last executing test programs: 16.078905029s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "2dd0"}}, &(0x7f0000000500)={0x0, 0x22, 0x2c, {[@main=@item_4={0x3, 0x0, 0x8, "86ea9f22"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xb, "7e34531b"}, @local=@item_4={0x3, 0x2, 0x2, "ac561184"}, @global=@item_4={0x3, 0x1, 0x0, "0f0edfa0"}, @local=@item_4={0x3, 0x2, 0x7, "5f936b27"}, @global=@item_4={0x3, 0x1, 0x9, '8\fm%'}, @global=@item_4={0x3, 0x1, 0x2, "ece95f9e"}, @global=@item_012={0x2, 0x1, 0x1, "b443"}, @main=@item_4={0x3, 0x0, 0xc, "3c984be5"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x1f, 0x1, {0x22, 0x2be}}}}, &(0x7f0000001000)={0x2c, &(0x7f0000000d00)={0x0, 0x11, 0xff, "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"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x3f}, 0x0, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x3}}) r1 = syz_open_dev$hidraw(&(0x7f0000000700), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000000c0)={0x0, "892dd83a6c711bb2abe42ccf7fa68f72d169cfac342a42aac8a7359d247f68e57d8f0a33a85322b580a4020d0084828d72220f7759bd8e1e9e5d416b7be23866"}) 14.748311836s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff08000100ac1414"], 0x4c}}, 0x0) 14.640239818s ago: executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0xf980004, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 14.598274851s ago: executing program 2: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@flushoncommit}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nobarrier}, {@nodiscard}, {@ref_verify}, {@datacow}, {@nobarrier}, {@nodiscard}, {@clear_cache}, {@enospc_debug}, {@space_cache}, {@discard}, {@commit}]}, 0x3, 0x55a3, &(0x7f0000005640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 13.909312266s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) ioctl$TCSETSF2(r1, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "defcf78181a573d2e23d4209c6c9f75800"}) 13.382588422s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000002300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_remove_blocks\x00', r0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 9.694395969s ago: executing program 0: mlockall(0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000010c0)) 9.30152521s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000380)='\xc0\x87:*\x18\xc1k\xad\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x00\x00\x00\x00\xe2\xce:\xb5\xb7\xc4\xde\xae\xb6\x1c\xbf\xa2\x12\xa5\x18\xba[\xc7%\x88 \xeeQR\x9f\xa2\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\b6\x86\xc8\xe9/\x19w4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe7\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\x15\x0e\x00\x00\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\b\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\x05\x00\x00\x00\x84\xf4\"\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xc7\x10\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v(\xb9\xf1\a\x85\xdf\x882\xaa\x83\xb7*}\x042\xc6\xf9\xbe\xfeI\x8b\xd4/`\xabh~\xcb\xb9j!\xfc\xcb\xfd~n\xd4\x10Cv/\x8a\x1eW\x87\x06\xcd\xa0\x91\xacJ\xf5.\x14\xe6\xe8F\xbe\xf8A\x9flx\x0e\xeb\xe9\xac9\x7f\x1aII\xdd\xfc1\fP\x05\x8d#\xec\xeb\x92g~&!\x90J\xd0\xf1\xac\xd4\xd6\xd4\b\x90\xed\xca\x17\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xd, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000a) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8946, &(0x7f0000000080)) 7.589139524s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = dup3(r1, r0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tcp_mem(r2, 0x0, 0x0) shutdown(r2, 0x0) 7.520626667s ago: executing program 0: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x7fff}, {0x1, 0x7}], 0x2, 0x0) 7.444451025s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x5452, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x5452, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 7.233211589s ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = semget(0xffffffffffffffff, 0x8, 0x0) shmctl$SHM_LOCK(r0, 0xb) 7.180068109s ago: executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="1279e1d5d1ea0bb4661928bcd3a1bc557d089e725a5d79d63e93cb5dcde7b3756bfc329d79692fe70db1d4b1ab5d47f0b9dede0866e9967554be9b3e67fc3be29b10c5308719b6edf379ab22d321a6649aeab919e44ff1c6eafe2ee5fe8cd1bf2a6b226b4a1b8255cb5363739ea7bf710b4dc85840b612881c2b228e9a3d2d8c02455d0ae1c3e6e9472a5924454eb5bf0944a867b45d1d5f82ae36e727"], 0x7c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1}, 0x6e) listen(r3, 0x0) shutdown(r3, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x40, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x40}}, 0x0) 6.55952902s ago: executing program 0: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x60402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'gre0\x00', 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x6, &(0x7f0000000040), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfc}}, 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000ffdbdf25060000000c0099005cba00004f0000001400178004000246cacb5ef6329b1e1c5fd0953e2c00050004000500040003000400020008000500"], 0x48}, 0x1, 0x0, 0x0, 0x4048051}, 0x20000804) 5.418833114s ago: executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @dev, {[@cipso={0x86, 0x27, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x10, "9606053d0006ff00800000b61af9"}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @loopback, @loopback, @multicast2]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) 5.35837713s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x60, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) 5.265176294s ago: executing program 3: read(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 5.194146502s ago: executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f0000002700), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 1.25246532s ago: executing program 4: unshare(0x8040480) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200), 0x4) 1.244597361s ago: executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001040)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x20000}, 0x0) 1.22611246s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) 1.189044677s ago: executing program 0: socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x4, 0x3}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64=r3], 0x40}}, 0x0) 1.188549676s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x5c}}, 0x0) 1.164818091s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1400000035000b63d25a80643d66b7d808f2e2ff", 0x14}], 0x1}, 0x0) 1.153539836s ago: executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 1.082853263s ago: executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) shutdown(r0, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 1.073092698s ago: executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @local}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 1.022597573s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) add_key(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzsz7utwjAABdDrl88LEoiRmIsKMgA7ZAM6arZhjCArRGICoDin8Ef32pbDV93+uyHJPNcxTXZJNq/sLzmlS/9WH/tkSEpS2mvaGpWMTZJDs/YedVvaupz20309el6mclweymVb7/vUPwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADglz0DAAD//09ZCqY=") 892.060741ms ago: executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="1279e1d5d1ea0bb4661928bcd3a1bc557d089e725a5d79d63e93cb5dcde7b3756bfc329d79692fe70db1d4b1ab5d47f0b9dede0866e9967554be9b3e67fc3be29b10c5308719b6edf379ab22d321a6649aeab919e44ff1c6eafe2ee5fe8cd1bf2a6b226b4a1b8255cb5363739ea7bf710b4dc85840b612881c2b228e9a3d2d8c02455d0ae1c3e6e9472a5924454eb5bf0944a867b45d1d5f82ae36e727"], 0x7c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1}, 0x6e) listen(r3, 0x0) shutdown(r3, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x40, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 899059][ T6948] bcachefs (loop4): journal_replay... done [ 48.933540][ T6948] bcachefs (loop4): resume_logged_ops... done [ 48.935920][ T6948] bcachefs (loop4): delete_dead_inodes... done [ 48.941103][ T6948] bcachefs (loop4): done starting filesystem [ 48.973900][ T6962] loop3: detected capacity change from 0 to 32768 [ 48.977391][ T6962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6962) [ 49.001630][ T6962] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 49.011413][ T6310] bcachefs (loop4): shutting down [ 49.012824][ T6310] bcachefs (loop4): going read-only [ 49.014188][ T6310] bcachefs (loop4): finished waiting for writes to stop [ 49.021719][ T6962] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 49.024168][ T6962] BTRFS info (device loop3): using free-space-tree [ 49.060269][ T6310] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 49.062955][ T6310] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 49.070700][ T6310] bcachefs (loop4): shutdown complete, journal seq 12 [ 49.075572][ T6310] bcachefs (loop4): marking filesystem clean [ 49.088180][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x9aad7bef227776301125427a4dc34d91d9289b7716fb2ed168f265ae3392bdd6 level 0 [ 49.111247][ T6310] bcachefs (loop4): shutdown complete [ 49.129112][ T6962] BTRFS warning (device loop3): couldn't read tree root [ 49.207447][ T6962] BTRFS error (device loop3): open_ctree failed [ 49.307635][ T6962] Illegal XDP return value 4294967274 on prog (id 16) dev N/A, expect packet loss! [ 49.416387][ T6998] loop3: detected capacity change from 0 to 2048 [ 49.438930][ T6994] loop1: detected capacity change from 0 to 256 [ 49.441346][ T6994] exfat: Deprecated parameter 'utf8' [ 49.442846][ T6994] exfat: Bad value for 'umask' [ 49.464980][ T6998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 49.593405][ T6982] loop0: detected capacity change from 0 to 32768 [ 49.610758][ T6982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6982) [ 49.639280][ T7004] bond1: entered allmulticast mode [ 49.640835][ T7004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.643048][ T6982] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 49.664954][ T6982] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 49.673695][ T6982] BTRFS info (device loop0): using free-space-tree [ 49.799813][ T7027] loop3: detected capacity change from 0 to 512 [ 49.804032][ T7027] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 49.806706][ T7027] UDF-fs: Scanning with blocksize 512 failed [ 49.810425][ T7027] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 49.812323][ T7027] UDF-fs: Scanning with blocksize 1024 failed [ 49.814334][ T7027] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 49.816433][ T7027] UDF-fs: Scanning with blocksize 2048 failed [ 49.827289][ T7027] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 49.832390][ T6982] BTRFS info (device loop0): rebuilding free space tree [ 49.856945][ T7027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 49.894225][ T7033] loop1: detected capacity change from 0 to 512 [ 49.902416][ T7033] EXT4-fs (loop1): invalid inodes per group: 0 [ 49.902416][ T7033] [ 49.995267][ T6982] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 50.043802][ T6313] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.354483][ T6974] loop2: detected capacity change from 0 to 131072 [ 50.360606][ T6974] xfs: Unknown parameter 'defcontext' [ 50.420765][ T6542] I/O error, dev loop2, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 50.446834][ T7037] loop4: detected capacity change from 0 to 40427 [ 50.460536][ T7037] F2FS-fs (loop4): invalid crc value [ 50.463814][ T7037] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.491748][ T7037] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 50.586570][ T6310] syz-executor.4: attempt to access beyond end of device [ 50.586570][ T6310] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.595208][ T6310] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 50.713537][ T7056] loop3: detected capacity change from 0 to 128 [ 50.724486][ T7056] FAT-fs (loop3): Directory bread(block 160) failed [ 50.726689][ T7056] FAT-fs (loop3): Directory bread(block 161) failed [ 50.728432][ T7056] FAT-fs (loop3): Directory bread(block 162) failed [ 50.731905][ T7056] FAT-fs (loop3): Directory bread(block 163) failed [ 50.742060][ T7056] FAT-fs (loop3): Directory bread(block 164) failed [ 50.743839][ T7056] FAT-fs (loop3): Directory bread(block 165) failed [ 50.745826][ T7056] FAT-fs (loop3): Directory bread(block 166) failed [ 50.747583][ T7056] FAT-fs (loop3): Directory bread(block 167) failed [ 50.783809][ T7056] FAT-fs (loop3): Directory bread(block 160) failed [ 50.792286][ T7056] FAT-fs (loop3): Directory bread(block 161) failed [ 50.847132][ T7053] loop1: detected capacity change from 0 to 2048 [ 50.870998][ T7066] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.932687][ T7068] loop4: detected capacity change from 0 to 2048 [ 50.968486][ T7071] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.991906][ T7070] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 51.019104][ T7071] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 51.032201][ T7071] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 51.044348][ T7071] Remounting filesystem read-only [ 51.045863][ T567] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 51.047578][ T567] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 51.049580][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.066316][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.068688][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.071111][ T567] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 51.072817][ T567] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 51.101390][ T567] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 51.103329][ T567] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 51.120420][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.122843][ T567] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 51.124701][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.147547][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.149780][ T567] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 51.151564][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.153812][ T567] NILFS (loop4): discard dirty page: offset=131072, ino=3 [ 51.172695][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.176780][ T7062] loop0: detected capacity change from 0 to 32768 [ 51.179276][ T7062] btrfs: Unknown parameter 'inode_cache' [ 51.181027][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.183351][ T567] NILFS (loop4): discard dirty block: blocknr=46, size=1024 [ 51.201328][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 51.203926][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.206749][ T7079] tc_dump_action: action bad kind [ 51.209402][ T567] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 51.211223][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.213487][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.229994][ T567] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 51.231993][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.247523][ T567] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 51.249421][ T567] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 51.265678][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.267920][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.270142][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.294834][ T567] NILFS (loop4): discard dirty page: offset=0, ino=12 [ 51.296589][ T567] NILFS (loop4): discard dirty block: blocknr=17, size=1024 [ 51.298392][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.300674][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.325270][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.335588][ T567] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 51.337292][ T567] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 51.339147][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.341309][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.354052][ T7062] loop0: detected capacity change from 0 to 8 [ 51.372950][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.384908][ T567] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 51.386833][ T567] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 51.388765][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.390980][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.393208][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.415797][ T7068] NILFS (loop4): mounting fs with errors [ 51.459528][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 51.462118][ T6542] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.476297][ T7065] loop2: detected capacity change from 0 to 32768 [ 51.515197][ T7065] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 51.556676][ T8] ip6_tnl_xmit_ctl: 12 callbacks suppressed [ 51.556695][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.634444][ T7065] XFS (loop2): Ending clean mount [ 51.639759][ T7071] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 51.642576][ T7071] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 51.644972][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.654783][ T7071] Remounting filesystem read-only [ 51.659333][ T567] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 51.662154][ T567] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 51.663955][ T567] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 51.675402][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.678591][ T567] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 51.680468][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.708548][ T567] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 51.710479][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.722907][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.734823][ T567] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 51.736842][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.739103][ T567] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 51.740760][ T567] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 51.742571][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.752105][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.754369][ T6317] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 51.757971][ T7091] loop0: detected capacity change from 0 to 32768 [ 51.761092][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.763452][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.773561][ T567] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 51.776250][ T7091] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 51.776250][ T7091] [ 51.780052][ T567] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 51.782324][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.784656][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.793448][ T7091] ERROR: (device loop0): remounting filesystem as read-only [ 51.795673][ T567] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 51.800175][ T7091] ialloc: diAlloc returned -5! [ 51.802625][ T6310] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 51.808243][ T6310] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 51.810054][ T6310] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 51.812524][ T6310] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 51.817051][ T6310] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 51.818983][ T6310] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 51.831642][ T7083] loop1: detected capacity change from 0 to 32768 [ 51.851343][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.894998][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.913786][ T7083] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 51.924998][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.934393][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 51.994188][ T7116] loop2: detected capacity change from 0 to 64 [ 51.996584][ T7106] loop4: detected capacity change from 0 to 1024 [ 51.999994][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.004807][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 52.056873][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.061499][ T7083] XFS (loop1): Ending clean mount [ 52.111396][ T7102] loop3: detected capacity change from 0 to 32768 [ 52.115227][ T6360] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.124017][ T7116] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 52.166605][ T6316] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 52.188571][ T7102] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.269485][ T7102] XFS (loop3): Ending clean mount [ 52.275893][ T7102] XFS (loop3): Quotacheck needed: Please wait. [ 52.323917][ T7132] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.2'. [ 52.367408][ T7102] XFS (loop3): Quotacheck: Done. [ 52.472050][ T7134] loop0: detected capacity change from 0 to 128 [ 52.476261][ T7122] loop4: detected capacity change from 0 to 32768 [ 52.482846][ T7122] XFS: ikeep mount option is deprecated. [ 52.501174][ T7122] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.607636][ T7158] loop1: detected capacity change from 0 to 512 [ 52.613017][ T7122] XFS (loop4): Ending clean mount [ 52.620939][ T7122] XFS (loop4): Quotacheck needed: Please wait. [ 52.631986][ T7158] EXT4-fs (loop1): invalid inodes per group: 0 [ 52.631986][ T7158] [ 52.676756][ T6326] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.683400][ T7122] XFS (loop4): Quotacheck: Done. [ 52.701816][ T7162] loop0: detected capacity change from 0 to 16 [ 52.704407][ T7162] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 52.720219][ T6310] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.724414][ T7161] [U] ÿ [ 53.163665][ T7171] loop4: detected capacity change from 0 to 32768 [ 53.177249][ T7171] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 53.211427][ T7171] XFS (loop4): Starting recovery (logdev: internal) [ 53.219676][ T7171] XFS (loop4): Ending recovery (logdev: internal) [ 53.313511][ T6310] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 53.391318][ T7194] loop1: detected capacity change from 0 to 16 [ 53.395951][ T7194] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 53.433707][ T7193] [U] ÿ [ 53.578155][ T7177] loop0: detected capacity change from 0 to 32768 [ 53.712147][ T7177] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 53.719470][ T7177] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 53.788874][ T7177] bcachefs (loop0): alloc_read... done [ 53.798857][ T7177] bcachefs (loop0): stripes_read... done [ 53.800474][ T7177] bcachefs (loop0): snapshots_read... done [ 53.817627][ T7177] bcachefs (loop0): journal_replay... done [ 53.819294][ T7177] bcachefs (loop0): resume_logged_ops... done [ 53.820905][ T7177] bcachefs (loop0): going read-write [ 53.879029][ T7177] bcachefs (loop0): done starting filesystem [ 53.972932][ T6313] bcachefs (loop0): shutting down [ 53.974374][ T6313] bcachefs (loop0): going read-only [ 53.981214][ T7206] loop4: detected capacity change from 0 to 32768 [ 53.992703][ T7206] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7206) [ 54.004847][ T6313] bcachefs (loop0): finished waiting for writes to stop [ 54.018015][ T7206] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 54.020847][ T7206] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 54.034328][ T7224] loop1: detected capacity change from 0 to 512 [ 54.036476][ T7206] BTRFS info (device loop4): using free-space-tree [ 54.051082][ T7224] EXT4-fs (loop1): invalid inodes per group: 0 [ 54.051082][ T7224] [ 54.056964][ T6313] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 54.059552][ T6313] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 54.091316][ T6313] bcachefs (loop0): shutdown complete, journal seq 9 [ 54.095393][ T6313] bcachefs (loop0): marking filesystem clean [ 54.118134][ T6540] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 54.142522][ T6313] bcachefs (loop0): shutdown complete [ 54.297109][ T7199] loop2: detected capacity change from 0 to 65536 [ 54.302009][ T7199] xfs: Unknown parameter 'rootcontext' [ 54.372100][ T6540] I/O error, dev loop2, sector 65408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 54.705790][ T7245] sctp: [Deprecated]: syz-executor.2 (pid 7245) Use of int in max_burst socket option deprecated. [ 54.705790][ T7245] Use struct sctp_assoc_value instead [ 54.716318][ T7246] loop3: detected capacity change from 0 to 512 [ 54.749861][ T7246] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 54.756389][ T7246] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 54.793943][ T7246] EXT4-fs (loop3): 1 truncate cleaned up [ 54.810527][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.848497][ T7246] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 54.862045][ T7246] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 54.911749][ T6326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.914306][ T6310] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 54.953082][ T7250] loop1: detected capacity change from 0 to 32768 [ 54.964359][ T7250] bcachefs (/dev/loop1): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81) [ 54.991917][ T7252] loop0: detected capacity change from 0 to 256 [ 55.020737][ T7252] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 55.040220][ T7252] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 55.053987][ T7250] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 55.078242][ T7250] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 55.160190][ T7250] bcachefs (loop1): alloc_read... done [ 55.165462][ T7250] bcachefs (loop1): stripes_read... done [ 55.166986][ T7250] bcachefs (loop1): snapshots_read... done [ 55.169811][ T7250] bcachefs (loop1): journal_replay... done [ 55.171797][ T7250] bcachefs (loop1): resume_logged_ops... done [ 55.173760][ T7250] bcachefs (loop1): going read-write [ 55.190401][ T7250] bcachefs (loop1): done starting filesystem [ 55.199992][ T7273] loop4: detected capacity change from 0 to 1024 [ 55.273535][ T7273] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 55.461961][ T7281] wireguard: wireguard0: Could not create IPv6 socket [ 55.464202][ T7281] wireguard0: entered promiscuous mode [ 55.466381][ T7281] wireguard0: entered allmulticast mode [ 55.516442][ T6316] bcachefs (loop1): shutting down [ 55.524475][ T6316] bcachefs (loop1): going read-only [ 55.533033][ T6316] bcachefs (loop1): finished waiting for writes to stop [ 55.575766][ T6316] bcachefs (loop1): flushing journal and stopping allocators, journal seq 14 [ 55.585695][ T6316] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 15 [ 55.603485][ T6316] bcachefs (loop1): shutdown complete, journal seq 16 [ 55.609567][ T6316] bcachefs (loop1): marking filesystem clean [ 55.628351][ T6316] bcachefs (loop1): shutdown complete [ 55.748991][ T7303] loop0: detected capacity change from 0 to 512 [ 55.758691][ T7306] loop2: detected capacity change from 0 to 512 [ 55.776020][ T7306] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.793607][ T7306] EXT4-fs (loop2): 1 truncate cleaned up [ 55.796833][ T7306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.889286][ T7310] overlay: ./file0 is not a directory [ 55.933496][ T6317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.739764][ T7321] loop4: detected capacity change from 0 to 1024 [ 56.742506][ T7318] loop2: detected capacity change from 0 to 16 [ 56.751991][ T7318] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 56.785377][ T7321] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 56.813779][ T7315] [U] ÿ [ 56.997046][ T6440] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.032928][ T7336] loop1: detected capacity change from 0 to 128 [ 57.654263][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 57.658732][ T7336] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 57.715584][ T7336] overlay: filesystem on ./file0 not supported [ 58.021870][ T7328] loop0: detected capacity change from 0 to 32768 [ 58.065424][ T7328] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7328) [ 58.207361][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 58.312380][ T7328] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 58.521553][ T7328] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 58.583297][ T7328] BTRFS info (device loop0): disk space caching is enabled [ 58.688756][ T193] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 58.711396][ T7359] loop2: detected capacity change from 0 to 256 [ 58.730602][ T7360] loop4: detected capacity change from 0 to 16 [ 58.756298][ T6540] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 58.771239][ T7360] erofs: (device loop4): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 58.790009][ T7328] BTRFS info (device loop0): rebuilding free space tree [ 58.812934][ T7371] loop1: detected capacity change from 0 to 64 [ 58.815980][ T7371] hfs: unable to parse mount options [ 58.833654][ T7328] BTRFS info (device loop0): disabling free space tree [ 58.839034][ T7328] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 58.849399][ T7328] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 58.863887][ T6540] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 58.928942][ T7376] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.3'. [ 58.945126][ T7376] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 58.947255][ T7376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.968877][ T7376] vhci_hcd vhci_hcd.0: Device attached [ 58.977624][ T7371] loop1: detected capacity change from 0 to 4096 [ 58.992015][ T7377] vhci_hcd: connection closed [ 58.997956][ T613] vhci_hcd: stop threads [ 59.007977][ T7380] loop2: detected capacity change from 0 to 1024 [ 59.010414][ T7380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.014321][ T613] vhci_hcd: release socket [ 59.021508][ T613] vhci_hcd: disconnect device [ 59.042771][ T7380] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 59.056873][ T7380] System zones: 0-1, 3-36 [ 59.070453][ T7380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.100915][ T6313] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 59.158665][ T6317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.236974][ T7373] loop4: detected capacity change from 0 to 32768 [ 59.278434][ T7373] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 59.303025][ T7394] loop0: detected capacity change from 0 to 1024 [ 59.357148][ T7373] XFS (loop4): Ending clean mount [ 59.366170][ T7394] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 59.369011][ T7405] loop1: detected capacity change from 0 to 4096 [ 59.379808][ T7373] XFS (loop4): Quotacheck needed: Please wait. [ 59.391383][ T30] audit: type=1400 audit(59.370:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7388 comm="syz-executor.0" dest=20000 netif=wpan0 [ 59.416910][ T30] audit: type=1400 audit(59.380:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7388 comm="syz-executor.0" dest=20000 netif=wpan0 [ 59.434442][ T7408] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.447885][ T7373] XFS (loop4): Quotacheck: Done. [ 59.459038][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.469487][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.472924][ T7409] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 59.584879][ T7409] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 59.595029][ T7409] team0: entered promiscuous mode [ 59.596428][ T7409] team_slave_0: entered promiscuous mode [ 59.616642][ T7416] loop1: detected capacity change from 0 to 2048 [ 59.619739][ T7409] team_slave_1: entered promiscuous mode [ 59.629502][ T7409] bridge0: port 3(team0) entered blocking state [ 59.638898][ T7409] bridge0: port 3(team0) entered disabled state [ 59.640968][ T7409] team0: entered allmulticast mode [ 59.647033][ T7409] team_slave_0: entered allmulticast mode [ 60.284930][ T7409] team_slave_1: entered allmulticast mode [ 60.290524][ T7409] team0: left allmulticast mode [ 60.319248][ T7409] team_slave_0: left allmulticast mode [ 60.321463][ T7416] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.329704][ T7409] team_slave_1: left allmulticast mode [ 60.354921][ T7416] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0 [ 60.506961][ T6310] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 60.574649][ T7414] loop0: detected capacity change from 0 to 32768 [ 60.674686][ T7414] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 60.757108][ T7426] loop3: detected capacity change from 0 to 32768 [ 60.759998][ T7426] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7426) [ 60.775189][ T7414] XFS (loop0): Ending clean mount [ 60.778016][ T7426] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 60.780736][ T7426] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 60.782946][ T7426] BTRFS info (device loop3): disk space caching is enabled [ 60.826543][ T7426] BTRFS info (device loop3): rebuilding free space tree [ 60.850732][ T7426] BTRFS info (device loop3): disabling free space tree [ 60.852613][ T7426] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 60.861452][ T7426] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.990134][ T7455] Bluetooth: MGMT ver 1.22 [ 60.991306][ T7455] Bluetooth: hci3: service_discovery: too big uuid_count value 12839 [ 61.003994][ T7455] fuse: Bad value for 'group_id' [ 61.005737][ T6326] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 61.019773][ T7457] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 61.026944][ T7455] loop1: detected capacity change from 0 to 256 [ 61.029045][ T7455] exfat: Bad value for 'uid' [ 61.066663][ T6542] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 61.191848][ T7436] loop4: detected capacity change from 0 to 32768 [ 61.209053][ T7436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7436) [ 61.239345][ T7436] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.241993][ T7436] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 61.244352][ T7436] BTRFS info (device loop4): using free-space-tree [ 61.287634][ T7461] loop3: detected capacity change from 0 to 8192 [ 61.290234][ T7463] loop2: detected capacity change from 0 to 1024 [ 61.291473][ T7461] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.336931][ T7463] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 61.390579][ T30] audit: type=1400 audit(61.340:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7462 comm="syz-executor.2" dest=20000 netif=wpan0 [ 61.391241][ T7455] loop1: detected capacity change from 0 to 32768 [ 61.399606][ T7461] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 61.409831][ T7455] xfs: Unknown parameter 'uid' [ 61.488597][ T7482] loop3: detected capacity change from 0 to 16 [ 61.505673][ T7482] erofs: (device loop3): mounted with root inode @ nid 36. [ 61.617298][ T7490] loop2: detected capacity change from 0 to 16 [ 61.620332][ T7490] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 61.749848][ T6440] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 61.757790][ T7498] loop2: detected capacity change from 0 to 256 [ 61.821692][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.913414][ T7506] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 61.951527][ T7508] loop2: detected capacity change from 0 to 1024 [ 61.988559][ T6310] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.004812][ T7508] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.012150][ T30] audit: type=1400 audit(61.990:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7507 comm="syz-executor.2" dest=20000 netif=wpan0 [ 62.166307][ T7502] loop3: detected capacity change from 0 to 32768 [ 62.172025][ T7502] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7502) [ 62.191258][ T7502] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 62.193895][ T7502] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 62.213742][ T7502] BTRFS info (device loop3): disk space caching is enabled [ 62.289457][ T7502] BTRFS info (device loop3): rebuilding free space tree [ 62.928571][ T7502] BTRFS info (device loop3): disabling free space tree [ 62.932755][ T7502] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 62.940009][ T7502] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.002336][ T7535] loop4: detected capacity change from 0 to 16 [ 63.007111][ T7535] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 63.054525][ T6326] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 63.136041][ T7540] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.150836][ T7540] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.153295][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.185989][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.188661][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.386430][ T7555] loop3: detected capacity change from 0 to 1024 [ 63.434782][ T30] audit: type=1400 audit(63.410:6): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7554 comm="syz-executor.3" dest=20000 netif=wpan0 [ 63.440024][ T7557] loop2: detected capacity change from 0 to 128 [ 63.449106][ T7557] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 63.469005][ T7557] overlay: filesystem on ./file0 not supported [ 63.566619][ T721] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 63.593479][ T7553] loop4: detected capacity change from 0 to 32768 [ 63.598974][ T7553] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7553) [ 63.615575][ T7553] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.618571][ T7553] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 63.620901][ T7553] BTRFS info (device loop4): using free-space-tree [ 63.643938][ T7564] loop2: detected capacity change from 0 to 16 [ 63.660530][ T7564] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 63.750435][ T7585] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 63.752681][ T7585] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 63.764032][ T7585] ipvlan1: entered promiscuous mode [ 63.765937][ T7585] ipvlan1: entered allmulticast mode [ 63.767299][ T7585] veth0_vlan: entered allmulticast mode [ 63.770306][ T7585] bridge0: port 3(ipvlan1) entered blocking state [ 63.772095][ T7585] bridge0: port 3(ipvlan1) entered disabled state [ 63.775482][ T7585] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 63.813724][ T7587] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 63.814477][ T6540] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 63.956505][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.958903][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.090542][ T7576] loop3: detected capacity change from 0 to 32768 [ 64.093968][ T7576] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7576) [ 64.099951][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.104629][ T7597] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 64.115060][ T7576] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 64.118169][ T7597] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.126765][ T7576] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 64.129331][ T7576] BTRFS info (device loop3): using free-space-tree [ 64.131290][ T7597] bridge0: port 3(team0) entered blocking state [ 64.133206][ T7597] bridge0: port 3(team0) entered disabled state [ 64.142047][ T7597] team0: entered allmulticast mode [ 64.143744][ T7597] team_slave_0: entered allmulticast mode [ 64.152301][ T7597] team_slave_1: entered allmulticast mode [ 64.175456][ T7597] team0: left allmulticast mode [ 64.176762][ T7597] team_slave_0: left allmulticast mode [ 64.178582][ T7597] team_slave_1: left allmulticast mode [ 64.498920][ T2312] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.500952][ T2312] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.581453][ T7631] loop1: detected capacity change from 0 to 128 [ 64.591539][ T7631] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 64.607563][ T7631] overlay: filesystem on ./file0 not supported [ 64.687736][ T567] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 64.739349][ T6310] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 64.789218][ T7634] syz-executor.1 (pid 7634) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 64.841304][ T7639] loop2: detected capacity change from 0 to 64 [ 64.872781][ T7639] Trying to free block not in datazone [ 64.943002][ T7643] loop4: detected capacity change from 0 to 16 [ 64.950974][ T7645] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.970396][ T7643] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 65.052752][ T30] audit: type=1326 audit(65.030:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7646 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa945d0e8 code=0x0 [ 65.103339][ T7651] loop4: detected capacity change from 0 to 1764 [ 65.288207][ T7659] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.345903][ T7661] loop4: detected capacity change from 0 to 1024 [ 65.411707][ T6326] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 65.417658][ T7661] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.519344][ T7665] loop3: detected capacity change from 0 to 128 [ 65.522843][ T7665] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 65.538200][ T7665] overlay: filesystem on ./file0 not supported [ 65.603462][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.610280][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.612284][ T613] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 65.618081][ T7667] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 65.620668][ T7667] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.623294][ T7667] team0: entered promiscuous mode [ 65.624919][ T7667] team_slave_0: entered promiscuous mode [ 65.628184][ T7667] team_slave_1: entered promiscuous mode [ 65.630326][ T7667] bridge0: port 3(team0) entered blocking state [ 65.632481][ T7667] bridge0: port 3(team0) entered disabled state [ 65.634395][ T7667] team0: entered allmulticast mode [ 65.643211][ T7667] team_slave_0: entered allmulticast mode [ 65.645075][ T7667] team_slave_1: entered allmulticast mode [ 65.648229][ T7667] bridge0: port 3(team0) entered blocking state [ 65.650595][ T7667] bridge0: port 3(team0) entered forwarding state [ 65.707388][ T7674] loop3: detected capacity change from 0 to 256 [ 65.712759][ T7674] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0xaa550008 [ 65.722743][ T7674] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 65.726058][ T7674] exFAT-fs (loop3): invalid boot region [ 65.727645][ T7674] exFAT-fs (loop3): failed to recognize exfat type [ 65.786811][ T25] IPVS: starting estimator thread 0... [ 65.886418][ T7675] IPVS: using max 26 ests per chain, 62400 per kthread [ 65.935451][ T7682] loop1: detected capacity change from 0 to 1024 [ 65.955060][ T6315] Bluetooth: Wrong link type (-57) [ 65.971110][ T7681] loop2: detected capacity change from 0 to 1024 [ 65.975875][ T7682] hfsplus: unable to load nls mapping "maccenteuroßecompse" [ 65.978409][ T7682] hfsplus: unable to parse mount options [ 65.979257][ T7681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.024111][ T6540] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.028367][ T7682] fuse: Unknown parameter 'bd' [ 66.036364][ T7682] loop1: detected capacity change from 0 to 256 [ 66.038187][ T7682] exfat: Bad value for 'umask' [ 66.082267][ T7681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.149741][ T7683] loop3: detected capacity change from 0 to 32768 [ 66.158103][ T7683] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78 [ 66.187727][ T7684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.233834][ T7683] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 66.238558][ T7683] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 66.293704][ T7683] bcachefs (loop3): alloc_read... done [ 66.295585][ T7683] bcachefs (loop3): stripes_read... done [ 66.297512][ T7683] bcachefs (loop3): snapshots_read... done [ 66.300071][ T7683] bcachefs (loop3): journal_replay... done [ 66.304297][ T7683] bcachefs (loop3): resume_logged_ops... done [ 66.306097][ T7683] bcachefs (loop3): going read-write [ 66.330371][ T7683] bcachefs (loop3): done starting filesystem [ 66.356781][ T7700] loop2: detected capacity change from 0 to 1024 [ 66.404286][ T7700] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 66.432631][ T7700] EXT4-fs (loop2): get root inode failed [ 66.434184][ T7700] EXT4-fs (loop2): mount failed [ 66.465201][ T7704] 9pnet_fd: Insufficient options for proto=fd [ 66.489812][ T7698] loop4: detected capacity change from 0 to 32768 [ 66.499797][ T7698] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7698) [ 66.526615][ T7698] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 66.529342][ T7698] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 66.531704][ T7698] BTRFS info (device loop4): using free-space-tree [ 66.536212][ T7706] bcachefs (loop3): dirent to missing inode: [ 66.536212][ T7706] u64s 7 type dirent 4096:1145047328784489552:U32_MAX len 0 ver 0: file0 -> 536870912 type dir [ 66.551790][ T25] bcachefs (loop3): going read-only [ 66.553519][ T5863] bcachefs (loop3): unable to write journal to sufficient devices [ 66.554388][ T25] bcachefs (loop3): finished waiting for writes to stop [ 66.569214][ T7706] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 8 [ 66.571304][ T7689] loop1: detected capacity change from 0 to 32768 [ 66.577641][ T7689] btrfs: Deprecated parameter 'usebackuproot' [ 66.579308][ T7689] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 66.583058][ T7689] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7689) [ 66.609077][ T25] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 66.610156][ T7689] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 66.611669][ T25] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 66.614095][ T7689] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 66.617067][ T25] bcachefs (loop3): unshutdown complete, journal seq 8 [ 66.621752][ T25] bcachefs (loop3): done going read-only, filesystem not clean [ 66.628608][ T7689] BTRFS info (device loop1): using free-space-tree [ 66.709642][ T7689] BTRFS info (device loop1): rebuilding free space tree [ 66.791974][ T6326] bcachefs (loop3): shutting down [ 66.820188][ T6326] bcachefs (loop3): shutdown complete [ 67.125835][ T7743] loop3: detected capacity change from 0 to 256 [ 67.135650][ T7743] exfat: Bad value for 'errors' [ 67.187347][ T6542] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 67.222385][ T6315] Bluetooth: hci5: sending frame failed (-49) [ 67.226318][ T5863] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 67.231593][ T7743] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 67.273763][ T7747] loop2: detected capacity change from 0 to 128 [ 67.284242][ T7747] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 67.318117][ T7747] overlay: filesystem on ./file0 not supported [ 67.400512][ T567] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 67.441231][ T7751] loop3: detected capacity change from 0 to 256 [ 67.450526][ T7751] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0xaa550008 [ 67.458202][ T7751] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 67.461367][ T7751] exFAT-fs (loop3): invalid boot region [ 67.462817][ T7751] exFAT-fs (loop3): failed to recognize exfat type [ 67.491466][ T7753] overlayfs: failed to resolve '/u': -2 [ 67.570458][ T6310] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 67.683838][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.713284][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.716572][ T7759] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 67.718970][ T7766] loop3: detected capacity change from 0 to 512 [ 67.721991][ T7759] bridge0: port 3(team0) entered blocking state [ 67.723677][ T7759] bridge0: port 3(team0) entered disabled state [ 67.732215][ T7759] team0: entered allmulticast mode [ 67.733634][ T7759] team_slave_0: entered allmulticast mode [ 67.738971][ T7759] team_slave_1: entered allmulticast mode [ 67.741130][ T7759] team0: left allmulticast mode [ 67.741937][ T7768] loop4: detected capacity change from 0 to 1024 [ 67.742463][ T7759] team_slave_0: left allmulticast mode [ 67.753092][ T7759] team_slave_1: left allmulticast mode [ 67.767088][ T7768] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.768695][ T7766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.964538][ T7777] loop4: detected capacity change from 0 to 16 [ 68.635049][ T7777] erofs: (device loop4): mounted with root inode @ nid 36. [ 68.824352][ T7773] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 68.834075][ T7773] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 68.837921][ T7773] EXT4-fs (loop3): This should not happen!! Data will be lost [ 68.837921][ T7773] [ 68.840386][ T7773] EXT4-fs (loop3): Total free blocks count 0 [ 68.841952][ T7773] EXT4-fs (loop3): Free/Dirty block details [ 68.843425][ T7773] EXT4-fs (loop3): free_blocks=39626 [ 68.844914][ T7773] EXT4-fs (loop3): dirty_blocks=1 [ 68.846197][ T7773] EXT4-fs (loop3): Block reservation details [ 68.847825][ T7773] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 68.970848][ T7780] loop4: detected capacity change from 0 to 128 [ 68.979012][ T7780] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 68.994180][ T7780] overlay: filesystem on ./file0 not supported [ 69.031613][ T6326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.068197][ T613] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 69.075159][ T7782] loop2: detected capacity change from 0 to 256 [ 69.078475][ T7782] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0xaa550008 [ 69.081580][ T7782] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 69.084158][ T7782] exFAT-fs (loop2): invalid boot region [ 69.089248][ T7782] exFAT-fs (loop2): failed to recognize exfat type [ 69.116962][ T25] IPVS: starting estimator thread 0... [ 69.153490][ T7787] loop4: detected capacity change from 0 to 256 [ 69.168186][ T7787] exFAT-fs (loop4): Invalid exboot-signature(sector = 2): 0xaa550008 [ 69.181325][ T7787] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 69.183899][ T7787] exFAT-fs (loop4): invalid boot region [ 69.188077][ T7787] exFAT-fs (loop4): failed to recognize exfat type [ 69.213591][ T25] IPVS: starting estimator thread 0... [ 69.215412][ T7785] IPVS: using max 26 ests per chain, 62400 per kthread [ 69.244366][ T7791] __nla_validate_parse: 4 callbacks suppressed [ 69.244382][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.251540][ T7793] dummy0: entered allmulticast mode [ 69.253295][ T7793] dummy0: left allmulticast mode [ 69.314829][ T7790] IPVS: using max 26 ests per chain, 62400 per kthread [ 69.358587][ T7784] loop3: detected capacity change from 0 to 32768 [ 69.364589][ T7784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7784) [ 69.378627][ T7784] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.381489][ T7784] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 69.383734][ T7784] BTRFS info (device loop3): using free-space-tree [ 69.430541][ T6326] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.519155][ T7817] loop4: detected capacity change from 0 to 1024 [ 69.533343][ T7819] loop3: detected capacity change from 0 to 1024 [ 69.555727][ T7817] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.641611][ T6542] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 69.647513][ T3725] cfg80211: failed to load regulatory.db [ 69.732024][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.734433][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.739743][ T7822] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 69.741879][ T7822] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.744216][ T7822] team0: entered promiscuous mode [ 69.748709][ T7822] team_slave_0: entered promiscuous mode [ 69.757914][ T7822] team_slave_1: entered promiscuous mode [ 69.759774][ T7822] bridge0: port 3(team0) entered blocking state [ 69.761590][ T7822] bridge0: port 3(team0) entered disabled state [ 69.763397][ T7822] team0: entered allmulticast mode [ 69.765452][ T7822] team_slave_0: entered allmulticast mode [ 69.767057][ T7822] team_slave_1: entered allmulticast mode [ 69.768915][ T7825] loop4: detected capacity change from 0 to 4096 [ 69.769698][ T7822] bridge0: port 3(team0) entered blocking state [ 69.772213][ T7822] bridge0: port 3(team0) entered forwarding state [ 70.018631][ T5863] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 70.021380][ T5863] Bluetooth: hci3: Injecting HCI hardware error event [ 70.027229][ T5863] Bluetooth: hci3: hardware error 0x00 [ 70.040870][ T7829] loop2: detected capacity change from 0 to 128 [ 70.044060][ T7829] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 70.064510][ T7829] overlay: filesystem on ./file0 not supported [ 70.156475][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 70.233473][ T7833] loop2: detected capacity change from 0 to 256 [ 70.237811][ T7833] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0xaa550008 [ 70.240864][ T7833] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 70.243452][ T7833] exFAT-fs (loop2): invalid boot region [ 70.245770][ T7833] exFAT-fs (loop2): failed to recognize exfat type [ 70.278154][ T6542] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 70.372341][ T7835] 9pnet_fd: Insufficient options for proto=fd [ 70.438109][ T7840] loop2: detected capacity change from 0 to 8 [ 70.449903][ T7840] SQUASHFS error: zlib decompression failed, data probably corrupt [ 70.452689][ T7840] SQUASHFS error: Failed to read block 0x9b: -5 [ 70.454591][ T7840] SQUASHFS error: Unable to read metadata cache entry [99] [ 70.458039][ T7840] SQUASHFS error: Unable to read inode 0x127 [ 70.717046][ T7852] loop3: detected capacity change from 0 to 4096 [ 70.719256][ T7852] ntfs3: Unknown parameter '/dev/ptmx' [ 70.756425][ T6542] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 70.810364][ T7849] loop4: detected capacity change from 0 to 32768 [ 70.888721][ T7849] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 70.892228][ T7849] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 70.905267][ T7849] bcachefs (loop4): alloc_read... done [ 70.910646][ T7849] bcachefs (loop4): stripes_read... done [ 70.912148][ T7849] bcachefs (loop4): snapshots_read... done [ 70.915404][ T7849] bcachefs (loop4): journal_replay... done [ 70.916915][ T7849] bcachefs (loop4): resume_logged_ops... done [ 70.918484][ T7849] bcachefs (loop4): going read-write [ 70.922550][ T7849] bcachefs (loop4): done starting filesystem [ 70.943126][ T7849] mmap: syz-executor.4 (7849) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.994101][ T6310] bcachefs (loop4): shutting down [ 70.998119][ T6310] bcachefs (loop4): going read-only [ 70.999481][ T6310] bcachefs (loop4): finished waiting for writes to stop [ 71.035263][ T6310] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 71.044229][ T6310] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 71.050720][ T6310] bcachefs (loop4): shutdown complete, journal seq 14 [ 71.053051][ T6310] bcachefs (loop4): marking filesystem clean [ 71.063943][ T6310] bcachefs (loop4): shutdown complete [ 71.395594][ T7866] loop4: detected capacity change from 0 to 1024 [ 71.418165][ T7866] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 71.436200][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.500683][ T7871] loop3: detected capacity change from 0 to 128 [ 71.508305][ T7871] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 71.516644][ T7870] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.524413][ T7871] overlay: filesystem on ./file0 not supported [ 71.602147][ T43] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 71.650308][ T7883] loop3: detected capacity change from 0 to 256 [ 71.653801][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.656449][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.660680][ T7878] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 71.663012][ T7878] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.672108][ T7883] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0xaa550008 [ 71.676781][ T7883] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 71.679633][ T7883] exFAT-fs (loop3): invalid boot region [ 71.681265][ T7883] exFAT-fs (loop3): failed to recognize exfat type [ 71.872074][ T7891] loop3: detected capacity change from 0 to 256 [ 71.884141][ T7891] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0xaa550008 [ 71.887987][ T7891] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 71.890595][ T7891] exFAT-fs (loop3): invalid boot region [ 71.891996][ T7891] exFAT-fs (loop3): failed to recognize exfat type [ 71.963154][ T7894] Injecting memory failure for pfn 0x1b057c at process virtual address 0x2024c000 [ 71.965994][ T7894] Memory failure: 0x1b057c: already hardware poisoned [ 72.042188][ T7899] loop3: detected capacity change from 0 to 1024 [ 72.068453][ T30] audit: type=1400 audit(72.050:8): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7898 comm="syz-executor.3" dest=20000 netif=wpan0 [ 72.074090][ T30] audit: type=1400 audit(72.050:9): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7898 comm="syz-executor.3" dest=20000 netif=wpan0 [ 72.122254][ T7901] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.142932][ T7903] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 72.208142][ T7904] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 72.241271][ T7911] loop2: detected capacity change from 0 to 128 [ 72.247189][ T7913] loop3: detected capacity change from 0 to 256 [ 72.250164][ T7913] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0xaa550008 [ 72.259296][ T5863] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 72.262201][ T7911] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 72.268226][ T7913] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 72.270822][ T7913] exFAT-fs (loop3): invalid boot region [ 72.272256][ T7913] exFAT-fs (loop3): failed to recognize exfat type [ 72.289440][ T7911] overlay: filesystem on ./file0 not supported [ 72.327918][ T6540] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 72.359727][ T567] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 72.432570][ T7920] loop2: detected capacity change from 0 to 2048 [ 72.451352][ T7920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.500614][ T7925] loop3: detected capacity change from 0 to 256 [ 72.516434][ T7920] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 72.520105][ T7925] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0xaa550008 [ 72.535187][ T7925] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 72.539065][ T7925] exFAT-fs (loop3): invalid boot region [ 72.540492][ T7925] exFAT-fs (loop3): failed to recognize exfat type [ 72.541281][ T7915] loop4: detected capacity change from 0 to 32768 [ 72.573695][ T6317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.663907][ T7915] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 72.668418][ T7915] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 72.684606][ T7915] bcachefs (loop4): alloc_read... done [ 72.686564][ T7915] bcachefs (loop4): stripes_read... done [ 72.688065][ T7915] bcachefs (loop4): snapshots_read... done [ 72.690754][ T7915] bcachefs (loop4): journal_replay... done [ 72.692259][ T7915] bcachefs (loop4): resume_logged_ops... done [ 72.694467][ T7915] bcachefs (loop4): going read-write [ 72.700901][ T7915] bcachefs (loop4): done starting filesystem [ 73.475262][ T7944] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.507568][ T7946] loop3: detected capacity change from 0 to 1024 [ 73.553843][ T30] audit: type=1400 audit(73.530:10): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7945 comm="syz-executor.3" dest=20000 netif=wpan0 [ 73.564888][ T30] audit: type=1400 audit(73.530:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7945 comm="syz-executor.3" dest=20000 netif=wpan0 [ 73.720405][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.780365][ T7941] loop2: detected capacity change from 0 to 40427 [ 73.784369][ T7941] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 73.788296][ T7941] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 73.793044][ T7941] F2FS-fs (loop2): Unrecognized mount option "fsyncµˆ“e=posix" or missing value [ 73.879623][ T6310] bcachefs (loop4): shutting down [ 73.881089][ T6310] bcachefs (loop4): going read-only [ 73.882493][ T6310] bcachefs (loop4): finished waiting for writes to stop [ 73.906594][ T6310] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 73.923630][ T6310] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 16 [ 73.937749][ T6310] bcachefs (loop4): shutdown complete, journal seq 17 [ 73.940324][ T6310] bcachefs (loop4): marking filesystem clean [ 73.949163][ T7957] loop2: detected capacity change from 0 to 128 [ 73.952374][ T6310] bcachefs (loop4): shutdown complete [ 73.956033][ T7957] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 73.975321][ T7957] overlay: filesystem on ./file0 not supported [ 74.059311][ T567] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 74.199754][ T7964] loop2: detected capacity change from 0 to 256 [ 74.204361][ T7964] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0xaa550008 [ 74.208523][ T7964] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 74.212552][ T7964] exFAT-fs (loop2): invalid boot region [ 74.215218][ T7964] exFAT-fs (loop2): failed to recognize exfat type [ 74.243598][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.251961][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.254110][ T6542] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 74.257868][ T7961] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 74.261929][ T7961] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.462920][ T7972] loop2: detected capacity change from 0 to 256 [ 74.473059][ T7972] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0xaa550008 [ 74.476141][ T7972] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 74.478867][ T7972] exFAT-fs (loop2): invalid boot region [ 74.480297][ T7972] exFAT-fs (loop2): failed to recognize exfat type [ 74.529963][ T7974] loop2: detected capacity change from 0 to 1024 [ 74.536461][ T7976] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.573369][ T30] audit: type=1400 audit(74.550:12): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7973 comm="syz-executor.2" dest=20000 netif=wpan0 [ 74.585148][ T30] audit: type=1400 audit(74.550:13): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=7973 comm="syz-executor.2" dest=20000 netif=wpan0 [ 74.636929][ T7980] loop2: detected capacity change from 0 to 512 [ 74.680287][ T6542] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 74.778655][ T7978] loop3: detected capacity change from 0 to 32768 [ 74.829215][ T6542] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 74.886006][ T7987] loop4: detected capacity change from 0 to 128 [ 74.890429][ T7987] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 74.904401][ T7987] overlay: filesystem on ./file0 not supported [ 74.977129][ T721] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 75.010899][ T7992] loop3: detected capacity change from 0 to 256 [ 75.013866][ T7992] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0xaa550008 [ 75.018102][ T7992] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 75.020928][ T7992] exFAT-fs (loop3): invalid boot region [ 75.022557][ T7992] exFAT-fs (loop3): failed to recognize exfat type [ 75.127593][ T7994] loop4: detected capacity change from 0 to 8192 [ 75.316609][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 75.335954][ T7998] loop3: detected capacity change from 0 to 32768 [ 75.682953][ T8007] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.718755][ T8009] loop2: detected capacity change from 0 to 1024 [ 75.746361][ T30] audit: type=1400 audit(75.730:14): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=8008 comm="syz-executor.2" dest=20000 netif=wpan0 [ 75.751380][ T30] audit: type=1400 audit(75.730:15): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=8008 comm="syz-executor.2" dest=20000 netif=wpan0 [ 75.839842][ T8011] loop2: detected capacity change from 0 to 256 [ 75.847146][ T8011] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0xaa550008 [ 75.860586][ T8011] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 75.863809][ T8011] exFAT-fs (loop2): invalid boot region [ 75.865617][ T8011] exFAT-fs (loop2): failed to recognize exfat type [ 75.976368][ T6326] read_mapping_page failed! [ 75.978024][ T6326] ERROR: (device loop3): txAbort: [ 75.978024][ T6326] [ 75.982787][ T6326] read_mapping_page failed! [ 75.985318][ T6326] ERROR: (device loop3): txAbort: [ 75.985318][ T6326] [ 76.008617][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.011233][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.014788][ T8014] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 76.017037][ T8014] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.019576][ T8014] bridge0: port 3(team0) entered blocking state [ 76.021285][ T8014] bridge0: port 3(team0) entered disabled state [ 76.023054][ T8014] team0: entered allmulticast mode [ 76.024415][ T8014] team_slave_0: entered allmulticast mode [ 76.030360][ T8014] team_slave_1: entered allmulticast mode [ 76.032557][ T8014] team0: left allmulticast mode [ 76.033822][ T8014] team_slave_0: left allmulticast mode [ 76.041125][ T8014] team_slave_1: left allmulticast mode [ 76.107152][ T8019] EXT4-fs warning (device nvme0n1p2): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 76.130575][ T8021] loop4: detected capacity change from 0 to 128 [ 76.133450][ T8021] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 76.141795][ T8021] overlay: filesystem on ./file0 not supported [ 76.181250][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 76.383510][ T8023] loop4: detected capacity change from 0 to 32768 [ 76.474389][ T8023] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=data_checksum=crc64,str_hash=crc64,nojournal_transaction_names,nocow [ 76.481117][ T8023] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 76.503033][ T8023] bcachefs (loop4): alloc_read... done [ 76.504623][ T8023] bcachefs (loop4): stripes_read... done [ 76.508671][ T8023] bcachefs (loop4): snapshots_read... done [ 76.511425][ T8023] bcachefs (loop4): journal_replay... done [ 76.515889][ T8023] bcachefs (loop4): resume_logged_ops... done [ 76.517565][ T8023] bcachefs (loop4): going read-write [ 76.520067][ T8023] bcachefs (loop4): done starting filesystem [ 76.535404][ T8023] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.561425][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.567726][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.570450][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.572905][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.582256][ T5863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.584336][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.748435][ T613] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.797546][ T8038] loop2: detected capacity change from 0 to 32768 [ 76.803031][ T8038] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8038) [ 76.817577][ T6310] bcachefs (loop4): shutting down [ 76.818953][ T6310] bcachefs (loop4): going read-only [ 76.820308][ T6310] bcachefs (loop4): finished waiting for writes to stop [ 76.831694][ T8038] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 76.834407][ T8038] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 76.838776][ T8038] BTRFS info (device loop2): using free-space-tree [ 76.861236][ T6310] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 76.893093][ T6310] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 12 [ 76.902613][ T613] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.905165][ T6310] bcachefs (loop4): shutdown complete, journal seq 13 [ 76.908048][ T6310] bcachefs (loop4): marking filesystem clean [ 76.937839][ T6310] bcachefs (loop4): shutdown complete [ 77.027229][ T613] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.140949][ T613] bond0: (slave netdevsim0): Releasing backup interface [ 77.178228][ T613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.194420][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 77.302605][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.304278][ T8067] loop4: detected capacity change from 0 to 16 [ 77.304513][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.308830][ T8034] bridge_slave_0: entered allmulticast mode [ 77.311049][ T8034] bridge_slave_0: entered promiscuous mode [ 77.319243][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.321214][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.323091][ T8034] bridge_slave_1: entered allmulticast mode [ 77.324424][ T8067] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 77.325671][ T8034] bridge_slave_1: entered promiscuous mode [ 77.375744][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.380206][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.442295][ T8069] loop4: detected capacity change from 0 to 1024 [ 77.488105][ T8069] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.524048][ T613] team0: left allmulticast mode [ 77.526837][ T613] team_slave_0: left allmulticast mode [ 77.528756][ T613] team_slave_1: left allmulticast mode [ 77.532649][ T613] bridge0: port 3(team0) entered disabled state [ 77.557386][ T613] bridge_slave_1: left allmulticast mode [ 77.559006][ T613] bridge_slave_1: left promiscuous mode [ 77.560551][ T613] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.574563][ T613] bridge_slave_0: left allmulticast mode [ 77.576881][ T613] bridge_slave_0: left promiscuous mode [ 77.578386][ T613] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.872170][ T6317] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 78.179930][ T8078] loop2: detected capacity change from 0 to 256 [ 78.476878][ T8080] loop4: detected capacity change from 0 to 1024 [ 78.501391][ T8080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.654958][ T5863] Bluetooth: hci4: command tx timeout [ 78.671733][ T30] audit: type=1326 audit(78.650:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b85d0e8 code=0x0 [ 79.292448][ T613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.337931][ T613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.378239][ T613] bond0 (unregistering): Released all slaves [ 80.059299][ T613] bond1 (unregistering): Released all slaves [ 80.086593][ T8034] team0: Port device team_slave_0 added [ 80.181514][ T8034] team0: Port device team_slave_1 added [ 80.211173][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.213246][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.224109][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.274970][ T8098] loop2: detected capacity change from 0 to 512 [ 80.314467][ T8098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.396846][ T6310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.465277][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.467109][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.479655][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.212920][ T5863] Bluetooth: hci4: command tx timeout [ 81.326993][ T8034] hsr_slave_0: entered promiscuous mode [ 81.344308][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.350483][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.375743][ T8034] hsr_slave_1: entered promiscuous mode [ 81.411516][ T8111] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 81.415559][ T8111] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 81.418862][ T8111] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.418862][ T8111] [ 81.421254][ T8111] EXT4-fs (loop2): Total free blocks count 0 [ 81.422688][ T8111] EXT4-fs (loop2): Free/Dirty block details [ 81.424585][ T8111] EXT4-fs (loop2): free_blocks=39626 [ 81.426081][ T8111] EXT4-fs (loop2): dirty_blocks=1 [ 81.427382][ T8111] EXT4-fs (loop2): Block reservation details [ 81.428906][ T8111] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 81.444953][ T8034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.448195][ T8034] Cannot create hsr debugfs directory [ 81.600685][ T6317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.615889][ T8118] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 81.625850][ T8118] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.746098][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.763730][ T613] hsr_slave_0: left promiscuous mode [ 81.805093][ T613] hsr_slave_1: left promiscuous mode [ 81.885038][ T613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.887107][ T613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.890069][ T613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.892113][ T613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.903464][ T613] veth1_macvtap: left promiscuous mode [ 81.905754][ T613] veth0_macvtap: left promiscuous mode [ 81.907238][ T613] veth1_vlan: left promiscuous mode [ 81.908796][ T613] veth0_vlan: left promiscuous mode [ 83.374928][ T5863] Bluetooth: hci4: command tx timeout [ 83.825602][ T613] team_slave_1 (unregistering): left promiscuous mode [ 83.833562][ T613] team0 (unregistering): Port device team_slave_1 removed [ 84.005880][ T613] team_slave_0 (unregistering): left promiscuous mode [ 84.009589][ T613] team0 (unregistering): Port device team_slave_0 removed [ 85.454978][ T5863] Bluetooth: hci4: command tx timeout [ 85.641196][ T8126] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.680828][ T8131] loop2: detected capacity change from 0 to 1024 [ 85.696726][ T30] audit: type=1400 audit(85.680:17): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=8130 comm="syz-executor.2" dest=20000 netif=wpan0 [ 85.701260][ T30] audit: type=1400 audit(85.680:18): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="." object="_" requested=w pid=8130 comm="syz-executor.2" dest=20000 netif=wpan0 [ 85.972283][ T8134] loop4: detected capacity change from 0 to 32768 [ 85.975384][ T8134] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8134) [ 85.996583][ T8134] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 85.999305][ T8134] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 86.001838][ T8134] BTRFS info (device loop4): using free-space-tree [ 86.127826][ T8034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.137586][ T8034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.147511][ T8034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.156769][ T8034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.269964][ T613] IPVS: stop unused estimator thread 0... [ 86.296173][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.322694][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.335993][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.337897][ T6360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.356016][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.357821][ T6360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.392579][ T8034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.396656][ T8034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.478212][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.526355][ T8034] veth0_vlan: entered promiscuous mode [ 86.536214][ T8034] veth1_vlan: entered promiscuous mode [ 86.554337][ T8034] veth0_macvtap: entered promiscuous mode [ 86.561203][ T8034] veth1_macvtap: entered promiscuous mode [ 86.569329][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.572005][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.574594][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.578833][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.581316][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.583904][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.587093][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.589752][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.593213][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.613839][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.624926][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.631049][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.641499][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.645770][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.648404][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.657891][ T8196] loop2: detected capacity change from 0 to 16 [ 86.660223][ T8196] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 86.663367][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.668537][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.674220][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.684049][ T8034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.692158][ T8034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.694421][ T8034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.703767][ T8034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.789422][ T8200] loop2: detected capacity change from 0 to 128 [ 86.807877][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.809866][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.812739][ T567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.820116][ T567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.821673][ T8200] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 86.853805][ T8200] overlay: filesystem on ./file0 not supported [ 86.930748][ T43] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 87.037049][ T8215] loop2: detected capacity change from 0 to 256 [ 87.076643][ T8215] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0xaa550008 [ 87.081514][ T8215] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 87.084451][ T8215] exFAT-fs (loop2): invalid boot region [ 87.090091][ T8215] exFAT-fs (loop2): failed to recognize exfat type [ 87.117445][ T8203] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 87.138622][ T8222] loop3: detected capacity change from 0 to 1024 [ 87.177415][ T8224] loop2: detected capacity change from 0 to 256 [ 87.187168][ T8224] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0xaa550008 [ 87.202039][ T8224] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 87.209418][ T8224] exFAT-fs (loop2): invalid boot region [ 87.211031][ T8224] exFAT-fs (loop2): failed to recognize exfat type [ 87.270461][ T8226] loop3: detected capacity change from 0 to 16 [ 87.272879][ T8226] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 87.312324][ T8228] loop2: detected capacity change from 0 to 512 [ 87.337079][ T6310] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 87.365071][ T8203] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 87.366832][ T8228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.436523][ T8236] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.537351][ T8239] loop4: detected capacity change from 0 to 1024 [ 87.545067][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.577508][ T8231] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 88.449812][ T8203] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 88.465354][ T8240] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 88.468552][ T8240] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.468552][ T8240] [ 88.471087][ T8240] EXT4-fs (loop2): Total free blocks count 0 [ 88.472663][ T8240] EXT4-fs (loop2): Free/Dirty block details [ 88.474181][ T8240] EXT4-fs (loop2): free_blocks=39626 [ 88.476436][ T8240] EXT4-fs (loop2): dirty_blocks=1 [ 88.477798][ T8240] EXT4-fs (loop2): Block reservation details [ 88.479343][ T8240] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 88.539994][ T8253] loop4: detected capacity change from 0 to 128 [ 88.543050][ T8253] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 88.553112][ T8253] overlay: filesystem on ./file0 not supported [ 88.624133][ T567] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 88.653360][ T6317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.717001][ T8257] loop2: detected capacity change from 0 to 256 [ 88.737673][ T8255] loop4: detected capacity change from 0 to 4096 [ 88.738139][ T8257] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0xaa550008 [ 88.742347][ T8255] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 88.751859][ T8257] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 88.754674][ T8257] exFAT-fs (loop2): invalid boot region [ 88.760830][ T8257] exFAT-fs (loop2): failed to recognize exfat type [ 88.781237][ T8255] ntfs3: loop4: failed to convert "c46c" to euc-jp [ 88.785737][ T8255] xt_NFQUEUE: number of total queues is 0 [ 88.906236][ T8259] loop2: detected capacity change from 0 to 1024 [ 88.973520][ T8261] loop2: detected capacity change from 0 to 256 [ 88.979353][ T8261] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0xaa550008 [ 88.982485][ T8261] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 88.988324][ T8261] exFAT-fs (loop2): invalid boot region [ 88.989900][ T8261] exFAT-fs (loop2): failed to recognize exfat type [ 89.220925][ T8263] loop2: detected capacity change from 0 to 32768 [ 89.231692][ T8263] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8263) [ 89.235493][ T8265] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.252940][ T8263] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 89.256053][ T8263] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 89.258473][ T8263] BTRFS info (device loop2): using free-space-tree [ 89.387049][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.502792][ T8295] loop3: detected capacity change from 0 to 128 [ 89.510677][ T8295] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 89.545496][ T8295] overlay: filesystem on ./file0 not supported [ 89.607357][ T6323] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.610894][ T43] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 89.614504][ T6323] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.618241][ T6323] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.621237][ T6323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.626490][ T6323] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.628608][ T6323] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.751667][ T8300] loop3: detected capacity change from 0 to 8192 [ 89.769247][ T8300] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.776315][ T8300] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 89.782387][ T8300] REISERFS (device loop3): using ordered data mode [ 89.790008][ T8300] REISERFS warning (device loop3): sh-457 journal_init_dev: journal_init_dev: Cannot open './file1': -15 [ 89.799030][ T8300] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 89.805864][ T8297] chnl_net:caif_netlink_parms(): no params data found [ 89.819346][ T8300] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 89.863112][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.867353][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.869398][ T8297] bridge_slave_0: entered allmulticast mode [ 89.874652][ T8297] bridge_slave_0: entered promiscuous mode [ 89.885774][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.887670][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.889576][ T8297] bridge_slave_1: entered allmulticast mode [ 89.891739][ T8297] bridge_slave_1: entered promiscuous mode [ 89.946773][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.960898][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.000431][ T8310] Injecting memory failure for pfn 0x132d85 at process virtual address 0x20ffe000 [ 90.001002][ T8297] team0: Port device team_slave_0 added [ 90.005555][ T8310] Memory failure: 0x132d85: keeping poisoned page in swap cache [ 90.007888][ T8310] Memory failure: 0x132d85: Sending SIGBUS to syz-executor.3:8310 due to hardware memory corruption [ 90.009996][ T8297] team0: Port device team_slave_1 added [ 90.020317][ T8310] Memory failure: 0x132d85: recovery action for dirty swapcache page: Delayed [ 90.022726][ T8310] Injecting memory failure for pfn 0x1b057c at process virtual address 0x20fff000 [ 90.030400][ T8310] Memory failure: 0x1b057c: already hardware poisoned [ 90.033738][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.039205][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.048221][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.057415][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.059675][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.069118][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.108762][ T8312] loop3: detected capacity change from 0 to 16 [ 90.111535][ T8312] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 90.146756][ T8297] hsr_slave_0: entered promiscuous mode [ 90.178159][ T8297] hsr_slave_1: entered promiscuous mode [ 90.193813][ T8314] loop4: detected capacity change from 0 to 256 [ 90.197227][ T8314] exFAT-fs (loop4): Invalid exboot-signature(sector = 2): 0xaa550008 [ 90.215997][ T8314] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 90.218795][ T8314] exFAT-fs (loop4): invalid boot region [ 90.220246][ T8314] exFAT-fs (loop4): failed to recognize exfat type [ 90.224994][ T8297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.226953][ T8297] Cannot create hsr debugfs directory [ 90.256740][ T8316] loop3: detected capacity change from 0 to 1024 [ 90.355287][ T8319] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.416664][ T8320] loop3: detected capacity change from 0 to 64 [ 90.482187][ T8297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.538113][ T6317] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 90.657870][ T8297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.683480][ T8331] loop2: detected capacity change from 0 to 128 [ 90.689693][ T8331] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 90.701964][ T8331] overlay: filesystem on ./file0 not supported [ 90.744957][ T567] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 90.786932][ T8297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.848690][ T8335] loop2: detected capacity change from 0 to 2048 [ 90.853541][ T8335] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.964655][ T8297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.215694][ T8297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.221309][ T8297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.237161][ T8297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.242192][ T8297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.321890][ T8342] loop4: detected capacity change from 0 to 1024 [ 91.340030][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.373834][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.391186][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.393174][ T3725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.409360][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.411208][ T3725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.430790][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.473985][ T8347] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.581708][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.608832][ T8297] veth0_vlan: entered promiscuous mode [ 91.614474][ T8297] veth1_vlan: entered promiscuous mode [ 91.653445][ T8297] veth0_macvtap: entered promiscuous mode [ 91.665773][ T8297] veth1_macvtap: entered promiscuous mode [ 91.679016][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.683158][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.686207][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.688978][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.691556][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.694414][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.697884][ T6323] Bluetooth: hci5: command tx timeout [ 91.705419][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.708312][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.710982][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.713741][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.727405][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.736045][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.738722][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.741200][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.743866][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.747584][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.750367][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.752945][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.756227][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.758696][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.761325][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.765531][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.769135][ T8297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.771387][ T8297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.773525][ T8297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.775966][ T8297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.801885][ T8355] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.864426][ T8357] loop3: detected capacity change from 0 to 256 [ 91.868757][ T613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.874036][ T613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.875503][ T8357] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0xaa550008 [ 91.879445][ T8357] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ac01) [ 91.884404][ T8357] exFAT-fs (loop3): invalid boot region [ 91.887231][ T8357] exFAT-fs (loop3): failed to recognize exfat type [ 91.906767][ T613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.909468][ T613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.919777][ T8234] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.939545][ T3725] IPVS: starting estimator thread 0... [ 92.022906][ T8362] loop3: detected capacity change from 0 to 256 [ 92.036011][ T8358] IPVS: using max 26 ests per chain, 62400 per kthread [ 92.082275][ T8366] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 92.086869][ T8366] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 92.501135][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.536105][ T8373] loop3: detected capacity change from 0 to 40427 [ 93.169002][ T8373] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 93.171270][ T8373] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 93.260536][ T8394] loop4: detected capacity change from 0 to 512 [ 93.261279][ T8373] F2FS-fs (loop3): invalid crc value [ 93.263143][ T8394] EXT4-fs: Ignoring removed nobh option [ 93.283328][ T8373] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.299094][ T8394] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.303311][ T8394] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 93.344798][ T8394] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 93.350072][ T8373] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 93.351816][ T8373] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.053068][ T6323] Bluetooth: hci5: command tx timeout [ 95.131246][ T8034] syz-executor.3: attempt to access beyond end of device [ 95.131246][ T8034] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.139692][ T8394] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 95.154800][ T8034] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.163024][ T8394] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 95.174661][ T8394] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 95.180529][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.183023][ T8394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.197290][ T8394] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.200240][ T8394] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 95.202802][ T8394] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 95.218320][ T8394] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor.4: path /root/syzkaller-testdir3701562597/syzkaller.hbtR6L/108/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 95.309570][ T6310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.342919][ T8415] bridge1: entered promiscuous mode [ 96.329915][ T8427] loop2: detected capacity change from 0 to 512 [ 96.348672][ T8429] loop4: detected capacity change from 0 to 128 [ 96.375569][ T8427] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 96.501843][ T8418] loop3: detected capacity change from 0 to 32768 [ 96.518512][ T8427] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 96.526524][ T8427] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.538730][ T30] audit: type=1326 audit(96.520:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 96.569119][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.569478][ T30] audit: type=1326 audit(96.520:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 96.577804][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.584596][ T30] audit: type=1326 audit(96.520:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 96.585174][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.597621][ T30] audit: type=1326 audit(96.520:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 96.603303][ T30] audit: type=1326 audit(96.520:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 96.603945][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.205268][ T5863] Bluetooth: hci5: command tx timeout [ 97.253353][ T30] audit: type=1326 audit(96.530:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 97.264194][ T30] audit: type=1326 audit(96.530:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 97.281747][ T30] audit: type=1326 audit(96.530:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 97.293932][ T5863] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.303060][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.311950][ T6317] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 97.331615][ T30] audit: type=1326 audit(96.530:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 97.378801][ T30] audit: type=1326 audit(96.530:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb225d0e8 code=0x7ffc0000 [ 97.451754][ T8418] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names [ 97.470287][ T8418] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 97.550019][ T8418] bcachefs (loop3): alloc_read... done [ 97.551516][ T8418] bcachefs (loop3): stripes_read... done [ 97.552955][ T8418] bcachefs (loop3): snapshots_read... done [ 97.578937][ T8418] bcachefs (loop3): journal_replay... done [ 97.580440][ T8418] bcachefs (loop3): resume_logged_ops... done [ 97.596455][ T8418] bcachefs (loop3): going read-write [ 97.619790][ T8418] bcachefs (loop3): done starting filesystem [ 97.621446][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 97.694419][ T8034] bcachefs (loop3): shutting down [ 97.705070][ T8034] bcachefs (loop3): going read-only [ 97.706427][ T8034] bcachefs (loop3): finished waiting for writes to stop [ 97.711721][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.713588][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.715754][ T8433] bridge_slave_0: entered allmulticast mode [ 97.717758][ T8433] bridge_slave_0: entered promiscuous mode [ 97.721036][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.722938][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.725142][ T8433] bridge_slave_1: entered allmulticast mode [ 97.727741][ T8433] bridge_slave_1: entered promiscuous mode [ 97.751551][ T8034] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 97.756799][ T6362] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.769100][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.787454][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.788840][ T8034] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 97.789798][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.795679][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.798572][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.804112][ T8034] bcachefs (loop3): shutdown complete, journal seq 13 [ 97.810807][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.812128][ T8034] bcachefs (loop3): marking filesystem clean [ 97.830622][ T8034] bcachefs (loop3): shutdown complete [ 97.840448][ T8433] team0: Port device team_slave_0 added [ 97.843584][ T8433] team0: Port device team_slave_1 added [ 97.849670][ T8458] loop2: detected capacity change from 0 to 40427 [ 97.863966][ T8458] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 97.866714][ T8458] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 97.902387][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.904141][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.911972][ T8433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.915939][ T8458] F2FS-fs (loop2): invalid crc value [ 97.918295][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.920061][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.933501][ T8433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.937473][ T8458] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.955590][ T6362] usb 1-1: Using ep0 maxpacket: 8 [ 97.967713][ T8458] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 97.969823][ T8458] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.976676][ T6362] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.979478][ T6362] usb 1-1: config 179 has no interface number 0 [ 97.981122][ T6362] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 97.983828][ T6362] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 97.991414][ T6362] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.993822][ T6362] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 97.998149][ T6362] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 98.001473][ T6362] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.003845][ T6362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.021267][ T8455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.032421][ T6362] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 98.121064][ T8433] hsr_slave_0: entered promiscuous mode [ 98.163124][ T8433] hsr_slave_1: entered promiscuous mode [ 98.799510][ T8433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.801492][ T8433] Cannot create hsr debugfs directory [ 98.958997][ T6317] syz-executor.2: attempt to access beyond end of device [ 98.958997][ T6317] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.964272][ T6317] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 98.970110][ T8433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.999169][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.141778][ T8486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.150599][ T8486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.224897][ T5863] Bluetooth: hci5: command tx timeout [ 99.256704][ T8433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.944949][ T5863] Bluetooth: hci6: command tx timeout [ 99.977420][ T8490] loop3: detected capacity change from 0 to 8192 [ 100.039216][ T8433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.043753][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.099130][ T8494] macvtap0: entered promiscuous mode [ 100.103398][ T8494] macvtap0: left promiscuous mode [ 100.256712][ T8433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.264314][ T8496] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 100.292822][ T8496] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 100.298765][ T8496] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 100.301729][ T8496] team0: Port device netdevsim0 added [ 100.329616][ T8498] bridge0: port 3(vlan2) entered blocking state [ 100.331302][ T8498] bridge0: port 3(vlan2) entered disabled state [ 100.333015][ T8498] vlan2: entered allmulticast mode [ 100.352582][ T8498] vlan2: entered promiscuous mode [ 100.354181][ T8498] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.363504][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.462193][ T6360] usb 1-1: USB disconnect, device number 2 [ 100.632348][ T8433] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.666695][ T8433] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.698383][ T8433] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.718154][ T8433] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.818979][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.839489][ T8506] loop2: detected capacity change from 0 to 32768 [ 100.855114][ T8506] BTRFS: device /dev/loop2 (7:2) using temp-fsid fd62e5af-bdfd-40b4-83b0-3c9dc12db415 [ 100.858267][ T8506] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8506) [ 100.864656][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.887793][ T8506] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.896660][ T8506] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 100.906340][ T8506] BTRFS info (device loop2): disk space caching is enabled [ 100.916037][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.939418][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.941448][ T6304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.982061][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.984039][ T6362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.020301][ T8506] BTRFS info (device loop2): rebuilding free space tree [ 101.031636][ T8506] BTRFS info (device loop2): disabling free space tree [ 101.034327][ T8506] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.040704][ T8506] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.182193][ T8433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.382604][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 101.466403][ T6317] BTRFS info (device loop2): last unmount of filesystem fd62e5af-bdfd-40b4-83b0-3c9dc12db415 [ 101.860690][ T689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.898722][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.015621][ T5863] Bluetooth: hci6: command tx timeout [ 102.043640][ T6323] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.049185][ T6323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.051882][ T6323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.054563][ T6323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.063604][ T6323] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.073116][ T6323] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.099402][ T689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.192523][ T8433] veth0_vlan: entered promiscuous mode [ 102.306456][ T689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.339354][ T8433] veth1_vlan: entered promiscuous mode [ 102.511612][ T689] bond0: (slave netdevsim0): Releasing backup interface [ 102.556042][ T689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.586823][ T8433] veth0_macvtap: entered promiscuous mode [ 102.611699][ T8433] veth1_macvtap: entered promiscuous mode [ 102.670552][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.698303][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.711199][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.713956][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.732672][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.744792][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.747388][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.760427][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.764912][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.767617][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.770116][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.772878][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.796037][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.816245][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.818928][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.834425][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.839350][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.844547][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.854668][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.864926][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.867760][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.870328][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.889674][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.892140][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.899813][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.904456][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.923078][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 102.940880][ T8433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.943156][ T8433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.955552][ T8433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.958083][ T8433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.191955][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.214333][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.217755][ T8573] bridge_slave_0: entered allmulticast mode [ 103.220021][ T8573] bridge_slave_0: entered promiscuous mode [ 103.255349][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.257287][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.265605][ T8573] bridge_slave_1: entered allmulticast mode [ 103.279619][ T8573] bridge_slave_1: entered promiscuous mode [ 103.316018][ T689] bridge_slave_1: left allmulticast mode [ 103.317590][ T689] bridge_slave_1: left promiscuous mode [ 103.324335][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.365325][ T689] bridge_slave_0: left allmulticast mode [ 103.366804][ T689] bridge_slave_0: left promiscuous mode [ 103.368297][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.936935][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 104.103100][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.107688][ T5863] Bluetooth: hci3: command tx timeout [ 104.107703][ T6323] Bluetooth: hci6: command tx timeout [ 105.576402][ T689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.627559][ T689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.667309][ T689] bond0 (unregistering): Released all slaves [ 105.673423][ T689] bond1 (unregistering): Released all slaves [ 105.703565][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.789403][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.791443][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.819163][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.943603][ T8573] team0: Port device team_slave_0 added [ 105.957106][ T8573] team0: Port device team_slave_1 added [ 105.975002][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.978250][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.174980][ T5863] Bluetooth: hci6: command tx timeout [ 106.175245][ T6323] Bluetooth: hci3: command tx timeout [ 106.266390][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.268187][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.286180][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.302734][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.313952][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.343892][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.666802][ T8573] hsr_slave_0: entered promiscuous mode [ 107.708440][ T8573] hsr_slave_1: entered promiscuous mode [ 107.766044][ T8573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.768101][ T8573] Cannot create hsr debugfs directory [ 107.823951][ T689] hsr_slave_0: left promiscuous mode [ 107.891366][ T689] hsr_slave_1: left promiscuous mode [ 107.975116][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.985423][ T689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.988435][ T689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.995522][ T689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.997526][ T689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.040571][ T689] veth1_macvtap: left promiscuous mode [ 108.047796][ T689] veth0_macvtap: left promiscuous mode [ 108.050519][ T689] veth1_vlan: left promiscuous mode [ 108.053191][ T689] veth0_vlan: left promiscuous mode [ 108.255353][ T6323] Bluetooth: hci3: command tx timeout [ 109.566898][ T8699] loop3: detected capacity change from 0 to 8192 [ 110.344888][ T6323] Bluetooth: hci3: command tx timeout [ 111.075184][ T689] team_slave_1 (unregistering): left promiscuous mode [ 111.080964][ T689] team0 (unregistering): Port device team_slave_1 removed [ 111.265774][ T689] team_slave_0 (unregistering): left promiscuous mode [ 111.270228][ T689] team0 (unregistering): Port device team_slave_0 removed [ 113.775515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.206808][ T8736] team0: entered promiscuous mode [ 114.208208][ T8736] team_slave_0: entered promiscuous mode [ 114.214186][ T8736] team_slave_1: entered promiscuous mode [ 114.260683][ T8736] team0: left promiscuous mode [ 114.262008][ T8736] team_slave_0: left promiscuous mode [ 114.263451][ T8736] team_slave_1: left promiscuous mode [ 115.056051][ T8756] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.065255][ T8756] ================================================================== [ 115.067375][ T8756] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x170/0x1ac [ 115.069473][ T8756] Read of size 2 at addr ffff0000c26fbd40 by task syz-executor.4/8756 [ 115.071582][ T8756] 1970/01/01 00:01:55 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 115.072197][ T8756] CPU: 1 PID: 8756 Comm: syz-executor.4 Tainted: G W 6.10.0-rc3-syzkaller-gac2193b4b460 #0 [ 115.075155][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 115.077813][ T8756] Call trace: [ 115.078685][ T8756] dump_backtrace+0x1b8/0x1e4 [ 115.079874][ T8756] show_stack+0x2c/0x3c [ 115.080930][ T8756] dump_stack_lvl+0xe4/0x150 [ 115.082119][ T8756] print_report+0x198/0x538 [ 115.083319][ T8756] kasan_report+0xd8/0x138 [ 115.084415][ T8756] __asan_report_load2_noabort+0x20/0x2c [ 115.085956][ T8756] cfg80211_wext_freq+0x170/0x1ac [ 115.087287][ T8756] cfg80211_wext_siwscan+0x438/0xef0 [ 115.088687][ T8756] ioctl_standard_iw_point+0x7f0/0xdc4 [ 115.090124][ T8756] ioctl_standard_call+0xcc/0x264 [ 115.091434][ T8756] wext_ioctl_dispatch+0x1b4/0x534 [ 115.092811][ T8756] wext_handle_ioctl+0x1f8/0x3f4 [ 115.094096][ T8756] sock_ioctl+0x15c/0x838 [ 115.095278][ T8756] __arm64_sys_ioctl+0x14c/0x1c8 [ 115.096541][ T8756] invoke_syscall+0x98/0x2b8 [ 115.097678][ T8756] el0_svc_common+0x130/0x23c [ 115.098819][ T8756] do_el0_svc+0x48/0x58 [ 115.099876][ T8756] el0_svc+0x54/0x168 [ 115.100946][ T8756] el0t_64_sync_handler+0x84/0xfc [ 115.102254][ T8756] el0t_64_sync+0x190/0x194 [ 115.103388][ T8756] [ 115.103971][ T8756] Allocated by task 8756: [ 115.105141][ T8756] kasan_save_track+0x40/0x78 [ 115.106349][ T8756] kasan_save_alloc_info+0x40/0x50 [ 115.107706][ T8756] __kasan_kmalloc+0xac/0xc4 [ 115.108847][ T8756] __kmalloc_noprof+0x2a0/0x494 [ 115.110097][ T8756] ioctl_standard_iw_point+0x3b8/0xdc4 [ 115.111493][ T8756] ioctl_standard_call+0xcc/0x264 [ 115.112823][ T8756] wext_ioctl_dispatch+0x1b4/0x534 [ 115.114166][ T8756] wext_handle_ioctl+0x1f8/0x3f4 [ 115.115450][ T8756] sock_ioctl+0x15c/0x838 [ 115.116564][ T8756] __arm64_sys_ioctl+0x14c/0x1c8 [ 115.117789][ T8756] invoke_syscall+0x98/0x2b8 [ 115.118970][ T8756] el0_svc_common+0x130/0x23c [ 115.120167][ T8756] do_el0_svc+0x48/0x58 [ 115.121310][ T8756] el0_svc+0x54/0x168 [ 115.122402][ T8756] el0t_64_sync_handler+0x84/0xfc [ 115.123701][ T8756] el0t_64_sync+0x190/0x194 [ 115.124818][ T8756] [ 115.125412][ T8756] The buggy address belongs to the object at ffff0000c26fbc00 [ 115.125412][ T8756] which belongs to the cache kmalloc-512 of size 512 [ 115.129116][ T8756] The buggy address is located 4 bytes to the right of [ 115.129116][ T8756] allocated 316-byte region [ffff0000c26fbc00, ffff0000c26fbd3c) [ 115.132958][ T8756] [ 115.133539][ T8756] The buggy address belongs to the physical page: [ 115.135214][ T8756] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1026f8 [ 115.137569][ T8756] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 115.139848][ T8756] anon flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 115.141962][ T8756] page_type: 0xffffefff(slab) [ 115.143202][ T8756] raw: 05ffc00000000040 ffff0000c0001c80 0000000000000000 dead000000000001 [ 115.145358][ T8756] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 115.147684][ T8756] head: 05ffc00000000040 ffff0000c0001c80 0000000000000000 dead000000000001 [ 115.149904][ T8756] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 115.151589][ T8756] head: 05ffc00000000002 fffffdffc309be01 ffffffffffffffff 0000000000000000 [ 115.153329][ T8756] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 115.155630][ T8756] page dumped because: kasan: bad access detected [ 115.157327][ T8756] [ 115.157944][ T8756] Memory state around the buggy address: [ 115.159439][ T8756] ffff0000c26fbc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.161618][ T8756] ffff0000c26fbc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.163763][ T8756] >ffff0000c26fbd00: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 115.165901][ T8756] ^ [ 115.167544][ T8756] ffff0000c26fbd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.169673][ T8756] ffff0000c26fbe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.171915][ T8756] ================================================================== [ 115.205035][ T8756] Disabling lock debugging due to kernel taint [ 115.206610][ T8756] ------------[ cut here ]------------ [ 115.207921][ T8756] UBSAN: array-index-out-of-bounds in net/wireless/scan.c:3461:8 [ 115.209737][ T8756] index 33 is out of range for type 'struct iw_freq[32]' [ 115.211601][ T8756] CPU: 0 PID: 8756 Comm: syz-executor.4 Tainted: G B W 6.10.0-rc3-syzkaller-gac2193b4b460 #0 [ 115.214619][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 115.217257][ T8756] Call trace: [ 115.218083][ T8756] dump_backtrace+0x1b8/0x1e4 [ 115.219323][ T8756] show_stack+0x2c/0x3c [ 115.220391][ T8756] dump_stack_lvl+0xe4/0x150 [ 115.221717][ T8756] dump_stack+0x1c/0x28 [ 115.222814][ T8756] __ubsan_handle_out_of_bounds+0xf8/0x148 [ 115.224298][ T8756] cfg80211_wext_siwscan+0x4a8/0xef0 [ 115.225690][ T8756] ioctl_standard_iw_point+0x7f0/0xdc4 [ 115.227087][ T8756] ioctl_standard_call+0xcc/0x264 [ 115.228435][ T8756] wext_ioctl_dispatch+0x1b4/0x534 [ 115.229728][ T8756] wext_handle_ioctl+0x1f8/0x3f4 [ 115.230991][ T8756] sock_ioctl+0x15c/0x838 [ 115.232124][ T8756] __arm64_sys_ioctl+0x14c/0x1c8 [ 115.233434][ T8756] invoke_syscall+0x98/0x2b8 [ 115.234708][ T8756] el0_svc_common+0x130/0x23c [ 115.235851][ T8756] do_el0_svc+0x48/0x58 [ 115.236940][ T8756] el0_svc+0x54/0x168 [ 115.237994][ T8756] el0t_64_sync_handler+0x84/0xfc [ 115.239330][ T8756] el0t_64_sync+0x190/0x194 [ 115.295518][ T8756] ---[ end trace ]---