last executing test programs: 11.765582315s ago: executing program 0 (id=3653): openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x494782, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) personality(0x500006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000280)="4319e2aabc1e4a13e696a7f0d7555a42d86bf77f9c16bad30355", 0x1a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) syz_open_dev$video4linux(&(0x7f0000000380), 0x1, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x0, 0x19, 0x0, 0x260, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x260, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=@udp6=r4}, 0x20) r5 = syz_io_uring_setup(0x2a2a, &(0x7f0000000300)={0x0, 0x1240, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0xc}) io_uring_enter(r5, 0x56a, 0x0, 0x0, 0x0, 0x0) 11.244506653s ago: executing program 2 (id=3655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), 0xffffffffffffffff) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=") r3 = dup(r2) socket$inet_udp(0x2, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_exit\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0040, &(0x7f0000000000)={[{@data_writeback}, {@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000000dc0)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000600)={0x0, 0x3000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.970800115s ago: executing program 3 (id=3656): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) write$cgroup_freezer_state(r0, 0x0, 0x0) 10.725094513s ago: executing program 0 (id=3657): syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x96}, "ebc2c66584601f003d5eceea86c5b4e4c22e7d73f8c4023570f400684f05afa738be36eec766c4520117c4509c8aa8113e9030f33d953fabfa1f8be7a4dcf4eacafd3b2610329733906bb2051dfe326329d8fa7e4921add887812104e226bf9cf3fab770fbf828fc7a98b8ef6fc9997c8fad36af4a47805227c0b05145b51fadabcd55be1fd272b82f6dd32f35208d7aac762d4e6de9"}, 0x9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1000, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r0, 0x0, 0x1, 0x4}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x0, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x401) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x74) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x9, 0x2, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x66, 0x0, 0x70, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002800)={&(0x7f0000002400)={0x400, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '()[&\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e44}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '&@,${%-:Y})@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']&}@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':(\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x210, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "42dc872e0ee4d16c6cb03f60087c1eaf2ecd640e4a5a2f31d14e82318edd562dd8bf8f315e61e6742549af5359d231675655820dd8adac1bb7f9cfa9644bfabc98811bff76eda6aac761afe9634e464294d3fca71fdc89d452af6b13491a4aadd1982df3ec45a6c11dab93d3ce0bb5c26b64cddaf6d654703d054dd7f1945234927f21c58f0b69eadca85f110e9bf3b6354d1efb25e3c4721a90ef65451a56e701205b5eaf3c637ebc25141ac646066af357ac0a44e24330c2990018819c5d478b7324a0105279"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffb6ca}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "793c357ac7f3d7ed7cdfbc2670d220485d3f18abcfd4c2dab767290229dfb606cadbaba951e194cb21c675bf7bbebf422d35bd5464ef343acd35c1a91d9df31507cfb49c6ec8ea1023f076b808c23e9f886e3d74e20caba09e08e10414755fda0d3b99cafb4c063aec4ee98f8ea4881b31cf932e3601f06c7b79f53009863be00d36d5d4e3741c753283d5cbf3532db3aba3dd7ff2822842f9ef8c935bb40249fb0f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x400}, 0x1, 0x0, 0x0, 0x20000000}, 0x94b20d40506b8d7) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) 9.924706812s ago: executing program 3 (id=3661): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 9.92317514s ago: executing program 4 (id=3662): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x100) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() exit(0x0) 9.817802324s ago: executing program 2 (id=3663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) r2 = dup(r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc020660b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x8) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 9.7073733s ago: executing program 0 (id=3664): syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx={@link_id}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000100085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) 9.613971243s ago: executing program 3 (id=3666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001ac0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000004}) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x100) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={0x0, r5}, 0x10) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d1050120000601"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00C\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.546216273s ago: executing program 4 (id=3667): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) dup(r1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc020660b, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x46b42, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) 8.256057966s ago: executing program 0 (id=3668): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x94, &(0x7f0000000740)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x1, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000840), &(0x7f0000000880)=[{0x2, 0x0, 0x4, 0x3}, {}], 0x10, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380), 0x4) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x4, 0xfffffffc, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r5) 7.060744314s ago: executing program 1 (id=3670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) 6.77709947s ago: executing program 0 (id=3671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00'}, 0x18) 6.633847344s ago: executing program 1 (id=3672): syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx={@link_id}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 6.522604189s ago: executing program 0 (id=3673): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)={0xd0, 0x0, 0x120, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xa06}, {0xc, 0x90, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xc5e2344}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x200000a0}, 0x2000081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/20, @ANYRES8=r3, @ANYRES64=r0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) unlinkat(r7, 0x0, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.313369289s ago: executing program 4 (id=3674): syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x96}, "ebc2c66584601f003d5eceea86c5b4e4c22e7d73f8c4023570f400684f05afa738be36eec766c4520117c4509c8aa8113e9030f33d953fabfa1f8be7a4dcf4eacafd3b2610329733906bb2051dfe326329d8fa7e4921add887812104e226bf9cf3fab770fbf828fc7a98b8ef6fc9997c8fad36af4a47805227c0b05145b51fadabcd55be1fd272b82f6dd32f35208d7aac762d4e6de9"}, 0x9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1000, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r0, 0x0, 0x1, 0x4}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x0, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x401) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x74) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x9, 0x2, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x66, 0x0, 0x70, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002800)={&(0x7f0000002400)={0x400, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '()[&\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e44}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '&@,${%-:Y})@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']&}@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':(\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x210, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "42dc872e0ee4d16c6cb03f60087c1eaf2ecd640e4a5a2f31d14e82318edd562dd8bf8f315e61e6742549af5359d231675655820dd8adac1bb7f9cfa9644bfabc98811bff76eda6aac761afe9634e464294d3fca71fdc89d452af6b13491a4aadd1982df3ec45a6c11dab93d3ce0bb5c26b64cddaf6d654703d054dd7f1945234927f21c58f0b69eadca85f110e9bf3b6354d1efb25e3c4721a90ef65451a56e701205b5eaf3c637ebc25141ac646066af357ac0a44e24330c2990018819c5d478b7324a0105279"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffb6ca}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "793c357ac7f3d7ed7cdfbc2670d220485d3f18abcfd4c2dab767290229dfb606cadbaba951e194cb21c675bf7bbebf422d35bd5464ef343acd35c1a91d9df31507cfb49c6ec8ea1023f076b808c23e9f886e3d74e20caba09e08e10414755fda0d3b99cafb4c063aec4ee98f8ea4881b31cf932e3601f06c7b79f53009863be00d36d5d4e3741c753283d5cbf3532db3aba3dd7ff2822842f9ef8c935bb40249fb0f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x400}, 0x1, 0x0, 0x0, 0x20000000}, 0x94b20d40506b8d7) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) 5.159277748s ago: executing program 1 (id=3675): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x6, 0x4, 0x6c03, 0xee}, 0x48) 4.662095436s ago: executing program 4 (id=3676): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 4.581928377s ago: executing program 1 (id=3677): creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0185879, &(0x7f0000000b00)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.312216596s ago: executing program 1 (id=3678): syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx={@link_id}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000100085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) 4.266714777s ago: executing program 4 (id=3679): r0 = io_uring_setup(0x2a0c, &(0x7f00000002c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000740)=""/255, 0xff}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.106599827s ago: executing program 2 (id=3680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r1, 0x300, 0x70bd2a, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x404c000}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec270000000000eaff65"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r2) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="dd", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000780)="5d4a20e1cc3c785f217f361149503911c08deb80a3c0443464094d1bf3e214d86d640d5ae837bd8c85ab961822e471de9c65b86718a9541ff3aae72ba82b0240ad7fbce9545e612f3989bee2e579ec075d09ff15a22fc1eec5f358f2eaef3fef1922bfdfc41c1299a189391f9197aeaa7e85a1890fbb335cf36d25aa02935604c294132683d75d2796678dd17802744b23cd792c14f3b624d6f7cd5f6c74efe1f20459f59ca7096c32c764b3ec33e165cf901f25", 0xb4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5}, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x7}, @alu={0x7, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x3c31}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r6}, 0x10) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r4, 0x601, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 3.68410859s ago: executing program 3 (id=3681): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)=@keyring) 3.648414994s ago: executing program 2 (id=3682): syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx={@link_id}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000100085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) 2.729659279s ago: executing program 3 (id=3683): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r0, 0x5) 2.675493032s ago: executing program 1 (id=3684): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) dup(r1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc020660b, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x46b42, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) 2.616180199s ago: executing program 4 (id=3685): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000040)={[{@discard}]}, 0xfe, 0x520, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) setpgid(r2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r3, &(0x7f00000038c0)={'#! ', './file0', [{}]}, 0xc) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x208e24b) 2.240099436s ago: executing program 3 (id=3686): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="666f7263652c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d6d6163696e7569742c666f7263652c666f7263652c00e4fc379f5d3b737931087563d08075a28550d98b7ceb93413b717546de81c69d046a7c7de8b7877acbd69ee6be03a2ee9a6f18a95984da551773b44694170cc523576b447ba266b98f316ea57b543f70ba341c31a3ebdda905e7fe6b43c2a3df705330ee5e204149ac4976e64dd1fadd4aa5366c443b6b98d34c"], 0x3, 0x6a4, &(0x7f0000000100)="$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") creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') 1.521629759s ago: executing program 2 (id=3687): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x8, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb3, 0x6}, 0x48) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x2020) lseek(r7, 0xfffffffffffffff5, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)={0x1b, 0x0, 0x0, 0xfffff000, 0x0, r6, 0x3, '\x00', 0x0, r6, 0x4, 0x1, 0x5}, 0x48) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000001b40)=0xa, 0x4) 0s ago: executing program 2 (id=3688): syz_io_uring_setup(0xa98, &(0x7f0000000300)={0x0, 0x475b, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) r0 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$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") r1 = creat(&(0x7f0000000300)='./file1\x00', 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x1, 0x7, 0xfffffffffffffbff}}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(0x0, 0x14507e, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xad5, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESHEX=0xee00, @ANYRES64, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB=',discard,\x00'], 0x81, 0x1501, &(0x7f0000000500)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x40049409, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.3.3235'. [ 1413.829574][T19199] netlink: 'syz.3.3235': attribute type 29 has an invalid length. [ 1413.850984][T19196] loop1: detected capacity change from 0 to 2048 [ 1413.942149][T19196] loop1: p3 < > p4 < > [ 1413.961421][T19196] loop1: partition table partially beyond EOD, truncated [ 1413.969158][T17351] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 1413.978674][T19196] loop1: p3 start 4284289 is beyond EOD, truncated [ 1414.339690][T19205] loop1: detected capacity change from 0 to 512 [ 1414.385223][T19205] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1415.511211][T19224] loop1: detected capacity change from 0 to 4096 [ 1415.744745][T19224] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1415.758766][T19224] NILFS (loop1): trying rollback from an earlier position [ 1416.000756][T19224] NILFS (loop1): recovery complete [ 1416.054753][T19230] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1417.509421][T19245] loop1: detected capacity change from 0 to 2048 [ 1417.561540][T19245] loop1: p3 < > p4 < > [ 1417.568498][T19245] loop1: partition table partially beyond EOD, truncated [ 1417.581063][T19245] loop1: p3 start 4284289 is beyond EOD, truncated [ 1417.588130][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1417.588152][ T29] audit: type=1326 audit(1719393870.271:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19243 comm="syz.2.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0aa375ae9 code=0x7fc00000 [ 1417.618273][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.640611][T19256] sctp: [Deprecated]: syz.3.3249 (pid 19256) Use of int in max_burst socket option deprecated. [ 1417.640611][T19256] Use struct sctp_assoc_value instead [ 1417.681217][ T29] audit: type=1326 audit(1719393870.291:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19243 comm="syz.2.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff0aa375ae9 code=0x7fc00000 [ 1417.731065][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 1417.762230][T19257] netlink: 'syz.4.3250': attribute type 29 has an invalid length. [ 1417.955178][T19241] loop1: detected capacity change from 0 to 512 [ 1417.992996][T19241] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1418.223079][ T29] audit: type=1326 audit(1719393870.911:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19243 comm="syz.2.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0aa375ae9 code=0x7fc00000 [ 1418.246631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1418.350478][ T29] audit: type=1326 audit(1719393870.911:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19243 comm="syz.2.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0aa375ae9 code=0x7fc00000 [ 1418.824388][T17351] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1419.251542][T19269] loop3: detected capacity change from 0 to 2048 [ 1420.424399][T19269] loop3: p3 < > p4 < > [ 1420.477005][T19269] loop3: partition table partially beyond EOD, truncated [ 1420.522213][T19269] loop3: p3 start 4284289 is beyond EOD, truncated [ 1420.908081][T19268] loop3: detected capacity change from 0 to 512 [ 1420.915524][T19288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1420.932650][T19268] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 1422.757608][ T29] audit: type=1326 audit(1719393875.451:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19304 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab16575ae9 code=0x7fc00000 [ 1422.859692][ T29] audit: type=1326 audit(1719393875.481:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19304 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fab16575ae9 code=0x7fc00000 [ 1423.587815][ T29] audit: type=1326 audit(1719393876.271:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19304 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab16575ae9 code=0x7fc00000 [ 1423.888060][T19318] loop3: detected capacity change from 0 to 2048 [ 1424.023503][T19318] loop3: p3 < > p4 < > [ 1424.071173][T19318] loop3: partition table partially beyond EOD, truncated [ 1424.091240][T19318] loop3: p3 start 4284289 is beyond EOD, truncated [ 1424.344514][T19313] loop3: detected capacity change from 0 to 512 [ 1424.371032][T19309] kvm: kvm [19307]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x2000000080 [ 1424.423933][T19313] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 1428.019839][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 1428.191575][ T29] audit: type=1326 audit(1719393880.881:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1428.260486][ T29] audit: type=1326 audit(1719393880.931:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1428.302370][T19351] loop3: detected capacity change from 0 to 128 [ 1428.756852][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.769319][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.774153][ T29] audit: type=1326 audit(1719393881.461:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.0.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1428.972571][T19355] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 1429.123975][ T29] audit: type=1326 audit(1719393881.801:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19354 comm="syz.4.3275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab16575ae9 code=0x0 [ 1430.780405][T17351] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1431.897397][T19384] kvm: kvm [19383]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x2000000080 [ 1432.024932][T17351] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1432.433966][ T29] audit: type=1326 audit(1719393885.111:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1432.546395][ T29] audit: type=1326 audit(1719393885.111:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1433.071758][ T29] audit: type=1326 audit(1719393885.761:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1433.170719][T19390] loop3: detected capacity change from 0 to 32768 [ 1433.177769][ T29] audit: type=1326 audit(1719393885.761:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1433.261958][ T29] audit: type=1326 audit(1719393885.761:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1433.364029][ T29] audit: type=1326 audit(1719393885.761:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1433.522112][T19390] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1433.622858][ T29] audit: type=1326 audit(1719393885.761:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1433.674143][T17351] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1433.744661][ T29] audit: type=1326 audit(1719393885.761:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1433.799645][T19390] XFS (loop3): Ending clean mount [ 1433.814854][ T29] audit: type=1326 audit(1719393885.761:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1433.865123][T12233] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1433.985238][ T29] audit: type=1326 audit(1719393885.761:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1434.067435][T12233] usb 1-1: Using ep0 maxpacket: 16 [ 1434.114381][T12233] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1434.129788][T12233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.130040][ T29] audit: type=1326 audit(1719393885.761:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1434.144882][T12233] usb 1-1: Product: syz [ 1434.167151][T12233] usb 1-1: Manufacturer: syz [ 1434.171954][T12233] usb 1-1: SerialNumber: syz [ 1434.186355][T12233] usb 1-1: config 0 descriptor?? [ 1434.213962][T12233] appledisplay 1-1:0.0: Could not find int-in endpoint [ 1434.249279][T12233] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1434.264755][ T29] audit: type=1326 audit(1719393885.761:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1434.333557][ T29] audit: type=1326 audit(1719393885.761:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1434.364875][ T29] audit: type=1326 audit(1719393885.761:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19399 comm="syz.0.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae0575ae9 code=0x7fc00000 [ 1435.206310][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'. [ 1435.375879][T19442] loop1: detected capacity change from 0 to 128 [ 1436.905784][T14869] usb 1-1: USB disconnect, device number 10 [ 1438.963318][T17570] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1439.294737][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1439.294761][ T29] audit: type=1800 audit(1719393891.981:6765): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3299" name="file1" dev="sda1" ino=2045 res=0 errno=0 [ 1441.152449][T19474] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 1441.219721][ T29] audit: type=1800 audit(1719393893.891:6766): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3301" name="bus" dev="sda1" ino=2063 res=0 errno=0 [ 1441.249045][ T29] audit: type=1800 audit(1719393893.901:6767): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3301" name="bus" dev="sda1" ino=2063 res=0 errno=0 [ 1441.282730][ T29] audit: type=1326 audit(1719393893.911:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19473 comm="syz.4.3306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab16575ae9 code=0x0 [ 1443.123861][T15025] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1443.380821][T15025] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1443.403987][T15025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.431400][T15025] usb 1-1: Product: syz [ 1443.454059][T15025] usb 1-1: Manufacturer: syz [ 1443.463937][T15025] usb 1-1: SerialNumber: syz [ 1443.505828][T15025] usb 1-1: config 0 descriptor?? [ 1444.280241][T19489] loop3: detected capacity change from 0 to 32768 [ 1444.367361][T19489] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1444.518933][T19489] XFS (loop3): Ending clean mount [ 1448.916402][T17570] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1448.929455][ T8] usb 1-1: USB disconnect, device number 11 [ 1448.975646][T19505] macsec0: entered promiscuous mode [ 1448.981459][T19505] macsec1: entered promiscuous mode [ 1450.729417][T19526] loop1: detected capacity change from 0 to 64 [ 1450.997587][T17351] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 1451.692317][T19538] loop3: detected capacity change from 0 to 32768 [ 1451.737132][T19538] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3314 (19538) [ 1451.798493][T19538] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1451.809077][T19538] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1451.818324][T19538] BTRFS info (device loop3): using free-space-tree [ 1452.511924][T19559] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3323'. [ 1453.787659][T17351] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1454.273525][T17570] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1455.844078][ T5139] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1455.870253][T19582] macsec1: entered promiscuous mode [ 1456.154897][ T5139] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1456.224710][ T5139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.263140][ T5139] usb 3-1: Product: syz [ 1456.302840][ T5139] usb 3-1: Manufacturer: syz [ 1456.331798][ T5139] usb 3-1: SerialNumber: syz [ 1456.368875][ T5139] usb 3-1: config 0 descriptor?? [ 1456.998213][T19592] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1457.005165][T19592] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1457.071752][T19592] vhci_hcd vhci_hcd.0: Device attached [ 1457.122920][ T5141] usb 3-1: USB disconnect, device number 8 [ 1457.214794][T19593] vhci_hcd: connection closed [ 1457.222851][T12295] vhci_hcd: stop threads [ 1457.258563][T12295] vhci_hcd: release socket [ 1457.277690][T12295] vhci_hcd: disconnect device [ 1457.916380][ T5094] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1458.040248][T19610] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3335'. [ 1463.108028][T19640] loop3: detected capacity change from 0 to 1024 [ 1463.171229][T19640] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1463.267493][T19640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.462236][T19654] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 1463.524036][ T29] audit: type=1326 audit(1719393916.211:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19638 comm="syz.3.3345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c6975ae9 code=0x0 [ 1463.901753][T19658] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3348'. [ 1464.033940][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1465.009962][T17570] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.022987][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1465.082061][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.140267][ T8] usb 2-1: Product: syz [ 1465.166572][ T8] usb 2-1: Manufacturer: syz [ 1465.183094][ T8] usb 2-1: SerialNumber: syz [ 1465.213678][ T8] usb 2-1: config 0 descriptor?? [ 1466.727634][ T5141] usb 2-1: USB disconnect, device number 13 [ 1466.783872][T19685] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1466.790570][T19685] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1466.937259][T19685] vhci_hcd vhci_hcd.0: Device attached [ 1467.105188][T19686] vhci_hcd: connection closed [ 1467.107458][ T11] vhci_hcd: stop threads [ 1467.143492][ T11] vhci_hcd: release socket [ 1467.160576][ T11] vhci_hcd: disconnect device [ 1468.439927][T19708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3359'. [ 1469.244156][T19710] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 1469.362775][ T29] audit: type=1326 audit(1719393922.041:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19709 comm="syz.2.3361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0aa375ae9 code=0x0 [ 1469.490193][T19712] loop1: detected capacity change from 0 to 4096 [ 1469.592448][T19712] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1470.646315][T19712] NILFS (loop1): trying rollback from an earlier position [ 1470.758098][T19712] NILFS (loop1): recovery complete [ 1470.767701][T19723] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1472.934899][T19739] macsec1: entered promiscuous mode [ 1473.471186][T19747] macsec0: entered promiscuous mode [ 1473.493528][T19747] macsec1: entered promiscuous mode [ 1474.112900][T19761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1474.119593][T19761] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1474.131319][T19761] vhci_hcd vhci_hcd.0: Device attached [ 1474.237796][T19762] vhci_hcd: cannot find the pending unlink 0 [ 1474.393883][T19762] vhci_hcd: connection closed [ 1474.402194][ T744] vhci_hcd: stop threads [ 1474.439945][ T744] vhci_hcd: release socket [ 1474.460501][ T744] vhci_hcd: disconnect device [ 1474.485531][T17218] usb 14-1: SetAddress Request (2) to port 0 [ 1474.491670][T17218] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1474.970825][T19772] loop3: detected capacity change from 0 to 1024 [ 1475.042232][T19772] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1475.186876][T19772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1475.458321][T19772] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 1475.524621][ T29] audit: type=1326 audit(1719393928.221:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19771 comm="syz.3.3375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c6975ae9 code=0x0 [ 1475.547736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.653141][ T29] audit: type=1800 audit(1719393928.231:6772): pid=19770 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3374" name="file1" dev="sda1" ino=2058 res=0 errno=0 [ 1475.905319][T17570] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.404110][T16420] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1477.844089][T16420] usb 3-1: Using ep0 maxpacket: 16 [ 1477.866671][T16420] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1477.914104][T16420] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1477.954261][T19799] macsec1: entered promiscuous mode [ 1477.964345][T16420] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1478.078219][T16420] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1478.110949][T16420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.151759][T16420] usb 3-1: Product: syz [ 1478.160798][T16420] usb 3-1: Manufacturer: syz [ 1478.170981][T16420] usb 3-1: SerialNumber: syz [ 1478.197687][T16420] usb 3-1: config 0 descriptor?? [ 1478.216781][T16420] appledisplay 3-1:0.0: Could not find int-in endpoint [ 1478.266412][T16420] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1478.700100][T19788] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1478.770585][T19809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3386'. [ 1479.120523][ T29] audit: type=1800 audit(1719393931.811:6773): pid=19810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3385" name="file1" dev="sda1" ino=2058 res=0 errno=0 [ 1479.614807][T17218] usb 14-1: device descriptor read/8, error -110 [ 1479.905729][T17218] usb 14-1: SetAddress Request (3) to port 0 [ 1479.947407][T17218] usb 14-1: new SuperSpeed USB device number 3 using vhci_hcd [ 1480.024949][T15025] usb 3-1: USB disconnect, device number 9 [ 1480.239600][T19817] sctp: [Deprecated]: syz.3.3387 (pid 19817) Use of int in max_burst socket option deprecated. [ 1480.239600][T19817] Use struct sctp_assoc_value instead [ 1482.054692][T19837] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1482.061669][T19837] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1482.069829][T19837] vhci_hcd vhci_hcd.0: Device attached [ 1482.139864][T19838] vhci_hcd: connection closed [ 1482.140315][T12295] vhci_hcd: stop threads [ 1482.158386][T12295] vhci_hcd: release socket [ 1482.163098][T12295] vhci_hcd: disconnect device [ 1482.741829][ T29] audit: type=1800 audit(1719393935.431:6774): pid=19846 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3396" name="file1" dev="sda1" ino=2057 res=0 errno=0 [ 1482.763697][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.058908][T19832] loop3: detected capacity change from 0 to 32768 [ 1484.419564][T19832] warn_alloc: 1 callbacks suppressed [ 1484.419593][T19832] syz.3.3394: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1485.414940][T17218] usb 14-1: device descriptor read/8, error -110 [ 1485.480389][T19832] CPU: 1 PID: 19832 Comm: syz.3.3394 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 1485.490632][T19832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1485.500750][T19832] Call Trace: [ 1485.504159][T19832] [ 1485.507132][T19832] dump_stack_lvl+0x16c/0x1f0 [ 1485.511850][T19832] warn_alloc+0x24d/0x3a0 [ 1485.516305][T19832] ? __pfx_warn_alloc+0x10/0x10 [ 1485.521197][T19832] ? __bch2_darray_resize+0xd8/0x250 [ 1485.526548][T19832] ? __get_vm_area_node+0x190/0x2d0 [ 1485.531799][T19832] ? __get_vm_area_node+0x1bc/0x2d0 [ 1485.537050][T19832] __vmalloc_node_range_noprof+0xff7/0x1520 [ 1485.543024][T19832] ? __bch2_darray_resize+0xd8/0x250 [ 1485.548363][T19832] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1485.554745][T19832] ? trace_kmalloc+0x2d/0xe0 [ 1485.559390][T19832] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1485.565234][T19832] ? __bch2_darray_resize+0xd8/0x250 [ 1485.570631][T19832] kvmalloc_node_noprof+0x14f/0x1a0 [ 1485.575882][T19832] ? __bch2_darray_resize+0xd8/0x250 [ 1485.581238][T19832] __bch2_darray_resize+0xd8/0x250 [ 1485.586414][T19832] bch2_fs_btree_write_buffer_init+0x2dd/0x380 [ 1485.592640][T19832] bch2_fs_alloc+0x1a50/0x2670 [ 1485.597460][T19832] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 1485.602635][T19832] bch2_fs_open+0x7b5/0x1110 [ 1485.607272][T19832] ? kasan_save_free_info+0x3b/0x60 [ 1485.612510][T19832] ? __pfx_bch2_fs_open+0x10/0x10 [ 1485.617667][T19832] ? bch2_mount+0x46e/0x1230 [ 1485.622308][T19832] ? kasan_quarantine_put+0x10a/0x240 [ 1485.627992][T19832] ? lockdep_hardirqs_on+0x7c/0x110 [ 1485.633239][T19832] bch2_mount+0xe2c/0x1230 [ 1485.637732][T19832] ? __pfx_bch2_mount+0x10/0x10 [ 1485.642629][T19832] ? cred_has_capability.isra.0+0x192/0x2f0 [ 1485.648567][T19832] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1485.654843][T19832] ? rcu_is_watching+0x12/0xc0 [ 1485.659644][T19832] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 1485.665357][T19832] ? cap_capable+0x1cf/0x240 [ 1485.670442][T19832] ? __pfx_bch2_mount+0x10/0x10 [ 1485.675325][T19832] legacy_get_tree+0x109/0x220 [ 1485.680131][T19832] vfs_get_tree+0x8f/0x380 [ 1485.684614][T19832] path_mount+0x14e6/0x1f20 [ 1485.689159][T19832] ? kmem_cache_free+0x12f/0x3a0 [ 1485.694317][T19832] ? __pfx_path_mount+0x10/0x10 [ 1485.699245][T19832] ? putname+0x12e/0x170 [ 1485.703782][T19832] __x64_sys_mount+0x297/0x320 [ 1485.708678][T19832] ? __pfx___x64_sys_mount+0x10/0x10 [ 1485.714236][T19832] do_syscall_64+0xcd/0x250 [ 1485.718782][T19832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.724996][T19832] RIP: 0033:0x7f47c69771ea [ 1485.729522][T19832] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1485.749170][T19832] RSP: 002b:00007f47c77d3e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1485.757627][T19832] RAX: ffffffffffffffda RBX: 00007f47c77d3f00 RCX: 00007f47c69771ea [ 1485.765813][T19832] RDX: 0000000020005b00 RSI: 0000000020000000 RDI: 00007f47c77d3ec0 [ 1485.773934][T19832] RBP: 0000000020005b00 R08: 00007f47c77d3f00 R09: 0000000000000000 [ 1485.781955][T19832] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1485.789967][T19832] R13: 00007f47c77d3ec0 R14: 0000000000005b1c R15: 0000000020000240 [ 1485.797989][T19832] [ 1485.860378][T17218] usb usb14-port1: attempt power cycle [ 1485.904775][T19832] Mem-Info: [ 1485.988810][T19832] active_anon:7485 inactive_anon:0 isolated_anon:0 [ 1485.988810][T19832] active_file:5067 inactive_file:45882 isolated_file:0 [ 1485.988810][T19832] unevictable:768 dirty:448 writeback:0 [ 1485.988810][T19832] slab_reclaimable:11637 slab_unreclaimable:100636 [ 1485.988810][T19832] mapped:14564 shmem:5323 pagetables:649 [ 1485.988810][T19832] sec_pagetables:0 bounce:0 [ 1485.988810][T19832] kernel_misc_reclaimable:0 [ 1485.988810][T19832] free:1382296 free_pcp:2478 free_cma:0 [ 1486.044509][T19832] Node 0 active_anon:29940kB inactive_anon:0kB active_file:20268kB inactive_file:183460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:58256kB dirty:1792kB writeback:0kB shmem:19756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9808kB pagetables:2596kB sec_pagetables:0kB all_unreclaimable? no [ 1486.488596][T19832] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1487.049504][T17218] usb 14-1: SetAddress Request (4) to port 0 [ 1487.073834][T19832] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.104314][T17218] usb 14-1: new SuperSpeed USB device number 4 using vhci_hcd [ 1487.146340][T19832] lowmem_reserve[]: 0 2565 2567 0 0 [ 1487.169208][T19832] Node 0 DMA32 free:1550816kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:43092kB inactive_anon:0kB active_file:20268kB inactive_file:181648kB unevictable:1536kB writepending:1876kB present:3129332kB managed:2654752kB mlocked:0kB bounce:0kB free_pcp:4988kB local_pcp:3132kB free_cma:0kB [ 1487.368180][T19832] lowmem_reserve[]: 0 0 1 0 0 [ 1487.409397][T19832] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 1487.439606][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1487.517610][T19832] lowmem_reserve[]: 0 0 0 0 0 [ 1487.563581][T19832] Node 1 Normal free:3955020kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.691580][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1487.706901][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.741226][T19832] lowmem_reserve[]: 0 0 0 0 0 [ 1487.774758][T19832] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 1487.800057][ T8] usb 3-1: Product: syz [ 1487.800093][ T8] usb 3-1: Manufacturer: syz [ 1487.862868][T19832] 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1487.903798][T19832] Node 0 DMA32: 445*4kB (UE) 235*8kB (UE) 324*16kB (UME) 354*32kB (UME) 448*64kB (UME) 168*128kB (UME) 401*256kB (UME) 178*512kB (UME) 61*1024kB (UME) 7*2048kB (UME) 296*4096kB [ 1487.904200][ T8] usb 3-1: SerialNumber: syz [ 1487.925781][ T8] usb 3-1: config 0 descriptor?? [ 1488.001692][T19832] (UM) = 1553356kB [ 1488.024403][T19832] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 1488.062272][T19832] Node 1 Normal: 3*4kB (UM) 10*8kB (UM) 11*16kB (UM) 10*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (U) 3*1024kB (U) 2*2048kB (U) 963*4096kB (M) = 3955020kB [ 1488.148598][T19832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.181012][T19832] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1488.218314][ T29] audit: type=1800 audit(1719393940.901:6775): pid=19881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3403" name="file1" dev="sda1" ino=2059 res=0 errno=0 [ 1488.254288][T19832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.290526][T19832] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1488.314356][T19832] 56297 total pagecache pages [ 1488.319135][T19832] 0 pages in swap cache [ 1488.323409][T19832] Free swap = 124416kB [ 1488.359963][T19832] Total swap = 124996kB [ 1488.371422][T19832] 2097051 pages RAM [ 1488.395059][T19832] 0 pages HighMem/MovableOnly [ 1488.409423][T19832] 401769 pages reserved [ 1488.413636][T19832] 0 pages cma reserved [ 1488.468011][T19832] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete [ 1488.769197][ T45] usb 3-1: USB disconnect, device number 10 [ 1489.271219][ T5094] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1490.305344][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.673940][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.206412][T19917] loop1: detected capacity change from 0 to 2048 [ 1491.255296][T19917] loop1: p3 < > p4 < > [ 1491.276602][T19917] loop1: partition table partially beyond EOD, truncated [ 1491.333048][T19917] loop1: p3 start 4284289 is beyond EOD, truncated [ 1491.732300][ T5094] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1491.797201][T19916] loop1: detected capacity change from 0 to 512 [ 1491.825400][T19916] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1491.858541][ T29] audit: type=1800 audit(1719393944.551:6776): pid=19921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3413" name="file1" dev="sda1" ino=2060 res=0 errno=0 [ 1492.264418][T17218] usb 14-1: device descriptor read/8, error -110 [ 1492.601864][T17218] usb 14-1: SetAddress Request (5) to port 0 [ 1492.630794][T17218] usb 14-1: new SuperSpeed USB device number 5 using vhci_hcd [ 1493.778388][T19934] loop3: detected capacity change from 0 to 4096 [ 1493.823240][ T5094] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1494.601204][ T5094] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 1494.798005][ T5094] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 1495.652827][T19976] loop1: detected capacity change from 0 to 2048 [ 1495.686722][ T29] audit: type=1800 audit(1719393948.371:6777): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3419" name="bus" dev="sda1" ino=2056 res=0 errno=0 [ 1495.752396][ T29] audit: type=1800 audit(1719393948.441:6778): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3419" name="bus" dev="sda1" ino=2056 res=0 errno=0 [ 1495.797103][T19976] loop1: p3 < > p4 < > [ 1495.801368][T19976] loop1: partition table partially beyond EOD, truncated [ 1495.842927][T19976] loop1: p3 start 4284289 is beyond EOD, truncated [ 1496.087416][T19976] loop1: detected capacity change from 0 to 512 [ 1496.136381][T19976] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1497.252240][T19995] loop1: detected capacity change from 0 to 32768 [ 1497.290270][T19995] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3432 (19995) [ 1497.339523][T19995] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1497.350184][T19995] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1497.358974][T19995] BTRFS info (device loop1): using free-space-tree [ 1497.709121][T17218] usb 14-1: device descriptor read/8, error -110 [ 1497.733904][ T29] audit: type=1800 audit(1719393950.401:6779): pid=20014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3433" name="file1" dev="sda1" ino=2055 res=0 errno=0 [ 1498.059145][T20013] loop3: detected capacity change from 0 to 32768 [ 1498.072689][T17218] usb usb14-port1: unable to enumerate USB device [ 1498.081538][T20013] BTRFS: device /dev/loop3 (7:3) using temp-fsid a6ed2435-ec41-484e-a72d-764d414e4d95 [ 1498.091438][T20013] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3434 (20013) [ 1498.396971][T20013] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1498.407537][T20013] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1498.417028][T20013] BTRFS info (device loop3): using free-space-tree [ 1506.407722][T20013] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1506.409006][T20013] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1506.420939][T20013] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1506.549281][T20013] BTRFS error (device loop3): open_ctree failed [ 1508.454653][T20038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3437'. [ 1508.765007][T17351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1508.790732][T17351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1508.835964][T20040] loop3: detected capacity change from 0 to 128 [ 1508.843429][T17351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1508.854787][T17351] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1508.863396][T17351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1508.872832][T17351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1509.465703][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1509.514128][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1509.563271][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1509.575653][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1509.588901][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1509.598959][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1510.112304][T17351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1510.129542][T17351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1510.175003][T17351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1510.186751][T17351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1510.204640][T17351] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1510.219126][T17351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1510.423157][T20016] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1511.059104][ T8776] Bluetooth: hci2: command tx timeout [ 1511.072563][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1511.206946][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1511.221618][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1511.243094][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1511.256740][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1511.273215][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1511.714542][ T5094] Bluetooth: hci1: command tx timeout [ 1511.802007][T17538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.366426][ T5094] Bluetooth: hci3: command tx timeout [ 1512.393124][T17538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.534567][T17538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.749094][T17538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.009525][T20059] loop3: detected capacity change from 0 to 32768 [ 1513.134609][ T5094] Bluetooth: hci2: command tx timeout [ 1513.210148][T20059] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1513.254275][T20059] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 1513.309703][T20059] bcachefs (loop3): alloc_read... done [ 1513.324163][T20059] bcachefs (loop3): stripes_read... done [ 1513.330153][T20059] bcachefs (loop3): snapshots_read... done [ 1513.344213][T20059] bcachefs (loop3): journal_replay... done [ 1513.350165][T20059] bcachefs (loop3): resume_logged_ops... done [ 1513.359223][T20059] bcachefs (loop3): going read-write [ 1513.372886][T20059] bcachefs (loop3): done starting filesystem [ 1513.424108][ T29] audit: type=1800 audit(1719393966.111:6780): pid=20059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3441" name="bus" dev="loop3" ino=1073741824 res=0 errno=0 [ 1513.462237][ T29] audit: type=1800 audit(1719393966.121:6781): pid=20059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3441" name="bus" dev="loop3" ino=1073741824 res=0 errno=0 [ 1513.535083][ T5094] Bluetooth: hci4: command tx timeout [ 1513.667341][T17570] bcachefs (loop3): shutting down [ 1513.672701][T17570] bcachefs (loop3): going read-only [ 1513.678749][T17570] bcachefs (loop3): finished waiting for writes to stop [ 1513.690459][T17570] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 1513.729491][T17570] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 1513.752239][T17570] bcachefs (loop3): shutdown complete, journal seq 12 [ 1513.760984][T17570] bcachefs (loop3): marking filesystem clean [ 1513.766825][T17538] bridge_slave_1: left allmulticast mode [ 1513.773213][T17538] bridge_slave_1: left promiscuous mode [ 1513.774016][T17351] Bluetooth: hci1: command tx timeout [ 1513.788718][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.812488][T17538] bridge_slave_0: left allmulticast mode [ 1513.821367][T17538] bridge_slave_0: left promiscuous mode [ 1513.827717][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.832506][T17570] bcachefs (loop3): shutdown complete [ 1514.422599][T17351] Bluetooth: hci3: command tx timeout [ 1514.943916][T17538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.968055][T17538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.983983][T17538] bond0 (unregistering): Released all slaves [ 1515.064101][T20041] chnl_net:caif_netlink_parms(): no params data found [ 1515.214668][T17351] Bluetooth: hci2: command tx timeout [ 1515.481699][T20046] chnl_net:caif_netlink_parms(): no params data found [ 1515.543151][T20049] chnl_net:caif_netlink_parms(): no params data found [ 1515.613987][T17351] Bluetooth: hci4: command tx timeout [ 1515.673105][T20043] chnl_net:caif_netlink_parms(): no params data found [ 1515.854160][T17351] Bluetooth: hci1: command tx timeout [ 1516.162509][T17538] hsr_slave_0: left promiscuous mode [ 1516.178448][T17538] hsr_slave_1: left promiscuous mode [ 1516.198539][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.217277][T17538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1516.232467][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1516.244987][T17538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1516.287103][T17538] veth1_macvtap: left promiscuous mode [ 1516.292740][T17538] veth0_macvtap: left promiscuous mode [ 1516.299168][T17538] veth1_vlan: left promiscuous mode [ 1516.306281][T17538] veth0_vlan: left promiscuous mode [ 1516.493951][T17351] Bluetooth: hci3: command tx timeout [ 1517.295474][T17351] Bluetooth: hci2: command tx timeout [ 1517.704449][T17351] Bluetooth: hci4: command tx timeout [ 1517.934090][ T5094] Bluetooth: hci1: command tx timeout [ 1518.008824][T17538] team0 (unregistering): Port device team_slave_1 removed [ 1518.184263][T17538] team0 (unregistering): Port device team_slave_0 removed [ 1518.576537][ T5094] Bluetooth: hci3: command tx timeout [ 1519.136093][T20101] loop3: detected capacity change from 0 to 32768 [ 1519.147282][T20101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3445 (20101) [ 1519.171746][T20101] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1519.182380][T20101] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1519.191282][T20101] BTRFS info (device loop3): using free-space-tree [ 1519.830720][ T5094] Bluetooth: hci4: command tx timeout [ 1520.037441][T17570] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1520.071195][T20041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.092082][T20041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.100968][T20041] bridge_slave_0: entered allmulticast mode [ 1520.114224][T20041] bridge_slave_0: entered promiscuous mode [ 1520.363376][T20041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.382296][T20041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.391047][T20041] bridge_slave_1: entered allmulticast mode [ 1520.400205][T20041] bridge_slave_1: entered promiscuous mode [ 1520.605863][T20126] netlink: 'syz.3.3446': attribute type 72 has an invalid length. [ 1520.614813][T20126] netlink: 'syz.3.3446': attribute type 3 has an invalid length. [ 1520.629955][T20041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.700724][T20126] loop3: detected capacity change from 0 to 128 [ 1520.776273][T20046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.783548][T20046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.804116][T20046] bridge_slave_0: entered allmulticast mode [ 1520.812750][T20046] bridge_slave_0: entered promiscuous mode [ 1520.842884][T20041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.009210][T20046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.017372][T20046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.079399][T20046] bridge_slave_1: entered allmulticast mode [ 1521.118668][T20046] bridge_slave_1: entered promiscuous mode [ 1521.169043][T20043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.180187][T20043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.189045][T20043] bridge_slave_0: entered allmulticast mode [ 1521.209623][T20043] bridge_slave_0: entered promiscuous mode [ 1521.223428][T20049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.233243][T20049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.246133][T20049] bridge_slave_0: entered allmulticast mode [ 1521.263956][T20049] bridge_slave_0: entered promiscuous mode [ 1521.383618][T20043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.396625][T20043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.410787][T20043] bridge_slave_1: entered allmulticast mode [ 1521.432376][T20043] bridge_slave_1: entered promiscuous mode [ 1521.450872][T20049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.484140][T20049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.499015][T20049] bridge_slave_1: entered allmulticast mode [ 1521.513430][T20049] bridge_slave_1: entered promiscuous mode [ 1521.592545][T20041] team0: Port device team_slave_0 added [ 1521.636259][T20041] team0: Port device team_slave_1 added [ 1521.796492][T20046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1521.920134][T20049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1521.941925][T20046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.030555][T20041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.037953][T20041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.089867][T20041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.109556][T20043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.147742][T20049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.263414][T20041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.271109][T20041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.302810][T20041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.332204][T20043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.534422][T20043] team0: Port device team_slave_0 added [ 1522.558925][T20049] team0: Port device team_slave_0 added [ 1522.585691][T20046] team0: Port device team_slave_0 added [ 1522.599595][T20046] team0: Port device team_slave_1 added [ 1522.641465][T20043] team0: Port device team_slave_1 added [ 1523.534363][T20049] team0: Port device team_slave_1 added [ 1523.589541][T20046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.596741][T20046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.633612][T20046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.648686][T20046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.655819][T20046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.681979][T20046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.937988][T20043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.946428][T20043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.973833][T20043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.987619][T20049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.998911][T20049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1524.030195][T20049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1524.046968][T20049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.054407][T20049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1524.081527][T20049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1524.113368][T20041] hsr_slave_0: entered promiscuous mode [ 1524.121778][T20041] hsr_slave_1: entered promiscuous mode [ 1524.143425][T20043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.161426][T20043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1524.201449][T20043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1524.258441][T20134] loop3: detected capacity change from 0 to 32768 [ 1524.398782][T20134] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1524.412863][T20134] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 1524.448246][T17538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.475757][T20134] bcachefs (loop3): alloc_read... done [ 1524.481369][T20134] bcachefs (loop3): stripes_read... done [ 1524.513499][T20134] bcachefs (loop3): snapshots_read... done [ 1524.534111][T20134] bcachefs (loop3): journal_replay... done [ 1524.540290][T20134] bcachefs (loop3): resume_logged_ops... done [ 1524.560670][T20134] bcachefs (loop3): going read-write [ 1524.579069][T20134] bcachefs (loop3): done starting filesystem [ 1524.622124][ T29] audit: type=1800 audit(1719393977.311:6782): pid=20134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3448" name="bus" dev="loop3" ino=4102 res=0 errno=0 [ 1524.672396][ T29] audit: type=1800 audit(1719393977.331:6783): pid=20134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3448" name="bus" dev="loop3" ino=4102 res=0 errno=0 [ 1524.753237][T20049] hsr_slave_0: entered promiscuous mode [ 1524.762611][T20049] hsr_slave_1: entered promiscuous mode [ 1524.775999][T20049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1524.791448][T20049] Cannot create hsr debugfs directory [ 1524.863378][T17538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.908127][T20046] hsr_slave_0: entered promiscuous mode [ 1524.932009][T20046] hsr_slave_1: entered promiscuous mode [ 1524.960879][T20046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1524.971298][T20046] Cannot create hsr debugfs directory [ 1524.975077][T17570] bcachefs (loop3): shutting down [ 1525.000074][T17570] bcachefs (loop3): going read-only [ 1525.008777][T17570] bcachefs (loop3): finished waiting for writes to stop [ 1525.017485][T17570] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 1525.066391][T17570] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 1525.083419][T17570] bcachefs (loop3): shutdown complete, journal seq 13 [ 1525.102026][T17570] bcachefs (loop3): marking filesystem clean [ 1525.164485][T17570] bcachefs (loop3): shutdown complete [ 1525.182220][T20043] hsr_slave_0: entered promiscuous mode [ 1525.196586][T20043] hsr_slave_1: entered promiscuous mode [ 1525.209004][T20043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1525.218882][T20043] Cannot create hsr debugfs directory [ 1525.268901][T17538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.462865][T17538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.338977][T20041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.606331][T20041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.734495][T20041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.970125][T20041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.104628][T17538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.352909][T17538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.498713][T17538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.616083][T17538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.011292][T17538] bridge_slave_1: left allmulticast mode [ 1528.019490][T17538] bridge_slave_1: left promiscuous mode [ 1528.030586][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.049770][T17538] bridge_slave_0: left allmulticast mode [ 1528.055903][T17538] bridge_slave_0: left promiscuous mode [ 1528.062893][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.088611][T17538] bridge_slave_1: left allmulticast mode [ 1528.094894][T17538] bridge_slave_1: left promiscuous mode [ 1528.101970][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.126835][T17538] bridge_slave_0: left allmulticast mode [ 1528.132513][T17538] bridge_slave_0: left promiscuous mode [ 1528.167150][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.208403][T17538] bridge_slave_1: left allmulticast mode [ 1528.228788][T17538] bridge_slave_1: left promiscuous mode [ 1528.240824][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.258818][T17538] bridge_slave_0: left allmulticast mode [ 1528.265213][T17538] bridge_slave_0: left promiscuous mode [ 1528.271129][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.237161][T20155] loop3: detected capacity change from 0 to 256 [ 1529.249791][T20155] FAT-fs (loop3): bogus logical sector size 0 [ 1529.256536][T20155] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1529.611081][T20157] loop3: detected capacity change from 0 to 1024 [ 1529.627231][T20157] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1529.636728][T20157] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1529.648034][T20157] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1529.658635][T20157] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1529.685630][T20157] journal_load_superblock: Cannot read journal superblock [ 1529.693015][T20157] EXT4-fs (loop3): Could not load journal inode [ 1530.894950][T20159] loop3: detected capacity change from 0 to 32768 [ 1530.907495][T20159] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3452 (20159) [ 1530.952628][T20159] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1530.963228][T20159] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1530.972186][T20159] BTRFS info (device loop3): using free-space-tree [ 1531.703462][T17570] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1532.576675][T20180] loop3: detected capacity change from 0 to 1024 [ 1532.605099][T20180] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1532.617286][T20180] EXT4-fs (loop3): group descriptors corrupted! [ 1532.639539][T17538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1532.700481][T17538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1532.772971][T17538] bond0 (unregistering): Released all slaves [ 1533.557811][T17538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.571239][T17538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.592835][T17538] bond0 (unregistering): Released all slaves [ 1533.887795][T17538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.900679][T17538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.916532][T17538] bond0 (unregistering): Released all slaves [ 1535.678557][T17538] hsr_slave_0: left promiscuous mode [ 1535.689864][T17538] hsr_slave_1: left promiscuous mode [ 1535.700589][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1535.711400][T17538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1535.722992][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1535.731131][T17538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1535.759800][T17538] hsr_slave_0: left promiscuous mode [ 1535.771687][T17538] hsr_slave_1: left promiscuous mode [ 1535.808094][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1535.832690][T17538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1535.843113][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1535.865085][T17538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1535.893561][T17538] hsr_slave_0: left promiscuous mode [ 1535.900793][T17538] hsr_slave_1: left promiscuous mode [ 1535.917144][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1535.926107][T17538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1535.946517][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1535.955730][T17538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.103360][T17538] veth1_macvtap: left promiscuous mode [ 1536.112241][T17538] veth0_macvtap: left promiscuous mode [ 1536.118252][T17538] veth1_vlan: left promiscuous mode [ 1536.123885][T17538] veth0_vlan: left promiscuous mode [ 1536.131770][T17538] veth1_macvtap: left promiscuous mode [ 1536.138180][T17538] veth0_macvtap: left promiscuous mode [ 1536.144181][T17538] veth1_vlan: left promiscuous mode [ 1536.149883][T17538] veth0_vlan: left promiscuous mode [ 1536.162365][T17538] veth1_macvtap: left promiscuous mode [ 1536.168737][T17538] veth0_macvtap: left promiscuous mode [ 1536.175445][T17538] veth1_vlan: left promiscuous mode [ 1536.181137][T17538] veth0_vlan: left promiscuous mode [ 1536.657896][T20187] loop3: detected capacity change from 0 to 4096 [ 1536.667021][T20187] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1539.859409][T20198] loop3: detected capacity change from 0 to 256 [ 1539.883357][T20198] FAT-fs (loop3): bogus logical sector size 0 [ 1539.889671][T20198] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1540.231761][T20200] loop3: detected capacity change from 0 to 1024 [ 1540.259337][T20200] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1540.270164][T20200] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1540.281960][T20200] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1540.292808][T20200] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1540.318122][T20200] journal_load_superblock: Cannot read journal superblock [ 1540.325810][T20200] EXT4-fs (loop3): Could not load journal inode [ 1540.797277][T17538] team0 (unregistering): Port device team_slave_1 removed [ 1540.921788][T17538] team0 (unregistering): Port device team_slave_0 removed [ 1542.578997][T20209] loop3: detected capacity change from 0 to 1024 [ 1542.612015][T20209] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1542.623581][T20209] EXT4-fs (loop3): group descriptors corrupted! [ 1544.621304][T17538] team0 (unregistering): Port device team_slave_1 removed [ 1544.713256][T17538] team0 (unregistering): Port device team_slave_0 removed [ 1546.573512][T17538] team0 (unregistering): Port device team_slave_1 removed [ 1546.680396][T17538] team0 (unregistering): Port device team_slave_0 removed [ 1547.767080][T20041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1547.805805][T20041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1547.931254][T20041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1547.952804][T20041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1548.709286][T20041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.878884][T20041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.905328][T20046] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1548.973032][T20046] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1549.001703][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.009581][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.056427][T20046] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1549.089118][T20046] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1549.139948][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.147600][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.672844][T20049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1549.701439][T20049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1549.777352][T20049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1549.922493][T20049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1550.317439][T20046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.434126][T20043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1550.451307][T20043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1550.518715][T20046] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.533526][T20043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1550.588492][T20043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1550.656510][T17218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.663849][T17218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.771529][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.779358][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.829408][ T29] audit: type=1800 audit(1719394003.521:6784): pid=20226 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3462" name="file1" dev="sda1" ino=2064 res=0 errno=0 [ 1550.943571][T20041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.263602][T20049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.533106][T20049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.619311][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.628246][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.711914][T20043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.737376][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.744650][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.807119][T20041] veth0_vlan: entered promiscuous mode [ 1551.845530][T20043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.897511][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.904872][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.000724][T20041] veth1_vlan: entered promiscuous mode [ 1552.038584][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.045974][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.140000][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.147303][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.575322][T20046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.704221][T20041] veth0_macvtap: entered promiscuous mode [ 1552.749894][T20041] veth1_macvtap: entered promiscuous mode [ 1552.819915][T20236] loop3: detected capacity change from 0 to 2048 [ 1552.876826][T20236] loop3: p3 < > p4 < > [ 1552.881215][T20236] loop3: partition table partially beyond EOD, truncated [ 1552.892683][T20236] loop3: p3 start 4284289 is beyond EOD, truncated [ 1552.968452][T20046] veth0_vlan: entered promiscuous mode [ 1553.008009][T20046] veth1_vlan: entered promiscuous mode [ 1553.022427][T20041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.042322][T20041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.058615][T20041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.166422][T20041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.189353][T20041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.221439][T20041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.265976][T20041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.304593][T20041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.323509][T20041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.340781][T20233] loop3: detected capacity change from 0 to 512 [ 1553.341394][T20041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.375663][T20233] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 1553.480638][T20046] veth0_macvtap: entered promiscuous mode [ 1553.621403][T20049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.646613][T20046] veth1_macvtap: entered promiscuous mode [ 1553.757981][T20043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.954691][T20046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.970429][T20046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.982584][T20046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.994849][T20046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.007311][T20046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.064066][ T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.071986][ T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.166237][T20046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.209817][T20046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.231694][T20046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.255812][T20046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.269200][T20046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.344135][T20046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.353410][T20046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.387948][T20046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.403840][T20046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.430938][T20049] veth0_vlan: entered promiscuous mode [ 1554.504301][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.512277][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.563511][T20049] veth1_vlan: entered promiscuous mode [ 1554.678238][T20254] loop3: detected capacity change from 0 to 1024 [ 1554.914420][T20254] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1554.942372][T20049] veth0_macvtap: entered promiscuous mode [ 1554.985083][T20049] veth1_macvtap: entered promiscuous mode [ 1555.001026][T20254] EXT4-fs (loop3): group descriptors corrupted! [ 1555.085671][T20049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.109650][T20049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.119793][T20049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.130550][T20049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.142917][T20049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.155133][T20049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.175759][T20049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1556.175046][T20049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.213620][T20049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.225872][T20049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.236516][T20049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.246454][T20049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.257368][T20049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.269936][T20049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1556.286711][T20049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.307217][T20049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.334002][T20049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.342798][T20049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.369376][ T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.403195][ T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.523759][T20043] veth0_vlan: entered promiscuous mode [ 1556.588212][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.601443][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.662225][T20262] kvm: kvm [20261]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x7e00000080 [ 1556.667500][T20043] veth1_vlan: entered promiscuous mode [ 1556.715559][T20262] kvm: kvm [20261]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x1ef00000000 [ 1557.040389][T20043] veth0_macvtap: entered promiscuous mode [ 1557.078167][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.100982][T20043] veth1_macvtap: entered promiscuous mode [ 1557.133568][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.353281][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.385508][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.455527][T20043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1557.501766][T20043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.535513][T20043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1557.562474][T20043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.582786][T20043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1557.595164][T20043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.605967][T20043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1557.619079][T20043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.631198][T20043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.696030][T20043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.708840][T20043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.729751][T20043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.753903][T20043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.777425][T20043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.814317][T20043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.838934][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1557.840655][T20043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.871547][T20043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.891999][T20043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.931548][T20276] netlink: 'syz.2.3439': attribute type 29 has an invalid length. [ 1557.972761][T20043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.018528][T20043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.025866][ T5094] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1558.062254][T20043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.141257][T20043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.118919][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.137166][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.342395][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.474709][T20293] loop3: detected capacity change from 0 to 1024 [ 1561.476443][T20293] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1561.487419][T20293] EXT4-fs (loop3): group descriptors corrupted! [ 1561.546822][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.132076][ T5094] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1563.175291][T20311] kvm: kvm [20308]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x7e00000080 [ 1563.430314][ T29] audit: type=1326 audit(1719394016.101:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.0.3475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a27175ae9 code=0x0 [ 1563.531088][T20324] loop1: detected capacity change from 0 to 1024 [ 1563.611216][T20324] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1563.673802][T20324] EXT4-fs (loop1): group descriptors corrupted! [ 1563.831922][T20327] kvm: kvm [20326]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x7e00000080 [ 1563.848331][T20327] kvm: kvm [20326]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x1ef00000000 [ 1564.654444][T15025] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1564.664353][ T29] audit: type=1800 audit(1719394017.361:6786): pid=20336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3478" name="file1" dev="sda1" ino=2086 res=0 errno=0 [ 1564.873819][T15025] usb 4-1: Using ep0 maxpacket: 32 [ 1564.886982][T15025] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1564.913803][T15025] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.958531][T15025] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1565.002987][T15025] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1565.037979][T15025] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1565.064451][T15025] usb 4-1: Product: syz [ 1565.081693][T15025] usb 4-1: Manufacturer: syz [ 1565.114281][T15025] usb 4-1: SerialNumber: syz [ 1565.139662][T15025] usb 4-1: config 0 descriptor?? [ 1565.163449][T15025] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1565.388704][T17351] Bluetooth: hci2: command 0x0406 tx timeout [ 1565.443856][T15025] usb 4-1: USB disconnect, device number 9 [ 1565.698842][T10423] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1565.794353][ T5094] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1565.908681][T10423] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.996155][T10423] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1566.039042][T10423] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1566.060572][T10423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.100801][T10423] usb 5-1: config 0 descriptor?? [ 1566.420758][T10423] usb 5-1: string descriptor 0 read error: -71 [ 1566.465368][T10423] usb 5-1: USB disconnect, device number 7 [ 1567.041544][T20357] vhci_hcd vhci_hcd.0: port 0 already used [ 1567.490813][T20364] macsec0: entered promiscuous mode [ 1567.501645][T20364] macsec1: entered promiscuous mode [ 1568.222971][ T5094] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 1568.612953][T20376] kvm: kvm [20375]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x7e00000080 [ 1568.658948][T20376] kvm: kvm [20375]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x1ef00000000 [ 1569.134059][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 1569.474811][T17351] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 1569.784073][T20397] loop1: detected capacity change from 0 to 4096 [ 1569.972138][T20397] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1569.987051][T20397] NILFS (loop1): trying rollback from an earlier position [ 1570.194087][T20397] NILFS (loop1): recovery complete [ 1570.203469][ T29] audit: type=1800 audit(1719394022.891:6787): pid=20405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3497" name="file1" dev="sda1" ino=2062 res=0 errno=0 [ 1570.225340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.265527][T20410] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1571.213981][T15025] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1571.275127][T10423] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1571.414970][ T29] audit: type=1326 audit(1719394024.071:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20422 comm="syz.1.3502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eedf75ae9 code=0x0 [ 1572.058571][T10423] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.063934][T15025] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1572.077328][T10423] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1572.360127][T10423] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1572.384178][T10423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.412709][T15025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.423397][T10423] usb 5-1: config 0 descriptor?? [ 1572.454521][T15025] usb 4-1: Product: syz [ 1572.482677][T15025] usb 4-1: Manufacturer: syz [ 1572.490107][T15025] usb 4-1: SerialNumber: syz [ 1572.536784][T15025] usb 4-1: config 0 descriptor?? [ 1572.653842][T17351] Bluetooth: hci3: command 0x0406 tx timeout [ 1572.734351][T10423] usb 5-1: string descriptor 0 read error: -71 [ 1572.764868][T10423] usb 5-1: USB disconnect, device number 8 [ 1573.193914][T16420] usb 4-1: USB disconnect, device number 10 [ 1574.893923][ T5094] Bluetooth: hci4: command 0x0406 tx timeout [ 1574.943625][ T29] audit: type=1326 audit(1719394027.601:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20447 comm="syz.0.3508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a27175ae9 code=0x0 [ 1575.090965][ T29] audit: type=1326 audit(1719394027.781:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.2.3509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f099d375ae9 code=0x0 [ 1575.639585][T20465] loop1: detected capacity change from 0 to 4096 [ 1575.717156][T20465] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1575.728701][T20465] NILFS (loop1): trying rollback from an earlier position [ 1575.861460][T20465] NILFS (loop1): recovery complete [ 1575.877714][T20473] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1577.504949][T17351] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1577.554020][T20271] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1577.817799][T20271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.862361][T20271] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1577.878654][T20271] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1577.938556][T20271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.984809][T20271] usb 1-1: config 0 descriptor?? [ 1578.354611][T20271] usb 1-1: string descriptor 0 read error: -71 [ 1578.414403][T20271] usb 1-1: USB disconnect, device number 12 [ 1578.894417][ T5138] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1579.117802][ T5138] usb 5-1: Using ep0 maxpacket: 32 [ 1579.151343][ T5138] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1579.204095][ T5138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.243990][ T5138] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1579.310920][ T5138] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1579.356503][ T5138] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1579.393362][ T5138] usb 5-1: Product: syz [ 1579.405697][ T5138] usb 5-1: Manufacturer: syz [ 1579.457444][ T5138] usb 5-1: SerialNumber: syz [ 1579.499629][ T5138] usb 5-1: config 0 descriptor?? [ 1579.540182][ T5138] ldusb 5-1:0.0: Interrupt in endpoint not found [ 1579.592240][T20517] macsec1: entered promiscuous mode [ 1579.816247][T20521] loop3: detected capacity change from 0 to 2048 [ 1579.865387][T20271] usb 5-1: USB disconnect, device number 9 [ 1579.899869][T20521] loop3: p3 < > p4 < > [ 1579.943914][T20521] loop3: partition table partially beyond EOD, truncated [ 1579.951174][T20521] loop3: p3 start 4284289 is beyond EOD, truncated [ 1580.115796][T20519] loop3: detected capacity change from 0 to 512 [ 1580.153058][T20519] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 1580.708724][T20527] loop1: detected capacity change from 0 to 4096 [ 1580.770576][T20527] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1581.260174][T20543] loop3: detected capacity change from 0 to 2048 [ 1581.369457][T20543] loop3: p3 < > p4 < > [ 1581.388135][T20543] loop3: partition table partially beyond EOD, truncated [ 1581.404139][T20543] loop3: p3 start 4284289 is beyond EOD, truncated [ 1581.775743][T20539] loop3: detected capacity change from 0 to 512 [ 1581.853887][T20539] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 1581.934361][T17351] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1582.295162][ T29] audit: type=1800 audit(1719394034.981:6791): pid=20547 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3532" name="file1" dev="sda1" ino=2064 res=0 errno=0 [ 1584.316704][T15025] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1584.523805][T15025] usb 4-1: Using ep0 maxpacket: 16 [ 1584.544154][T15025] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1584.610841][T15025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD7 has an invalid bInterval 152, changing to 11 [ 1584.643517][T15025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD7 has invalid maxpacket 8285, setting to 1024 [ 1584.667815][T15025] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1584.694338][T17351] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1584.724723][T15025] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1584.771229][T15025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.782036][T15025] usb 4-1: Product: syz [ 1584.789840][T15025] usb 4-1: Manufacturer: syz [ 1584.799722][T15025] usb 4-1: SerialNumber: syz [ 1584.818930][T15025] usb 4-1: config 0 descriptor?? [ 1585.231820][T15025] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 1585.381229][T15025] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 1585.600280][ T29] audit: type=1800 audit(1719394038.291:6792): pid=20593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3542" name="file1" dev="sda1" ino=2065 res=0 errno=0 [ 1585.753525][T16420] usb 4-1: USB disconnect, device number 11 [ 1587.401728][T20606] kvm: kvm [20605]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x7e00000080 [ 1587.422117][T20606] kvm: kvm [20605]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x1ef00000000 [ 1589.432425][T20626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20626 comm=syz.2.3550 [ 1593.934069][ T960] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1593.959243][T20630] macsec1: entered promiscuous mode [ 1594.102637][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3554'. [ 1594.149263][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3554'. [ 1594.213086][T20653] loop1: detected capacity change from 0 to 2048 [ 1594.279952][T20653] loop1: p3 < > p4 < > [ 1594.296013][T20653] loop1: partition table partially beyond EOD, truncated [ 1594.314219][T20653] loop1: p3 start 4284289 is beyond EOD, truncated [ 1594.609417][T20650] loop1: detected capacity change from 0 to 512 [ 1594.688413][T20650] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1594.729902][T20661] netlink: 'syz.0.3558': attribute type 4 has an invalid length. [ 1595.793447][T20671] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1595.800067][T20671] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1595.813024][T20671] vhci_hcd vhci_hcd.0: Device attached [ 1596.068855][T20672] vhci_hcd: connection closed [ 1596.070348][ T744] vhci_hcd: stop threads [ 1596.104299][ T744] vhci_hcd: release socket [ 1596.114251][ T744] vhci_hcd: disconnect device [ 1596.151719][T17351] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1596.183934][ T5141] usb 16-1: enqueue for inactive port 0 [ 1596.715615][T20686] netlink: 'syz.1.3565': attribute type 72 has an invalid length. [ 1596.754756][T20686] netlink: 'syz.1.3565': attribute type 3 has an invalid length. [ 1596.815935][ T5141] usb usb16-port1: attempt power cycle [ 1597.115935][T20686] loop1: detected capacity change from 0 to 128 [ 1597.456096][T17351] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 1597.495602][ T5141] usb usb16-port1: unable to enumerate USB device [ 1600.798858][T17351] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1602.352614][T20724] loop1: detected capacity change from 0 to 32768 [ 1602.375267][T20724] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3573 (20724) [ 1602.424000][T20724] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1602.434346][T20724] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1602.443066][T20724] BTRFS info (device loop1): using free-space-tree [ 1603.239360][T20046] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1603.529594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.590859][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.204576][ T5138] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1604.242851][T20708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3569'. [ 1604.273164][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3569'. [ 1604.414214][ T5138] usb 2-1: Using ep0 maxpacket: 32 [ 1604.429799][ T5138] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1604.442533][T20712] macsec0: entered promiscuous mode [ 1604.453037][ T5138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.462509][T20712] macsec1: entered promiscuous mode [ 1604.475850][ T5138] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1604.810616][ T5138] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1604.829544][ T5138] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1604.838808][ T5138] usb 2-1: Product: syz [ 1604.844186][ T5138] usb 2-1: Manufacturer: syz [ 1604.848863][ T5138] usb 2-1: SerialNumber: syz [ 1604.862583][ T5138] usb 2-1: config 0 descriptor?? [ 1604.962824][T20753] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1604.969447][T20753] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1604.977636][T20753] vhci_hcd vhci_hcd.0: Device attached [ 1604.989226][T20754] vhci_hcd: cannot find the pending unlink 0 [ 1605.050304][ T5138] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1605.353821][T20271] usb 2-1: USB disconnect, device number 14 [ 1605.360534][T20754] vhci_hcd: connection closed [ 1605.384027][ T33] vhci_hcd: stop threads [ 1605.436610][ T33] vhci_hcd: release socket [ 1605.469155][ T33] vhci_hcd: disconnect device [ 1606.129105][T17351] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 1606.168488][T20765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36864 sclass=netlink_route_socket pid=20765 comm=syz.3.3580 [ 1606.405949][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1606.437448][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1606.454513][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1606.470797][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1606.481089][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1606.489028][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1606.584480][T20775] netlink: 'syz.1.3582': attribute type 72 has an invalid length. [ 1606.592320][T20775] netlink: 'syz.1.3582': attribute type 3 has an invalid length. [ 1606.915473][T20775] loop1: detected capacity change from 0 to 128 [ 1607.207956][ T744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.638284][ T744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.989825][ T744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.272237][ T744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.576020][T17351] Bluetooth: hci4: command tx timeout [ 1608.761069][T20769] loop3: detected capacity change from 0 to 32768 [ 1608.846272][T20769] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3580 (20769) [ 1608.965910][T20769] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1609.011958][T20769] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1609.060274][T20769] BTRFS info (device loop3): disk space caching is enabled [ 1609.091103][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1609.093505][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1609.135784][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1609.267147][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1609.299589][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1609.335926][T20774] chnl_net:caif_netlink_parms(): no params data found [ 1609.393084][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1609.396126][ T29] audit: type=1800 audit(1719394062.091:6793): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3584" name="file1" dev="sda1" ino=2082 res=0 errno=0 [ 1609.471398][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1609.484562][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1609.707953][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1609.744802][T20769] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1609.823843][T20769] BTRFS error (device loop3): open_ctree failed [ 1610.286802][T20809] loop1: detected capacity change from 0 to 4096 [ 1610.631446][ T744] bridge_slave_1: left allmulticast mode [ 1610.662080][ T744] bridge_slave_1: left promiscuous mode [ 1610.663933][T17351] Bluetooth: hci4: command tx timeout [ 1610.701224][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.806121][ T744] bridge_slave_0: left allmulticast mode [ 1610.811840][ T744] bridge_slave_0: left promiscuous mode [ 1610.845531][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.202340][ T29] audit: type=1800 audit(1719394064.891:6794): pid=20822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3587" name="file1" dev="sda1" ino=2082 res=0 errno=0 [ 1612.735929][T17351] Bluetooth: hci4: command tx timeout [ 1613.076428][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.088709][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.378455][T20830] loop1: detected capacity change from 0 to 4096 [ 1613.387938][T20830] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1614.108001][ T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.130497][ T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.151671][ T744] bond0 (unregistering): Released all slaves [ 1614.406768][T20835] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1614.413463][T20835] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1614.421535][T20835] vhci_hcd vhci_hcd.0: Device attached [ 1614.430984][T20836] vhci_hcd: cannot find the pending unlink 0 [ 1614.612612][T20836] vhci_hcd: connection closed [ 1614.620531][ T33] vhci_hcd: stop threads [ 1614.629868][ T33] vhci_hcd: release socket [ 1614.646198][ T33] vhci_hcd: disconnect device [ 1614.824282][T17351] Bluetooth: hci4: command tx timeout [ 1618.969401][T17351] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1620.625302][T20852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3595'. [ 1621.690726][T20856] loop3: detected capacity change from 0 to 128 [ 1622.187596][ T29] audit: type=1326 audit(1719394074.861:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20861 comm="syz.0.3597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a27175ae9 code=0x0 [ 1622.260255][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1622.277420][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1622.288891][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1622.298566][ T744] hsr_slave_0: left promiscuous mode [ 1622.322355][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1622.346231][ T744] hsr_slave_1: left promiscuous mode [ 1622.354724][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1622.371847][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1622.389223][T20868] Invalid ELF section header overflow [ 1622.425777][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.488519][ T744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.541901][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.564278][ T744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.670870][ T744] veth1_macvtap: left promiscuous mode [ 1622.677197][ T744] veth0_macvtap: left promiscuous mode [ 1622.686699][ T744] veth1_vlan: left promiscuous mode [ 1622.693038][ T744] veth0_vlan: left promiscuous mode [ 1624.494757][ T5094] Bluetooth: hci1: command tx timeout [ 1624.992872][T17351] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1625.049178][T17351] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1625.067886][T17351] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1625.096981][T17351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1625.135267][T17351] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1625.146031][T17351] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1625.454242][ T744] team0 (unregistering): Port device team_slave_1 removed [ 1625.572601][ T744] team0 (unregistering): Port device team_slave_0 removed [ 1626.577550][T17351] Bluetooth: hci1: command tx timeout [ 1627.216983][T17351] Bluetooth: hci5: command tx timeout [ 1627.304029][T20774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.311316][T20774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.367976][T20774] bridge_slave_0: entered allmulticast mode [ 1627.378986][T20774] bridge_slave_0: entered promiscuous mode [ 1627.391733][T20774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.399272][T20774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.412842][T20774] bridge_slave_1: entered allmulticast mode [ 1627.421645][T20774] bridge_slave_1: entered promiscuous mode [ 1627.557771][ T29] audit: type=1326 audit(1719394080.251:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20907 comm="syz.0.3606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a27175ae9 code=0x0 [ 1627.718412][T20774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.733567][T20774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.748474][T20910] Invalid ELF section header overflow [ 1627.987897][T20774] team0: Port device team_slave_0 added [ 1628.070298][T20774] team0: Port device team_slave_1 added [ 1628.321803][T20774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1628.347261][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1628.456010][T20774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1628.654105][T17351] Bluetooth: hci1: command tx timeout [ 1628.762247][T20774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.793402][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1628.851874][T20919] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1628.858521][T20919] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1628.874107][T20919] vhci_hcd vhci_hcd.0: Device attached [ 1628.892887][T20774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.922689][T20920] vhci_hcd: cannot find the pending unlink 0 [ 1629.065457][T20920] vhci_hcd: connection closed [ 1629.068750][ T63] vhci_hcd: stop threads [ 1629.102166][ T63] vhci_hcd: release socket [ 1629.122562][ T63] vhci_hcd: disconnect device [ 1629.294733][T17351] Bluetooth: hci5: command tx timeout [ 1629.319267][T20774] hsr_slave_0: entered promiscuous mode [ 1629.341960][T20774] hsr_slave_1: entered promiscuous mode [ 1629.373928][T20774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1629.404537][T20774] Cannot create hsr debugfs directory [ 1629.951577][ T744] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.135091][ T744] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.366346][ T744] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.524986][ T744] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.643220][T20866] chnl_net:caif_netlink_parms(): no params data found [ 1630.666382][T20884] chnl_net:caif_netlink_parms(): no params data found [ 1630.735624][T17351] Bluetooth: hci1: command tx timeout [ 1631.073868][ T29] audit: type=1800 audit(1719394083.751:6797): pid=20932 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3610" name="file1" dev="sda1" ino=2075 res=0 errno=0 [ 1631.374551][T17351] Bluetooth: hci5: command tx timeout [ 1631.424320][T20884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.431605][T20884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.446129][T20884] bridge_slave_0: entered allmulticast mode [ 1631.465200][T20884] bridge_slave_0: entered promiscuous mode [ 1631.738285][T20884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.766563][T20884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.776016][T20884] bridge_slave_1: entered allmulticast mode [ 1631.796468][T20884] bridge_slave_1: entered promiscuous mode [ 1631.879956][T20866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.892243][T20866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.901121][T20866] bridge_slave_0: entered allmulticast mode [ 1631.932739][T20866] bridge_slave_0: entered promiscuous mode [ 1631.965449][T20866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.974460][T20866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.981941][T20866] bridge_slave_1: entered allmulticast mode [ 1631.999382][T20866] bridge_slave_1: entered promiscuous mode [ 1632.147016][T20884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.253303][T20866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.359846][ T744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.439090][T20884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.453915][T17351] Bluetooth: hci5: command tx timeout [ 1633.607128][T20866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.786347][T20953] loop3: detected capacity change from 0 to 1024 [ 1633.925788][ T744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.057823][T20884] team0: Port device team_slave_0 added [ 1634.227013][ T744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.347400][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1634.372387][T20884] team0: Port device team_slave_1 added [ 1634.452373][T20866] team0: Port device team_slave_0 added [ 1634.471271][ T29] audit: type=1326 audit(1719394087.161:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.3.3615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c6975ae9 code=0x0 [ 1634.521532][ T744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.632865][T20866] team0: Port device team_slave_1 added [ 1634.682661][T20884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1634.701018][T20884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1634.731400][T20884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1634.772133][T20774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1634.813834][T20774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1635.266891][T20884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.304352][T20884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.516271][T20884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.706607][T20866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.713620][T20866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.748471][ T5094] Bluetooth: hci2: command 0x0406 tx timeout [ 1635.763023][T20866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.797764][T20774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1635.900270][T20774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1635.977163][T20866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.992103][T20866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1636.021738][T20866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1636.105117][T20884] hsr_slave_0: entered promiscuous mode [ 1636.112521][T20884] hsr_slave_1: entered promiscuous mode [ 1636.120340][T20884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1636.132847][T20884] Cannot create hsr debugfs directory [ 1636.547675][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3619'. [ 1638.136472][T20866] hsr_slave_0: entered promiscuous mode [ 1638.155647][T20866] hsr_slave_1: entered promiscuous mode [ 1638.162632][T20866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1638.193111][ T29] audit: type=1326 audit(1719394090.881:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.0.3621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a27175ae9 code=0x0 [ 1638.193605][T20866] Cannot create hsr debugfs directory [ 1638.274546][ T744] bridge_slave_1: left allmulticast mode [ 1638.285327][ T744] bridge_slave_1: left promiscuous mode [ 1638.299667][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.317335][ T744] bridge_slave_0: left allmulticast mode [ 1638.323097][ T744] bridge_slave_0: left promiscuous mode [ 1638.329809][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.446111][ T744] bridge_slave_1: left allmulticast mode [ 1638.452130][ T744] bridge_slave_1: left promiscuous mode [ 1638.466363][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.518186][T20987] loop3: detected capacity change from 0 to 1024 [ 1638.534531][T20987] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1638.545665][T20987] EXT4-fs (loop3): group descriptors corrupted! [ 1638.639108][ T744] bridge_slave_0: left allmulticast mode [ 1638.667923][ T744] bridge_slave_0: left promiscuous mode [ 1638.704509][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.764950][ T29] audit: type=1800 audit(1719394092.461:6800): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3623" name="file1" dev="sda1" ino=2076 res=0 errno=0 [ 1641.277419][ T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.290880][ T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.308565][ T744] bond0 (unregistering): Released all slaves [ 1641.621928][ T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.635689][ T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.647432][ T744] bond0 (unregistering): Released all slaves [ 1642.512414][T21002] loop3: detected capacity change from 0 to 1024 [ 1643.060023][T21010] netlink: 'syz.0.3627': attribute type 4 has an invalid length. [ 1643.182259][ T960] hfsplus: b-tree write err: -5, ino 4 [ 1643.376342][ T12] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1644.496731][ T744] hsr_slave_0: left promiscuous mode [ 1644.542800][ T744] hsr_slave_1: left promiscuous mode [ 1644.559273][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1644.567050][ T744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1644.577107][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1644.585147][ T744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1644.600655][ T744] hsr_slave_0: left promiscuous mode [ 1644.612067][ T744] hsr_slave_1: left promiscuous mode [ 1644.637630][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1644.701847][ T744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1644.892371][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1644.930573][ T744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1645.449784][ T744] veth1_macvtap: left promiscuous mode [ 1645.458951][ T744] veth0_macvtap: left promiscuous mode [ 1645.471796][ T744] veth1_vlan: left promiscuous mode [ 1645.484386][ T744] veth0_vlan: left promiscuous mode [ 1645.495651][ T744] veth1_macvtap: left promiscuous mode [ 1645.501654][ T744] veth0_macvtap: left promiscuous mode [ 1645.512542][ T744] veth1_vlan: left promiscuous mode [ 1645.522049][ T744] veth0_vlan: left promiscuous mode [ 1646.793507][ T744] team0 (unregistering): Port device team_slave_1 removed [ 1646.898714][ T744] team0 (unregistering): Port device team_slave_0 removed [ 1648.788021][ T744] team0 (unregistering): Port device team_slave_1 removed [ 1648.878504][ T744] team0 (unregistering): Port device team_slave_0 removed [ 1650.000290][T20774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.229298][T20774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.273323][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.280667][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.450967][T16420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.458473][T16420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.672332][T20294] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1652.794509][T20884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1652.874224][T20884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1652.911489][T20884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1652.948404][T20884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1653.296094][T20774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.330636][T20866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1653.382527][T20866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1653.408856][T20866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1653.434816][T20866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1653.620949][T20271] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1653.699667][T20884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1653.728802][T20774] veth0_vlan: entered promiscuous mode [ 1653.794781][T20774] veth1_vlan: entered promiscuous mode [ 1653.845800][T20884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.056751][T21070] loop3: detected capacity change from 0 to 1024 [ 1654.246860][T21070] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1654.258257][T21070] EXT4-fs (loop3): group descriptors corrupted! [ 1654.518561][T16420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.526122][T16420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.244600][T20271] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1655.255035][T20271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.263105][T20271] usb 1-1: Product: syz [ 1655.269437][T16420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.273831][T20271] usb 1-1: Manufacturer: syz [ 1655.276779][T16420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1655.291488][T20271] usb 1-1: SerialNumber: syz [ 1655.321430][T20271] usb 1-1: config 0 descriptor?? [ 1655.528930][T20866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.597605][T20774] veth0_macvtap: entered promiscuous mode [ 1655.660532][T20774] veth1_macvtap: entered promiscuous mode [ 1655.731381][T20866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.839001][T17218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.846364][T17218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.917743][T21078] netlink: 'syz.3.3642': attribute type 4 has an invalid length. [ 1655.926968][T14869] usb 1-1: USB disconnect, device number 13 [ 1656.021332][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1656.040926][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.051639][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1656.062668][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.078798][T20774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.130566][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.137965][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.238425][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.265139][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.287753][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.301591][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.338810][T20774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.509671][T20774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.542700][T20774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.563254][T20774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.597750][T20774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.020727][T20884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1657.297156][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.339316][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.441603][T20884] veth0_vlan: entered promiscuous mode [ 1657.519430][ T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.529547][T20884] veth1_vlan: entered promiscuous mode [ 1657.549615][ T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.619940][T20294] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1657.812048][T20884] veth0_macvtap: entered promiscuous mode [ 1657.868951][T20884] veth1_macvtap: entered promiscuous mode [ 1657.985080][T20884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.012737][T20884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.045525][T20884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.073235][T20884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.101610][T20884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.131642][T20884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.155600][T20884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1658.182416][T20866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.283472][T21106] loop3: detected capacity change from 0 to 256 [ 1659.817516][T20884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.858472][T21106] FAT-fs (loop3): bogus logical sector size 0 [ 1659.864838][T21106] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1660.065988][T20884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.099894][T20884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.111234][T20884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.125328][T20884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1660.141371][T20884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.180059][T20884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1660.264974][T20884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.292639][T21106] loop3: detected capacity change from 0 to 1024 [ 1660.300488][T21106] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1660.309191][T21106] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1660.321870][T21106] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1660.331749][T21106] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1660.364474][T21106] journal_load_superblock: Cannot read journal superblock [ 1660.371708][T21106] EXT4-fs (loop3): Could not load journal inode [ 1660.374233][T20884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.458018][T20884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.477722][T20884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.056415][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.083872][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.313842][ T29] audit: type=1800 audit(1719394113.921:6801): pid=21112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3648" name="file1" dev="sda1" ino=2083 res=0 errno=0 [ 1661.440010][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.456974][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.723907][T15025] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1661.806691][T20866] veth0_vlan: entered promiscuous mode [ 1661.861077][T20866] veth1_vlan: entered promiscuous mode [ 1661.979634][T15025] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1662.041805][T15025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.063363][T21133] loop1: detected capacity change from 0 to 1024 [ 1662.090754][T15025] usb 3-1: Product: syz [ 1662.124129][T15025] usb 3-1: Manufacturer: syz [ 1662.158000][T15025] usb 3-1: SerialNumber: syz [ 1662.182493][T15025] usb 3-1: config 0 descriptor?? [ 1662.210111][T20866] veth0_macvtap: entered promiscuous mode [ 1662.291596][T20866] veth1_macvtap: entered promiscuous mode [ 1662.498766][T20866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.516801][T20866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.530224][T20866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.556972][T20866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.577333][T20866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.614412][T20866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.632592][T20866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.650353][T20866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.693177][T20866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.901713][T20866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.940883][T20866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.951097][T20866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.961694][T20866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.999595][T20866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1663.037512][ T8] usb 3-1: USB disconnect, device number 11 [ 1663.041984][T20866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.073758][T20866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1663.093841][T20866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.159564][T20866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1663.173563][ T744] hfsplus: b-tree write err: -5, ino 4 [ 1663.180699][T20866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.195731][T20866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.207372][T20866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.218150][T20866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.638909][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.684623][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.879514][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.908938][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.306301][T17351] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 1664.338222][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1664.393119][T21156] netlink: 'syz.4.3594': attribute type 29 has an invalid length. [ 1665.904076][ T29] audit: type=1800 audit(1719394118.561:6802): pid=21195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3663" name="bus" dev="sda1" ino=2095 res=0 errno=0 [ 1666.213417][ T29] audit: type=1800 audit(1719394118.561:6803): pid=21195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3663" name="bus" dev="sda1" ino=2095 res=0 errno=0 [ 1666.764135][T15000] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1666.984061][T15000] usb 4-1: Using ep0 maxpacket: 16 [ 1667.035265][T15000] usb 4-1: no configurations [ 1667.065362][T15000] usb 4-1: can't read configurations, error -22 [ 1668.114946][T15000] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1668.314008][T15000] usb 4-1: Using ep0 maxpacket: 16 [ 1668.320635][T15000] usb 4-1: no configurations [ 1668.333781][T15000] usb 4-1: can't read configurations, error -22 [ 1668.364854][T15000] usb usb4-port1: attempt power cycle [ 1668.464669][T21215] loop1: detected capacity change from 0 to 128 [ 1668.790110][T15000] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1670.517149][ T29] audit: type=1804 audit(1719394123.211:6804): pid=21232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3677" name="/root/syzkaller.BGBdrC/10/file0" dev="sda1" ino=2093 res=1 errno=0 [ 1670.790664][T21237] loop1: detected capacity change from 0 to 128 [ 1671.093533][T15000] usb 4-1: device descriptor read/8, error -71 [ 1673.676128][T21262] loop3: detected capacity change from 0 to 1024 [ 1674.080712][T21267] pimreg: entered allmulticast mode [ 1674.090353][T21267] pimreg: left allmulticast mode [ 1674.622388][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.643783][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.312904][T21262] [ 1675.315284][T21262] ====================================================== [ 1675.322316][T21262] WARNING: possible circular locking dependency detected [ 1675.329368][T21262] 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 Not tainted [ 1675.336516][T21262] ------------------------------------------------------ [ 1675.343573][T21262] syz.3.3686/21262 is trying to acquire lock: [ 1675.349750][T21262] ffff8880629b40b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x886/0x9e0 [ 1675.359681][T21262] [ 1675.359681][T21262] but task is already holding lock: [ 1675.367086][T21262] ffff88805f754488 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x204/0x9e0 [ 1675.378510][T21262] [ 1675.378510][T21262] which lock already depends on the new lock. [ 1675.378510][T21262] [ 1675.388945][T21262] [ 1675.388945][T21262] the existing dependency chain (in reverse order) is: [ 1675.397998][T21262] [ 1675.397998][T21262] -> #2 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 1675.407097][T21262] __mutex_lock+0x175/0x9c0 [ 1675.412622][T21262] hfsplus_file_extend+0x1c1/0x1090 [ 1675.418496][T21262] hfsplus_bmap_reserve+0x31c/0x410 [ 1675.424391][T21262] hfsplus_create_attr+0x232/0x4a0 [ 1675.430085][T21262] __hfsplus_setxattr+0x519/0x2180 [ 1675.436036][T21262] hfsplus_osx_setxattr+0x4c/0x70 [ 1675.441633][T21262] __vfs_setxattr+0x173/0x1e0 [ 1675.446889][T21262] __vfs_setxattr_noperm+0x127/0x660 [ 1675.452872][T21262] __vfs_setxattr_locked+0x182/0x260 [ 1675.458743][T21262] vfs_setxattr+0x146/0x350 [ 1675.463816][T21262] do_setxattr+0x146/0x170 [ 1675.468811][T21262] setxattr+0x15d/0x180 [ 1675.473560][T21262] path_setxattr+0x179/0x1e0 [ 1675.478731][T21262] __x64_sys_setxattr+0xc4/0x160 [ 1675.484530][T21262] do_syscall_64+0xcd/0x250 [ 1675.489630][T21262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.496123][T21262] [ 1675.496123][T21262] -> #1 (&tree->tree_lock/2){+.+.}-{3:3}: [ 1675.504114][T21262] __mutex_lock+0x175/0x9c0 [ 1675.509407][T21262] hfsplus_find_init+0x195/0x200 [ 1675.514924][T21262] hfsplus_attr_exists+0x103/0x200 [ 1675.520713][T21262] __hfsplus_setxattr+0x4c6/0x2180 [ 1675.526410][T21262] hfsplus_osx_setxattr+0x4c/0x70 [ 1675.532027][T21262] __vfs_setxattr+0x173/0x1e0 [ 1675.537279][T21262] __vfs_setxattr_noperm+0x127/0x660 [ 1675.543148][T21262] __vfs_setxattr_locked+0x182/0x260 [ 1675.549036][T21262] vfs_setxattr+0x146/0x350 [ 1675.554123][T21262] do_setxattr+0x146/0x170 [ 1675.559120][T21262] setxattr+0x15d/0x180 [ 1675.563853][T21262] path_setxattr+0x179/0x1e0 [ 1675.569032][T21262] __x64_sys_setxattr+0xc4/0x160 [ 1675.574718][T21262] do_syscall_64+0xcd/0x250 [ 1675.579872][T21262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.586371][T21262] [ 1675.586371][T21262] -> #0 (&tree->tree_lock){+.+.}-{3:3}: [ 1675.594173][T21262] __lock_acquire+0x2478/0x3b30 [ 1675.599619][T21262] lock_acquire+0x1b1/0x560 [ 1675.604722][T21262] __mutex_lock+0x175/0x9c0 [ 1675.609904][T21262] hfsplus_file_truncate+0x886/0x9e0 [ 1675.615783][T21262] hfsplus_delete_inode+0x18f/0x220 [ 1675.621578][T21262] hfsplus_unlink+0x583/0x7f0 [ 1675.626845][T21262] vfs_unlink+0x2fb/0x9b0 [ 1675.631762][T21262] do_unlinkat+0x5c0/0x750 [ 1675.636778][T21262] __x64_sys_unlink+0xc7/0x110 [ 1675.642134][T21262] do_syscall_64+0xcd/0x250 [ 1675.647221][T21262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.653800][T21262] [ 1675.653800][T21262] other info that might help us debug this: [ 1675.653800][T21262] [ 1675.664421][T21262] Chain exists of: [ 1675.664421][T21262] &tree->tree_lock --> &tree->tree_lock/2 --> &HFSPLUS_I(inode)->extents_lock [ 1675.664421][T21262] [ 1675.679465][T21262] Possible unsafe locking scenario: [ 1675.679465][T21262] [ 1675.686952][T21262] CPU0 CPU1 [ 1675.692357][T21262] ---- ---- [ 1675.697941][T21262] lock(&HFSPLUS_I(inode)->extents_lock); [ 1675.703984][T21262] lock(&tree->tree_lock/2); [ 1675.711242][T21262] lock(&HFSPLUS_I(inode)->extents_lock); [ 1675.719621][T21262] lock(&tree->tree_lock); [ 1675.724177][T21262] [ 1675.724177][T21262] *** DEADLOCK *** [ 1675.724177][T21262] [ 1675.732358][T21262] 5 locks held by syz.3.3686/21262: [ 1675.737599][T21262] #0: ffff888055a1c420 (sb_writers#15){.+.+}-{0:0}, at: do_unlinkat+0x1d3/0x750 [ 1675.746884][T21262] #1: ffff88805f753fc0 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: do_unlinkat+0x288/0x750 [ 1675.757288][T21262] #2: ffff88805f754680 (&sb->s_type->i_mutex_key#39){+.+.}-{3:3}, at: vfs_unlink+0xd3/0x9b0 [ 1675.767665][T21262] #3: ffff88802ebac198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_unlink+0x184/0x7f0 [ 1675.777265][T21262] #4: ffff88805f754488 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x204/0x9e0 [ 1675.788961][T21262] [ 1675.788961][T21262] stack backtrace: [ 1675.795063][T21262] CPU: 0 PID: 21262 Comm: syz.3.3686 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 1675.805275][T21262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1675.815727][T21262] Call Trace: [ 1675.819045][T21262] [ 1675.822192][T21262] dump_stack_lvl+0x116/0x1f0 [ 1675.826936][T21262] check_noncircular+0x31a/0x400 [ 1675.832045][T21262] ? __pfx_check_noncircular+0x10/0x10 [ 1675.837573][T21262] ? register_lock_class+0xb1/0x1230 [ 1675.842966][T21262] ? lockdep_lock+0xc6/0x200 [ 1675.847594][T21262] ? __pfx_lockdep_lock+0x10/0x10 [ 1675.852693][T21262] __lock_acquire+0x2478/0x3b30 [ 1675.857591][T21262] ? __pfx___lock_acquire+0x10/0x10 [ 1675.862835][T21262] ? find_held_lock+0x2d/0x110 [ 1675.867639][T21262] lock_acquire+0x1b1/0x560 [ 1675.872184][T21262] ? hfsplus_file_truncate+0x886/0x9e0 [ 1675.877688][T21262] ? __pfx_lock_acquire+0x10/0x10 [ 1675.882785][T21262] ? __mutex_unlock_slowpath+0x164/0x650 [ 1675.888468][T21262] ? __pfx___might_resched+0x10/0x10 [ 1675.893794][T21262] __mutex_lock+0x175/0x9c0 [ 1675.898353][T21262] ? hfsplus_file_truncate+0x886/0x9e0 [ 1675.903874][T21262] ? hfsplus_file_truncate+0x886/0x9e0 [ 1675.909404][T21262] ? __pfx___mutex_lock+0x10/0x10 [ 1675.914461][T21262] ? hfsplus_block_free+0x35d/0x530 [ 1675.919695][T21262] ? hfsplus_free_extents+0x152/0x520 [ 1675.925105][T21262] ? hfsplus_file_truncate+0x886/0x9e0 [ 1675.930605][T21262] hfsplus_file_truncate+0x886/0x9e0 [ 1675.935973][T21262] ? hfsplus_delete_cat+0x141/0xdd0 [ 1675.941211][T21262] ? __pfx_hfsplus_delete_cat+0x10/0x10 [ 1675.946798][T21262] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 1675.952657][T21262] hfsplus_delete_inode+0x18f/0x220 [ 1675.957984][T21262] hfsplus_unlink+0x583/0x7f0 [ 1675.962705][T21262] ? __pfx_hfsplus_unlink+0x10/0x10 [ 1675.967947][T21262] ? __pfx___might_resched+0x10/0x10 [ 1675.973266][T21262] vfs_unlink+0x2fb/0x9b0 [ 1675.977630][T21262] do_unlinkat+0x5c0/0x750 [ 1675.982091][T21262] ? __pfx_do_unlinkat+0x10/0x10 [ 1675.987166][T21262] ? __check_object_size+0x48e/0x720 [ 1675.992486][T21262] ? getname_flags.part.0+0x1e1/0x4f0 [ 1675.997916][T21262] __x64_sys_unlink+0xc7/0x110 [ 1676.002724][T21262] do_syscall_64+0xcd/0x250 [ 1676.007310][T21262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.013252][T21262] RIP: 0033:0x7f47c6975ae9 [ 1676.017692][T21262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1676.037526][T21262] RSP: 002b:00007f47c77d4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1676.045967][T21262] RAX: ffffffffffffffda RBX: 00007f47c6b03fa0 RCX: 00007f47c6975ae9 [ 1676.053961][T21262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 1676.061981][T21262] RBP: 00007f47c69f6746 R08: 0000000000000000 R09: 0000000000000000 [ 1676.070060][T21262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1676.078230][T21262] R13: 000000000000000b R14: 00007f47c6b03fa0 R15: 00007ffd035513a8 [ 1676.086228][T21262] [ 1676.181362][T20294] hfsplus: b-tree write err: -5, ino 4 [ 1676.938984][ T29] audit: type=1804 audit(1719394129.591:6805): pid=21273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3688" name="/root/syzkaller.VgGaBM/8/file1" dev="sda1" ino=2069 res=1 errno=0 [ 1677.284302][T17351] Bluetooth: hci1: command 0x0406 tx timeout