last executing test programs: 7.138972864s ago: executing program 1: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r3}, 0x1) 5.490909811s ago: executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0xc0189436, 0x0) syz_usb_connect(0x0, 0x4b1, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xcf, 0x5d, 0x94, 0x20, 0x83a, 0xc512, 0x7d86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49f, 0x3, 0x7, 0x80, 0x60, 0x8, [{{0x9, 0x4, 0x58, 0x0, 0x4, 0x7, 0x74, 0xae, 0x81, [@generic={0x2, 0x8}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0xb2, 0x2, 0x48}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x40, 0x0, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x5, 0x6, 0x1f}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x0, 0xe9, 0xa1}}]}}, {{0x9, 0x4, 0xe8, 0x7f, 0x2, 0x48, 0xfc, 0xb2, 0x0, [@generic={0x4a, 0x4, "f39792a0f1eebb77763afdf53683a6b8d8b7c56247c71d8a71eca8afd26fa6c268fc9cc742e80215c7f41090c889ecfb93e6ea8c41d0cb2c1ab356915a04ae7eda6d0ee66721646c"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "46a7"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x20, 0x5, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x9, 0x6, 0x20, 0xbfbc, 0x5}, @mdlm_detail={0x4, 0x24, 0x13, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x1, 0x40, 0x7, 0x1f}]}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0x3f, 0xd0}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xd2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xe, 0x9d, 0xd0, 0x17, 0x4, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x0, 0x4, '-', '\b'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7f, 0x4, "f4"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0x9, 0x1, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x0, 0x5}, @generic={0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1f, 0x7f, 0x5, [@generic={0x51, 0x21, "83a3bfdd1eac327cf67fff3476d598b9749f79442f3dc08c712a7e1f8f7eaa15228fea3da24c2bd20d1ec98276a683d6305f0765ae6a85f279959c2c5753a105a2508c20aa9dc8e5606418581dc78c"}, @generic={0xde, 0x30, "921d599815fce7f97a258f83a3e7ffc3f48c74de3a9faa73e5f46cd90db1ddcb3ddd934ebc87e5c4a0e8e8f08c1ca338429374fd9a1ea4c12f3b47eb11a5fd3ac2348a0daae73cf3b4d95f878e62889b28a4dc8d10c3e836f560b9f0852a6a635b55ad90dae99f1ed0a560ff1ca5b92db003b9acd448dabf7e32d1e2977ca59664efe25a18f00b1e2c61a07e9cc7f71bc324a5724e887f476823fe5112fdb8ac6c20f4c3614f3723ec0641667b9117efec87d0957c9294b9530c1777267dc737db1903824dfe85c4d0264dfd5fc502e8b142ea5c9786914ddcd2f896"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x3f, 0x8, 0xa1, [@generic={0x85, 0x1, "f6d855de217bd71bed105380f6bc35ef0bbc3ddd705790ae53d0f4c439d16fbd24cd2fc743890794d6818cf819399e0bdc9c0a44fbcd9d816c9c87f73e51e74112939dde696778a127a0133a7121dc0e57eac2b3eed6507a8fb6838b671c4ac7cd7b1f364bcd47f06c5af28dd3a0f36af7a1eb14bbf71ee05fcabd64582ed93764b454"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x81, 0x0, 0xff}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x1f}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x7, 0x8c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xf8, 0x4, 0x67}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x40, 0xed, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x3, 0x8, 0x6, [@generic={0xa5, 0x21, "aae30c988f979463eca17686d4058d299296f97c05cd203802d566b21ca46eddc78cb9098117646f72f18d0f59417ae178aba779fc06490ececa7b7e2a5aafb32f7b9d68eb927ab8c7a86639847321fa65e10207ba0d37f9ace87e31a43dc61782101c102818739a91488d28469426ca715038ef38746a37e7ed5c848878c1fd9d3e96d737c5fb05cb58506e5a4c8bae30f44ff1256701456ff778e5bd68efbe797b4b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x81}]}}, {{0x9, 0x5, 0xa, 0xb, 0x20, 0x0, 0x1, 0x0, [@generic={0x70, 0x3b, "63caa45d73f020fde60f69e75bce249c5e5eb37813861127b0abe0e11df103736918e29b6f625d22da4889a643c0a69835f6bd808745ec508784e98b48727d0ed85d60910225d6ebf1a7a65ed61a4c82c06c8662f48e25d9f61584e9a6af748a3e3f1a901073109ffb701d566423"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x20, 0x93, 0x40, [@generic={0x1b, 0x0, "804329d5b90536dcfab422f40cd44d1c4881666ade8dfa9381"}, @generic={0x15, 0x0, "b0daff4be124f531b04ed0d0be856f51089ace"}]}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x12, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x4, 0x1, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0x88e}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc7, 0xbf}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x200, 0x0, 0xa1, 0x0, 0x8, 0x7}, 0x1be, &(0x7f0000001580)={0x5, 0xf, 0x1be, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2f, 0x1, 0x400, 0xff}, @generic={0xcf, 0x10, 0x1, "a66b6f1f1027c016ca742b2eeb225d13060d6495ee8a87aad71d90190dbf5b1f1a231348e3ae3f0cc1a6b3421f09cf62508cbe73d9bf1318bced01bc3fc912555dca08151d8b63d8b76a6f72731d550aba83db045efbe238d5b713f43b7ef0809ed44ff4b67191ae1f19df1503b21cfded064d9304665dd285a50b01fdaffe260348ae35939ec9b3885b4e117c4e0a2613e8311878e2d9f97ce8c387b7188c27661e55cfe1ccd5158e23a7f2bce3c88e24849e24ace3b634ac6e74586e2aeb0ae2ea13873b42f408f6871ca9"}, @generic={0xcf, 0x10, 0x3, "9f1c6f3e47ba96b7a02eacf28e4b72f0b6217c3cd9af48fe73023862a9910a0520210cc3ed3b3d61f5269a54f97af86cac476c5157507c4b10ecc3aecefec0360e36d39ab508b23dadb33c5a6170fa41a1582b607594e6acf16f0ce9d77f6c8b03e0a540d5beb550e947eedbda1c18072e239caa91f0caea5998bfa35ed8888a33276a7b148e92f93f7fdb2ed3b5e8cacfa29f0bc944d56247ab2b2964e00158698b505e8efa63d92ce3c483d94e215af2f2f4476ff817ea2b8d7c108ca09936f957564a2f94131c35181533"}, @ssp_cap={0x10, 0x10, 0xa, 0x67, 0x1, 0x0, 0x78f, 0xb2, [0xff00]}]}, 0x2, [{0x15, &(0x7f0000000240)=@string={0x15, 0x3, "d4de0c8514f28238116f6c4c80c32649f604b5"}}, {0xf6, &(0x7f0000001480)=@string={0xf6, 0x3, "1b16cf9655eed9851eeaf8de75df3819a80842deead5aa252de5d548951809dd257f402fd723dc15b21744cd3698da209bab53394387e6c26076a2a5da07dca119b07ae70ada4c980f72adf720d5956d05680166b135e92b33d8d61d1d3eddd8226437c520b94bcf43ea7700f890b353babec1a830d349a2df5032365bb2402c41858bd102fa656eb9c7e37f385b39096abf80ba294cb3b91f4ac78f1a9cf78f2e0962d9aad378e4dc62fb2be467e9ab2b5a6a362687b49a89951fc0df86214c06a2d79c963b231731bc079dcdc220004918e0e9440a09a96c75ac54e917ef209313f76c347f9369187a5c4b2832a09f008ce1e6"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000a00)={0x0, 0x7, 0x2, {0x2}}, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000780)=""/240) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffd02, &(0x7f00000000c0)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.361724967s ago: executing program 5: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.629723536s ago: executing program 0: r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@broadcast}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.311634215s ago: executing program 0: set_mempolicy(0x6, &(0x7f0000000000)=0x5, 0xff) 3.014826116s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891f, &(0x7f0000000080)={'wlan0\x00'}) 2.801553694s ago: executing program 0: r0 = socket$nl_generic(0x2, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8907, 0x0) 2.725954993s ago: executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x8, 0x0, 0xfd, @tick, {}, {}, @raw8={"de3937986ee243edb7714b52"}}], 0x1c) 2.685403213s ago: executing program 3: r0 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x113, 0x4, 0x0, 0x20000024) 2.592060446s ago: executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.431666082s ago: executing program 5: r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x0, 0x0) 2.397754504s ago: executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40044581, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 2.177750392s ago: executing program 1: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x10) 2.025487856s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 1.89612885s ago: executing program 1: bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tcx}, 0x40) 1.784611852s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r4], 0x4c}}, 0x0) 1.723410075s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) write$cgroup_int(r1, &(0x7f0000000040), 0x1) 1.513006371s ago: executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0xc0189436, 0x0) syz_usb_connect(0x0, 0x4b1, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xcf, 0x5d, 0x94, 0x20, 0x83a, 0xc512, 0x7d86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49f, 0x3, 0x7, 0x80, 0x60, 0x8, [{{0x9, 0x4, 0x58, 0x0, 0x4, 0x7, 0x74, 0xae, 0x81, [@generic={0x2, 0x8}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0xb2, 0x2, 0x48}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x40, 0x0, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x5, 0x6, 0x1f}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x0, 0xe9, 0xa1}}]}}, {{0x9, 0x4, 0xe8, 0x7f, 0x2, 0x48, 0xfc, 0xb2, 0x0, [@generic={0x4a, 0x4, "f39792a0f1eebb77763afdf53683a6b8d8b7c56247c71d8a71eca8afd26fa6c268fc9cc742e80215c7f41090c889ecfb93e6ea8c41d0cb2c1ab356915a04ae7eda6d0ee66721646c"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "46a7"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x20, 0x5, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x9, 0x6, 0x20, 0xbfbc, 0x5}, @mdlm_detail={0x4, 0x24, 0x13, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x1, 0x40, 0x7, 0x1f}]}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0x3f, 0xd0}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xd2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xe, 0x9d, 0xd0, 0x17, 0x4, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x0, 0x4, '-', '\b'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7f, 0x4, "f4"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0x9, 0x1, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x0, 0x5}, @generic={0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1f, 0x7f, 0x5, [@generic={0x51, 0x21, "83a3bfdd1eac327cf67fff3476d598b9749f79442f3dc08c712a7e1f8f7eaa15228fea3da24c2bd20d1ec98276a683d6305f0765ae6a85f279959c2c5753a105a2508c20aa9dc8e5606418581dc78c"}, @generic={0xde, 0x30, "921d599815fce7f97a258f83a3e7ffc3f48c74de3a9faa73e5f46cd90db1ddcb3ddd934ebc87e5c4a0e8e8f08c1ca338429374fd9a1ea4c12f3b47eb11a5fd3ac2348a0daae73cf3b4d95f878e62889b28a4dc8d10c3e836f560b9f0852a6a635b55ad90dae99f1ed0a560ff1ca5b92db003b9acd448dabf7e32d1e2977ca59664efe25a18f00b1e2c61a07e9cc7f71bc324a5724e887f476823fe5112fdb8ac6c20f4c3614f3723ec0641667b9117efec87d0957c9294b9530c1777267dc737db1903824dfe85c4d0264dfd5fc502e8b142ea5c9786914ddcd2f896"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x3f, 0x8, 0xa1, [@generic={0x85, 0x1, "f6d855de217bd71bed105380f6bc35ef0bbc3ddd705790ae53d0f4c439d16fbd24cd2fc743890794d6818cf819399e0bdc9c0a44fbcd9d816c9c87f73e51e74112939dde696778a127a0133a7121dc0e57eac2b3eed6507a8fb6838b671c4ac7cd7b1f364bcd47f06c5af28dd3a0f36af7a1eb14bbf71ee05fcabd64582ed93764b454"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x81, 0x0, 0xff}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x1f}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x7, 0x8c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xf8, 0x4, 0x67}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x40, 0xed, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x3, 0x8, 0x6, [@generic={0xa5, 0x21, "aae30c988f979463eca17686d4058d299296f97c05cd203802d566b21ca46eddc78cb9098117646f72f18d0f59417ae178aba779fc06490ececa7b7e2a5aafb32f7b9d68eb927ab8c7a86639847321fa65e10207ba0d37f9ace87e31a43dc61782101c102818739a91488d28469426ca715038ef38746a37e7ed5c848878c1fd9d3e96d737c5fb05cb58506e5a4c8bae30f44ff1256701456ff778e5bd68efbe797b4b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x81}]}}, {{0x9, 0x5, 0xa, 0xb, 0x20, 0x0, 0x1, 0x0, [@generic={0x70, 0x3b, "63caa45d73f020fde60f69e75bce249c5e5eb37813861127b0abe0e11df103736918e29b6f625d22da4889a643c0a69835f6bd808745ec508784e98b48727d0ed85d60910225d6ebf1a7a65ed61a4c82c06c8662f48e25d9f61584e9a6af748a3e3f1a901073109ffb701d566423"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x20, 0x93, 0x40, [@generic={0x1b, 0x0, "804329d5b90536dcfab422f40cd44d1c4881666ade8dfa9381"}, @generic={0x15, 0x0, "b0daff4be124f531b04ed0d0be856f51089ace"}]}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x12, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x4, 0x1, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0x88e}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc7, 0xbf}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x200, 0x0, 0xa1, 0x0, 0x8, 0x7}, 0x1be, &(0x7f0000001580)={0x5, 0xf, 0x1be, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2f, 0x1, 0x400, 0xff}, @generic={0xcf, 0x10, 0x1, "a66b6f1f1027c016ca742b2eeb225d13060d6495ee8a87aad71d90190dbf5b1f1a231348e3ae3f0cc1a6b3421f09cf62508cbe73d9bf1318bced01bc3fc912555dca08151d8b63d8b76a6f72731d550aba83db045efbe238d5b713f43b7ef0809ed44ff4b67191ae1f19df1503b21cfded064d9304665dd285a50b01fdaffe260348ae35939ec9b3885b4e117c4e0a2613e8311878e2d9f97ce8c387b7188c27661e55cfe1ccd5158e23a7f2bce3c88e24849e24ace3b634ac6e74586e2aeb0ae2ea13873b42f408f6871ca9"}, @generic={0xcf, 0x10, 0x3, "9f1c6f3e47ba96b7a02eacf28e4b72f0b6217c3cd9af48fe73023862a9910a0520210cc3ed3b3d61f5269a54f97af86cac476c5157507c4b10ecc3aecefec0360e36d39ab508b23dadb33c5a6170fa41a1582b607594e6acf16f0ce9d77f6c8b03e0a540d5beb550e947eedbda1c18072e239caa91f0caea5998bfa35ed8888a33276a7b148e92f93f7fdb2ed3b5e8cacfa29f0bc944d56247ab2b2964e00158698b505e8efa63d92ce3c483d94e215af2f2f4476ff817ea2b8d7c108ca09936f957564a2f94131c35181533"}, @ssp_cap={0x10, 0x10, 0xa, 0x67, 0x1, 0x0, 0x78f, 0xb2, [0xff00]}]}, 0x2, [{0x15, &(0x7f0000000240)=@string={0x15, 0x3, "d4de0c8514f28238116f6c4c80c32649f604b5"}}, {0xf6, &(0x7f0000001480)=@string={0xf6, 0x3, "1b16cf9655eed9851eeaf8de75df3819a80842deead5aa252de5d548951809dd257f402fd723dc15b21744cd3698da209bab53394387e6c26076a2a5da07dca119b07ae70ada4c980f72adf720d5956d05680166b135e92b33d8d61d1d3eddd8226437c520b94bcf43ea7700f890b353babec1a830d349a2df5032365bb2402c41858bd102fa656eb9c7e37f385b39096abf80ba294cb3b91f4ac78f1a9cf78f2e0962d9aad378e4dc62fb2be467e9ab2b5a6a362687b49a89951fc0df86214c06a2d79c963b231731bc079dcdc220004918e0e9440a09a96c75ac54e917ef209313f76c347f9369187a5c4b2832a09f008ce1e6"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000a00)={0x0, 0x7, 0x2, {0x2}}, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000780)=""/240) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffd02, &(0x7f00000000c0)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.496521744s ago: executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x404c534a, &(0x7f00000000c0)) tkill(r0, 0x7) 1.363201264s ago: executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d3e7505a8696", 0xb7}, {&(0x7f00000001c0)="316f5534ea963b2e4bb210515fd2", 0xe}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 1.353854831s ago: executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0xf, &(0x7f0000000200)={0x0, 'erspan0\x00'}, 0x18) 1.201370633s ago: executing program 4: r0 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x113, 0x4, 0x0, 0x20000024) 1.158469465s ago: executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="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", 0x12a) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) 1.084098001s ago: executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@broadcast}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.001290752s ago: executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1c) 912.057027ms ago: executing program 4: unshare(0x60600) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x3}}) 851.409185ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 723.736025ms ago: executing program 3: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x10) 620.926872ms ago: executing program 2: r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x6, 0x3, &(0x7f0000000040), 0x8) 605.466749ms ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 360.66891ms ago: executing program 5: getuid() creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) 291.045984ms ago: executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r0, 0x0, 0x7ffffff7, 0xf0ff7f, 0x0, 0x0) 210.995917ms ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) write$cgroup_int(r1, &(0x7f0000000040), 0x1) 155.626559ms ago: executing program 4: madvise(&(0x7f0000000000/0x800000)=nil, 0xffffffffdfffffff, 0xc) 18.429673ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000040000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0xf, &(0x7f0000000cc0)={r1}, 0x10) 0s ago: executing program 3: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0}) kernel console output (not intermixed with test programs): left promiscuous mode [ 230.262127][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.300344][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.327329][ T6328] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.346262][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.491660][ T6328] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 230.741358][ T6328] BTRFS info (device loop4): using free-space-tree [ 230.808114][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.355201][ T35] veth1_macvtap: left promiscuous mode [ 231.492403][ T35] veth0_macvtap: left promiscuous mode [ 231.543541][ T35] veth1_vlan: left promiscuous mode [ 231.565536][ T35] veth0_vlan: left promiscuous mode [ 231.626974][ T29] audit: type=1804 audit(1719080524.098:27): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/72/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 231.712274][ T5134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.722392][ T5134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.732338][ T6363] loop0: detected capacity change from 0 to 512 [ 231.747950][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.767531][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.780437][ T5134] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 231.788383][ T5134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.837550][ T6363] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 231.997313][ T6328] BTRFS error (device loop4): open_ctree failed [ 233.895225][ T5123] Bluetooth: hci5: command tx timeout [ 234.344540][ T6380] fuse: Unknown parameter '-è¬ [ 234.344540][ T6380] ×¾ZŸq9%.ö^)JÅ°ªß‹”«±M&œ\|àM*aY5{5âD¢Zà äÑCRͲ6^êù;±w°Î3“ÿ' [ 234.871270][ T29] audit: type=1326 audit(1719080527.338:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbd07d0a9 code=0x7ffc0000 [ 234.919196][ T29] audit: type=1326 audit(1719080527.338:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbd07d0a9 code=0x7ffc0000 [ 234.967193][ T29] audit: type=1326 audit(1719080527.338:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bbd07d0a9 code=0x7ffc0000 [ 235.008649][ T29] audit: type=1326 audit(1719080527.338:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbd07d0a9 code=0x7ffc0000 [ 235.077072][ T29] audit: type=1326 audit(1719080527.338:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bbd07d0a9 code=0x7ffc0000 [ 235.165234][ T29] audit: type=1326 audit(1719080527.338:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbd07d0a9 code=0x7ffc0000 [ 235.235941][ T35] team0 (unregistering): Port device team_slave_1 removed [ 235.245956][ T29] audit: type=1326 audit(1719080527.338:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bbd07a827 code=0x7ffc0000 [ 235.297331][ T29] audit: type=1326 audit(1719080527.348:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bbd0404e9 code=0x7ffc0000 [ 235.340512][ T29] audit: type=1326 audit(1719080527.348:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bbd07a827 code=0x7ffc0000 [ 235.381436][ T29] audit: type=1326 audit(1719080527.348:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bbd0404e9 code=0x7ffc0000 [ 235.452134][ T35] team0 (unregistering): Port device team_slave_0 removed [ 235.820513][ T6388] loop2: detected capacity change from 0 to 1024 [ 235.913350][ T6388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.965289][ T53] Bluetooth: hci5: command tx timeout [ 237.063143][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.094459][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 237.094523][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 237.101487][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 237.171905][ T6370] sch_tbf: burst 0 is lower than device veth3 mtu (1514) ! [ 237.204864][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.477713][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 238.045867][ T5134] Bluetooth: hci5: command tx timeout [ 239.955410][ T6419] wireguard0: entered promiscuous mode [ 240.020940][ T6419] wireguard0: entered allmulticast mode [ 240.135006][ T5134] Bluetooth: hci5: command tx timeout [ 240.371928][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.407363][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.471390][ T6258] bridge_slave_0: entered allmulticast mode [ 240.756642][ T6258] bridge_slave_0: entered promiscuous mode [ 241.315989][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.404291][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.481219][ T6258] bridge_slave_1: entered allmulticast mode [ 241.498235][ T6258] bridge_slave_1: entered promiscuous mode [ 241.632857][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.688688][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.060131][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 242.060157][ T29] audit: type=1326 audit(1719080534.528:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 242.129342][ T6258] team0: Port device team_slave_0 added [ 242.196731][ T6258] team0: Port device team_slave_1 added [ 242.198066][ T29] audit: type=1326 audit(1719080534.568:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 242.282031][ T29] audit: type=1326 audit(1719080534.578:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 242.342819][ T29] audit: type=1326 audit(1719080534.578:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 242.373291][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.485358][ T29] audit: type=1326 audit(1719080534.578:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 242.632915][ T29] audit: type=1326 audit(1719080534.618:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 242.845134][ T29] audit: type=1326 audit(1719080534.618:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 242.947484][ T29] audit: type=1326 audit(1719080534.618:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1c0e7a827 code=0x7ffc0000 [ 243.045209][ T29] audit: type=1326 audit(1719080534.618:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1c0e404e9 code=0x7ffc0000 [ 243.061384][ T6447] loop0: detected capacity change from 0 to 1024 [ 243.088477][ T6450] fuse: Unknown parameter '-è¬ [ 243.088477][ T6450] ×¾ZŸq9%.ö^)JÅ°ªß‹”«±M&œ\|àM*aY5{5âD¢Zà äÑCRͲ6^êù;±w°Î3“ÿ' [ 243.123574][ T29] audit: type=1326 audit(1719080534.618:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1c0e7a827 code=0x7ffc0000 [ 243.173904][ T6447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.323518][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.657693][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.680376][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.764109][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.834138][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.909862][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.939002][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.082068][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.366922][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.865828][ T6258] hsr_slave_0: entered promiscuous mode [ 244.924047][ T6258] hsr_slave_1: entered promiscuous mode [ 244.949372][ T6258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.964717][ T6258] Cannot create hsr debugfs directory [ 245.444790][ T5186] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 246.426265][ T6361] chnl_net:caif_netlink_parms(): no params data found [ 246.574859][ T5186] usb 1-1: Using ep0 maxpacket: 32 [ 246.612700][ T5186] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 246.652591][ T5186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.726506][ T5186] usb 1-1: config 0 descriptor?? [ 246.817486][ T5186] as10x_usb: device has been detected [ 246.855636][ T5186] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 246.989548][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.011182][ T6474] loop4: detected capacity change from 0 to 64 [ 247.014638][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.063488][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.086590][ T5186] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 247.097973][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.143935][ T5186] as10x_usb: error during firmware upload part1 [ 247.177545][ T5186] Registered device nBox DVB-T Dongle [ 247.184980][ T5186] usb 1-1: USB disconnect, device number 6 [ 247.265914][ T35] bridge_slave_1: left allmulticast mode [ 247.292042][ T35] bridge_slave_1: left promiscuous mode [ 247.302595][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.409512][ T35] bridge_slave_0: left allmulticast mode [ 247.424929][ T35] bridge_slave_0: left promiscuous mode [ 247.449821][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.569550][ T5186] Unregistered device nBox DVB-T Dongle [ 247.577467][ T5186] as10x_usb: device has been disconnected [ 249.851693][ T6483] loop0: detected capacity change from 0 to 32768 [ 249.902892][ T6483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6483) [ 250.007174][ T6483] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.015942][ T6498] nfs: Unknown parameter 'smackfstransmute' [ 250.043017][ T6483] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 250.065326][ T6483] BTRFS info (device loop0): using free-space-tree [ 250.119207][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.167651][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.194300][ T35] bond0 (unregistering): Released all slaves [ 250.528847][ T6518] loop2: detected capacity change from 0 to 1024 [ 250.554574][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 250.554597][ T29] audit: type=1800 audit(1719080543.018:281): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 250.647664][ T6518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.849615][ T6492] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 250.887695][ T29] audit: type=1800 audit(1719080543.358:282): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=864 res=0 errno=0 [ 250.953489][ T29] audit: type=1804 audit(1719080543.408:283): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2842852118/syzkaller.QlV9rb/67/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=864 res=1 errno=0 [ 251.377144][ T5114] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.827621][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.842431][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.882557][ T6361] bridge_slave_0: entered allmulticast mode [ 252.923758][ T6361] bridge_slave_0: entered promiscuous mode [ 252.996815][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.048774][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.086259][ T6361] bridge_slave_1: entered allmulticast mode [ 253.147740][ T6361] bridge_slave_1: entered promiscuous mode [ 253.205498][ T6533] loop5: detected capacity change from 0 to 1024 [ 253.572172][ T35] hsr_slave_0: left promiscuous mode [ 253.626776][ T35] hsr_slave_1: left promiscuous mode [ 253.662776][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.680444][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.695441][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.712476][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.795743][ T35] veth1_macvtap: left promiscuous mode [ 253.814917][ T35] veth0_macvtap: left promiscuous mode [ 253.833005][ T35] veth1_vlan: left promiscuous mode [ 253.853085][ T35] veth0_vlan: left promiscuous mode [ 254.378634][ T29] audit: type=1326 audit(1719080546.828:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 254.424150][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 254.469117][ T29] audit: type=1326 audit(1719080546.878:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 254.563784][ T29] audit: type=1326 audit(1719080546.878:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 254.589744][ T29] audit: type=1326 audit(1719080546.938:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 254.633638][ T29] audit: type=1326 audit(1719080546.938:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 254.663258][ T29] audit: type=1326 audit(1719080547.028:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 254.687812][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 254.688581][ T29] audit: type=1326 audit(1719080547.028:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c0e7d0a9 code=0x7ffc0000 [ 254.759923][ T8] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 254.774810][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.799826][ T8] usb 5-1: config 0 descriptor?? [ 254.827085][ T8] as10x_usb: device has been detected [ 254.842476][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 254.956507][ T8] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 255.022698][ T8] as10x_usb: error during firmware upload part1 [ 255.024419][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.060913][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.061714][ T8] Registered device nBox DVB-T Dongle [ 255.087161][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.110478][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.133228][ T8] usb 5-1: USB disconnect, device number 4 [ 255.222401][ T8] Unregistered device nBox DVB-T Dongle [ 255.239685][ T8] as10x_usb: device has been disconnected [ 255.630057][ T35] team0 (unregistering): Port device team_slave_1 removed [ 255.744911][ T35] team0 (unregistering): Port device team_slave_0 removed [ 255.892944][ T6545] loop4: detected capacity change from 0 to 64 [ 256.369791][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 256.383968][ T29] audit: type=1804 audit(1719080548.828:292): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/84/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 258.103396][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.261762][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.590068][ T6564] Bluetooth: MGMT ver 1.22 [ 259.645813][ T6570] loop4: detected capacity change from 0 to 1024 [ 259.646163][ T6554] loop5: detected capacity change from 0 to 32768 [ 259.749755][ T6361] team0: Port device team_slave_0 added [ 259.760983][ T6570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.798126][ T6361] team0: Port device team_slave_1 added [ 260.164141][ T29] audit: type=1800 audit(1719080552.628:293): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=864 res=0 errno=0 [ 260.269376][ T6574] wireguard0: entered promiscuous mode [ 260.276727][ T6574] wireguard0: entered allmulticast mode [ 260.351899][ T29] audit: type=1804 audit(1719080552.808:294): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1637817018/syzkaller.qI7YQw/35/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=864 res=1 errno=0 [ 260.447142][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.477070][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.594226][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.659155][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.671959][ T6566] loop2: detected capacity change from 0 to 32768 [ 260.692502][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.730721][ T6566] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6566) [ 260.749981][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.773316][ T6566] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.786595][ T6566] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 260.809497][ T6566] BTRFS info (device loop2): using free-space-tree [ 261.163239][ T29] audit: type=1800 audit(1719080553.628:295): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 261.263765][ T6361] hsr_slave_0: entered promiscuous mode [ 261.306679][ T6361] hsr_slave_1: entered promiscuous mode [ 261.335646][ T6361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.343671][ T6361] Cannot create hsr debugfs directory [ 261.410768][ T5124] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.901259][ T6258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.051196][ T6258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.179936][ T6258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.359944][ T6600] loop5: detected capacity change from 0 to 2048 [ 263.396979][ T6600] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.405356][ T6258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.506656][ T6600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.655077][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 263.672372][ T6600] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz-executor.5: bg 0: block 234: padding at end of block bitmap is not set [ 263.739488][ T6600] EXT4-fs (loop5): Remounting filesystem read-only [ 263.855977][ T29] audit: type=1804 audit(1719080556.328:296): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1430043801/syzkaller.8KMwGw/74/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 263.882570][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 263.887305][ T9] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 263.943520][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.961975][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.986852][ T9] usb 3-1: config 0 descriptor?? [ 264.057317][ T9] as10x_usb: device has been detected [ 264.064622][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 264.187404][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 264.224255][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.240971][ T9] as10x_usb: error during firmware upload part1 [ 264.263814][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.275744][ T9] Registered device nBox DVB-T Dongle [ 264.309154][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.351403][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.369167][ T5079] usb 3-1: USB disconnect, device number 6 [ 264.417308][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.478921][ T5079] Unregistered device nBox DVB-T Dongle [ 264.486553][ T5079] as10x_usb: device has been disconnected [ 264.599945][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.735919][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.743232][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.821692][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.829013][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.890864][ T6361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.966852][ T6361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.006365][ T6361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.064331][ T6361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.737634][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.744189][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.938089][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.144537][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.215833][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.223173][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.411913][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.419358][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.754213][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.104969][ T6646] wireguard0: entered promiscuous mode [ 267.116439][ T6646] wireguard0: entered allmulticast mode [ 267.372148][ T6627] loop2: detected capacity change from 0 to 32768 [ 267.676923][ T29] audit: type=1804 audit(1719080560.138:297): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/92/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 267.734249][ T6258] veth0_vlan: entered promiscuous mode [ 267.805141][ T5134] Bluetooth: hci4: command 0x0406 tx timeout [ 267.962231][ T6258] veth1_vlan: entered promiscuous mode [ 268.229752][ T6258] veth0_macvtap: entered promiscuous mode [ 268.287987][ T6258] veth1_macvtap: entered promiscuous mode [ 268.291511][ T6662] loop5: detected capacity change from 0 to 128 [ 269.544542][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.594818][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.645335][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.684729][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.704782][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.724683][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.734532][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.794686][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.818085][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.871679][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.918850][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.937080][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.965194][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.984724][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.033810][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.056991][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 270.064759][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.084716][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.119921][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.223328][ T6258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.250877][ T6258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.264820][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 270.273546][ T6258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.282472][ T6258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.301527][ T9] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 270.341223][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.380238][ T9] usb 1-1: config 0 descriptor?? [ 270.418921][ T9] as10x_usb: device has been detected [ 270.429378][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.436772][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 270.521221][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 270.560851][ T9] as10x_usb: error during firmware upload part1 [ 270.604245][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.645650][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.646326][ T9] Registered device nBox DVB-T Dongle [ 270.716648][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.775567][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.816760][ T9] usb 1-1: USB disconnect, device number 7 [ 270.880777][ T9] Unregistered device nBox DVB-T Dongle [ 270.888609][ T9] as10x_usb: device has been disconnected [ 271.015452][ T4453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.051720][ T6361] veth0_vlan: entered promiscuous mode [ 271.085705][ T4453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.286131][ T6361] veth1_vlan: entered promiscuous mode [ 271.427671][ T6349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.467818][ T6349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.583162][ T6361] veth0_macvtap: entered promiscuous mode [ 271.619215][ T6688] loop5: detected capacity change from 0 to 8 [ 271.656986][ T6361] veth1_macvtap: entered promiscuous mode [ 271.800216][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.820761][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.854899][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.953358][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.003949][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.048502][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.806701][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.830377][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.840455][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.853391][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.857058][ T6694] syz-executor.0: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 274.900203][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.924468][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.931975][ T6694] CPU: 0 PID: 6694 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 274.945467][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 274.954703][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.955647][ T6694] Call Trace: [ 274.955665][ T6694] [ 274.971687][ T6694] dump_stack_lvl+0x16c/0x1f0 [ 274.974688][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.976412][ T6694] warn_alloc+0x24d/0x3a0 [ 274.991206][ T6694] ? __pfx_warn_alloc+0x10/0x10 [ 274.996267][ T6694] ? hash_net_create+0x3ea/0x1250 [ 275.001410][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.004837][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.007109][ T6694] ? __get_vm_area_node+0x190/0x2d0 [ 275.022309][ T6694] ? __get_vm_area_node+0x1bc/0x2d0 [ 275.027688][ T6694] __vmalloc_node_range_noprof+0xff7/0x1520 [ 275.033782][ T6694] ? hash_net_create+0x3ea/0x1250 [ 275.039318][ T6694] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.040360][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.045695][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.045748][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.045796][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.073143][ T6694] ? trace_kmalloc+0x2d/0xe0 [ 275.077802][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.083485][ T6694] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 275.084863][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.089252][ T6694] ? hash_net_create+0x3ea/0x1250 [ 275.104158][ T6694] kvmalloc_node_noprof+0x14f/0x1a0 [ 275.104748][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.109409][ T6694] ? hash_net_create+0x3ea/0x1250 [ 275.124872][ T6694] hash_net_create+0x3ea/0x1250 [ 275.129787][ T6694] ? __nla_validate_parse+0x2854/0x2880 [ 275.135401][ T6694] ? __pfx_hash_net_create+0x10/0x10 [ 275.140752][ T6694] ip_set_create+0x7ce/0x14d0 [ 275.145523][ T6694] ? __pfx_ip_set_create+0x10/0x10 [ 275.150935][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.154738][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.156618][ T6694] nfnetlink_rcv_msg+0x9c6/0x11e0 [ 275.171577][ T6694] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 275.174722][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.177096][ T6694] ? kasan_quarantine_put+0x10a/0x240 [ 275.192922][ T6694] ? __dev_queue_xmit+0x85d/0x4130 [ 275.198146][ T6694] ? __local_bh_enable_ip+0xa4/0x120 [ 275.202419][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.203483][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.216451][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.218869][ T6694] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.231356][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.237034][ T6694] ? __local_bh_enable_ip+0xa4/0x120 [ 275.242383][ T6694] netlink_rcv_skb+0x16e/0x440 [ 275.247200][ T6694] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 275.252736][ T6694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.258100][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.263784][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.269636][ T6694] ? security_capable+0x98/0xd0 [ 275.274565][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.280247][ T6694] ? ns_capable+0xd7/0x110 [ 275.284730][ T6694] nfnetlink_rcv+0x1b4/0x430 [ 275.289391][ T6694] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 275.294568][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.300330][ T6694] ? netlink_deliver_tap+0x1ae/0xd90 [ 275.305674][ T6694] netlink_unicast+0x545/0x820 [ 275.310499][ T6694] ? __pfx_netlink_unicast+0x10/0x10 [ 275.315831][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.321513][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.327196][ T6694] ? __phys_addr_symbol+0x30/0x80 [ 275.332352][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.338066][ T6694] ? __check_object_size+0x48e/0x720 [ 275.343401][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.349088][ T6694] netlink_sendmsg+0x8b8/0xd70 [ 275.354041][ T6694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.359405][ T6694] ? __import_iovec+0x1fd/0x6e0 [ 275.364326][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.370085][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.375768][ T6694] ____sys_sendmsg+0xab8/0xc90 [ 275.380602][ T6694] ? copy_msghdr_from_user+0x10b/0x160 [ 275.386139][ T6694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.391514][ T6694] ? __pfx___lock_acquire+0x10/0x10 [ 275.396751][ T6694] ? __lock_acquire+0x14f4/0x3b30 [ 275.401802][ T6694] ___sys_sendmsg+0x135/0x1e0 [ 275.406527][ T6694] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.411785][ T6694] ? find_held_lock+0x2d/0x110 [ 275.416618][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.422303][ T6694] ? __fget_light+0x173/0x210 [ 275.427150][ T6694] __sys_sendmsg+0x117/0x1f0 [ 275.431783][ T6694] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.437154][ T6694] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.442943][ T6694] do_syscall_64+0xcd/0x250 [ 275.447602][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.453590][ T6694] RIP: 0033:0x7eff7c87d0a9 [ 275.458048][ T6694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 275.477786][ T6694] RSP: 002b:00007eff7d55e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.486324][ T6694] RAX: ffffffffffffffda RBX: 00007eff7c9b4050 RCX: 00007eff7c87d0a9 [ 275.494325][ T6694] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 275.502304][ T6694] RBP: 00007eff7c8ec074 R08: 0000000000000000 R09: 0000000000000000 [ 275.510287][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.518279][ T6694] R13: 000000000000006e R14: 00007eff7c9b4050 R15: 00007fff3babb7c8 [ 275.526377][ T6694] [ 275.735912][ T6361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.758383][ T6694] Mem-Info: [ 275.761630][ T6361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.771152][ T6361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.775202][ T6694] active_anon:28982 inactive_anon:0 isolated_anon:0 [ 275.775202][ T6694] active_file:0 inactive_file:46471 isolated_file:0 [ 275.775202][ T6694] unevictable:768 dirty:32 writeback:0 [ 275.775202][ T6694] slab_reclaimable:9687 slab_unreclaimable:96577 [ 275.775202][ T6694] mapped:21416 shmem:9880 pagetables:632 [ 275.775202][ T6694] sec_pagetables:0 bounce:0 [ 275.775202][ T6694] kernel_misc_reclaimable:0 [ 275.775202][ T6694] free:1360331 free_pcp:1530 free_cma:0 [ 275.835372][ T6361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.978152][ T6694] Node 0 active_anon:112428kB inactive_anon:0kB active_file:0kB inactive_file:185812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85664kB dirty:124kB writeback:0kB shmem:34284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10464kB pagetables:2628kB sec_pagetables:0kB all_unreclaimable? no [ 276.112877][ T6694] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 276.691397][ T6694] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.855911][ T6694] lowmem_reserve[]: 0 2565 2567 0 0 [ 276.861225][ T6694] Node 0 DMA32 free:1478940kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:118408kB inactive_anon:0kB active_file:0kB inactive_file:183996kB unevictable:1536kB writepending:124kB present:3129332kB managed:2654756kB mlocked:0kB bounce:0kB free_pcp:1524kB local_pcp:48kB free_cma:0kB [ 276.959720][ T6714] loop2: detected capacity change from 0 to 64 [ 276.995628][ T6694] lowmem_reserve[]: 0 0 1 0 0 [ 277.000439][ T6694] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 277.062674][ T6349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.117387][ T6349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.125504][ T6694] lowmem_reserve[]: 0 0 0 0 0 [ 277.145055][ T6694] Node 1 Normal free:3944508kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3008kB local_pcp:500kB free_cma:0kB [ 277.478175][ T6694] lowmem_reserve[]: 0 0 0 0 0 [ 277.731162][ T29] audit: type=1800 audit(1719080570.048:298): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=22 res=0 errno=0 [ 278.244973][ T6722] wireguard0: entered promiscuous mode [ 278.312210][ T6722] wireguard0: entered allmulticast mode [ 278.357274][ T6694] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.370514][ T6694] Node 0 DMA32: 4*4kB (ME) 649*8kB (UME) 160*16kB (UME) 467*32kB (UME) 312*64kB (UME) 117*128kB (UME) 43*256kB (UM) 27*512kB (UME) 15*1024kB (UM) 2*2048kB (UM) 335*4096kB (UM) = 1474104kB [ 278.394766][ T6694] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 278.420902][ T6694] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 3*16kB (UM) 2*32kB (UM) 1*64kB (U) 1*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 962*4096kB (UM) = 3944788kB [ 278.439260][ T6694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.457030][ T6694] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 278.476663][ T6694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.510962][ T6694] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.561905][ T6694] 54167 total pagecache pages [ 278.573862][ T6694] 0 pages in swap cache [ 278.586719][ T6694] Free swap = 124728kB [ 278.590991][ T6694] Total swap = 124996kB [ 278.603259][ T6694] 2097051 pages RAM [ 278.610350][ T6694] 0 pages HighMem/MovableOnly [ 278.625031][ T6694] 401768 pages reserved [ 278.629220][ T6694] 0 pages cma reserved [ 278.764505][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.774715][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.864979][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 279.347054][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 279.388050][ T9] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 279.446576][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.340478][ T9] usb 6-1: config 0 descriptor?? [ 280.473051][ T9] as10x_usb: device has been detected [ 280.526242][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 280.786294][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.905219][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.956445][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.018742][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.030163][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 281.140566][ T9] as10x_usb: error during firmware upload part1 [ 281.176315][ T9] Registered device nBox DVB-T Dongle [ 281.193441][ T9] usb 6-1: USB disconnect, device number 3 [ 281.333370][ T9] Unregistered device nBox DVB-T Dongle [ 281.367854][ T9] as10x_usb: device has been disconnected [ 284.205595][ T6782] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 284.310082][ T6779] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.403633][ T6781] loop2: detected capacity change from 0 to 2048 [ 284.443095][ T6781] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.534527][ T6781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.018317][ T6781] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 285.115651][ T6781] EXT4-fs (loop2): Remounting filesystem read-only [ 286.326187][ T6786] loop5: detected capacity change from 0 to 32768 [ 286.404486][ T6786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (6786) [ 286.478495][ T6786] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.529574][ T6786] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 286.545074][ T6786] BTRFS info (device loop5): using free-space-tree [ 286.648794][ T5124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.826523][ T6786] BTRFS info (device loop5): checking UUID tree [ 287.222268][ T6825] loop3: detected capacity change from 0 to 1024 [ 288.380944][ T6825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.487346][ T6845] loop4: detected capacity change from 0 to 512 [ 288.499607][ T6846] No such timeout policy "syz0" [ 288.519701][ T29] audit: type=1800 audit(1719080580.988:299): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=864 res=0 errno=0 [ 288.521978][ T6845] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.610530][ T5115] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.629928][ T6845] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 288.646830][ T6845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 288.686487][ T29] audit: type=1804 audit(1719080581.028:300): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1473391500/syzkaller.oO1g4D/2/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=864 res=1 errno=0 [ 288.810156][ T6845] EXT4-fs (loop4): 1 truncate cleaned up [ 288.825834][ T6845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.046411][ T6837] loop0: detected capacity change from 0 to 32768 [ 290.073411][ T6837] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6837) [ 290.155565][ T6837] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.182435][ T6837] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 290.226376][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 290.240580][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 290.306679][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 290.375352][ T6871] EXT4-fs error (device loop4): ext4_lookup:1854: inode #15: comm syz-executor.4: iget: bad extra_isize 46 (inode size 256) [ 290.469806][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 290.470963][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 290.553029][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 290.609967][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 290.723119][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 290.763300][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 290.803631][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 290.856295][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 290.942033][ T6837] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 290.954800][ T6879] wireguard0: entered promiscuous mode [ 290.994880][ T6879] wireguard0: entered allmulticast mode [ 291.014300][ T6837] BTRFS error (device loop0): open_ctree failed [ 291.107303][ T5435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.214131][ T6894] loop3: detected capacity change from 0 to 4096 [ 291.231964][ T6894] ======================================================= [ 291.231964][ T6894] WARNING: The mand mount option has been deprecated and [ 291.231964][ T6894] and is ignored by this kernel. Remove the mand [ 291.231964][ T6894] option from the mount to silence this warning. [ 291.231964][ T6894] ======================================================= [ 291.397564][ T6894] ntfs3: loop3: ino=0, Correct links count -> 1. [ 291.541580][ T6894] ntfs3: loop3: MFT: r=0, expect seq=1 instead of 0! [ 291.575286][ T6894] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 291.645035][ T6894] ntfs3: loop3: Failed to load $MFT (-22). [ 292.319835][ T6905] loop0: detected capacity change from 0 to 1024 [ 292.379188][ T6905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.482599][ T29] audit: type=1800 audit(1719080584.948:301): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=864 res=0 errno=0 [ 292.577623][ T29] audit: type=1804 audit(1719080584.988:302): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1430043801/syzkaller.8KMwGw/89/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=864 res=1 errno=0 [ 292.903856][ T6899] loop1: detected capacity change from 0 to 32768 [ 292.960552][ T6899] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6899) [ 293.077380][ T6910] loop0: detected capacity change from 0 to 64 [ 293.093796][ T6899] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.150922][ T6899] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 293.192075][ T6899] BTRFS info (device loop1): using free-space-tree [ 294.059849][ T29] audit: type=1800 audit(1719080586.188:303): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=22 res=0 errno=0 [ 294.512111][ T6899] BTRFS info (device loop1): checking UUID tree [ 294.526473][ T6899] BTRFS warning (device loop1): failed to start uuid_rescan task [ 294.634744][ T6899] BTRFS warning (device loop1): failed to check the UUID tree: -4 [ 294.995264][ T6899] BTRFS error (device loop1): open_ctree failed [ 296.466559][ T6957] loop3: detected capacity change from 0 to 1024 [ 296.545618][ T6957] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.555444][ T5174] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 297.936362][ T5174] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 297.951359][ T5174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.972667][ T5174] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 298.009358][ T29] audit: type=1800 audit(1719080590.478:304): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=864 res=0 errno=0 [ 298.009379][ T5174] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 298.009433][ T5174] usb 6-1: Manufacturer: syz [ 298.062358][ T5174] usb 6-1: config 0 descriptor?? [ 298.074390][ T29] audit: type=1804 audit(1719080590.518:305): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1473391500/syzkaller.oO1g4D/9/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=864 res=1 errno=0 [ 298.367646][ T5174] rc_core: IR keymap rc-hauppauge not found [ 298.398376][ T5174] Registered IR keymap rc-empty [ 298.431553][ T5174] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 298.489941][ T5174] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 298.602894][ T5174] usb 6-1: USB disconnect, device number 4 [ 298.894995][ T6979] nbd3: detected capacity change from 0 to 8388607 [ 298.957792][ T6979] block nbd3: shutting down sockets [ 299.049088][ T6982] loop3: detected capacity change from 0 to 2048 [ 299.176948][ T6982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.772004][ T6993] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 300.405527][ T6973] loop0: detected capacity change from 0 to 32768 [ 300.452978][ T6973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6973) [ 300.504708][ T6973] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 300.561575][ T6973] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 300.604867][ T6973] BTRFS info (device loop0): using free-space-tree [ 300.739529][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 300.817361][ T7023] loop5: detected capacity change from 0 to 1024 [ 300.963180][ T7023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.985393][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 301.002139][ T6973] BTRFS info (device loop0): checking UUID tree [ 301.026658][ T25] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 301.078382][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.139324][ T25] usb 5-1: config 0 descriptor?? [ 301.157286][ T29] audit: type=1800 audit(1719080593.628:306): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=864 res=0 errno=0 [ 301.234946][ T25] as10x_usb: device has been detected [ 301.266290][ T29] audit: type=1804 audit(1719080593.668:307): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/111/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=864 res=1 errno=0 [ 301.314614][ T25] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 301.440051][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.475451][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.515118][ T5079] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 301.516231][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.549482][ T25] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 301.580363][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.607120][ T5114] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.632146][ T25] as10x_usb: error during firmware upload part1 [ 301.663103][ T25] Registered device nBox DVB-T Dongle [ 301.771432][ T5079] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 301.847467][ T5079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.994483][ T5079] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 302.135806][ T5186] usb 5-1: USB disconnect, device number 5 [ 302.156186][ T5079] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 302.242823][ T5079] usb 2-1: Manufacturer: syz [ 302.446198][ T5079] usb 2-1: config 0 descriptor?? [ 302.513291][ T5186] Unregistered device nBox DVB-T Dongle [ 302.560268][ T5186] as10x_usb: device has been disconnected [ 302.945402][ T5079] rc_core: IR keymap rc-hauppauge not found [ 302.963193][ T5079] Registered IR keymap rc-empty [ 302.988104][ T5079] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 303.059197][ T5079] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 304.095475][ T5079] usb 2-1: USB disconnect, device number 4 [ 304.318087][ T6361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.993733][ T7071] ALSA: mixer_oss: invalid OSS volume 'LI' [ 305.359476][ T7081] loop5: detected capacity change from 0 to 1024 [ 305.550996][ T7085] loop2: detected capacity change from 0 to 2048 [ 305.570529][ T7081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.648052][ T7085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.977901][ T29] audit: type=1800 audit(1719080598.438:308): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=864 res=0 errno=0 [ 306.056601][ T29] audit: type=1804 audit(1719080598.448:309): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/113/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=864 res=1 errno=0 [ 306.175458][ T5177] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 306.191700][ T2817] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 306.220284][ T2817] EXT4-fs (loop2): This should not happen!! Data will be lost [ 306.220284][ T2817] [ 306.230127][ T2817] EXT4-fs (loop2): Total free blocks count 0 [ 306.236274][ T2817] EXT4-fs (loop2): Free/Dirty block details [ 306.242392][ T2817] EXT4-fs (loop2): free_blocks=0 [ 306.249338][ T2817] EXT4-fs (loop2): dirty_blocks=0 [ 306.272875][ T2817] EXT4-fs (loop2): Block reservation details [ 306.296615][ T2817] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 306.313667][ T5124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.382054][ T7073] loop3: detected capacity change from 0 to 32768 [ 306.412819][ T5177] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 306.433148][ T5177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.443745][ T7073] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7073) [ 306.479628][ T5177] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 306.502250][ T5177] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 306.516202][ T7073] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.537419][ T5177] usb 1-1: Manufacturer: syz [ 306.546547][ T7073] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 306.574101][ T5177] usb 1-1: config 0 descriptor?? [ 306.583440][ T7073] BTRFS info (device loop3): using free-space-tree [ 306.756752][ T5177] rc_core: IR keymap rc-hauppauge not found [ 306.762703][ T5177] Registered IR keymap rc-empty [ 306.778970][ T5177] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 306.801778][ T5177] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 306.852561][ T5177] usb 1-1: USB disconnect, device number 8 [ 306.954554][ T7073] BTRFS info (device loop3): checking UUID tree [ 307.492955][ T6361] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.208694][ T7151] loop4: detected capacity change from 0 to 2048 [ 308.289512][ T7151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.373504][ T7155] loop2: detected capacity change from 0 to 1024 [ 308.542790][ T7155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.607630][ T7165] loop0: detected capacity change from 0 to 128 [ 309.037389][ T2817] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 309.055966][ T29] audit: type=1800 audit(1719080601.528:310): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=864 res=0 errno=0 [ 309.057358][ T2817] EXT4-fs (loop4): This should not happen!! Data will be lost [ 309.057358][ T2817] [ 309.089935][ T2817] EXT4-fs (loop4): Total free blocks count 0 [ 309.103870][ T2817] EXT4-fs (loop4): Free/Dirty block details [ 309.116765][ T2817] EXT4-fs (loop4): free_blocks=0 [ 309.164942][ T2817] EXT4-fs (loop4): dirty_blocks=0 [ 309.175294][ T29] audit: type=1804 audit(1719080601.568:311): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2842852118/syzkaller.QlV9rb/108/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=864 res=1 errno=0 [ 309.215973][ T2817] EXT4-fs (loop4): Block reservation details [ 309.222009][ T2817] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 309.312448][ T5435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.601239][ T7174] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 309.704960][ T7174] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 310.350260][ T29] audit: type=1804 audit(1719080602.818:312): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/121/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 311.196267][ T7207] loop5: detected capacity change from 0 to 2048 [ 311.324344][ T7207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.597455][ T7217] loop2: detected capacity change from 0 to 1024 [ 311.625691][ T5186] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 311.802462][ T7217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.845582][ T5186] usb 4-1: Using ep0 maxpacket: 32 [ 311.864421][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 311.868937][ T5186] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 311.927854][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 311.927854][ T51] [ 311.951555][ T5186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.973666][ T51] EXT4-fs (loop5): Total free blocks count 0 [ 311.977093][ T7180] loop4: detected capacity change from 0 to 32768 [ 312.010191][ T51] EXT4-fs (loop5): Free/Dirty block details [ 312.021647][ T5186] usb 4-1: config 0 descriptor?? [ 312.039075][ T51] EXT4-fs (loop5): free_blocks=0 [ 312.055837][ T7180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7180) [ 312.062314][ T51] EXT4-fs (loop5): dirty_blocks=0 [ 312.086264][ T5186] as10x_usb: device has been detected [ 312.096853][ T51] EXT4-fs (loop5): Block reservation details [ 312.123213][ T5186] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 312.133283][ T51] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 312.187711][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.202067][ T29] audit: type=1800 audit(1719080604.658:313): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=864 res=0 errno=0 [ 312.246687][ T7180] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 312.278579][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.294137][ T7180] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 312.312783][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.321768][ T5186] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 312.330674][ T29] audit: type=1804 audit(1719080604.728:314): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2842852118/syzkaller.QlV9rb/111/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=864 res=1 errno=0 [ 312.334904][ T7180] BTRFS info (device loop4): using free-space-tree [ 312.365038][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.375232][ T5186] as10x_usb: error during firmware upload part1 [ 312.442070][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.452095][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.467082][ T5186] Registered device nBox DVB-T Dongle [ 312.579473][ T5186] usb 4-1: USB disconnect, device number 2 [ 312.633222][ T5186] Unregistered device nBox DVB-T Dongle [ 312.637001][ T5186] as10x_usb: device has been disconnected [ 312.701707][ T7180] BTRFS info (device loop4): checking UUID tree [ 313.005091][ T5435] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.038212][ T7244] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 313.207211][ T7244] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 313.263352][ T29] audit: type=1804 audit(1719080605.718:315): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/125/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 313.640336][ T5134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.654974][ T5134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.663236][ T5134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.677220][ T5134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.689527][ T5134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 313.697334][ T5134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.789107][ T131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.231384][ T131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.253250][ T7271] loop5: detected capacity change from 0 to 1024 [ 314.282956][ T7272] loop1: detected capacity change from 0 to 1024 [ 314.329241][ T7272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.359046][ T7271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.466001][ T29] audit: type=1800 audit(1719080606.938:316): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=864 res=0 errno=0 [ 314.526576][ T29] audit: type=1804 audit(1719080606.938:317): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2396661356/syzkaller.HCmqmS/35/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=864 res=1 errno=0 [ 314.578846][ T131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.924525][ T131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.970041][ T29] audit: type=1800 audit(1719080607.438:318): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=864 res=0 errno=0 [ 315.040424][ T29] audit: type=1804 audit(1719080607.498:319): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/126/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=864 res=1 errno=0 [ 315.786056][ T5186] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 315.868007][ T7294] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 315.894865][ T5123] Bluetooth: hci1: command tx timeout [ 315.975056][ T5186] usb 3-1: Using ep0 maxpacket: 32 [ 316.004171][ T5186] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 316.023436][ T7294] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 316.033585][ T5186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.063551][ T5186] usb 3-1: config 0 descriptor?? [ 316.195182][ T5186] as10x_usb: device has been detected [ 316.202441][ T5186] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 316.308427][ T131] bridge_slave_1: left allmulticast mode [ 316.314210][ T131] bridge_slave_1: left promiscuous mode [ 316.314897][ T29] audit: type=1804 audit(1719080608.758:320): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/128/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 316.354319][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.381257][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.417640][ T5186] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 316.427857][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.454218][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.466273][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.484548][ T5186] as10x_usb: error during firmware upload part1 [ 316.488242][ T131] bridge_slave_0: left allmulticast mode [ 316.503958][ T131] bridge_slave_0: left promiscuous mode [ 316.509962][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.552959][ T5186] Registered device nBox DVB-T Dongle [ 316.572435][ T5186] usb 3-1: USB disconnect, device number 7 [ 316.690137][ T5186] Unregistered device nBox DVB-T Dongle [ 316.693982][ T5186] as10x_usb: device has been disconnected [ 316.937439][ T7285] loop3: detected capacity change from 0 to 32768 [ 317.002018][ T7285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7285) [ 317.140925][ T7285] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.168152][ T7285] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 317.209358][ T7285] BTRFS info (device loop3): using free-space-tree [ 317.414905][ T7321] nbd1: detected capacity change from 0 to 8388607 [ 317.482253][ T7321] block nbd1: shutting down sockets [ 317.537869][ T7285] BTRFS info (device loop3): checking UUID tree [ 317.679258][ T7339] loop1: detected capacity change from 0 to 2048 [ 317.804476][ T7339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.969696][ T6361] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.983468][ T5123] Bluetooth: hci1: command tx timeout [ 318.491257][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.553768][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.587893][ T131] bond0 (unregistering): Released all slaves [ 318.745092][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.813164][ T7256] chnl_net:caif_netlink_parms(): no params data found [ 319.367833][ T7361] loop2: detected capacity change from 0 to 1024 [ 319.388156][ T29] audit: type=1804 audit(1719080611.748:321): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2842852118/syzkaller.QlV9rb/118/file0" dev="sda1" ino=1963 res=1 errno=0 [ 320.045020][ T5123] Bluetooth: hci1: command tx timeout [ 320.335209][ T7350] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 320.527224][ T29] audit: type=1804 audit(1719080612.968:322): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2842852118/syzkaller.QlV9rb/119/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 320.586080][ T29] audit: type=1804 audit(1719080613.038:323): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1473391500/syzkaller.oO1g4D/21/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 320.632536][ T29] audit: type=1800 audit(1719080613.038:324): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 320.689245][ T6258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.783819][ T7382] loop5: detected capacity change from 0 to 1024 [ 320.941238][ T7382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.065525][ T29] audit: type=1800 audit(1719080613.528:325): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 321.730523][ T131] hsr_slave_0: left promiscuous mode [ 321.763220][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.785764][ T131] hsr_slave_1: left promiscuous mode [ 321.826070][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.967874][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.009458][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.041670][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.125757][ T5123] Bluetooth: hci1: command tx timeout [ 322.248668][ T131] veth1_macvtap: left promiscuous mode [ 322.282891][ T131] veth0_macvtap: left promiscuous mode [ 322.296783][ T131] veth1_vlan: left promiscuous mode [ 322.325047][ T131] veth0_vlan: left promiscuous mode [ 322.349783][ T7402] loop4: detected capacity change from 0 to 256 [ 323.114275][ T7396] loop1: detected capacity change from 0 to 32768 [ 323.130498][ T7396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7396) [ 323.213413][ T7396] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.240667][ T7396] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 323.270016][ T7396] BTRFS info (device loop1): using free-space-tree [ 323.463629][ T7396] BTRFS info (device loop1): checking UUID tree [ 323.713753][ T6258] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 324.329880][ T131] team0 (unregistering): Port device team_slave_1 removed [ 324.412815][ T131] team0 (unregistering): Port device team_slave_0 removed [ 324.459709][ T7432] loop1: detected capacity change from 0 to 128 [ 325.282053][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.303844][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.323473][ T7256] bridge_slave_0: entered allmulticast mode [ 325.334235][ T7256] bridge_slave_0: entered promiscuous mode [ 325.356668][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.386032][ T7393] bridge0: port 3(vlan0) entered blocking state [ 325.409606][ T7393] bridge0: port 3(vlan0) entered disabled state [ 325.430819][ T7393] vlan0: entered allmulticast mode [ 325.449437][ T7393] veth0_vlan: entered allmulticast mode [ 325.477778][ T7393] vlan0: entered promiscuous mode [ 325.521414][ T7393] bridge0: port 3(vlan0) entered blocking state [ 325.528264][ T7393] bridge0: port 3(vlan0) entered forwarding state [ 325.565057][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.604992][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.660413][ T7256] bridge_slave_1: entered allmulticast mode [ 325.688809][ T7256] bridge_slave_1: entered promiscuous mode [ 325.883501][ T29] audit: type=1804 audit(1719080618.348:326): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2842852118/syzkaller.QlV9rb/121/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 326.001432][ T29] audit: type=1804 audit(1719080618.468:327): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1637817018/syzkaller.qI7YQw/85/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 326.060509][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.102222][ T7445] loop1: detected capacity change from 0 to 1024 [ 326.107006][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.217003][ T7449] loop3: detected capacity change from 0 to 256 [ 326.233715][ T7445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.304499][ T29] audit: type=1800 audit(1719080618.768:328): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 326.417613][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 4 with error 28 [ 326.481661][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 326.481661][ T51] [ 326.523637][ T51] EXT4-fs (loop1): Total free blocks count 0 [ 326.526649][ T7256] team0: Port device team_slave_0 added [ 326.558306][ T51] EXT4-fs (loop1): Free/Dirty block details [ 326.573141][ T7457] loop5: detected capacity change from 0 to 1024 [ 326.573242][ T51] EXT4-fs (loop1): free_blocks=0 [ 326.608346][ T7256] team0: Port device team_slave_1 added [ 326.618766][ T51] EXT4-fs (loop1): dirty_blocks=0 [ 326.623906][ T51] EXT4-fs (loop1): Block reservation details [ 326.643372][ T51] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 326.661350][ T6258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.678815][ T7457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.938962][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.953474][ T29] audit: type=1800 audit(1719080619.418:329): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=864 res=0 errno=0 [ 326.973579][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.292549][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.310154][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.368230][ T29] audit: type=1804 audit(1719080619.448:330): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/136/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=864 res=1 errno=0 [ 327.814876][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.935432][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.995863][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.195104][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.792814][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.872496][ T7256] hsr_slave_0: entered promiscuous mode [ 328.910106][ T7256] hsr_slave_1: entered promiscuous mode [ 328.935028][ T7476] bridge0: port 4(geneve0) entered blocking state [ 328.965698][ T7476] bridge0: port 4(geneve0) entered disabled state [ 329.000300][ T7476] geneve0: entered allmulticast mode [ 329.042546][ T7476] geneve0: entered promiscuous mode [ 329.066108][ T7456] loop4: detected capacity change from 0 to 32768 [ 329.098987][ T7476] bridge0: port 4(geneve0) entered blocking state [ 329.105975][ T7476] bridge0: port 4(geneve0) entered forwarding state [ 329.127536][ T7456] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7456) [ 329.177650][ T7456] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 329.225605][ T7456] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 329.248659][ T7456] BTRFS info (device loop4): using free-space-tree [ 329.393828][ T7456] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 329.441607][ T7456] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 329.545841][ T7456] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 329.616593][ T7456] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 329.863060][ T7456] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 330.185826][ T29] audit: type=1804 audit(1719080622.628:331): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/138/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 330.222296][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.368826][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.455166][ T7456] BTRFS error (device loop4): open_ctree failed [ 330.578520][ T29] audit: type=1804 audit(1719080623.048:332): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1473391500/syzkaller.oO1g4D/28/file0" dev="sda1" ino=1943 res=1 errno=0 [ 330.667399][ T7503] loop3: detected capacity change from 0 to 1024 [ 330.737127][ T29] audit: type=1804 audit(1719080623.198:333): pid=7505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2396661356/syzkaller.HCmqmS/48/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 330.893489][ T7507] loop5: detected capacity change from 0 to 1024 [ 330.907520][ T7480] loop2: detected capacity change from 0 to 32768 [ 330.917809][ T7480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7480) [ 330.983524][ T7480] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.996894][ T7507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.002233][ T7480] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 331.072227][ T29] audit: type=1800 audit(1719080623.538:334): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 331.094622][ T7480] BTRFS info (device loop2): using free-space-tree [ 331.197937][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 4 with error 28 [ 331.256331][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 331.256331][ T51] [ 331.266082][ T51] EXT4-fs (loop5): Total free blocks count 0 [ 331.273455][ T51] EXT4-fs (loop5): Free/Dirty block details [ 331.282716][ T51] EXT4-fs (loop5): free_blocks=0 [ 331.288299][ T51] EXT4-fs (loop5): dirty_blocks=0 [ 331.293367][ T51] EXT4-fs (loop5): Block reservation details [ 331.314794][ T51] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 331.360761][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.743117][ T7531] loop1: detected capacity change from 0 to 512 [ 331.820890][ T7534] loop5: detected capacity change from 0 to 1024 [ 331.920620][ T7534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.969662][ T7256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.052875][ T7256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.120540][ T7256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.171814][ T7256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.222882][ T29] audit: type=1800 audit(1719080624.688:335): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=864 res=0 errno=0 [ 332.309604][ T29] audit: type=1804 audit(1719080624.708:336): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/140/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=864 res=1 errno=0 [ 332.343948][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.421209][ T5124] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 333.200687][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.380639][ T7256] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.477373][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.484734][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.562035][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.569395][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.735788][ T29] audit: type=1804 audit(1719080626.208:337): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2396661356/syzkaller.HCmqmS/52/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 333.891674][ T7256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.125317][ T29] audit: type=1804 audit(1719080626.568:338): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2396661356/syzkaller.HCmqmS/53/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 334.191980][ T7560] loop3: detected capacity change from 0 to 1024 [ 334.341970][ T7560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.446422][ T29] audit: type=1800 audit(1719080626.918:339): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 334.981111][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 4 with error 28 [ 335.103082][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 335.103082][ T51] [ 335.202602][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 335.255175][ T51] EXT4-fs (loop3): Free/Dirty block details [ 335.261134][ T51] EXT4-fs (loop3): free_blocks=0 [ 335.267395][ T51] EXT4-fs (loop3): dirty_blocks=0 [ 335.272454][ T51] EXT4-fs (loop3): Block reservation details [ 335.278569][ T51] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 335.310197][ T6361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.579802][ T7256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.599592][ T7579] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 335.716698][ T7579] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 336.190735][ T7588] loop2: detected capacity change from 0 to 512 [ 336.213849][ T7256] veth0_vlan: entered promiscuous mode [ 336.246064][ T7555] loop4: detected capacity change from 0 to 32768 [ 336.336249][ T7256] veth1_vlan: entered promiscuous mode [ 336.437205][ T7555] ERROR: (device loop4): dbAllocAny: unable to allocate blocks [ 336.437205][ T7555] [ 336.531703][ T7555] ERROR: (device loop4): remounting filesystem as read-only [ 336.622793][ T7256] veth0_macvtap: entered promiscuous mode [ 336.635558][ T7555] jfs_create: dtInsert returned -EIO [ 336.681925][ T7256] veth1_macvtap: entered promiscuous mode [ 336.707859][ T7555] ERROR: (device loop4): txAbort: [ 336.707859][ T7555] [ 336.797930][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.814972][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.827727][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.846260][ T7594] read_mapping_page failed! [ 336.852636][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.865636][ T7594] diRead: read_metapage failed [ 336.881595][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.894727][ T7594] jfs_lookup: iget failed on inum 32 [ 336.900312][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.964812][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.031532][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.038181][ T7577] loop1: detected capacity change from 0 to 32768 [ 337.061537][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.083252][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.102015][ T7577] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7577) [ 337.139269][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.236904][ T7577] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 337.252562][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.273985][ T7577] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 337.288502][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.298430][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.309109][ T7577] BTRFS info (device loop1): using free-space-tree [ 337.316597][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.331795][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.343255][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.354248][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.382359][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.412149][ T29] audit: type=1804 audit(1719080629.878:340): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1473391500/syzkaller.oO1g4D/32/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 337.445320][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.484729][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.531301][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.651904][ T7256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.702637][ T7256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.734910][ T7256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.755712][ T7256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.927608][ T7622] loop2: detected capacity change from 0 to 1024 [ 338.032525][ T7622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.185411][ T29] audit: type=1800 audit(1719080630.628:341): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 338.343644][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.361881][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.453537][ T131] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 4 with error 28 [ 338.504884][ T131] EXT4-fs (loop2): This should not happen!! Data will be lost [ 338.504884][ T131] [ 338.547670][ T131] EXT4-fs (loop2): Total free blocks count 0 [ 338.553790][ T131] EXT4-fs (loop2): Free/Dirty block details [ 338.560018][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.573227][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.587807][ T131] EXT4-fs (loop2): free_blocks=0 [ 338.590757][ T6258] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.592770][ T131] EXT4-fs (loop2): dirty_blocks=0 [ 338.592800][ T131] EXT4-fs (loop2): Block reservation details [ 338.691148][ T131] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 338.738471][ T5124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.537561][ T5177] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 339.758048][ T5177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 339.797202][ T5177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 339.877287][ T5177] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.953839][ T5177] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.988673][ T5177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.019235][ T7641] ALSA: mixer_oss: invalid OSS volume 'LIN' [ 340.041170][ T5177] usb 3-1: config 0 descriptor?? [ 340.439155][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.534397][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.554713][ T7660] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 340.568235][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.582409][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.590339][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.636278][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.668953][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.703661][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.744000][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.753226][ T7660] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 340.755939][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.762774][ T7660] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 340.786092][ T7660] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 340.794990][ T7660] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 340.832735][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.854870][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 340.883615][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.915911][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.939144][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.954278][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 340.966263][ T7660] vxlan0: entered promiscuous mode [ 340.982387][ T5177] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 341.047768][ T5177] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 341.055854][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 341.068623][ T45] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 341.084775][ T45] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.111473][ T45] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.156328][ T5177] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 341.175957][ T45] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.214740][ T45] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.252025][ T5177] usb 3-1: USB disconnect, device number 8 [ 341.273666][ T45] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.320428][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.466495][ T7672] loop2: detected capacity change from 0 to 256 [ 341.578108][ T45] usb 4-1: GET_CAPABILITIES returned 0 [ 341.599728][ T45] usbtmc 4-1:16.0: can't read capabilities [ 342.267494][ T7664] loop4: detected capacity change from 0 to 32768 [ 342.297597][ T7664] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7664) [ 342.327990][ T45] usb 4-1: USB disconnect, device number 3 [ 342.415500][ T7664] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 342.445042][ T7664] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 342.824003][ T7664] BTRFS info (device loop4): rebuilding free space tree [ 342.970879][ T7664] BTRFS info (device loop4): disabling free space tree [ 342.990665][ T7664] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 343.031623][ T7664] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 343.251788][ T7673] loop0: detected capacity change from 0 to 32768 [ 343.270559][ T29] audit: type=1800 audit(1719080635.738:342): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 343.322569][ T7673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7673) [ 343.365711][ T29] audit: type=1800 audit(1719080635.768:343): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 343.386418][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.579805][ T7703] ALSA: mixer_oss: invalid OSS volume 'LIN' [ 343.789533][ T7673] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.825835][ T7673] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 344.006440][ T7673] BTRFS info (device loop0): using free-space-tree [ 344.434833][ T7673] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 344.436137][ T7673] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 344.558091][ T7735] loop2: detected capacity change from 0 to 256 [ 344.587664][ T7673] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 344.589017][ T7673] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 344.651814][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 344.753844][ T7673] BTRFS error (device loop0): open_ctree failed [ 344.876587][ T5435] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 345.400656][ T7750] fuse: Bad value for 'fd' [ 347.362322][ T7769] loop1: detected capacity change from 0 to 256 [ 347.528552][ T7775] wireguard0: entered promiscuous mode [ 347.534168][ T7775] wireguard0: entered allmulticast mode [ 347.863477][ T7769] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 349.072286][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.277057][ T7807] bridge0: port 3(veth0) entered blocking state [ 349.289575][ T7807] bridge0: port 3(veth0) entered disabled state [ 349.305107][ T7807] veth0: entered allmulticast mode [ 349.369103][ T5186] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 349.588823][ T5186] usb 6-1: Using ep0 maxpacket: 32 [ 349.638110][ T5186] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 349.690573][ T5186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.761989][ T7807] veth0: entered promiscuous mode [ 350.167004][ T7807] bridge0: port 3(veth0) entered blocking state [ 350.173491][ T7807] bridge0: port 3(veth0) entered forwarding state [ 350.202195][ T5186] usb 6-1: config 0 descriptor?? [ 350.245065][ T5186] as10x_usb: device has been detected [ 350.264897][ T5186] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 350.358099][ T5186] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 350.419326][ T5186] as10x_usb: error during firmware upload part1 [ 350.433088][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.456081][ T5186] Registered device nBox DVB-T Dongle [ 350.465436][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.480860][ T7815] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 350.539106][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.558438][ T7817] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 350.562254][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.643013][ T5186] usb 6-1: USB disconnect, device number 5 [ 350.706322][ T5186] Unregistered device nBox DVB-T Dongle [ 350.721261][ T5186] as10x_usb: device has been disconnected [ 350.895647][ T7822] fuse: Bad value for 'fd' [ 352.900917][ T7845] loop2: detected capacity change from 0 to 128 [ 353.509354][ T7846] loop5: detected capacity change from 0 to 1024 [ 354.854767][ T5134] Bluetooth: hci5: command 0x0406 tx timeout [ 354.888120][ T29] audit: type=1804 audit(1719080647.348:344): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3567359453/syzkaller.EtyY09/14/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 355.005899][ T7851] loop4: detected capacity change from 0 to 512 [ 355.063005][ T7846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.271506][ T29] audit: type=1800 audit(1719080647.728:345): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=864 res=0 errno=0 [ 355.366305][ T29] audit: type=1804 audit(1719080647.788:346): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/157/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=864 res=1 errno=0 [ 355.595034][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 355.781047][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 355.813738][ T9] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 355.845747][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.877576][ T9] usb 1-1: config 0 descriptor?? [ 356.009792][ T7885] wireguard0: entered promiscuous mode [ 356.015951][ T7885] wireguard0: entered allmulticast mode [ 356.230476][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.291383][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.509588][ T9] as10x_usb: device has been detected [ 356.539941][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.569410][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 356.578384][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.909856][ T29] audit: type=1804 audit(1719080649.378:347): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1637817018/syzkaller.qI7YQw/102/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 357.877016][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 357.960905][ T9] as10x_usb: error during firmware upload part1 [ 358.009535][ T9] Registered device nBox DVB-T Dongle [ 358.018651][ T9] usb 1-1: USB disconnect, device number 9 [ 358.216945][ T9] Unregistered device nBox DVB-T Dongle [ 358.227438][ T9] as10x_usb: device has been disconnected [ 358.652053][ T7919] loop0: detected capacity change from 0 to 512 [ 358.795283][ T7923] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 359.898290][ T7936] wireguard0: entered promiscuous mode [ 359.903818][ T7936] wireguard0: entered allmulticast mode [ 360.194850][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 360.424104][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 360.465932][ T9] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 360.504750][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.513115][ T29] audit: type=1804 audit(1719080652.978:348): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3567359453/syzkaller.EtyY09/20/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 360.565821][ T9] usb 4-1: config 0 descriptor?? [ 360.579160][ T9] as10x_usb: device has been detected [ 360.586730][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 360.621429][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 360.650290][ T7957] loop5: detected capacity change from 0 to 128 [ 360.699090][ T9] as10x_usb: error during firmware upload part1 [ 360.726883][ T9] Registered device nBox DVB-T Dongle [ 360.782340][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.822830][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.878939][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.914195][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.965810][ T9] usb 4-1: USB disconnect, device number 4 [ 361.044261][ T7962] loop1: detected capacity change from 0 to 512 [ 361.156889][ T9] Unregistered device nBox DVB-T Dongle [ 361.167631][ T9] as10x_usb: device has been disconnected [ 362.971068][ T7992] wireguard0: entered promiscuous mode [ 362.977415][ T7992] wireguard0: entered allmulticast mode [ 363.254724][ T29] audit: type=1804 audit(1719080655.178:349): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2396661356/syzkaller.HCmqmS/80/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 363.949738][ T8005] loop1: detected capacity change from 0 to 128 [ 364.553002][ T8017] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 365.744837][ T29] audit: type=1804 audit(1719080658.208:350): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2396661356/syzkaller.HCmqmS/82/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 365.817115][ T29] audit: type=1804 audit(1719080658.288:351): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/168/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 [ 366.575952][ T29] audit: type=1804 audit(1719080658.998:352): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2396661356/syzkaller.HCmqmS/83/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 367.127946][ T8058] loop3: detected capacity change from 0 to 128 [ 367.691979][ T8060] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.373702][ T8075] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 369.494514][ T8075] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 369.681772][ T29] audit: type=1804 audit(1719080662.148:353): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1353125098/syzkaller.T9eOAr/172/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 370.445620][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 370.652518][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 370.698763][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.740005][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 370.762786][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 371.057273][ T9] usb 5-1: Manufacturer: syz [ 371.068901][ T9] usb 5-1: config 0 descriptor?? [ 372.547798][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.577544][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.634973][ T9] rc_core: IR keymap rc-hauppauge not found [ 372.640938][ T9] Registered IR keymap rc-empty [ 372.680778][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.699946][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 372.762812][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 372.855524][ T9] usb 5-1: USB disconnect, device number 6 [ 373.252082][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.371399][ T8126] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 373.381112][ T8126] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 373.389978][ T8126] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 373.398817][ T8126] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 373.462960][ T8126] vxlan1: entered promiscuous mode [ 373.497839][ T8133] ip6_vti0: mtu greater than device maximum [ 376.275827][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 376.495269][ T8168] loop3: detected capacity change from 0 to 128 [ 376.578950][ T25] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 376.594782][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.647113][ T25] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 376.676834][ T25] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 376.954747][ T25] usb 2-1: Manufacturer: syz [ 377.001578][ T25] usb 2-1: config 0 descriptor?? [ 377.240894][ T29] audit: type=1800 audit(1719080669.708:354): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1950 res=0 errno=0 [ 377.356972][ T8180] team0: entered promiscuous mode [ 377.362094][ T8180] team_slave_0: entered promiscuous mode [ 377.367951][ T25] rc_core: IR keymap rc-hauppauge not found [ 377.389907][ T8180] team_slave_1: entered promiscuous mode [ 377.390554][ T25] Registered IR keymap rc-empty [ 377.446550][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 377.478204][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 377.481744][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.516322][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 377.534326][ T8179] team0: left promiscuous mode [ 377.565740][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.573598][ T8179] team_slave_0: left promiscuous mode [ 377.597650][ T8179] team_slave_1: left promiscuous mode [ 377.632884][ T5079] usb 2-1: USB disconnect, device number 5 [ 377.752510][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.825004][ T8188] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.837211][ T8188] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.848586][ T8188] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.857457][ T8188] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.878721][ T8188] vxlan0: entered promiscuous mode [ 377.969558][ T8165] loop4: detected capacity change from 0 to 32768 [ 377.992562][ T8165] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8165) [ 378.047062][ T8165] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.088949][ T8165] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 378.124227][ T8165] BTRFS info (device loop4): using free-space-tree [ 378.533212][ T8210] loop2: detected capacity change from 0 to 512 [ 378.604397][ T5435] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 380.320424][ T8250] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 380.554984][ T8250] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 381.628491][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 381.722204][ T8268] veth0: left allmulticast mode [ 381.773504][ T8268] veth0: left promiscuous mode [ 381.796198][ T8268] bridge0: port 3(veth0) entered disabled state [ 381.864868][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 381.877856][ T8268] bridge_slave_0: left allmulticast mode [ 381.895658][ T8271] loop1: detected capacity change from 0 to 512 [ 381.897527][ T8268] bridge_slave_0: left promiscuous mode [ 381.923284][ T45] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 381.957879][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.981040][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.004087][ T45] usb 4-1: config 0 descriptor?? [ 382.045796][ T8268] bridge_slave_1: left allmulticast mode [ 382.085822][ T45] as10x_usb: device has been detected [ 382.102186][ T45] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 382.114076][ T8268] bridge_slave_1: left promiscuous mode [ 382.161892][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.260268][ T45] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 382.279391][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.306711][ T8268] bond0: (slave bond_slave_0): Releasing backup interface [ 382.319889][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.342563][ T45] as10x_usb: error during firmware upload part1 [ 382.365984][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.376040][ T45] Registered device nBox DVB-T Dongle [ 382.410703][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.456342][ T8268] bond0: (slave bond_slave_1): Releasing backup interface [ 382.569192][ T45] usb 4-1: USB disconnect, device number 5 [ 382.654420][ T8268] team0: Port device team_slave_0 removed [ 382.678833][ T45] Unregistered device nBox DVB-T Dongle [ 382.690413][ T45] as10x_usb: device has been disconnected [ 382.735444][ T8288] loop1: detected capacity change from 0 to 128 [ 382.737504][ T8268] team0: Port device team_slave_1 removed [ 382.774446][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.793627][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.859298][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.881790][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.993708][ T8268] bond0: (slave netdevsim0): Releasing backup interface [ 383.403325][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 384.718036][ T5179] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 384.749907][ T8320] loop4: detected capacity change from 0 to 512 [ 385.025129][ T5179] usb 4-1: Using ep0 maxpacket: 32 [ 385.689776][ T5179] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 385.729731][ T5179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.773727][ T8324] bridge_slave_0: left allmulticast mode [ 385.799005][ T5179] usb 4-1: config 0 descriptor?? [ 385.828023][ T8324] bridge_slave_0: left promiscuous mode [ 385.852605][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.884945][ T5179] as10x_usb: device has been detected [ 385.896669][ T5179] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 385.938619][ T8324] bridge_slave_1: left allmulticast mode [ 385.980868][ T8324] bridge_slave_1: left promiscuous mode [ 386.013134][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.050746][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.063297][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.071014][ T5179] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 386.149980][ T8324] bond0: (slave bond_slave_0): Releasing backup interface [ 386.151791][ T5179] as10x_usb: error during firmware upload part1 [ 386.199309][ T5179] Registered device nBox DVB-T Dongle [ 386.206145][ T8324] bond0: (slave bond_slave_1): Releasing backup interface [ 386.219655][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.237609][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.278624][ T5175] usb 4-1: USB disconnect, device number 6 [ 386.357587][ T5175] Unregistered device nBox DVB-T Dongle [ 386.366927][ T5175] as10x_usb: device has been disconnected [ 386.382593][ T8324] team0: Port device team_slave_0 removed [ 386.470830][ T8324] team0: Port device team_slave_1 removed [ 386.492463][ T8324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.524154][ T8324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.567898][ T8324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.585753][ T8324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.650241][ T8324] bond0: (slave netdevsim0): Releasing backup interface [ 387.247504][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.334361][ T29] audit: type=1800 audit(1719080679.798:355): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1957 res=0 errno=0 [ 387.964028][ T8378] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.159140][ T8383] bridge1: port 1(gretap1) entered blocking state [ 388.195019][ T8383] bridge1: port 1(gretap1) entered disabled state [ 388.216204][ T8383] gretap1: entered allmulticast mode [ 388.238030][ T8383] gretap1: entered promiscuous mode [ 388.564772][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 388.627649][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.634038][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.739115][ T8404] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 388.769549][ T8404] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 388.785438][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 388.813639][ T45] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 388.834752][ T5179] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 388.850771][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.866731][ T45] usb 1-1: config 0 descriptor?? [ 388.913796][ T45] as10x_usb: device has been detected [ 388.928525][ T45] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 389.034935][ T5179] usb 2-1: Using ep0 maxpacket: 8 [ 389.048973][ T5179] usb 2-1: config index 0 descriptor too short (expected 260, got 27) [ 389.058014][ T45] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 389.075696][ T5179] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 389.092184][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.118678][ T45] as10x_usb: error during firmware upload part1 [ 389.132151][ T5179] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 389.141844][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.150986][ T45] Registered device nBox DVB-T Dongle [ 389.153308][ T5179] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.195531][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.215111][ T5179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.234602][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.284987][ T45] usb 1-1: USB disconnect, device number 10 [ 389.370060][ T45] Unregistered device nBox DVB-T Dongle [ 389.373698][ T45] as10x_usb: device has been disconnected [ 389.476915][ T5179] usb 2-1: string descriptor 0 read error: -71 [ 389.509497][ T5179] usb 2-1: USB disconnect, device number 6 [ 389.582564][ T8418] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 389.595395][ T8418] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 389.603836][ T8418] CPU: 0 PID: 8418 Comm: syz-executor.5 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 389.614376][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 389.624460][ T8418] RIP: 0010:iter_file_splice_write+0xa24/0x10b0 [ 389.630760][ T8418] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 b1 04 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 1a 05 00 00 49 8b 54 24 08 4c 89 ee 4c 89 ff 83 [ 389.650411][ T8418] RSP: 0018:ffffc9000334f930 EFLAGS: 00010212 [ 389.656514][ T8418] RAX: 000000000003e381 RBX: dffffc0000000000 RCX: ffffc90009b2c000 [ 389.664514][ T8418] RDX: 0000000000000001 RSI: ffffffff820b19dc RDI: 0000000000000008 [ 389.672515][ T8418] RBP: 0000000000000010 R08: 0000000000000006 R09: 0000000000000000 [ 389.680506][ T8418] R10: 7ffffffffffeffff R11: 0000000000000002 R12: 0000000000000000 [ 389.688501][ T8418] R13: ffff88805a64a800 R14: 7ffffffffffeffff R15: ffff88807c69f800 [ 389.696495][ T8418] FS: 00007fe1c1b726c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 389.705451][ T8418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.712065][ T8418] CR2: 000055558e11c938 CR3: 000000007dde0000 CR4: 0000000000350ef0 [ 389.720064][ T8418] Call Trace: [ 389.723376][ T8418] [ 389.726315][ T8418] ? show_regs+0x8c/0xa0 [ 389.730606][ T8418] ? die_addr+0x4f/0xd0 [ 389.734897][ T8418] ? exc_general_protection+0x155/0x230 [ 389.740595][ T8418] ? asm_exc_general_protection+0x26/0x30 [ 389.746370][ T8418] ? iter_file_splice_write+0x9ec/0x10b0 [ 389.752043][ T8418] ? iter_file_splice_write+0xa24/0x10b0 [ 389.757728][ T8418] ? __pfx_iter_file_splice_write+0x10/0x10 [ 389.763659][ T8418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.769413][ T8418] ? __pfx_lock_acquire+0x10/0x10 [ 389.774479][ T8418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.780141][ T8418] ? __pfx_iter_file_splice_write+0x10/0x10 [ 389.786075][ T8418] direct_splice_actor+0x19e/0x6d0 [ 389.791227][ T8418] splice_direct_to_actor+0x349/0xa40 [ 389.796644][ T8418] ? __pfx_direct_splice_actor+0x10/0x10 [ 389.802405][ T8418] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 389.808328][ T8418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.813994][ T8418] ? __fget_files+0x24c/0x400 [ 389.818730][ T8418] ? __pfx_lock_release+0x10/0x10 [ 389.823793][ T8418] do_splice_direct+0x17e/0x250 [ 389.828678][ T8418] ? __pfx_do_splice_direct+0x10/0x10 [ 389.834083][ T8418] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 389.840016][ T8418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.845681][ T8418] do_sendfile+0xb1e/0xe50 [ 389.850154][ T8418] ? __pfx_do_sendfile+0x10/0x10 [ 389.855138][ T8418] ? __rseq_handle_notify_resume+0x663/0x1090 [ 389.861281][ T8418] __x64_sys_sendfile64+0x1da/0x220 [ 389.866513][ T8418] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 389.872269][ T8418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.877941][ T8418] do_syscall_64+0xcd/0x250 [ 389.882491][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.888466][ T8418] RIP: 0033:0x7fe1c0e7d0a9 [ 389.892900][ T8418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 389.912550][ T8418] RSP: 002b:00007fe1c1b720c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 389.920993][ T8418] RAX: ffffffffffffffda RBX: 00007fe1c0fb3f80 RCX: 00007fe1c0e7d0a9 [ 389.928991][ T8418] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 389.936980][ T8418] RBP: 00007fe1c0eec074 R08: 0000000000000000 R09: 0000000000000000 [ 389.944969][ T8418] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 389.952961][ T8418] R13: 000000000000000b R14: 00007fe1c0fb3f80 R15: 00007ffee15ac998 [ 389.960966][ T8418] [ 389.963993][ T8418] Modules linked in: 2024/06/22 18:24:42 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 389.994783][ T8418] ---[ end trace 0000000000000000 ]--- [ 390.000304][ T8418] RIP: 0010:iter_file_splice_write+0xa24/0x10b0 [ 390.029695][ T8418] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 b1 04 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 1a 05 00 00 49 8b 54 24 08 4c 89 ee 4c 89 ff 83 [ 390.180528][ T8418] RSP: 0018:ffffc9000334f930 EFLAGS: 00010212 [ 390.189666][ T8418] RAX: 000000000003e381 RBX: dffffc0000000000 RCX: ffffc90009b2c000 [ 390.234772][ T8418] RDX: 0000000000000001 RSI: ffffffff820b19dc RDI: 0000000000000008 [ 390.242842][ T8418] RBP: 0000000000000010 R08: 0000000000000006 R09: 0000000000000000 [ 390.264801][ T8418] R10: 7ffffffffffeffff R11: 0000000000000002 R12: 0000000000000000 [ 390.272827][ T8418] R13: ffff88805a64a800 R14: 7ffffffffffeffff R15: ffff88807c69f800 [ 390.324765][ T8418] FS: 00007fe1c1b726c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 390.344771][ T8418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.351418][ T8418] CR2: 00007f1818784038 CR3: 000000007dde0000 CR4: 0000000000350ef0 [ 390.404780][ T8418] Kernel panic - not syncing: Fatal exception [ 390.411240][ T8418] Kernel Offset: disabled [ 390.415602][ T8418] Rebooting in 86400 seconds..