Z6cLt+XM+QHcqacJdPkbDlHfijnynlyvvxILpAfy4VykVwsl8h0+YnMkEtlpvxULpOfySy5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2+bncLnfInXKX3C33yL3yC7lPfin3y6/kAfm1PCj/Ig/Jb+Rh+a3Mlt/JI/J7eVT+II/JH+Vx+ZM8IU/KU/K0PCN/lmflOXleXpAX5S/ykrwsr0gvhQIllVJaBSqPyqtiVD4Vq65Tcep6lV8VUBF1g4pXN6qC6iZVSBVWRVRRlaCKqeLKKFRWkQpVCVVSRdXNqpS6RSWq0qqMKqucKqfKqwqqorpVVVK3qcrqdlVF3aGqqmqquqqh7lQ11V2qlrpb1Vb3qDqqrqqn6qt7VQN1n2qo7leN1AOqsXpQNVEPqabqYdVMPaKaq0dVC/WYaqkeV61Ua9VGtVXt1BOqvXpSdVAdVSf1lOqsnlZd1DMqST2ruqrnVDf1vOquXlA91Iuqp3pJ9VK9VR91WV1RXvVT/VWyGqAGqlfVIDVYDVFD1TD1mhquXlcj1BsqRY1Uo9SbarR6S41Rb6uxapwar95RE9RENUlNVlPUVJWq3lXT1HtqunpfzVAfqJlqlkpTs9WQv640/38j/71/kj/i12ffqrapz9V2tUPtVLvUbrVH7VV71T61T+1X+9UBdUAdVAfVIXVIHVaHVbbKVkfUEXVUHVXH1DF1XB1XJ9RJdUGdVmfUz+qsOqfOqQvqorqoLv31NRAatNRKax3oPDqvjtH5dKy+Tsfp63V+XUBH9A06Xt+oC+qbdCFdWBfRRXWCLqaLa6NRW0061CV0SR3VN+tS+hadqEvrMrqsdrqc9rrCv5VfXlfQf1RfO91Ot9ftdQfdQXfSnXRn3Vl30V10kk7SXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52sk/VA/aoepAfrIXqoHqZf08P1cD1Cj9ApOkWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+pUPU1P09P1dD1Dz9Az9UydptP0HD1Hz9Vz9Xw9Xy/QC/RCvVAv1ot1uk7XGTpDZ+pMvUwv01l6uV6uV+qVerVerdfqtXq9Xq836o16s96ss/Q2vU1v19v1Tr1T79a79V69V+/T+/R+vV8f0Af0QX1QH9KH9GF9WGfrbH1EH9FH9VF9TB/Tx/VxfUKf0Kf0KX1Gn9Fn9Vl9Xp/XF/VFfUlf0lf0lZzDvkAGMtCBDvIEeYKYICaIDWKDuCAuyB/kDyJBJIgP4oOCwU1BoaBwUCQoGiQExYLigQkwsAEFYVAiKBlEg5uDUsEtQWJQOigTlA1cUC4oH1QIKga3BpWC24LKwe1BleCOoGpQLage1AjuDGoGdwW1gruD2sE9QZ2gblAvqB/cGzQI7gsaBvcHjYIHgsbBg0GT4KGgafBw0Cx4JGgePBq0CB4LWgaPB62C1kGboG3Q7k9d3/uzhZ90/Ux/k2wGmIHmVTPIDDZDzFAzzLxmhpvXzQjzhkkxI80o86YZbd4yY8zbZqwZZ8abd8wEM9FMMpPNFDPVpJp3zTTznplu3jczzAdmppll0sxsM8d8aOaaeWa++cgsMB+bhWaRWWyWmHTzickwS02m+dQsM5+ZLLPcrDArzSqz2qwxa806s95sMBvNJrPZbDFbzTbzudludpidZpfZbfaYveYLs898afabr8wB87U5aP5iDplvzGHzrck235kj5ntz1PxgjpkfzXHzkzlhTppT5rQ5Y342Z805c95cMBfNL+aSuWyuGJ9zcJ/z8Y4aNebBPBiDMRiLsRiHcZgf82MEIxiP8VgQC2IhLIRFsAgmYAIWx+KYg5CwBJbAKEaxFJbCREzEMlgGHTosj+WxIlbESlgJK2NlrIJVsCpWxepYHe/EO/EuvAvvxrvxHrwH62JdrI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2ErbINtsB22w/bYHjtgB+yEnbAzdsYu2AWTMAm7Ylfsht2wO3bHHtgDe2JP7IW9sA/2wb7YF/thP0zGZByIA3EQDsIhOASH4TAcjsNxBI7AFEzBUTgKR+NoHINjcCyOw/H4Dk7AiTgJJ+MUnIqpmIrTcBpOx+k4A2fgTJyJaZiGc3AOzsW5OB/n4wJcgAtxIS7GxZiO6ZiBGZiJmbgMl2EWZuEKXIGrcBWuwTW4DtfhBtyAm3ATbsEtuA234XbcjjtxJ+7G3bgX9+I+3If7cT8ewAN4EA/iITyEh/EwZmM2HsEjeBSP4jE8hsfxOJ7AE3gKT+EZPINn8Syex/N4EX/BS3gZr6DHGJvPxtrrbJy93ua3Bew/xkVsUZtgi9ni1thCtvDfxWitTbSlbRlb1jpbzpa3FX4XV7XVbHVbw95pa9q7bK3fxQ3sfbahvd82sg/Y+vbev4sb2wdtE/uYbWoft81sa9vctrUt7GO2pX3ctrKtbRvb1na2T9su9hmbZJ+1Xe1zv4sz7FK7zq63G+xGu89+ac/bC/ao/cFetL/Yfra/HWZfs8Pt63aEfcOm2JG/i8fbd+wEO9FOspPtFDv1d/FMO8um2dl2jv3QzrXzfhen20/sAptpF9pFdrFd8mucU1Om/dQus5/ZLLvcrrAr7Sq72q6xa/9nrSvtZrvFbrV77Rd2u91hd9pddrfd82ucs4/99it7wH5tj9jv7SH7jT1sj9ls+92vcc7+jtkf7XH7kz1hT9pT9rQ9Y3+2Z+25X/efs/fT9rK9Yr0VBCRJkaaA8lBeiqF8FEvXURxdT/mpAEXoBoqnG6kg3USFqDAVoaKUQMWoOBlCskQUUgkqSVG6mUrRLZRIpakMlSVH5ag8VaCKdCtVotuoMt1OVegOqkrVqDrVoDupJt1Ftehuqk33UB2qS/WoPt1LDeg+akj3UyN6gBrTg9SEHqKm9DA1o0eoOT1KLegxakmPUytqTW2oLbWjJ6g9PUkdqCN1oqeoMz1NXegZSqJnqSs9R93oeepOL1APepF60kvUi3pTH3qZ+tIr1I/6UzINoIH0Kg2iwTSEhtIweo2G0+s0gt6gFBpJo+hNGk1v0Rh6m8bSOBpP79AEmkiTaDJNoamUSu/SNHqPptP7NIM+oJk0i9JoNs2hD2kuzaP59BEtoI9pIS2ixbSE0ukTyqCllEmf0jL6jLJoOa2glbSKVtMaWkvraD1toI20iTbTFtpK2+hz2k47aCftot20h/bSF7SPvqT99BUdoK/pIP2FDtE3dJi+pWz6jo7Q93SUfqBj9CMdp5/oBJ2kU3SaztDPdJbO0Xm6QBfpF7pEl+kKeRIhhDJUoQ6DME+YN4wJ84Wx4XVhXHh9mD8sEEbCG8L48MawYHhTWCgsHBYJi4YJYbGweGhCDG1IYRiWCEuG0fDmsFR4S5gYlg7LhGVDF5YLy4cVworhrWGl8Lawcnh7WCW8I6waVgsfe6BGeGdYM7wrrBXeHdYO7wnrhHXDemH98N6wQXhf2DC8P2wUPhBWCh8Mm4QPhU3Dh8Nm4SNh8/DRsEX4WNgyfDxsFbYO24Rtw3bhE2H78MmwQ9gx7BQ+FXYOnw67hM+ESeGzYdfwuT+8PzkcEA4MXw1fDb2/Xy2OLommRz+JZkSXRjOjn0aXRT+LZkWXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R7dEt0a9r59XOHDSKadd4PK4vC7G5XOx7joX5653+V0BF3E3uHh3oyvobnKFXGFXxBV1Ca6YK+6MQ2cdudCVcCVd1N3sSrlbXKIr7cq4ss65cq68a+vauXauvXvSdXAdXSf3lHvKPe2eds+4Z9yzrqt7znVzz7vu7gXXw73oXnQvuV6ut+vjXnZ93Suun+vvkl2yG+gGukFukBvihrhhbpgb7oa7EW6ES3EpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Vpbppbpqb7qa7GW6GnulmujSX5ua4OW6um+vmu/luQeICt9AtdIvdYpfu0l2Gy3CZLtMtc8tclstyK9wKt8qtcmvcGrfOrXMb3Aa3yW1yW9wWt81tc9vddrfT7XS73W631+11+9w+Ldx+d8AdcAfdQXfIHXKH3bcu233njrjv3VH3gzvmfnTH3U/uhDvpTrnT7oz72Z1159x5d8FddL+4S+6yu+K8S428G5kWeS8yPfJ+ZEbkg8jMyKxIWmR2ZE7kw8jcyLzI/MhHkQWRjyMLI4siiyNLIumRTyIZkaWRzMinkWWRzyJZkeWRFZGVkVWR1RHvi20PfQlf0kf9zb6Uv8Un+tK+jC/rnS/ny/sKvqK/1Vfyt/nK/nZfxd/hq/pqvrp/3LfyrX0b39a380/49v5J38F39J38U76zf9p38c/4JP+s7+qf89388767f8H38C/6nv4l38v39n38y76vf8X38/19sh/gB/pX/SA/2A/xQ/0w/5of7l/3I/wbPsWP9KP8m360f8uP8W/7sX6cH+/f8RP8RD/JT/ZT/FSf6t/10/x7frp/38/wH/iZfpZP87P9HP+hn+vn+fn+I7/Af+wX+kV+sV/i0/0nPsMv9Zn+U7/Mf+az/HK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/znfrvf4Xf6XX633+P3+i/8Pv+l3++/8gf81/6g/4s/5L/xh/23Ptt/54/47/1R/4M/5n/0x/1P/oQ/6U/50/6M/9mf9ef8eX/BX/S/+Ev+sr/ivb+GF9EZY4wxxv6/of7g/gH/5GfyryPHQCHE9TuKZv/jmpsK/TYfLBM6R4QQz/bv+cjfRp06ycl/+yqBLCWCkouEEJGr+XnE1Xi56CSeFkmio6j4T+sbLHtfpD9YP3q7ELH/ISdGXI2vrn/rv1j/iafGZ1QJz8f/L9ZfJERiyas5+cTVeLno9Ov/aDuKSv9i/cLt/6D+fN+kCtHhP+TEiatxTv2+wG/zJ8VzIunvHskYY4wxxhhjjP1msKze/Y/On3POzxP01Zy84mr8R+fnjDHGGGOMMcYYu/Ze6N3nmSeSkjp25wlPePL/1kRdy1/Pa/2XiTHGGGOMMfZnu3rQf60rYYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGcq//iq8Tu9Z7ZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxq61/xEAAP//aIcwug==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f000000c1c0)={0x2020}, 0x2020) 3m42.562330472s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000000)) 9.201238469s ago: executing program 4: socket$inet6_dccp(0xa, 0x6, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0xc, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x8917, 0x0) r3 = syz_io_uring_setup(0x2371, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000001780)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000300)="96", 0x1}], 0x1) syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000002c0)={[{@noenospc_debug}]}, 0x2, 0x51aa, &(0x7f0000005280)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000200)) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0xd0009411, &(0x7f0000000240)) syz_open_procfs$namespace(0x0, 0x0) r7 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000007090400001202060000052406000005240020000d240f010000000000000000000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0xa, @string={0xa, 0x3, "b93037934a218b33"}}, 0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x4) fchown(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.02146048s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="46e8134f9c14", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "a8c350", 0x0, 0x2b, 0x0, @mcast2, @private1}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x288, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "fdb416bef8198fbd8ac28cfc3bc7da4baeb861f08930a329416c32df97"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d3e8503cf58e635e5074c8d237c41072b5b00c0efd"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "b3260561159b379a39c5db00974c9e0548aca8a3456e768ac3"}}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "2e732971203b6a11011da44279889b5cd08fe07d69ad6193fc217909ae1e1a467d050e4e0edeae2adc5626c8bd7136f6727133d679232b3d489668ca579204ddb41457b1d03b632e1b3273b84782f457b928532c58f1e60a21fa33b61e5503bda1b635037894bd68"}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6b486ae8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x48000}, 0x4c0c0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x30}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r10, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}}, 0x0) shutdown(0xffffffffffffffff, 0x1) 3.774602346s ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@dev}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev, 0xfffffffc}, {@multicast2}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @noop, @noop]}}}}}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001500)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x202, 0x0) rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) ftruncate(r3, 0x4000000000800) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.325129458s ago: executing program 0: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000480)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.442306611s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 2.303718586s ago: executing program 0: syslog(0x9, 0x0, 0x0) 2.227158863s ago: executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) write$dsp(r0, &(0x7f0000000440)="b6", 0x1) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r0, 0x0) write$dsp(r0, &(0x7f0000000140)="e892b14c99053362c8b7c9b2cfeddd44118a85e5de2b27c824f173f082138e", 0x1f) 2.113430271s ago: executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000008) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000280)="f0", 0x1}], 0x1, 0xfffffffd, 0x0, 0x9) 2.043792378s ago: executing program 4: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=none\x00\x00odiscard,usrquota,discard=0x7fffffffffffffff,discard=0x000000000000003f,noquota,noquota\x00integrity,discard=0x0000000000000009,umask=0x0000000000000bfe,quota,nodiscard,resize=0x0000000000000001,resize,seclabel,smackfshat=%:#],dont_appraise,\x00'], 0x6, 0x619f, &(0x7f0000000340)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) chown(&(0x7f0000001980)='./file1\x00', 0x0, 0x0) 1.85312586s ago: executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x163902, 0x0) read$sequencer(r0, &(0x7f0000000040)=""/85, 0x8) 1.738544049s ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 1.485619911s ago: executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0), 0x4) sendmmsg$inet(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d2", 0x1}], 0x1}}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1.300576139s ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x24}, 0x24}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 1.188831623s ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.12157312s ago: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.094067072s ago: executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) write$dsp(r0, &(0x7f0000000440)="b6", 0x1) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r0, 0x0) write$dsp(r0, &(0x7f0000000140)="e892b14c99053362c8b7c9b2cfeddd44118a85e5de2b27c824f173f082138e", 0x1f) 994.242414ms ago: executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/315, @ANYRESDEC], 0x1, 0x21c, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000480)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 960.733293ms ago: executing program 2: syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009840)='./file1\x00', 0x40, &(0x7f0000000100)={[{@pqnoenforce}, {@noquota}, {@attr2}, {@pqnoenforce}, {@nolazytime}, {@usrquota}, {@noikeep}]}, 0x1, 0x98d4, &(0x7f0000013140)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4040c405}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 771.808535ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 703.855631ms ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file2\x00', 0x1050000, &(0x7f0000000000)={[{@grpjquota}, {@bh}, {@nolazytime}, {@nodelalloc}, {@nouid32}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}]}, 0x0, 0x4a3, &(0x7f0000000580)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x69, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 585.376948ms ago: executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@l={0x92, 0x0, 0xc0}], 0x8) 383.182548ms ago: executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0), 0x4) sendmmsg$inet(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d2", 0x1}], 0x1}}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 207.802045ms ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x71}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 0s ago: executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @empty, @loopback}}}}}}}, 0x0) kernel console output (not intermixed with test programs): a:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.088989][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.101331][ T8808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.112331][ T8808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.134092][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.167574][ T9062] BTRFS info (device loop4): rebuilding free space tree [ 297.192094][ T8953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.220526][ T9070] ip6gretap0: entered promiscuous mode [ 297.241157][ T9070] ip6gretap0: left promiscuous mode [ 297.361763][ T8808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.379520][ T8808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.395096][ T8808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.420373][ T8808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.478776][ T7927] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.713577][ T8953] veth0_vlan: entered promiscuous mode [ 297.779867][ T8953] veth1_vlan: entered promiscuous mode [ 297.887542][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.899352][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.981354][ T8953] veth0_macvtap: entered promiscuous mode [ 298.020770][ T2815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.043886][ T8953] veth1_macvtap: entered promiscuous mode [ 298.053552][ T2815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.075797][ T9097] loop4: detected capacity change from 0 to 512 [ 298.083865][ T9097] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.090446][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.113284][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.120540][ T9097] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 298.168336][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.189758][ T9092] kvm: kvm [9091]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc1) = 0x800 [ 298.203908][ T9097] EXT4-fs (loop4): 1 truncate cleaned up [ 298.215128][ T9097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.232987][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.242811][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.271744][ T9092] kvm_intel: kvm [9091]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0x1d9) = 0x70fe [ 298.325801][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.338201][ T9092] kvm: kvm [9091]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0x187) = 0x70fe [ 298.366406][ T9092] kvm: kvm [9091]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0x186) = 0x70fe [ 298.375284][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.402532][ T9092] kvm: kvm [9091]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0x11e) = 0x70fe [ 298.411403][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.427188][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.446649][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.463630][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.492350][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.514558][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.553089][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.579035][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.602819][ T7927] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.683407][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.734160][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.744957][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.757462][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.779948][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.808525][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.887916][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.930556][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.953984][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.993656][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.018169][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.048612][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.078230][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.110751][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.148152][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.214986][ T8953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.273062][ T8953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.284128][ T8953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.321504][ T8953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.660054][ T2815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.693681][ T2815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.781349][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.798901][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.246846][ T9123] loop4: detected capacity change from 0 to 65536 [ 300.297925][ T9123] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 300.330715][ T9123] XFS (loop4): Ending clean mount [ 300.338312][ T9123] XFS (loop4): Quotacheck needed: Please wait. [ 300.516357][ T9123] XFS (loop4): Quotacheck: Done. [ 301.465510][ T7927] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 301.955922][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 301.955941][ T29] audit: type=1326 audit(1718034852.496:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b267cf69 code=0x7ffc0000 [ 302.044475][ T29] audit: type=1326 audit(1718034852.496:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b267cf69 code=0x7ffc0000 [ 302.114098][ T29] audit: type=1326 audit(1718034852.536:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b267cf69 code=0x7ffc0000 [ 302.154397][ T29] audit: type=1326 audit(1718034852.536:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b267cf69 code=0x7ffc0000 [ 302.184101][ T29] audit: type=1326 audit(1718034852.536:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b267cf69 code=0x7ffc0000 [ 302.218569][ T29] audit: type=1326 audit(1718034852.536:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b267cf69 code=0x7ffc0000 [ 302.259544][ T29] audit: type=1326 audit(1718034852.536:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b267cf69 code=0x7ffc0000 [ 302.292514][ T29] audit: type=1326 audit(1718034852.536:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b267a6e7 code=0x7ffc0000 [ 302.327178][ T29] audit: type=1326 audit(1718034852.536:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b26403d9 code=0x7ffc0000 [ 302.362235][ T29] audit: type=1326 audit(1718034852.546:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b267cf69 code=0x7ffc0000 [ 303.038560][ T9191] loop4: detected capacity change from 0 to 164 [ 303.254702][ T9203] loop3: detected capacity change from 0 to 512 [ 303.289215][ T9203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.303434][ T9203] ext4 filesystem being mounted at /root/syzkaller-testdir1249934291/syzkaller.T1Asyi/8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.431917][ T9211] vlan2: entered promiscuous mode [ 303.441798][ T9212] loop2: detected capacity change from 0 to 256 [ 303.451073][ T9211] batadv0: entered promiscuous mode [ 303.471831][ T9212] exfat: Deprecated parameter 'utf8' [ 303.489642][ T9211] team0: Port device vlan2 added [ 303.534690][ T9212] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 303.564722][ T8808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.647527][ T9214] loop0: detected capacity change from 0 to 512 [ 303.680026][ T9214] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 303.744493][ T9214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 303.755113][ T9214] System zones: 1-12 [ 303.759361][ T9214] EXT4-fs (loop0): orphan cleanup on readonly fs [ 303.765949][ T9214] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz-executor.0: Inode bitmap for bg 0 marked uninitialized [ 303.804586][ T9214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 303.845955][ T9214] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz-executor.0: Block bitmap for bg 0 marked uninitialized [ 303.915223][ T8120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.362449][ T5128] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 305.293033][ T5167] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 305.499956][ T5167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.528714][ T5167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.563069][ T5167] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.599871][ T9253] kvm: kvm [9252]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc1) = 0x800 [ 305.608509][ T5167] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.633057][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.669731][ T5167] usb 3-1: config 0 descriptor?? [ 305.751332][ T9240] loop0: detected capacity change from 0 to 32768 [ 305.768402][ T9240] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9240) [ 305.806515][ T9240] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.824830][ T9240] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 305.842398][ T9240] BTRFS info (device loop0): using free-space-tree [ 305.987161][ T8120] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.095017][ T5167] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 306.110589][ T5167] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 306.161649][ T5167] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 306.388780][ T9280] loop0: detected capacity change from 0 to 2048 [ 306.407524][ T9280] EXT4-fs: Ignoring removed nobh option [ 306.423447][ T9280] ext4: Unknown parameter 'permit_directio' [ 306.500232][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.552486][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.582239][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.635997][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.872818][ T9297] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 307.898068][ T9304] loop4: detected capacity change from 0 to 32768 [ 307.926989][ T9304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9304) [ 307.952724][ T9308] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 307.993901][ T9300] loop3: detected capacity change from 0 to 32768 [ 308.002604][ T9304] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 308.023007][ T9304] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 308.045574][ T9304] BTRFS info (device loop4): using free-space-tree [ 308.093991][ T9300] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 308.104386][ T9300] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 308.167669][ T5166] usb 3-1: USB disconnect, device number 6 [ 308.200734][ T9300] XFS (loop3): Ending clean mount [ 308.210581][ T9300] XFS (loop3): Quotacheck needed: Please wait. [ 308.320541][ T9300] XFS (loop3): Quotacheck: Done. [ 308.326996][ T7927] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 308.453733][ T9339] syz-executor.0[9339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.453868][ T9339] syz-executor.0[9339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.492630][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 308.492647][ T29] audit: type=1800 audit(1718034859.026:564): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1971 res=0 errno=0 [ 308.562074][ T9342] loop2: detected capacity change from 0 to 164 [ 308.567607][ T9343] loop0: detected capacity change from 0 to 16 [ 308.584587][ T9343] erofs: Unknown parameter 'ÿÿÿÿÿÿ18446744073709551615°íi‚®(ŒíˆµFïp' [ 308.771174][ T8808] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 309.048604][ T9352] loop4: detected capacity change from 0 to 64 [ 309.090579][ T9352] hfs: unable to parse mount options [ 309.414857][ T9351] loop0: detected capacity change from 0 to 40427 [ 309.426601][ T9351] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 309.434462][ T9351] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 309.487574][ T9351] F2FS-fs (loop0): Found nat_bits in checkpoint [ 309.545099][ T9351] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 309.552472][ T9351] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 310.484794][ T9380] loop4: detected capacity change from 0 to 256 [ 310.608565][ T9366] loop3: detected capacity change from 0 to 32768 [ 310.633699][ T9366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9366) [ 310.678985][ T9366] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 310.701647][ T9366] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 310.723146][ T9366] BTRFS info (device loop3): using free-space-tree [ 310.931774][ T8808] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.085060][ T9401] loop0: detected capacity change from 0 to 64 [ 311.550113][ T9411] loop2: detected capacity change from 0 to 1024 [ 311.596853][ T9420] loop3: detected capacity change from 0 to 8 [ 311.637213][ T9420] SQUASHFS error: Failed to read block 0x260685: -5 [ 311.661305][ T9420] SQUASHFS error: Unable to read metadata cache entry [260685] [ 311.679693][ T9420] SQUASHFS error: Unable to read directory block [260685:0] [ 311.933389][ T9416] kvm: kvm [9415]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc1) = 0x800 [ 312.074003][ T9427] bridge0: entered promiscuous mode [ 312.096970][ T9427] macsec1: entered promiscuous mode [ 312.145949][ T9427] bridge0: left promiscuous mode [ 312.362380][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 312.589178][ T9424] loop3: detected capacity change from 0 to 32768 [ 312.629482][ T9424] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9424) [ 312.675071][ T9424] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.703053][ T9424] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 312.711743][ T9424] BTRFS info (device loop3): using free-space-tree [ 313.926309][ T8808] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.024299][ T9474] loop4: detected capacity change from 0 to 16 [ 314.079736][ T9474] erofs: (device loop4): mounted with root inode @ nid 36. [ 314.718725][ T9497] loop2: detected capacity change from 0 to 256 [ 315.069151][ T9501] sp0: Synchronizing with TNC [ 315.619552][ T9498] [U] è [ 316.036349][ T9507] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 316.081192][ T9511] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.174179][ T9513] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.207995][ T9513] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 316.377100][ T9523] loop2: detected capacity change from 0 to 128 [ 316.453115][ T9523] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.529832][ T9523] ext4 filesystem being mounted at /root/syzkaller-testdir2417280706/syzkaller.RnhYnC/35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 316.537911][ T9503] loop0: detected capacity change from 0 to 32768 [ 316.566008][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.593044][ T9503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9503) [ 316.642424][ T9503] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 316.665158][ T9533] loop3: detected capacity change from 0 to 256 [ 316.683740][ T9503] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 316.692412][ T9503] BTRFS info (device loop0): using free-space-tree [ 317.048134][ T9553] sp0: Synchronizing with TNC [ 317.410859][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.417636][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.715728][ T9541] [U] è [ 317.810805][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.818836][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.898919][ T8120] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 317.971493][ T9554] bridge_slave_1: left allmulticast mode [ 317.987989][ T9554] bridge_slave_1: left promiscuous mode [ 317.996365][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.137901][ T9554] bridge_slave_0: left allmulticast mode [ 318.193059][ T9554] bridge_slave_0: left promiscuous mode [ 318.198951][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.395543][ T9566] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.425184][ T9566] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 318.767162][ T9572] loop4: detected capacity change from 0 to 32768 [ 318.796340][ T9572] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9572) [ 318.827729][ T9572] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.838572][ T9572] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 318.847422][ T9572] BTRFS info (device loop4): using free-space-tree [ 318.952819][ T8953] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.176420][ T9596] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.207309][ T9596] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.815002][ T6111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 320.055678][ T9612] loop3: detected capacity change from 0 to 512 [ 320.126040][ T9602] xt_hashlimit: size too large, truncated to 1048576 [ 320.145563][ T7927] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 320.156445][ T6111] usb 1-1: Using ep0 maxpacket: 8 [ 320.161685][ T9612] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 320.181633][ T9602] xt_hashlimit: overflow, rate too high: 0 [ 320.184527][ T9610] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 320.202479][ T6111] usb 1-1: config 32 has an invalid interface number: 255 but max is 0 [ 320.225322][ T6111] usb 1-1: config 32 has an invalid descriptor of length 255, skipping remainder of the config [ 320.249228][ T6111] usb 1-1: config 32 has no interface number 0 [ 320.277338][ T6111] usb 1-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 320.316739][ T6111] usb 1-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 320.369807][ T9602] loop2: detected capacity change from 0 to 1024 [ 320.386414][ T6111] usb 1-1: config 32 interface 255 has no altsetting 0 [ 320.407532][ T6111] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 320.443761][ T6111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.694020][ T6111] usb 1-1: string descriptor 0 read error: -71 [ 320.711391][ T6111] hub 1-1:32.255: bad descriptor, ignoring hub [ 320.721146][ T6111] hub 1-1:32.255: probe with driver hub failed with error -5 [ 320.840129][ T6111] usb 1-1: USB disconnect, device number 4 [ 320.989390][ T9625] bond0: entered promiscuous mode [ 321.015728][ T9625] bond_slave_0: entered promiscuous mode [ 321.021574][ T9625] bond_slave_1: entered promiscuous mode [ 321.030481][ T9624] loop2: detected capacity change from 0 to 1024 [ 321.075881][ T9624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.169012][ T9624] EXT4-fs error (device loop2): ext4_xattr_ibody_list:797: inode #2: comm syz-executor.2: corrupted in-inode xattr: bad e_name length [ 321.277797][ T9624] EXT4-fs (loop2): Remounting filesystem read-only [ 321.494109][ T9635] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 321.669257][ T9634] atomic_op ffff888074c3a998 conn xmit_atomic 0000000000000000 [ 321.926793][ T8953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.953169][ T9641] loop0: detected capacity change from 0 to 512 [ 321.990461][ T9641] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 322.057587][ T9643] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 322.096458][ T1057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.126297][ T9647] xt_hashlimit: size too large, truncated to 1048576 [ 322.145778][ T9647] xt_hashlimit: overflow, rate too high: 0 [ 322.322248][ T9647] loop3: detected capacity change from 0 to 1024 [ 322.353913][ T9650] loop0: detected capacity change from 0 to 2048 [ 322.401440][ T9650] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.480270][ T1057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.506639][ T29] audit: type=1800 audit(1718034873.046:565): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 322.731668][ T1057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.881844][ T1057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.953291][ T9656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.964886][ T9657] loop0: detected capacity change from 0 to 1024 [ 323.004953][ T4495] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.034174][ T4495] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.058702][ T4495] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.070154][ T4495] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.081628][ T9656] loop3: detected capacity change from 0 to 256 [ 323.091883][ T4495] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 323.100264][ T4495] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.270554][ T9656] FAT-fs (loop3): Directory bread(block 64) failed [ 323.285318][ T9656] FAT-fs (loop3): Directory bread(block 65) failed [ 323.305322][ T9656] FAT-fs (loop3): Directory bread(block 66) failed [ 323.341041][ T9656] FAT-fs (loop3): Directory bread(block 67) failed [ 323.353612][ T9656] FAT-fs (loop3): Directory bread(block 68) failed [ 323.373349][ T4495] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.385416][ T4495] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.393548][ T4495] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.401395][ T4495] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.409883][ T4495] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 323.418172][ T4495] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 323.455188][ T9656] FAT-fs (loop3): Directory bread(block 69) failed [ 323.462662][ T9656] FAT-fs (loop3): Directory bread(block 70) failed [ 323.472004][ T9656] FAT-fs (loop3): Directory bread(block 71) failed [ 323.560744][ T9656] FAT-fs (loop3): Directory bread(block 72) failed [ 323.600988][ T9656] FAT-fs (loop3): Directory bread(block 73) failed [ 323.864572][ T9656] syz-executor.3: attempt to access beyond end of device [ 323.864572][ T9656] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 323.926220][ T9656] syz-executor.3: attempt to access beyond end of device [ 323.926220][ T9656] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 323.965745][ T29] audit: type=1800 audit(1718034874.506:566): pid=9656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="loop3" ino=1048756 res=0 errno=0 [ 324.315346][ T9669] atomic_op ffff88805b037998 conn xmit_atomic 0000000000000000 [ 324.475130][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.507572][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.558199][ T1057] bond0 (unregistering): Released all slaves [ 324.578071][ T9665] loop0: detected capacity change from 0 to 40427 [ 324.597905][ T9665] F2FS-fs (loop0): invalid crc value [ 324.671700][ T9665] F2FS-fs (loop0): Found nat_bits in checkpoint [ 324.856231][ T9665] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 324.978965][ T9665] syz-executor.0: attempt to access beyond end of device [ 324.978965][ T9665] loop0: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 325.029225][ T9659] chnl_net:caif_netlink_parms(): no params data found [ 325.045216][ T8120] syz-executor.0: attempt to access beyond end of device [ 325.045216][ T8120] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 325.088896][ T8120] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 325.153803][ T5128] Bluetooth: hci3: command tx timeout [ 325.354199][ T1057] hsr_slave_0: left promiscuous mode [ 325.392758][ T1057] hsr_slave_1: left promiscuous mode [ 325.415961][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.443259][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.453448][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.473160][ T5128] Bluetooth: hci6: command tx timeout [ 325.480261][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.543660][ T1057] veth1_macvtap: left promiscuous mode [ 325.549219][ T1057] veth0_macvtap: left promiscuous mode [ 325.555770][ T1057] veth1_vlan: left promiscuous mode [ 325.561089][ T1057] veth0_vlan: left promiscuous mode [ 325.866652][ T4495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.885598][ T4495] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.899715][ T4495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.914010][ T4495] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.921833][ T4495] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 325.929455][ T4495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.997610][ T9679] loop0: detected capacity change from 0 to 256 [ 326.062403][ T9679] FAT-fs (loop0): Directory bread(block 64) failed [ 326.096844][ T9679] FAT-fs (loop0): Directory bread(block 65) failed [ 326.103591][ T9679] FAT-fs (loop0): Directory bread(block 66) failed [ 326.110119][ T9679] FAT-fs (loop0): Directory bread(block 67) failed [ 326.117516][ T9679] FAT-fs (loop0): Directory bread(block 68) failed [ 326.138271][ T9679] FAT-fs (loop0): Directory bread(block 69) failed [ 326.152977][ T9679] FAT-fs (loop0): Directory bread(block 70) failed [ 326.159520][ T9679] FAT-fs (loop0): Directory bread(block 71) failed [ 326.166237][ T9679] FAT-fs (loop0): Directory bread(block 72) failed [ 326.172763][ T9679] FAT-fs (loop0): Directory bread(block 73) failed [ 326.857029][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 326.966459][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 327.197494][ T9681] loop0: detected capacity change from 0 to 40427 [ 327.234270][ T5128] Bluetooth: hci3: command tx timeout [ 327.240227][ T9681] F2FS-fs (loop0): heap/no_heap options were deprecated [ 327.282267][ T9681] F2FS-fs (loop0): invalid crc value [ 327.287970][ T9681] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 327.329647][ T9681] F2FS-fs (loop0): Found nat_bits in checkpoint [ 327.396026][ T9681] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 327.563251][ T5128] Bluetooth: hci6: command tx timeout [ 328.033070][ T5128] Bluetooth: hci5: command tx timeout [ 328.033106][ T5166] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 328.245358][ T5166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.270642][ T5166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.292149][ T5166] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 328.316906][ T5166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.345418][ T5166] usb 1-1: config 0 descriptor?? [ 328.352643][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.373020][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.380220][ T9659] bridge_slave_0: entered allmulticast mode [ 328.387658][ T9659] bridge_slave_0: entered promiscuous mode [ 328.405129][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.412261][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.431685][ T9659] bridge_slave_1: entered allmulticast mode [ 328.442052][ T9659] bridge_slave_1: entered promiscuous mode [ 328.618755][ T9662] chnl_net:caif_netlink_parms(): no params data found [ 328.659685][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.735111][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.765788][ T5166] dragonrise 0003:0079:0011.000C: unknown global tag 0xd [ 328.776070][ T5166] dragonrise 0003:0079:0011.000C: item 0 0 1 13 parsing failed [ 328.789284][ T5166] dragonrise 0003:0079:0011.000C: parse failed [ 328.813375][ T5166] dragonrise 0003:0079:0011.000C: probe with driver dragonrise failed with error -22 [ 328.936277][ T9659] team0: Port device team_slave_0 added [ 329.013259][ T5165] usb 1-1: USB disconnect, device number 5 [ 329.046806][ T9659] team0: Port device team_slave_1 added [ 329.054786][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.064211][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.071393][ T9662] bridge_slave_0: entered allmulticast mode [ 329.090720][ T9662] bridge_slave_0: entered promiscuous mode [ 329.174241][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.181422][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.199456][ T9662] bridge_slave_1: entered allmulticast mode [ 329.210546][ T9662] bridge_slave_1: entered promiscuous mode [ 329.239378][ T9676] chnl_net:caif_netlink_parms(): no params data found [ 329.314339][ T5128] Bluetooth: hci3: command tx timeout [ 329.321971][ T1057] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.382083][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.389557][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.415852][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.492286][ T1057] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.534786][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.541756][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.603475][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.633896][ T5128] Bluetooth: hci6: command tx timeout [ 329.667733][ T9662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.680269][ T9662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.750560][ T1057] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.832133][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.900466][ T1057] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.133972][ T5128] Bluetooth: hci5: command tx timeout [ 330.141277][ T9662] team0: Port device team_slave_0 added [ 330.178621][ T9659] hsr_slave_0: entered promiscuous mode [ 330.185516][ T9659] hsr_slave_1: entered promiscuous mode [ 330.191729][ T9659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.199816][ T9659] Cannot create hsr debugfs directory [ 330.254885][ T9662] team0: Port device team_slave_1 added [ 330.451225][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.469666][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.487761][ T9676] bridge_slave_0: entered allmulticast mode [ 330.505334][ T9676] bridge_slave_0: entered promiscuous mode [ 330.522631][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.537461][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.553240][ T9676] bridge_slave_1: entered allmulticast mode [ 330.567241][ T9676] bridge_slave_1: entered promiscuous mode [ 330.713904][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.729080][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.812930][ T9662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.835894][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.842856][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.923079][ T9662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.982645][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.036594][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.264364][ T9662] hsr_slave_0: entered promiscuous mode [ 331.281154][ T9662] hsr_slave_1: entered promiscuous mode [ 331.293381][ T9662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.312360][ T9662] Cannot create hsr debugfs directory [ 331.374132][ T9676] team0: Port device team_slave_0 added [ 331.393302][ T5128] Bluetooth: hci3: command tx timeout [ 331.545347][ T1057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.615979][ T9676] team0: Port device team_slave_1 added [ 331.643481][ T9710] delete_channel: no stack [ 331.716582][ T5128] Bluetooth: hci6: command tx timeout [ 331.761649][ T1057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.931435][ T1057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.963738][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.989577][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.051513][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.152423][ T1057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.197622][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.203226][ T5128] Bluetooth: hci5: command tx timeout [ 332.221234][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.312993][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.510922][ T9713] loop0: detected capacity change from 0 to 40427 [ 332.557106][ T9713] F2FS-fs (loop0): invalid crc value [ 332.574774][ T9713] F2FS-fs (loop0): Found nat_bits in checkpoint [ 332.585927][ T9676] hsr_slave_0: entered promiscuous mode [ 332.603408][ T9676] hsr_slave_1: entered promiscuous mode [ 332.629811][ T9676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.643093][ T9676] Cannot create hsr debugfs directory [ 332.682487][ T9713] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 332.761334][ T9713] syz-executor.0: attempt to access beyond end of device [ 332.761334][ T9713] loop0: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 332.884801][ T1057] bridge_slave_1: left allmulticast mode [ 332.890478][ T1057] bridge_slave_1: left promiscuous mode [ 332.893364][ T8120] syz-executor.0: attempt to access beyond end of device [ 332.893364][ T8120] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 332.916967][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.924366][ T8120] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 332.952100][ T1057] bridge_slave_0: left allmulticast mode [ 332.973428][ T1057] bridge_slave_0: left promiscuous mode [ 332.979221][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.016062][ T1057] bridge_slave_1: left allmulticast mode [ 333.021728][ T1057] bridge_slave_1: left promiscuous mode [ 333.027604][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.064822][ T1057] bridge_slave_0: left allmulticast mode [ 333.070492][ T1057] bridge_slave_0: left promiscuous mode [ 333.093224][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.611670][ T9719] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 334.247501][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.268837][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.283258][ T5128] Bluetooth: hci5: command tx timeout [ 334.291265][ T1057] bond0 (unregistering): Released all slaves [ 334.576355][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.595659][ T1057] bond_slave_0: left promiscuous mode [ 334.617256][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.637246][ T1057] bond_slave_1: left promiscuous mode [ 334.653524][ T1057] bond0 (unregistering): Released all slaves [ 334.832124][ T9723] loop0: detected capacity change from 0 to 8 [ 335.301917][ T9730] tipc: Failed to remove unknown binding: 66,1,1/0:2324008142/2324008144 [ 335.344063][ T9730] tipc: Failed to remove unknown binding: 66,1,1/0:2324008142/2324008144 [ 335.366360][ T9659] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.536041][ T9659] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.579489][ T9659] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.609438][ T9659] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.292497][ T1057] hsr_slave_0: left promiscuous mode [ 339.298622][ T1057] hsr_slave_1: left promiscuous mode [ 339.305020][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.312423][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.340328][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.347823][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.376485][ T1057] hsr_slave_0: left promiscuous mode [ 339.394202][ T1057] hsr_slave_1: left promiscuous mode [ 339.403214][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.410630][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.534361][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.541803][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.673111][ T1057] veth1_macvtap: left promiscuous mode [ 339.678671][ T1057] veth0_macvtap: left promiscuous mode [ 339.703177][ T1057] veth1_vlan: left promiscuous mode [ 339.708521][ T1057] veth0_vlan: left promiscuous mode [ 339.716090][ T1057] veth1_macvtap: left promiscuous mode [ 339.721625][ T1057] veth0_macvtap: left promiscuous mode [ 339.727440][ T1057] veth1_vlan: left promiscuous mode [ 339.732755][ T1057] veth0_vlan: left promiscuous mode [ 341.231098][ T9739] loop0: detected capacity change from 0 to 64 [ 341.245686][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 341.309773][ T9739] Trying to free block not in datazone [ 341.344848][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 342.263000][ T9743] loop0: detected capacity change from 0 to 32768 [ 342.309993][ T9743] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 342.399303][ T9743] XFS (loop0): Ending clean mount [ 342.413683][ T9743] XFS (loop0): Quotacheck needed: Please wait. [ 342.549244][ T9743] XFS (loop0): Quotacheck: Done. [ 342.900620][ T8120] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 343.227776][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 343.373728][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 343.462691][ T9754] loop0: detected capacity change from 0 to 4096 [ 343.498934][ T9754] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 343.533781][ T9754] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 344.783728][ T9662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 344.806351][ T9662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 344.839413][ T9662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.944724][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.920717][ T9662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.081561][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.160365][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.167581][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.179179][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.186473][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.218319][ T29] audit: type=1800 audit(1718034896.746:567): pid=9768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 346.414396][ T9659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.431902][ T9659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.731584][ T9676] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.785943][ T9676] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.821481][ T9676] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.889448][ T9676] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.947125][ T9662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.025009][ T9662] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.094090][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.101240][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.167139][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.174328][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.299978][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.351277][ T9676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.481721][ T9676] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.520626][ T9662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.586468][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.593694][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.696174][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.703354][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.824785][ T9676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.129977][ T9662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.284702][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.370285][ T9662] veth0_vlan: entered promiscuous mode [ 348.401465][ T9659] veth0_vlan: entered promiscuous mode [ 348.419319][ T9662] veth1_vlan: entered promiscuous mode [ 348.444638][ T9676] veth0_vlan: entered promiscuous mode [ 348.454228][ T9659] veth1_vlan: entered promiscuous mode [ 348.477245][ T9676] veth1_vlan: entered promiscuous mode [ 348.562562][ T9662] veth0_macvtap: entered promiscuous mode [ 348.590894][ T9676] veth0_macvtap: entered promiscuous mode [ 348.612560][ T9662] veth1_macvtap: entered promiscuous mode [ 348.623881][ T9659] veth0_macvtap: entered promiscuous mode [ 348.645947][ T9659] veth1_macvtap: entered promiscuous mode [ 348.668109][ T9676] veth1_macvtap: entered promiscuous mode [ 348.721430][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.742133][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.764633][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.792069][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.808108][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.827200][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.841753][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.864524][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.884848][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.904505][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.919363][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.931110][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.941728][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.962453][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.981735][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.002032][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.024190][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.034287][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.044971][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.054882][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.066150][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.085391][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.100501][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.127067][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.141562][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.163247][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.182062][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.192595][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.203909][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.226924][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.241724][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.264620][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.281358][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.300904][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.312683][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.364232][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.380000][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.405210][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.423031][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.435834][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.446360][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.456678][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.467354][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.478384][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.491818][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.512662][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.536122][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.560148][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.582101][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.604213][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.615508][ T9659] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.634451][ T9659] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.645961][ T9659] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.662810][ T9659] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.680182][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.692052][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.702078][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.712648][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.722857][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.734973][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.753046][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.769306][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.791900][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.802607][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.813054][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.823791][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.837972][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.883405][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.900314][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.910653][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.926224][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.937640][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.956821][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.968350][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.979101][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.998826][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.015073][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.051566][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.066792][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.081418][ T9662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.100995][ T9662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.128762][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.172233][ T9662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.181693][ T9662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.191929][ T9662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.207535][ T5128] Bluetooth: hci1: command 0x0406 tx timeout [ 350.213700][ T9662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.249819][ T9676] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.295259][ T9676] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.322967][ T9676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.331682][ T9676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.580828][ T2876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.600324][ T2876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.686851][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.723185][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.745204][ T9804] loop0: detected capacity change from 0 to 1024 [ 350.750455][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.774190][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.837180][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.872176][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.900496][ T9804] EXT4-fs: Ignoring removed orlov option [ 350.908672][ T9809] loop4: detected capacity change from 0 to 64 [ 350.932675][ T9804] EXT4-fs (loop0): Test dummy encryption mode enabled [ 350.942069][ T9804] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 351.015463][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.029781][ T2876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.053159][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.064785][ T2876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.101958][ T9804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.392054][ T9804] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 351.578671][ T8120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.680817][ T9826] loop4: detected capacity change from 0 to 2048 [ 351.686463][ T9820] loop2: detected capacity change from 0 to 40427 [ 351.695573][ T9820] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 351.703372][ T9820] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 351.778751][ T9820] F2FS-fs (loop2): Found nat_bits in checkpoint [ 351.829748][ T9820] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 351.837089][ T9820] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 352.773421][ T9845] loop4: detected capacity change from 0 to 512 [ 352.794752][ T9845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.822098][ T9845] ext4 filesystem being mounted at /root/syzkaller-testdir3682553418/syzkaller.5zjUIX/5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.980753][ T9659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.091407][ T9854] loop0: detected capacity change from 0 to 1024 [ 353.124065][ T9854] EXT4-fs: Ignoring removed orlov option [ 353.182159][ T9854] EXT4-fs (loop0): Test dummy encryption mode enabled [ 353.218949][ T9854] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 353.258851][ T2974] bridge_slave_1: left allmulticast mode [ 353.271003][ T2974] bridge_slave_1: left promiscuous mode [ 353.278209][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.294283][ T2974] bridge_slave_0: left allmulticast mode [ 353.310197][ T9854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.325837][ T2974] bridge_slave_0: left promiscuous mode [ 353.356181][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.558990][ T8120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.624962][ T9866] syz-executor.2[9866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.625107][ T9866] syz-executor.2[9866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.688534][ T9866] syz-executor.2[9866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.725520][ T9866] syz-executor.2[9866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.427137][ T9871] loop4: detected capacity change from 0 to 40427 [ 354.460945][ T9871] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 354.468837][ T9871] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 354.505385][ T9871] F2FS-fs (loop4): Found nat_bits in checkpoint [ 354.605867][ T9871] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 354.613128][ T9871] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 355.236881][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.263384][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.291832][ T2974] bond0 (unregistering): Released all slaves [ 355.779347][ T29] audit: type=1326 audit(1718034906.316:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x0 [ 356.168875][ T2974] hsr_slave_0: left promiscuous mode [ 356.173669][ T2974] hsr_slave_1: left promiscuous mode [ 356.188900][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.189027][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.204403][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.204436][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.300313][ T2974] veth1_macvtap: left promiscuous mode [ 356.300388][ T2974] veth0_macvtap: left promiscuous mode [ 356.301988][ T2974] veth1_vlan: left promiscuous mode [ 356.302128][ T2974] veth0_vlan: left promiscuous mode [ 356.764989][ T9926] syz-executor.0[9926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.765144][ T9926] syz-executor.0[9926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.837219][ T9926] syz-executor.0[9926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.916583][ T9926] syz-executor.0[9926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.024090][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 358.071219][ T9983] 9pnet_fd: Insufficient options for proto=fd [ 358.096907][ T9983] loop2: detected capacity change from 0 to 512 [ 358.148401][ T9983] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.159972][ T9983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.277485][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 358.284037][ T9983] EXT4-fs (loop2): 1 truncate cleaned up [ 358.286996][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 358.301783][ T9983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.301822][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.339516][ T8] usb 4-1: config 0 descriptor?? [ 358.351694][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 358.397701][ T8] pvrusb2: ********** [ 358.401704][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 358.413339][ T8] pvrusb2: Important functionality might not be entirely working. [ 358.426324][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 358.451195][ T8] pvrusb2: ********** [ 358.537693][ T9983] affs: No valid root block on device nbd2 [ 358.649007][ T9978] loop3: detected capacity change from 0 to 512 [ 358.714370][ T9978] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 358.806073][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 358.867838][ T8] usb 4-1: USB disconnect, device number 4 [ 358.870231][ T1974] pvrusb2: Invalid write control endpoint [ 358.925096][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 359.045182][ T9662] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.061221][ T1974] pvrusb2: Invalid write control endpoint [ 359.113108][ T1974] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 359.122845][ T1974] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 359.162974][ T1974] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 359.212637][ T1974] pvrusb2: Device being rendered inoperable [ 359.232180][ T1974] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 359.260196][ T1974] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 359.282754][ T1974] pvrusb2: Attached sub-driver cx25840 [ 359.292773][ T1974] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 359.314732][ T1974] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 360.138801][ T9995] tipc: Started in network mode [ 360.144208][ T9995] tipc: Node identity , cluster identity 4711 [ 360.173369][ T9995] tipc: Failed to set node id, please configure manually [ 360.194022][ T9995] tipc: Enabling of bearer rejected, failed to enable media [ 360.225064][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.263459][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.298713][T10003] loop4: detected capacity change from 0 to 64 [ 360.334812][T10001] loop0: detected capacity change from 0 to 2048 [ 360.379852][T10001] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 360.405145][T10001] NILFS (loop0): mounting unchecked fs [ 360.410724][T10001] NILFS (loop0): recovery required for readonly filesystem [ 360.430920][T10001] NILFS (loop0): write access will be enabled during recovery [ 360.516927][T10001] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 360.951480][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.981916][ T29] audit: type=1326 audit(1718034911.486:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.097798][T10014] loop2: detected capacity change from 0 to 32768 [ 361.106146][T10014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10014) [ 361.124401][ T29] audit: type=1326 audit(1718034911.486:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.147780][T10014] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 361.158115][T10014] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 361.166903][T10014] BTRFS info (device loop2): using free-space-tree [ 361.174129][ T29] audit: type=1326 audit(1718034911.546:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.209387][ T29] audit: type=1326 audit(1718034911.546:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.241315][ T29] audit: type=1326 audit(1718034911.546:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.264626][ T29] audit: type=1326 audit(1718034911.546:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.287877][ T29] audit: type=1326 audit(1718034911.546:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.313632][ T29] audit: type=1326 audit(1718034911.546:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.338816][ T29] audit: type=1326 audit(1718034911.546:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.361662][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.372853][ T29] audit: type=1326 audit(1718034911.546:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5667cf69 code=0x7ffc0000 [ 361.395763][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.679236][ T57] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 361.983150][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 362.003226][ T57] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 362.262998][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.316345][ T57] usb 5-1: config 0 descriptor?? [ 362.345666][ T57] pvrusb2: Hardware description: Terratec Grabster AV400 [ 362.352733][ T57] pvrusb2: ********** [ 362.420477][ T57] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 362.483647][ T9662] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 362.501851][ T57] pvrusb2: Important functionality might not be entirely working. [ 362.543883][ T57] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 362.568695][ T57] pvrusb2: ********** [ 362.659027][T10025] loop4: detected capacity change from 0 to 512 [ 362.694874][T10025] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 362.951098][ T1974] pvrusb2: Invalid write control endpoint [ 362.952759][ T57] usb 5-1: USB disconnect, device number 7 [ 363.095734][ T1974] pvrusb2: Invalid write control endpoint [ 363.101498][ T1974] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 363.153515][ T1974] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 363.161103][ T1974] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 363.202932][ T1974] pvrusb2: Device being rendered inoperable [ 363.223268][ T1974] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 363.250729][ T1974] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 363.293610][ T1974] pvrusb2: Attached sub-driver cx25840 [ 363.299098][ T1974] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 363.342340][ T1974] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 363.427160][T10048] loop0: detected capacity change from 0 to 32768 [ 363.447735][T10048] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10048) [ 363.497163][T10048] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 363.537629][T10048] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 363.583064][T10048] BTRFS info (device loop0): using free-space-tree [ 363.623856][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.913118][ T5162] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 364.136422][ T8120] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 364.147633][ T5162] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.172968][ T5162] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 364.213148][ T5162] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.222235][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.458661][ T5162] usb 4-1: config 0 descriptor?? [ 365.302790][ T5162] usb 4-1: string descriptor 0 read error: -71 [ 365.314656][ T5162] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 365.335973][ T5162] usb 4-1: USB disconnect, device number 5 [ 366.020126][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 366.395974][T10135] 9pnet_fd: Insufficient options for proto=fd [ 366.493229][T10135] loop2: detected capacity change from 0 to 512 [ 366.505333][T10135] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.551039][T10135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 366.589168][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 366.589185][ T29] audit: type=1326 audit(1718034917.126:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 366.700835][ T29] audit: type=1326 audit(1718034917.126:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 366.753006][ T29] audit: type=1326 audit(1718034917.126:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 366.821322][T10135] EXT4-fs (loop2): 1 truncate cleaned up [ 366.845738][ T5128] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.855901][T10135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.892491][ T5128] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.915766][ T5128] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.917534][ T29] audit: type=1326 audit(1718034917.126:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 366.995312][ T5128] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.016515][ T5128] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 367.031077][ T29] audit: type=1326 audit(1718034917.126:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 367.031261][ T5128] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.074261][ T29] audit: type=1326 audit(1718034917.156:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 367.100422][T10135] affs: No valid root block on device nbd2 [ 367.224508][ T29] audit: type=1326 audit(1718034917.156:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8177c7a6e7 code=0x7ffc0000 [ 367.224557][ T29] audit: type=1326 audit(1718034917.156:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8177c403d9 code=0x7ffc0000 [ 367.224599][ T29] audit: type=1326 audit(1718034917.156:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8177c7a6e7 code=0x7ffc0000 [ 367.224642][ T29] audit: type=1326 audit(1718034917.156:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8177c403d9 code=0x7ffc0000 [ 367.406436][ T9957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.518928][ T9957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.586173][ T9662] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.641653][ T9957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.753177][ T9957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.943160][ T9957] bridge_slave_1: left allmulticast mode [ 367.948845][ T9957] bridge_slave_1: left promiscuous mode [ 367.973248][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.982728][ T9957] bridge_slave_0: left allmulticast mode [ 367.997426][ T9957] bridge_slave_0: left promiscuous mode [ 368.006976][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.638108][ T9957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.656477][ T9957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.676126][ T9957] bond0 (unregistering): Released all slaves [ 368.707768][T10145] chnl_net:caif_netlink_parms(): no params data found [ 368.923719][T10145] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.933429][T10145] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.940606][T10145] bridge_slave_0: entered allmulticast mode [ 368.962122][T10145] bridge_slave_0: entered promiscuous mode [ 369.050542][T10145] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.070991][T10145] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.097633][T10145] bridge_slave_1: entered allmulticast mode [ 369.113028][T10145] bridge_slave_1: entered promiscuous mode [ 369.143548][ T9957] hsr_slave_0: left promiscuous mode [ 369.154505][ T9957] hsr_slave_1: left promiscuous mode [ 369.160667][ T9957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.181533][ T9957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.202162][ T9957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.210893][ T9957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.244692][ T5128] Bluetooth: hci7: command tx timeout [ 369.264917][ T9957] veth1_macvtap: left promiscuous mode [ 369.270468][ T9957] veth0_macvtap: left promiscuous mode [ 369.299995][ T9957] veth1_vlan: left promiscuous mode [ 369.309481][ T9957] veth0_vlan: left promiscuous mode [ 370.232803][ T9957] team0 (unregistering): Port device team_slave_1 removed [ 370.301437][ T9957] team0 (unregistering): Port device team_slave_0 removed [ 371.149999][T10145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.166016][T10145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.222180][T10145] team0: Port device team_slave_0 added [ 371.245150][T10145] team0: Port device team_slave_1 added [ 371.310561][T10145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.323637][ T5128] Bluetooth: hci7: command tx timeout [ 371.329180][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.366364][T10145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.449561][T10145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.466600][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.502115][T10145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.590855][T10145] hsr_slave_0: entered promiscuous mode [ 371.603480][T10145] hsr_slave_1: entered promiscuous mode [ 371.618682][T10145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.627486][T10145] Cannot create hsr debugfs directory [ 372.189551][T10145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 372.227574][T10145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 372.242778][T10145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 372.258442][T10145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 372.371175][T10145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.411336][T10145] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.429700][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.436864][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.469869][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.477040][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.510385][T10145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.522623][T10145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.750920][T10145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.804913][T10145] veth0_vlan: entered promiscuous mode [ 372.818200][T10145] veth1_vlan: entered promiscuous mode [ 372.852117][T10145] veth0_macvtap: entered promiscuous mode [ 372.878751][T10145] veth1_macvtap: entered promiscuous mode [ 372.905197][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.921462][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.931792][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.942483][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.952794][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.965864][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.985475][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.996086][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.017649][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.028413][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.046321][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.057013][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.084686][T10145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.105151][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.123847][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.141946][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.152668][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.172497][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.196842][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.212921][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.223775][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.233879][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.244520][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.254453][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.265200][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.276702][T10145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.306052][T10145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.318054][T10145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.327719][T10145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.336700][T10145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.395221][ T5128] Bluetooth: hci7: command tx timeout [ 373.489096][ T9963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.520456][ T9963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.565682][ T9957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.573685][ T9957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.417813][T10165] loop4: detected capacity change from 0 to 256 [ 375.474033][ T5128] Bluetooth: hci7: command tx timeout [ 375.522261][T10165] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 375.698482][ T5166] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 375.903125][ T5166] usb 1-1: Using ep0 maxpacket: 32 [ 375.928981][ T5166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.952165][ T5166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.976299][ T5166] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 375.995837][ T5166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.016532][ T5166] usb 1-1: config 0 descriptor?? [ 376.035646][ T5166] hub 1-1:0.0: USB hub found [ 376.081682][T10170] loop2: detected capacity change from 0 to 40427 [ 376.122202][T10170] F2FS-fs (loop2): invalid crc value [ 376.127942][ T5162] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 376.163732][T10170] F2FS-fs (loop2): Found nat_bits in checkpoint [ 376.265137][ T5166] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 376.284074][T10170] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 376.344774][ T5162] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 376.374986][ T5162] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 376.398633][ T5162] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 376.437492][ T5162] usb 5-1: Manufacturer: syz [ 376.448526][ T5162] usb 5-1: SerialNumber: syz [ 376.448764][ T9662] syz-executor.2: attempt to access beyond end of device [ 376.448764][ T9662] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 376.453598][ T5166] usbhid 1-1:0.0: can't add hid device: -71 [ 376.453703][ T5166] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 376.495192][ T5166] usb 1-1: USB disconnect, device number 6 [ 376.592392][ T9662] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 376.696737][ T5162] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 376.722412][ T5162] usb 5-1: USB disconnect, device number 8 [ 377.396265][T10189] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.480602][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 377.480648][ T29] audit: type=1800 audit(1718034928.006:663): pid=10185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 378.219253][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 378.463596][ T29] audit: type=1800 audit(1718034929.006:664): pid=10207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1953 res=0 errno=0 [ 378.521741][T10207] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 378.684638][T10209] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 378.864021][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.870359][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.948473][T10220] loop0: detected capacity change from 0 to 2048 [ 379.064971][T10220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.326939][T10233] lo speed is unknown, defaulting to 1000 [ 379.362517][T10233] lo speed is unknown, defaulting to 1000 [ 379.391124][T10233] lo speed is unknown, defaulting to 1000 [ 379.445666][T10233] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 379.507640][T10233] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 379.686074][T10233] lo speed is unknown, defaulting to 1000 [ 379.718064][T10233] lo speed is unknown, defaulting to 1000 [ 379.757935][T10233] lo speed is unknown, defaulting to 1000 [ 379.789956][T10233] lo speed is unknown, defaulting to 1000 [ 379.814612][T10233] lo speed is unknown, defaulting to 1000 [ 379.844946][T10233] lo speed is unknown, defaulting to 1000 [ 379.872086][T10233] lo speed is unknown, defaulting to 1000 [ 380.182537][T10243] loop3: detected capacity change from 0 to 512 [ 380.400300][T10243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.427404][T10245] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 380.483782][T10243] ext4 filesystem being mounted at /root/syzkaller-testdir1220003651/syzkaller.aGov9E/11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.575934][ T8120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.117284][T10254] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor.3: path /root/syzkaller-testdir1220003651/syzkaller.aGov9E/11/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 381.821575][T10145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.193017][ T5165] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 382.247515][ T29] audit: type=1326 audit(1718034932.786:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 382.312997][ T29] audit: type=1326 audit(1718034932.816:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 382.383612][ T29] audit: type=1326 audit(1718034932.816:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 382.408406][ T5165] usb 5-1: Using ep0 maxpacket: 32 [ 382.441790][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.464026][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.477694][ T29] audit: type=1326 audit(1718034932.816:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8177c7cfa3 code=0x7ffc0000 [ 382.505086][ T5165] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 382.505313][T10292] loop0: detected capacity change from 0 to 64 [ 382.541957][T10292] hfs: unable to parse mount options [ 382.551781][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.571473][ T29] audit: type=1326 audit(1718034932.816:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8177c7cfa3 code=0x7ffc0000 [ 382.596339][ T5165] usb 5-1: config 0 descriptor?? [ 382.616015][ T5165] hub 5-1:0.0: USB hub found [ 382.632618][ T29] audit: type=1326 audit(1718034932.826:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 382.686372][ T29] audit: type=1326 audit(1718034932.826:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 382.716126][ T29] audit: type=1326 audit(1718034932.826:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 382.766709][ T29] audit: type=1326 audit(1718034932.836:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 382.789833][ T29] audit: type=1326 audit(1718034932.836:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 382.825299][ T29] audit: type=1326 audit(1718034932.836:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 382.829165][ T5165] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 382.882053][ T29] audit: type=1326 audit(1718034932.836:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x7ffc0000 [ 383.045407][ T5165] usbhid 5-1:0.0: can't add hid device: -71 [ 383.051436][ T5165] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 383.116695][ T5165] usb 5-1: USB disconnect, device number 9 [ 383.473447][ T5163] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 383.699691][ T5163] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 383.731724][ T5163] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 383.792794][ T5163] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 383.826319][ T5163] usb 1-1: Manufacturer: syz [ 383.855375][ T5163] usb 1-1: SerialNumber: syz [ 384.088015][ T5163] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 384.133552][T10313] loop4: detected capacity change from 0 to 32768 [ 384.143801][T10313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10313) [ 384.164013][T10313] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 384.164074][ T5163] usb 1-1: USB disconnect, device number 7 [ 384.174221][T10313] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 384.188765][T10313] BTRFS info (device loop4): using free-space-tree [ 384.506990][ T29] audit: type=1800 audit(1718034935.046:677): pid=10342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 385.308752][T10352] loop0: detected capacity change from 0 to 512 [ 385.320018][ T9659] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 385.328659][T10352] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.362239][T10352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.388399][T10352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 385.413099][T10352] System zones: 1-12 [ 385.431516][T10352] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 385.463847][ T5163] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 385.477029][T10352] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 385.564357][T10352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.723072][ T5163] usb 3-1: Using ep0 maxpacket: 32 [ 385.737791][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.754661][ T8120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.784120][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.813244][ T5163] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 385.843077][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.873969][ T5163] usb 3-1: config 0 descriptor?? [ 385.895341][ T5163] hub 3-1:0.0: USB hub found [ 385.986583][ T5128] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 386.171971][ T5163] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 386.347427][ T5163] usbhid 3-1:0.0: can't add hid device: -71 [ 386.354050][ T5163] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 386.415446][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.433999][ T5163] usb 3-1: USB disconnect, device number 7 [ 386.459793][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.487799][T10378] netlink: 4320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.050460][T10374] loop3: detected capacity change from 0 to 32768 [ 387.100855][T10374] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 387.195870][T10374] XFS (loop3): Ending clean mount [ 387.205596][T10374] XFS (loop3): Quotacheck needed: Please wait. [ 387.295737][T10374] XFS (loop3): Quotacheck: Done. [ 387.387665][T10412] loop0: detected capacity change from 0 to 4096 [ 387.400531][T10412] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 387.576836][T10145] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 387.585648][T10419] loop4: detected capacity change from 0 to 2048 [ 387.652657][T10419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.720230][T10419] EXT4-fs error (device loop4): ext4_read_inline_dir:1560: inode #12: block 9: comm syz-executor.4: path /: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 387.828812][T10419] EXT4-fs (loop4): Remounting filesystem read-only [ 387.984649][ T9659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.991535][T10430] loop2: detected capacity change from 0 to 256 [ 388.161786][T10430] Bluetooth: MGMT ver 1.23 [ 388.219186][T10436] loop3: detected capacity change from 0 to 512 [ 388.253492][T10436] EXT4-fs: test_dummy_encryption requires encrypt feature [ 389.235865][T10480] loop4: detected capacity change from 0 to 512 [ 389.263842][T10480] EXT4-fs: test_dummy_encryption requires encrypt feature [ 389.817451][T10499] loop0: detected capacity change from 0 to 2048 [ 389.893565][T10472] loop2: detected capacity change from 0 to 32768 [ 389.914248][T10499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.933312][T10472] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10472) [ 389.948204][T10508] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 389.955532][T10510] loop3: detected capacity change from 0 to 1024 [ 389.993636][T10499] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 390.025798][T10472] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 390.027982][T10499] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 390.040417][ T5128] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 390.050255][T10472] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 390.058910][ T5128] Bluetooth: hci1: Injecting HCI hardware error event [ 390.080675][ T5128] Bluetooth: hci1: hardware error 0x00 [ 390.094638][T10499] EXT4-fs (loop0): This should not happen!! Data will be lost [ 390.094638][T10499] [ 390.104453][T10499] EXT4-fs (loop0): Total free blocks count 0 [ 390.110466][T10499] EXT4-fs (loop0): Free/Dirty block details [ 390.155492][T10472] BTRFS info (device loop2): using free-space-tree [ 390.163327][T10499] EXT4-fs (loop0): free_blocks=2415919104 [ 390.164240][T10516] loop4: detected capacity change from 0 to 512 [ 390.169194][T10499] EXT4-fs (loop0): dirty_blocks=32 [ 390.185242][T10510] hfsplus: invalid extended attribute record [ 390.221589][T10516] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 5: invalid block bitmap [ 390.235110][T10499] EXT4-fs (loop0): Block reservation details [ 390.252488][T10499] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 390.329705][ T9963] hfsplus: b-tree write err: -5, ino 4 [ 390.344975][T10516] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 390.421074][T10516] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 3 (level 2) [ 390.449740][ T8120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.498461][T10516] EXT4-fs (loop4): 1 orphan inode deleted [ 390.521005][T10516] EXT4-fs (loop4): 1 truncate cleaned up [ 390.535110][T10516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.636392][ T9662] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 390.651004][ T29] audit: type=1800 audit(1718034941.186:678): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 390.686247][ T9659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.290211][ T29] audit: type=1326 audit(1718034941.576:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa476e7cf69 code=0x0 [ 392.087801][T10563] xt_policy: neither incoming nor outgoing policy selected [ 392.196539][ T5128] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 392.258481][T10565] loop0: detected capacity change from 0 to 4096 [ 392.320312][T10565] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 392.816187][ T29] audit: type=1326 audit(1718034943.356:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10573 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa476e7cf69 code=0x0 [ 393.623470][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.150348][T10612] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 394.223649][T10612] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 395.513246][T10628] bond_slave_0: entered promiscuous mode [ 395.519521][T10628] bond_slave_1: entered promiscuous mode [ 395.558343][T10630] loop2: detected capacity change from 0 to 2048 [ 395.577464][T10628] bond_slave_0: left promiscuous mode [ 395.582955][T10628] bond_slave_1: left promiscuous mode [ 395.628396][T10630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.249010][T10652] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 396.280853][T10652] team0: Device ipvlan1 failed to register rx_handler [ 396.335038][T10644] loop4: detected capacity change from 0 to 8192 [ 396.360784][T10644] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.495896][T10656] xt_policy: neither incoming nor outgoing policy selected [ 396.836337][T10671] binder: 10669:10671 ioctl c0306201 0 returned -14 [ 397.191683][T10675] loop4: detected capacity change from 0 to 1764 [ 397.288194][T10658] loop0: detected capacity change from 0 to 32768 [ 397.324991][T10658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10658) [ 397.368688][T10658] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 397.402614][T10658] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 397.436676][T10658] BTRFS info (device loop0): using free-space-tree [ 397.457595][T10684] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 397.534688][T10684] team0: Device ipvlan1 failed to register rx_handler [ 397.574332][T10658] BTRFS info (device loop0): checking UUID tree [ 397.824555][ T8120] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 397.883067][T10703] xt_policy: neither incoming nor outgoing policy selected [ 398.056972][T10707] loop4: detected capacity change from 0 to 256 [ 398.077288][T10707] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.567872][T10721] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 400.025774][T10743] loop2: detected capacity change from 0 to 32768 [ 400.089264][T10743] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 400.134591][T10747] loop4: detected capacity change from 0 to 32768 [ 400.177330][T10747] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10747) [ 400.230631][T10747] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 400.271327][T10747] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 400.295556][T10747] BTRFS info (device loop4): using free-space-tree [ 400.295586][T10743] XFS (loop2): Ending clean mount [ 400.449289][T10785] overlayfs: missing 'lowerdir' [ 400.469498][ T9662] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 400.516124][T10750] loop0: detected capacity change from 0 to 32768 [ 400.548157][T10750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10750) [ 400.613078][T10750] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 400.636512][ T9659] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 400.646939][T10750] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 400.647015][T10750] BTRFS info (device loop0): using free-space-tree [ 400.786214][T10791] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 400.868399][T10791] team0: Device ipvlan1 failed to register rx_handler [ 401.008704][T10808] loop2: detected capacity change from 0 to 1024 [ 401.192714][T10814] loop4: detected capacity change from 0 to 1024 [ 401.205764][ T9963] hfsplus: b-tree write err: -5, ino 4 [ 401.672614][ T8120] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 402.133910][T10834] loop0: detected capacity change from 0 to 256 [ 402.215659][ T29] audit: type=1804 audit(1718034952.746:681): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723737323035393030322F73797A6B616C6C65722E5761444C364C2F3234322FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048784 res=1 errno=0 [ 402.251684][T10837] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 402.271913][T10839] loop3: detected capacity change from 0 to 128 [ 402.305381][T10839] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 402.319134][ T29] audit: type=1804 audit(1718034952.796:682): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723737323035393030322F73797A6B616C6C65722E5761444C364C2F3234322FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048784 res=1 errno=0 [ 402.326184][T10837] xt_ipcomp: unknown flags 12 [ 402.386489][T10839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.529304][T10842] tmpfs: Bad value for 'mpol' [ 402.687483][T10848] loop2: detected capacity change from 0 to 1024 [ 402.734675][T10851] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 402.794194][T10851] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 403.203057][ T6110] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 403.435554][ T6110] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 403.454957][ T6110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.495587][ T6110] usb 1-1: config 0 descriptor?? [ 403.547126][T10869] loop2: detected capacity change from 0 to 128 [ 403.624069][T10869] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 403.706082][T10869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.743777][T10850] loop4: detected capacity change from 0 to 40427 [ 403.755668][T10862] loop3: detected capacity change from 0 to 32768 [ 403.767340][T10850] F2FS-fs (loop4): invalid crc value [ 403.814578][T10850] F2FS-fs (loop4): Found nat_bits in checkpoint [ 403.865834][T10862] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 403.918412][T10850] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 403.984259][T10862] XFS (loop3): Ending clean mount [ 404.052789][T10887] tmpfs: Bad value for 'mpol' [ 404.107807][ T9659] syz-executor.4: attempt to access beyond end of device [ 404.107807][ T9659] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 404.127509][T10145] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 404.184651][ T9659] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 404.511312][ T6110] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 404.547240][ T6110] usb 1-1: USB disconnect, device number 8 [ 405.047247][T10902] loop4: detected capacity change from 0 to 4096 [ 405.095076][T10902] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 405.214352][T10904] loop0: detected capacity change from 0 to 128 [ 405.221452][T10902] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 405.234521][T10904] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 405.289346][T10904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.957509][T10913] trusted_key: encrypted_key: insufficient parameters specified [ 406.033340][ T29] audit: type=1326 audit(1718034956.576:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8177c7cf69 code=0x0 [ 406.160645][T10916] loop4: detected capacity change from 0 to 16 [ 406.207300][T10916] erofs: (device loop4): mounted with root inode @ nid 36. [ 406.657527][T10925] loop2: detected capacity change from 0 to 256 [ 408.832547][ T29] audit: type=1326 audit(1718034959.366:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa476e7cf69 code=0x7ffc0000 [ 408.884846][T10946] loop4: detected capacity change from 0 to 32768 [ 408.906044][ T29] audit: type=1326 audit(1718034959.366:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa476e7cf69 code=0x7ffc0000 [ 408.934558][T10946] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10946) [ 408.951981][ T29] audit: type=1326 audit(1718034959.406:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa476e7cf69 code=0x7ffc0000 [ 408.990390][T10946] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 409.003203][T10946] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 409.012722][ T29] audit: type=1326 audit(1718034959.406:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa476e7cf69 code=0x7ffc0000 [ 409.047797][T10946] BTRFS info (device loop4): using free-space-tree [ 409.049432][ T29] audit: type=1326 audit(1718034959.406:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa476e7cf69 code=0x7ffc0000 [ 409.162597][T10963] loop3: detected capacity change from 0 to 256 [ 409.424323][ T29] audit: type=1326 audit(1718034959.416:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa476e7cf69 code=0x7ffc0000 [ 410.911708][T10946] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 410.950093][T10946] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 411.163146][ T29] audit: type=1326 audit(1718034959.416:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa476e7cf69 code=0x7ffc0000 [ 411.198223][T10946] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 411.198945][T10946] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 411.220005][T10946] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 411.253896][T10946] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 411.273742][ T29] audit: type=1326 audit(1718034959.426:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa476e7a6e7 code=0x7ffc0000 [ 411.395554][ T29] audit: type=1326 audit(1718034959.426:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa476e403d9 code=0x7ffc0000 [ 411.489982][ T29] audit: type=1326 audit(1718034959.426:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa476e7a6e7 code=0x7ffc0000 [ 411.533558][T10946] BTRFS error (device loop4): open_ctree failed [ 412.015725][T10991] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'. [ 412.055512][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 412.326366][T10995] loop0: detected capacity change from 0 to 1024 [ 412.524720][ T9963] hfsplus: b-tree write err: -5, ino 4 [ 412.546888][T10998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.645766][T10988] loop3: detected capacity change from 0 to 32768 [ 412.824906][T11003] loop2: detected capacity change from 0 to 16 [ 412.842572][T11003] erofs: (device loop2): mounted with root inode @ nid 36. [ 413.425906][T11016] loop0: detected capacity change from 0 to 512 [ 413.476169][T11016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.488966][T11016] ext4 filesystem being mounted at /root/syzkaller-testdir772059002/syzkaller.WaDL6L/263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 413.617492][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 414.298183][T11023] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 414.496157][ T8120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.678287][T11034] loop0: detected capacity change from 0 to 256 [ 414.695911][T11030] loop2: detected capacity change from 0 to 2048 [ 414.722172][T11034] exfat: Deprecated parameter 'utf8' [ 414.733242][T11034] exfat: Deprecated parameter 'utf8' [ 414.776035][T11034] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x14f16447, utbl_chksum : 0xe619d30d) [ 414.997288][T11025] loop4: detected capacity change from 0 to 32768 [ 415.015848][T11025] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11025) [ 415.090089][T11025] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 415.112302][T11025] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 415.130294][T11025] BTRFS info (device loop4): using free-space-tree [ 415.243973][T11055] tipc: Started in network mode [ 415.248846][T11055] tipc: Node identity ac1414aa, cluster identity 4711 [ 415.279846][T11055] tipc: Enabled bearer , priority 10 [ 415.471567][T11066] loop3: detected capacity change from 0 to 512 [ 415.494261][T11066] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 415.534659][T11066] EXT4-fs (loop3): 1 truncate cleaned up [ 415.550157][T11066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.619269][T11068] binder: 11067:11068 ioctl c0306201 20000380 returned -14 [ 415.773045][ T5163] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 415.994443][ T5163] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 416.013128][ T5163] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 416.066611][ T5163] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.086225][T10145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.095305][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 416.095332][ T5163] usb 5-1: SerialNumber: syz [ 416.116429][T11022] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 416.349487][T11022] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 416.396761][ T5162] tipc: Node number set to 2886997162 [ 416.509742][T11094] loop3: detected capacity change from 0 to 512 [ 416.778970][ T5163] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 417.017128][ T5163] usb 5-1: USB disconnect, device number 10 [ 417.169983][T11101] loop0: detected capacity change from 0 to 512 [ 417.194275][T11101] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 417.222655][T11101] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 417.264057][T11101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.298000][T11101] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 417.418059][ T8120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.490276][T11105] loop3: detected capacity change from 0 to 512 [ 417.514842][T11105] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 417.539419][T11105] EXT4-fs (loop3): 1 truncate cleaned up [ 417.546786][T11105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.646991][ T9659] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 418.594527][T10145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.709553][T11114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 418.916931][T11120] loop3: detected capacity change from 0 to 512 [ 418.977305][T11120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.989927][T11120] ext4 filesystem being mounted at /root/syzkaller-testdir1220003651/syzkaller.aGov9E/92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 419.176813][T11124] tipc: Started in network mode [ 419.183573][T11124] tipc: Node identity ac1414aa, cluster identity 4711 [ 419.191085][T11124] tipc: Enabled bearer , priority 10 [ 419.333564][T11130] loop2: detected capacity change from 0 to 16 [ 420.073318][T11130] erofs: (device loop2): mounted with root inode @ nid 36. [ 420.085905][T10145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.303354][ T5166] tipc: Node number set to 2886997162 [ 420.623912][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 420.623930][ T29] audit: type=1800 audit(1718034971.146:712): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 421.414049][T11149] loop4: detected capacity change from 0 to 32768 [ 421.768469][T11175] loop3: detected capacity change from 0 to 256 [ 421.913091][ T5163] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 422.020602][T11181] loop4: detected capacity change from 0 to 512 [ 422.105207][ T5163] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 422.138058][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.194001][ T5163] usb 1-1: config 0 descriptor?? [ 422.550537][T11176] loop2: detected capacity change from 0 to 32768 [ 422.561138][T11176] XFS: attr2 mount option is deprecated. [ 422.567439][T11176] XFS: noikeep mount option is deprecated. [ 422.598485][T11176] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 422.750872][T11176] XFS (loop2): Ending clean mount [ 422.751540][T11199] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 422.751560][T11199] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 422.751581][T11199] CPU: 1 PID: 11199 Comm: syz-executor.3 Not tainted 6.10.0-rc2-next-20240607-syzkaller #0 [ 422.751600][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 422.751610][T11199] RIP: 0010:dev_map_generic_redirect+0x95/0x650 [ 422.751641][T11199] Code: f1 00 f2 f2 f2 4b 89 44 35 00 43 c7 44 35 0f f3 f3 f3 f3 43 c6 44 35 13 f3 e8 b7 71 d7 ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 30 00 74 08 48 89 df e8 ac 80 3d 00 48 89 5c 24 20 4c 8b [ 422.751655][T11199] RSP: 0018:ffffc9000f62f6a0 EFLAGS: 00010246 [ 422.751671][T11199] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 422.751682][T11199] RDX: ffffc90019016000 RSI: 0000000000001aaf RDI: 0000000000001ab0 [ 422.751694][T11199] RBP: ffffc9000f62f7f0 R08: ffffffff89690ba7 R09: ffffffff89690ac0 [ 422.751706][T11199] R10: 0000000000000004 R11: ffff88801ff00000 R12: ffff88802ddd63c0 [ 422.751718][T11199] R13: 1ffff92001ec5ee0 R14: dffffc0000000000 R15: 0000000000000019 [ 422.751730][T11199] FS: 00007fa477ce26c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 422.751745][T11199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.751757][T11199] CR2: 0000000020010000 CR3: 0000000023518000 CR4: 00000000003506f0 [ 422.751772][T11199] DR0: 000000000000004e DR1: 0000000000000000 DR2: 0000000000000000 [ 422.751782][T11199] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 422.751793][T11199] Call Trace: [ 422.751800][T11199] [ 422.751806][T11199] ? __die_body+0x88/0xe0 [ 422.751829][T11199] ? die_addr+0x108/0x140 [ 422.751852][T11199] ? exc_general_protection+0x3dd/0x5d0 [ 422.751882][T11199] ? asm_exc_general_protection+0x26/0x30 [ 422.751902][T11199] ? xdp_do_generic_redirect+0x330/0x7a0 [ 422.751930][T11199] ? xdp_do_generic_redirect+0x417/0x7a0 [ 422.751954][T11199] ? dev_map_generic_redirect+0x95/0x650 [ 422.751982][T11199] ? __pfx_dev_map_generic_redirect+0x10/0x10 [ 422.752007][T11199] ? bpf_prog_run_generic_xdp+0xbd4/0x14c0 [ 422.752035][T11199] xdp_do_generic_redirect+0x439/0x7a0 [ 422.752066][T11199] do_xdp_generic+0x882/0xb80 [ 422.752089][T11199] ? __pfx_do_xdp_generic+0x10/0x10 [ 422.752107][T11199] ? tun_get_user+0x26c4/0x4560 [ 422.752131][T11199] ? tun_get_user+0x26c4/0x4560 [ 422.752147][T11199] tun_get_user+0x2801/0x4560 [ 422.752173][T11199] ? __pfx_tun_get_user+0x10/0x10 [ 422.752193][T11199] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 422.752211][T11199] ? tun_get+0x1e/0x2f0 [ 422.752234][T11199] ? tun_get+0x1e/0x2f0 [ 422.752250][T11199] ? tun_get+0x27d/0x2f0 [ 422.752266][T11199] tun_chr_write_iter+0x113/0x1f0 [ 422.752285][T11199] vfs_write+0xa72/0xc90 [ 422.752309][T11199] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 422.752327][T11199] ? __pfx_vfs_write+0x10/0x10 [ 422.752346][T11199] ? do_futex+0x33b/0x560 [ 422.752373][T11199] ksys_write+0x1a0/0x2c0 [ 422.752398][T11199] ? __pfx_ksys_write+0x10/0x10 [ 422.752420][T11199] ? do_syscall_64+0x100/0x230 [ 422.752436][T11199] ? do_syscall_64+0xb6/0x230 [ 422.752452][T11199] do_syscall_64+0xf3/0x230 [ 422.752466][T11199] ? clear_bhb_loop+0x35/0x90 [ 422.752485][T11199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.752502][T11199] RIP: 0033:0x7fa476e7bcaf [ 422.752520][T11199] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 422.752533][T11199] RSP: 002b:00007fa477ce2090 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 422.752549][T11199] RAX: ffffffffffffffda RBX: 00007fa476fb3f80 RCX: 00007fa476e7bcaf [ 422.752562][T11199] RDX: 000000000000fdef RSI: 0000000020000340 RDI: 00000000000000c8 [ 422.752573][T11199] RBP: 00007fa476eda6fe R08: 0000000000000000 R09: 0000000000000000 [ 422.752584][T11199] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 422.752595][T11199] R13: 000000000000000b R14: 00007fa476fb3f80 R15: 00007fffe2bad0b8 [ 422.752615][T11199] [ 422.752621][T11199] Modules linked in: [ 422.752661][T11199] ---[ end trace 0000000000000000 ]--- [ 422.752677][T11199] RIP: 0010:dev_map_generic_redirect+0x95/0x650 [ 422.758398][T11176] XFS (loop2): Quotacheck needed: Please wait. [ 422.768538][T11199] Code: f1 00 f2 f2 f2 4b 89 44 35 00 43 c7 44 35 0f f3 f3 f3 f3 43 c6 44 35 13 f3 e8 b7 71 d7 ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 30 00 74 08 48 89 df e8 ac 80 3d 00 48 89 5c 24 20 4c 8b [ 422.768560][T11199] RSP: 0018:ffffc9000f62f6a0 EFLAGS: 00010246 [ 422.768580][T11199] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 422.768594][T11199] RDX: ffffc90019016000 RSI: 0000000000001aaf RDI: 0000000000001ab0 [ 422.768609][T11199] RBP: ffffc9000f62f7f0 R08: ffffffff89690ba7 R09: ffffffff89690ac0 [ 422.768624][T11199] R10: 0000000000000004 R11: ffff88801ff00000 R12: ffff88802ddd63c0 [ 422.768639][T11199] R13: 1ffff92001ec5ee0 R14: dffffc0000000000 R15: 0000000000000019 [ 422.768654][T11199] FS: 00007fa477ce26c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 422.768672][T11199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.768687][T11199] CR2: 0000000020010000 CR3: 0000000023518000 CR4: 00000000003506f0 [ 422.768703][T11199] DR0: 000000000000004e DR1: 0000000000000000 DR2: 0000000000000000 [ 422.768715][T11199] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 422.768729][T11199] Kernel panic - not syncing: Fatal exception in interrupt [ 422.768937][T11199] Kernel Offset: disabled