last executing test programs: 2m43.608609137s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 2m43.080226335s ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = fsopen(&(0x7f0000000080)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2m39.073303105s ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100801700) 2m38.271964976s ago: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcggXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtlZe+3u2ptXO/TziWaf55ln5pnf/OZlXyJrAnxuXTiR9t10cuHEa7eq9sadhZWNOwvXevUkk0laSbtbpLieFB8k59Od8oVqZjNcMWw7v14+e/HDjzc+6rba2RqveukMD7A9yl6sN1Nmk4w15UPYNt4bDzbe5Fa12MxMlbDjvcTBfhtPUm7z46NbPYOUY32Nodc78PQouu+bfbrX/0xyKMlU7w1tvdvZevIR7um+7kXrjy8OAAAAODAO37ud3Mr0fscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5Pm+f9FM7V69dkUvef/T/Q9Y39in8MdbvfIpnqVu60nEQwAAAAAAAAAPF5fupffXSzL6V67LOr/83+5bhypX5/J27mZpazmZG5lMWtZy2rmk8z0DTRxa3FtbXW+t+anZVkOWfP0wDVPjxhw51HsNQAAAAAAAAD83zjXlD/LhUzvcywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBNkYx1i3o60qvPpNVOMpVkolpuPflHr/40u7vfAQAAAMATcPhe7uVWpnvtsqi/8x+tv/dP5e1cz1qWs5aVLOVS/VtA91t/a+POwsrGnYVr1fTZcb/9n636H6f3DKMeMd3fHgZv+Vi9RCeXs1zPOZk38lZWcimtes3KsV48g+N6r4qpONdVlqMl6FJTVnv+q6Y8GGbqjIxvZmSuia3KxrO7Z6L/6DzAlubT2vzl58h95Pzcrlsp/ts7Jod6c5Jnvr93zsfva2ceys5MnO47+47unonkK3/6/Y+urFy/eqVYP3FwTqP7MPmvratmZyYW+jLx4siZuHzz6czETq28sFm/kO/lhzmR2bye1SznJ1nMWpYym+/WtcXmfK5eZ3bP1Pltrdf3imKiOS5jO2L68uFuuVtML9frTmc5P8hbuZSlvFr/O535fCNnciZn+47wCyNc9a0BV/2fhwd//KtNpZPkl015MFR5fbYvr/333Jm6r39OK+Vkd73nHtm9cVP7i02lOhI/b8qDYTMTU9l8l+hF93wvA+MDM/Gb+rZyc+X61dUrizd2jFusD97eK9m++wfnRlKdL89VB6tubT87qr7nB/bN131HNvtaO/t+29ns2+tKnWg+w312pNN134sD+xbqvmN9fVuftz4ty7L7eQuAA+/Q1w5NdP7d+Xvn/c4vOlc6r019Z/Kbky9NZPxv499qz4290nqp+EPez0+z9zd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTzffeffq4srK0uqOSlmWt4d0PZZK2sm2OX/9S98ySeqHAY0+YLX0+VZSz2mnqdxfYLcfbHfee9Ak/LM5Jk8k4Y+kMjX0/NlZ+aQsy4MR8yiVsnFQ4tmPyr7eloAn4NTatRunbr7z7teXry2+ufTm0vWzZ86cnTt75tWFU5eXV5bmuq/7HSXwOPR9AgcAAAAAAAAAAACeEqP9cU7xcH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAQLpxI+26KzM+dnKvaG3cWVqqpV99a8pMkrSTFbFJ8kJxPd8pM33DFsO2sJxc//Hjjo26r3Uz18q3d1hvNejNlNslYUw4wNWhmeXvYeEU9zo3h442o2NzDKmHHe4mD/fa/AAAA///tbhq7") unshare(0x400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/532], 0x19c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r2 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) truncate(&(0x7f00000000c0)='./file1\x00', 0x6) 2m37.543963202s ago: executing program 3: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000006780)=ANY=[], 0x1, 0x6153, &(0x7f00000155c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 2m37.02391805s ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400a000400050082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mremap(&(0x7f00005a7000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000e3f000/0x3000)=nil) 2m17.620804019s ago: executing program 0: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m15.382217716s ago: executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x2882) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 2m13.506677683s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c98847", 0xfdef}], 0x1) 2m9.604091645s ago: executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xe2, [@dev]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2m8.474815513s ago: executing program 0: r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, &(0x7f0000000100)={0x1ff, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) 2m7.63394257s ago: executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='0000111122223333', r1) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000010000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000035071000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 1m40.413724201s ago: executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x64a) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x3) 1m40.063679527s ago: executing program 5: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000040), 0x1, 0x5e5, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="2c6d73697a653d3078383030303030303030303030303030302c6673757569643d00000000000000002d000000002d000000002d000000002d00000000000200"]) mkdirat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r2 = open(&(0x7f0000000500)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000025c0)='./file0\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 1m39.441563685s ago: executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="fe", 0x1}], 0x1, 0x80000001, 0x0, 0x0) 1m38.884301112s ago: executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818, &(0x7f0000000140)={[{@init_itable}, {@nombcache}, {@commit}, {@errors_remount}, {@resgid, 0x0}, {@usrjquota}, {@nouser_xattr}, {@nombcache}, {@orlov}, {@nobh}, {@data_ordered}, {@noblock_validity}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}], [], 0x2c}, 0x0, 0x4e9, &(0x7f0000000240)="$eJzs3ctvVNUfAPDvnT5of8Cv8+Pni4dSRWPjg9LyXLjRaMLGxERjcFnbQpAChtYESGOrMZiYqOEv8LEz8S9wpRujrjRuNW6NCTHdgC7MNXfm3mHK9DW000Ln80kGzr1z75zzvecces493GkAbas/+yOJ2BYRv0REX3Vz/gH91b9uzE2P/jU3PZpEmr78Z1I57vrc9GhxaHHe1nxjoBRRei+J3QvkO3np8pmRiYnxC/n24FQpT50dOTV+avzc8LFjhw72Hj0yfHhN4szKdH3X2+f37Dz+2tUXR09cff37L7Pypvn79XFUlZvMoaNhT3/0z7+WdR5r8tPvdNvr0knnBhaEpmStNquurkr/74uOuFl5ffHCuxtaOKCl0jRNtzTsrf0sm03rJUn1BGCTSFbepbMxcUvLAqyn4gf99blspjo92jgP3tyuPRuVGVAW9438VX2nM0rZHL5cnRt1tSj/eyLixOzfn2SvaLgP0apcAYB29nU2/nmqOu4oXtV3SnFf3XH/zdeGyhHxv4jYERH/z8cv90ZUjr0/Ih6I7to52Yiy8d7SfP23bDeOP3/qXWWIS8rGf8/ka1vzx3/FelSUO/Kt7ZX4u5KTpyfGD+TXZCC6tmTbQ40fXQv9m+d//nix/Pvrxn/ZK8u/GAvm5fij85aLODYyNbLauAvX3qlM6Wca409qKwFZPe6MiF0r+cCe+ZvZNTv9xBd7Fjt8+fg/WjyvNVhnSj+LeLxa/7NxS/yZ7jw1OHX2zcHJS5efPl2/Pjl09Mjw4cGemBg/MFi0ikY//HjlpTzZMKBfPv7Wyur/Pwu2/9rKZTmpX6+dbD6PK7++v+ic8nbbf3fySiWd1c+HEXFxZGrqwlBEdzJb2x/F/uGb514c6b25f6ga/8C+hfv/joh/Ps3P2x0RWSN+MCIeioi9edkfjohHImLfEvF/99yjbyw2mbsT6n+sqfpvPtFx5tuvGjL+oH+F8Wf1f6iSGsj3jI1M9SwX10oLuOoLCAAAAHeBvRGxLZLS/uo9znQmorR/f8TW2h2UyaknT55/69xY9RmBcnSVijtdfXX3Q4fye8PZdnbWcERnue79g5X7xmmapr3ZdjZ/n9i+saFD29ua9/+efI1jW5Qq/T/ze+MjLcBm09Q62mJPtAF3pdtfR0/XtBzA+vO8NrQv/R/a14r7v+fRYNNZqP/PRNzYgKIA62yh/v/qBpQDWH/m/9C+9H9oX/o/tKXVPNe/VGLH8SWOSTpbk+niiVIs/S0A5YhiT/EfHJf+wN9KEWtTwo41jbR3BXXaE2uRV5SWPaaziS9iyBPF7w5ocZMorW/zWzqxJSKWab21xjZTJC63umCVavh8A/9pAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWBP/BgAA///OQ84N") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) 1m37.400989511s ago: executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 1m36.75821888s ago: executing program 5: getresuid(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) open$dir(&(0x7f0000000180)='./file0\x00', 0x607e, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x11, 0x547, &(0x7f0000001140)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f00000019c0), 0x10) 1m23.478622055s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x8, 0x1, @mcast1}]}, 0x44}}, 0x0) 1m17.916850973s ago: executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c06050a020b0243000400ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x302}, 0x10, 0x0) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = fanotify_init(0x200, 0x0) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) dup(r2) fanotify_mark(r1, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000100)={@mcast2={0xff, 0x3}}, 0x14) 1m14.1654618s ago: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001980)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x3819, 0x0, 0x0, 0x0, 0xfffffffffffffedd) 1m8.682515936s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000340)=ANY=[@ANYBLOB='dmode=00000000000000000000006,noadinicb,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000000000000000008000"], 0x1, 0xa1b, &(0x7f0000001540)="$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") write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f00000003c0)=[@increfs_done={0x40106308, 0x2}], 0x14, 0x0, &(0x7f0000000200)="ca26620a5e907126909912c34f1bd81533c3b47e"}) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000280)=0x90) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2c85c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79a957c84f236909fcdcd548b3d360c4b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a90400000037c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aafc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae11861d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68dff0f0000000000000e0bf9878516f532639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483be1920efcb413798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932ecb204b4d807536a75942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c290fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab397a94d560a15b81f339f6a4caf2ee2fd01f34dca330000000000000004000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e1516551c05afc85ad4f4ef9824b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374b281c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e98389557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca15981090ded672f5af8a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd163d4e58252f3d571c36b1793db8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f3919eb7cfbd7cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb8e725000000000000bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4abb1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846f4cf48a5c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d685ac3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cbe91c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c217b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae25824264f80dee5f95be1b9deb11b7db45b9f15b7b55d8fdbedd8b2ff891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a49"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1d55129c3ee5e5ca900cf0000009dc2aac63a01000000000000c04faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r5, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="a9aabab2ea2b7f828bec64c06361fefaa511741fc584121140d84e44becfb2485320ca0157939af01d0baaa106bfa18f912c3f2eb0bb7295442ac909747b2ff796d8621c22177403b424397292b48ff0a9e3b35b619aa1ef6cc8d0ec1126a3de8a7f2975a5b96c35e21d2b621592c3d016856d557e13b4cb318026000cef5a24bb7ac62640f9e390", 0x88}], 0x1}}], 0x1, 0x0) recvmsg(r5, &(0x7f0000008ac0)={0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000009140)=""/135, 0x87}], 0x1}, 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 1m7.438449809s ago: executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0xa2, 0x0, &(0x7f0000000040)) 1m1.335494975s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000000000000000a800000", @ANYBLOB="0000000014"], 0x30}}, 0x0) 59.334880054s ago: executing program 4: syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x10080, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0], 0x1, 0x152, &(0x7f0000000380)="$eJzs0EFLImEYwPH/OLq77OoqrAvuHnYX9rDDius44t4iNJKEbKDw0iECnSjQFIXwaEG3Dn0AD5XQSTxExw5mXSyFsM8hdAg8FuMIZfoR3t9t/s/DA/POz3QVPCBjmcvnCkWjVDIyv5b1ZHzl7Pzis9ldwIfhRq5QNJcz1n4zCps2aNqhv2vlKxdsbGWNf+l81vzuR0EBYp/M7kDF2v1oNq+1Gxo15Te0vlpNm9LCo/bdDjG31cx7T8cD/gA2Xu49AuWqv1G/Weq0E4G/p2sy+wn/zy/SeP9hHGjxbzWnTyZlXJ8Mf7NcvQ+2A3fBRr3X7SQX9aTeDWva/7AaUtVIT7/tJCKVQ+wLzh1YfXPvnQSkYE+CqgT14bx/KZmP2Doa6Dn3ey/wsO0B6fUExifpdZ+jNuv12JAVJCZVpjRBEARBEARBEARBmPAcAAD//7ajac4=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 58.165239866s ago: executing program 4: r0 = fanotify_init(0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x61, 0x40001002, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 55.414057889s ago: executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 4.468119441s ago: executing program 2: capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x54, 0x12, 0xeb21, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "17790180"}]}, 0x54}}, 0x0) 4.224264568s ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047458, 0x0) 3.935166254s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) 3.692006469s ago: executing program 2: sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 1.213799284s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000000000000000a800000", @ANYBLOB="0000000014"], 0x30}}, 0x0) 1.185318847s ago: executing program 2: socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}, {&(0x7f0000000140)=""/9, 0x9}], 0x3, 0x0, 0x400) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r2 = socket(0x0, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYRESDEC=r1], 0x44}}, 0x0) bind$can_raw(r0, &(0x7f0000000200), 0x10) socket$inet6(0xa, 0x806, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000800)='net/softnet_stat\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f045}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x2011}) read$msr(r3, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @private}}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) gettid() connect$inet(0xffffffffffffffff, &(0x7f0000772000), 0x10) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/205, 0xcd}, {0x0}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000740)=""/108, 0x6c}], 0x6, 0x0, 0x101) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x7ff, @private0}, 0x1c) 801.93175ms ago: executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffff59, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 212.751445ms ago: executing program 1: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000001840)=ANY=[@ANYBLOB="696f636861727365743d637038ad885a49c8bff0a51bf6ec6a35372c696f636861727365743d69736f383835392d31352c756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d63703933362c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303032372c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030"], 0x9, 0x1505, &(0x7f0000000180)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@tracing}, 0x40) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000080009000200000008000b"], 0x24}}, 0x0) 0s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = io_uring_setup(0x30d3, &(0x7f00000000c0)) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080), 0xc) read(r2, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'vlan1\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) kernel console output (not intermixed with test programs): 737.940890][ T29] audit: type=1326 audit(8244246773.986:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff50b87cf29 code=0x7ffc0000 [ 737.977638][ T29] audit: type=1326 audit(8244246773.986:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff50b87cf29 code=0x7ffc0000 [ 738.001167][ T29] audit: type=1326 audit(8244246773.986:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50b87cf29 code=0x7ffc0000 [ 738.025003][ T29] audit: type=1326 audit(8244246773.986:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff50b87cf29 code=0x7ffc0000 [ 738.042010][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.094195][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.138654][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.164795][T13839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.231185][T13839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.264550][T13839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.284617][T13839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.312071][T13839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.553691][ T6373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.561532][ T6373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.627521][ T6373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.639219][ T6373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.973284][T14063] loop5: detected capacity change from 0 to 64 [ 740.083761][T14063] Bluetooth: MGMT ver 1.22 [ 741.093067][T14083] loop5: detected capacity change from 0 to 4096 [ 741.136323][T14083] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 741.218275][T14083] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 741.919162][T14075] loop3: detected capacity change from 0 to 32768 [ 741.927611][ T61] ntfs3: loop5: ino=5, ntfs3_write_inode failed, -22. [ 741.960698][T14075] XFS: noikeep mount option is deprecated. [ 742.072228][T14075] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 742.339581][T14075] XFS (loop3): Ending clean mount [ 742.395390][T14075] XFS (loop3): Quotacheck needed: Please wait. [ 742.548010][T14075] XFS (loop3): Quotacheck: Done. [ 742.631687][T14110] loop5: detected capacity change from 0 to 64 [ 742.884918][T13257] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 744.125647][T14119] loop2: detected capacity change from 0 to 4096 [ 746.807124][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.814145][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.239899][T14139] nbd: must specify a size in bytes for the device [ 747.347507][T14158] loop3: detected capacity change from 0 to 64 [ 747.702039][ T5127] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 747.922242][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.943543][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.973745][ T5127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 748.037783][ T5127] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 748.070627][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.123328][ T5127] usb 3-1: config 0 descriptor?? [ 748.269456][T14157] loop1: detected capacity change from 0 to 32768 [ 748.323692][T14157] XFS: noikeep mount option is deprecated. [ 748.386645][T14168] loop3: detected capacity change from 0 to 64 [ 748.418293][T14157] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 748.437550][T14168] minix filesystem being mounted at /root/syzkaller-testdir2777954833/syzkaller.fDPAzg/50/file6 supports timestamps until 2106-02-07 (0xffffffff) [ 748.565137][ T5127] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 748.593277][ T5127] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 748.596007][T14157] XFS (loop1): Ending clean mount [ 748.629651][ T5127] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 748.652345][T14157] XFS (loop1): Quotacheck needed: Please wait. [ 748.709462][ T5127] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 748.839799][ T5177] usb 3-1: USB disconnect, device number 2 [ 748.875262][T14157] XFS (loop1): Quotacheck: Done. [ 749.767007][T13682] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 750.056226][T14178] loop3: detected capacity change from 0 to 4096 [ 751.085428][T14190] loop2: detected capacity change from 0 to 512 [ 751.123061][T14190] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 752.205081][T14190] loop2: detected capacity change from 0 to 1764 [ 752.266056][T14190] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 752.504559][T14197] dvmrp0: entered allmulticast mode [ 753.580751][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.430437][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.905605][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.217972][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.562178][T14214] nbd: must specify a size in bytes for the device [ 755.603311][ T61] bridge_slave_1: left allmulticast mode [ 755.610252][ T61] bridge_slave_1: left promiscuous mode [ 755.620660][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.645787][ T61] bridge_slave_0: left allmulticast mode [ 755.665750][ T61] bridge_slave_0: left promiscuous mode [ 755.692965][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.825695][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 755.842199][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 755.852466][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 755.871393][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 755.904689][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 755.912462][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 756.702216][T14235] loop5: detected capacity change from 0 to 2048 [ 756.825392][T14237] loop3: detected capacity change from 0 to 4096 [ 756.836802][T14239] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 756.974608][T14240] syz-executor.5: attempt to access beyond end of device [ 756.974608][T14240] loop5: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 757.100199][T14240] syz-executor.5: attempt to access beyond end of device [ 757.100199][T14240] loop5: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 757.934647][T14239] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 757.981194][T14239] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 758.008200][T12364] Bluetooth: hci3: command tx timeout [ 758.049397][T14239] Remounting filesystem read-only [ 758.068435][ T1282] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 758.092197][ T1282] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 758.112078][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.153331][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.180621][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.221721][ T1282] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 758.255489][ T1282] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 758.287151][ T1282] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 758.304935][ T1282] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 758.334258][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.372079][ T1282] NILFS (loop5): discard dirty page: offset=65536, ino=3 [ 758.389986][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.424596][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.470596][ T1282] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 758.478117][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.489228][ T1282] NILFS (loop5): discard dirty page: offset=196608, ino=3 [ 758.496671][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.520368][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.538870][ T1282] NILFS (loop5): discard dirty block: blocknr=49, size=1024 [ 758.568449][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.592754][ T1282] NILFS (loop5): discard dirty page: offset=0, ino=18 [ 758.601759][ T1282] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 758.610105][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.619417][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.629920][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.654118][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.669584][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.679303][ T1282] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 758.687286][ T1282] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 758.695538][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.710031][ T61] bond0 (unregistering): Released all slaves [ 758.728192][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.759908][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.792547][ T1282] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 758.812744][ T1282] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 758.820091][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.912367][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.921305][ T1282] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 758.942120][T13839] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 758.964595][T13839] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 759.021424][T13839] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 759.043020][T13839] NILFS (loop5): discard dirty block: blocknr=36, size=1024 [ 759.056127][T13839] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 759.064062][T13839] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 759.972299][ T61] hsr_slave_0: left promiscuous mode [ 759.999597][ T61] hsr_slave_1: left promiscuous mode [ 760.082413][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.092110][T12364] Bluetooth: hci3: command tx timeout [ 760.102114][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.143344][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.162358][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.190873][ T61] batman_adv: batadv0: Removing interface: macsec1 [ 760.248907][ T61] veth1_macvtap: left promiscuous mode [ 760.255107][ T61] veth0_macvtap: left promiscuous mode [ 760.260900][ T61] veth1_vlan: left promiscuous mode [ 760.268852][ T61] veth0_vlan: left promiscuous mode [ 760.480892][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 760.480914][ T29] audit: type=1804 audit(8244246796.786:939): pid=14265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1373695114/syzkaller.9lhBPS/109/bus" dev="sda1" ino=1962 res=1 errno=0 [ 760.627454][T14255] loop3: detected capacity change from 0 to 32768 [ 760.633429][ T29] audit: type=1804 audit(8244246796.786:940): pid=14265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1373695114/syzkaller.9lhBPS/109/bus" dev="sda1" ino=1962 res=1 errno=0 [ 760.782574][T14255] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 760.947155][T14255] XFS (loop3): Ending clean mount [ 761.467442][T13257] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 762.174426][T12364] Bluetooth: hci3: command tx timeout [ 763.077703][T14296] loop5: detected capacity change from 0 to 512 [ 763.203381][T14296] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 763.238889][T14296] System zones: 0-2, 18-18, 34-35 [ 763.275025][ T61] team0 (unregistering): Port device team_slave_1 removed [ 763.284065][T14296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.329781][T14296] ext4 filesystem being mounted at /root/syzkaller-testdir4026686887/syzkaller.CmWJ7B/14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.531415][ T61] team0 (unregistering): Port device team_slave_0 removed [ 763.880742][T13839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.242180][T12364] Bluetooth: hci3: command tx timeout [ 765.197720][T14317] loop5: detected capacity change from 0 to 32768 [ 765.245299][T14317] btrfs: Deprecated parameter 'usebackuproot' [ 765.251425][T14317] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 765.284274][T14317] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (14317) [ 765.357790][T14317] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 765.408977][T14317] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 765.434683][T14317] BTRFS info (device loop5): using free-space-tree [ 765.664063][T14317] BTRFS info (device loop5): rebuilding free space tree [ 766.044064][T14280] syz-executor.0 (14280) used greatest stack depth: 15696 bytes left [ 766.056019][T14304] dvmrp8: entered allmulticast mode [ 766.121695][T14310] dvmrp0: entered allmulticast mode [ 766.202525][T14229] chnl_net:caif_netlink_parms(): no params data found [ 766.428837][T13839] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 766.913261][T14341] geneve2: entered promiscuous mode [ 767.014838][T14342] loop1: detected capacity change from 0 to 1024 [ 767.062377][T14229] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.085574][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.103293][T14229] bridge_slave_0: entered allmulticast mode [ 767.111215][T14229] bridge_slave_0: entered promiscuous mode [ 767.188056][T14229] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.222122][T14229] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.229453][T14229] bridge_slave_1: entered allmulticast mode [ 767.243809][T14342] syz-executor.1: attempt to access beyond end of device [ 767.243809][T14342] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 767.286443][T14229] bridge_slave_1: entered promiscuous mode [ 767.538147][T14229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.568010][T14229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.706035][T14229] team0: Port device team_slave_0 added [ 767.751741][T14229] team0: Port device team_slave_1 added [ 767.895627][T14229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.932530][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.017938][T14229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.112748][T14229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.119748][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.195221][T14229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.303355][T14231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 768.444890][T14229] hsr_slave_0: entered promiscuous mode [ 768.499908][T14229] hsr_slave_1: entered promiscuous mode [ 768.505220][T14361] syz-executor.3(14361): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 768.526693][T14229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.553418][T14231] usb 5-1: config 255 has too many interfaces: 230, using maximum allowed: 32 [ 768.575251][T14231] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 768.575285][T14231] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 230 [ 768.575342][T14231] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 768.575372][T14231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.578826][ T29] audit: type=1804 audit(8244246804.866:941): pid=14360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1373695114/syzkaller.9lhBPS/112/bus" dev="sda1" ino=1956 res=1 errno=0 [ 768.592627][T14229] Cannot create hsr debugfs directory [ 768.694024][ T29] audit: type=1804 audit(8244246804.996:942): pid=14364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1373695114/syzkaller.9lhBPS/112/bus" dev="sda1" ino=1956 res=1 errno=0 [ 768.741582][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 768.990900][T14231] usb 5-1: string descriptor 0 read error: -71 [ 768.997200][T14231] usb 5-1: USB disconnect, device number 4 [ 769.195008][T14355] loop5: detected capacity change from 0 to 32768 [ 769.316311][T14355] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 769.331172][T14376] loop1: detected capacity change from 0 to 512 [ 769.368143][T12364] Bluetooth: hci7: command 0x0406 tx timeout [ 769.395067][T14355] XFS (loop5): Ending clean mount [ 769.462688][T14376] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 769.506509][T14376] System zones: 0-2, 18-18, 34-35 [ 769.576289][T14376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.621191][T14376] ext4 filesystem being mounted at /root/syzkaller-testdir133800827/syzkaller.NC4z7s/46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.709066][T13839] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 770.375387][T14229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 770.416749][T14229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 770.496356][T14229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 770.572415][T14229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 770.634390][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 770.979157][T14229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.019943][T13682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.022051][ T780] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 771.071416][T14229] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.167939][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.175253][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.187834][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.195089][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.282542][ T780] usb 1-1: Using ep0 maxpacket: 8 [ 771.294121][ T780] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.330558][T14395] loop5: detected capacity change from 0 to 4096 [ 771.345835][ T780] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 771.381685][ T780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.400530][ T780] usb 1-1: Product: syz [ 771.412126][ T780] usb 1-1: Manufacturer: syz [ 771.416764][ T780] usb 1-1: SerialNumber: syz [ 771.464077][ T780] usb 1-1: config 0 descriptor?? [ 771.674614][ T29] audit: type=1804 audit(8244246807.976:943): pid=14395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4026686887/syzkaller.CmWJ7B/17/file1/bus" dev="loop5" ino=33 res=1 errno=0 [ 771.793353][T14404] loop1: detected capacity change from 0 to 1024 [ 771.841804][T14404] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-13, ino=12). Please run e2fsck to fix. [ 771.893598][T14404] EXT4-fs (loop1): mount failed [ 771.966063][ T780] usb 1-1: Found UVC 0.00 device syz (8086:0b03) [ 771.992219][ T780] usb 1-1: No valid video chain found. [ 772.014100][ T780] usb 1-1: USB disconnect, device number 9 [ 772.103105][T14403] misc userio: Can't change port type on an already running userio instance [ 772.128542][T14229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.340435][T14229] veth0_vlan: entered promiscuous mode [ 772.377851][T14229] veth1_vlan: entered promiscuous mode [ 772.492734][T14229] veth0_macvtap: entered promiscuous mode [ 772.520456][T14229] veth1_macvtap: entered promiscuous mode [ 772.598624][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.630433][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.651292][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.672005][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.691970][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.704877][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.727510][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.751984][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.761828][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.796971][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.813193][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.842804][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.880001][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.912423][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.944891][T14229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.017091][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.072120][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.111593][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.140831][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.164391][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.187827][T14413] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 773.206361][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.242110][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.274733][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.302141][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.327282][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.361183][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.409725][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.453977][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.508914][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.541110][T14229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.730675][ T29] audit: type=1800 audit(8244246810.036:944): pid=14420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 773.841210][T14421] loop1: detected capacity change from 0 to 256 [ 774.030235][T14229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.223839][T14229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.303790][T14229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.319463][T14229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.335819][ T29] audit: type=1800 audit(8244246810.646:945): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 774.419315][T14421] FAT-fs (loop1): Directory bread(block 64) failed [ 774.426871][T14421] FAT-fs (loop1): Directory bread(block 65) failed [ 774.434474][T14421] FAT-fs (loop1): Directory bread(block 66) failed [ 774.441020][T14421] FAT-fs (loop1): Directory bread(block 67) failed [ 774.447722][T14421] FAT-fs (loop1): Directory bread(block 68) failed [ 774.454410][T14421] FAT-fs (loop1): Directory bread(block 69) failed [ 774.461039][T14421] FAT-fs (loop1): Directory bread(block 70) failed [ 774.467673][T14421] FAT-fs (loop1): Directory bread(block 71) failed [ 774.474738][T14421] FAT-fs (loop1): Directory bread(block 72) failed [ 774.481287][T14421] FAT-fs (loop1): Directory bread(block 73) failed [ 774.501440][T14421] vfat filesystem being mounted at /root/syzkaller-testdir133800827/syzkaller.NC4z7s/48/bus supports timestamps until 2107-12-31 (0x10391447e) [ 774.558675][ T29] audit: type=1800 audit(8244246810.856:946): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=1048805 res=0 errno=0 [ 774.702147][ T29] audit: type=1800 audit(8244246810.866:947): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=1048805 res=0 errno=0 [ 774.997570][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.042623][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.166221][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.204126][T14429] dvmrp8: entered allmulticast mode [ 775.220324][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.279784][T14429] dvmrp8: left allmulticast mode [ 775.712229][T14437] loop2: detected capacity change from 0 to 4096 [ 777.288987][T14464] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 777.633101][ T29] audit: type=1800 audit(8244246813.896:948): pid=14468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1961 res=0 errno=0 [ 777.717450][T14469] loop2: detected capacity change from 0 to 256 [ 778.184970][ T29] audit: type=1800 audit(8244246814.496:949): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1961 res=0 errno=0 [ 778.254583][T14469] FAT-fs (loop2): Directory bread(block 64) failed [ 778.261213][T14469] FAT-fs (loop2): Directory bread(block 65) failed [ 778.267930][T14469] FAT-fs (loop2): Directory bread(block 66) failed [ 778.274589][T14469] FAT-fs (loop2): Directory bread(block 67) failed [ 778.281244][T14469] FAT-fs (loop2): Directory bread(block 68) failed [ 778.287903][T14469] FAT-fs (loop2): Directory bread(block 69) failed [ 778.294569][T14469] FAT-fs (loop2): Directory bread(block 70) failed [ 778.302580][T14469] FAT-fs (loop2): Directory bread(block 71) failed [ 778.309203][T14469] FAT-fs (loop2): Directory bread(block 72) failed [ 778.317276][T14469] FAT-fs (loop2): Directory bread(block 73) failed [ 778.337095][T14469] vfat filesystem being mounted at /root/syzkaller-testdir3236456089/syzkaller.0NUJ1G/2/bus supports timestamps until 2107-12-31 (0x10391447e) [ 778.420866][ T29] audit: type=1800 audit(8244246814.726:950): pid=14466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=1048810 res=0 errno=0 [ 778.469070][ T29] audit: type=1800 audit(8244246814.726:951): pid=14466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=1048810 res=0 errno=0 [ 781.640387][T14483] loop5: detected capacity change from 0 to 256 [ 781.711826][T14483] exfat: Deprecated parameter 'namecase' [ 781.722093][T14483] exfat: Bad value for 'uid' [ 781.799935][ T29] audit: type=1326 audit(8244246818.106:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0c7cf29 code=0x7ffc0000 [ 781.932073][ T29] audit: type=1326 audit(8244246818.106:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0c7cf29 code=0x7ffc0000 [ 782.014223][ T29] audit: type=1800 audit(8244246818.246:954): pid=14493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=1944 res=0 errno=0 [ 782.037261][ T29] audit: type=1326 audit(8244246818.266:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc0c7cf29 code=0x7ffc0000 [ 782.060704][ T29] audit: type=1326 audit(8244246818.266:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0c7cf29 code=0x7ffc0000 [ 782.084145][ T29] audit: type=1326 audit(8244246818.286:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc0c7cf29 code=0x7ffc0000 [ 782.172655][ T29] audit: type=1326 audit(8244246818.446:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc0c7cf29 code=0x7ffc0000 [ 782.251339][T14491] loop2: detected capacity change from 0 to 8192 [ 782.273612][ T29] audit: type=1326 audit(8244246818.446:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bc0c7a6a7 code=0x7ffc0000 [ 782.342669][ T29] audit: type=1326 audit(8244246818.446:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc0c40379 code=0x7ffc0000 [ 782.366526][ T29] audit: type=1326 audit(8244246818.446:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bc0c7a6a7 code=0x7ffc0000 [ 782.741766][T14501] loop1: detected capacity change from 0 to 2048 [ 782.863822][T14501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.225640][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.437014][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.618514][T13682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.777090][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.870993][T14511] loop2: detected capacity change from 0 to 512 [ 783.979776][T14511] msdos filesystem being mounted at /root/syzkaller-testdir3236456089/syzkaller.0NUJ1G/4/file0 supports timestamps until 2108-01-01 (0x10391694a) [ 784.120001][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.160668][T14515] loop1: detected capacity change from 0 to 512 [ 784.324753][T14515] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 784.364842][T14515] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 784.468740][T14515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.537869][T14515] ext4 filesystem being mounted at /root/syzkaller-testdir133800827/syzkaller.NC4z7s/57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.605056][ T11] bridge_slave_1: left allmulticast mode [ 784.610766][ T11] bridge_slave_1: left promiscuous mode [ 784.685147][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.013986][ T11] bridge_slave_0: left allmulticast mode [ 786.393699][T14521] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 786.444346][ T11] bridge_slave_0: left promiscuous mode [ 786.692634][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.833851][T12364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 786.845582][T12364] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 786.855580][T12364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 786.866801][T12364] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 786.874950][T12364] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 786.882488][T12364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 787.043845][T14523] loop5: detected capacity change from 0 to 4096 [ 787.119958][T13682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.324058][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 787.324080][ T29] audit: type=1804 audit(8244246823.636:1188): pid=14523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4026686887/syzkaller.CmWJ7B/27/file0/bus" dev="loop5" ino=33 res=1 errno=0 [ 787.416480][ T29] audit: type=1800 audit(8244246823.636:1189): pid=14523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 787.828900][ T11] dvmrp0 (unregistering): left allmulticast mode [ 788.183440][T14535] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.678084][ T29] audit: type=1804 audit(8244246824.986:1190): pid=14540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4026686887/syzkaller.CmWJ7B/29/file0" dev="sda1" ino=1965 res=1 errno=0 [ 788.873643][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.932556][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.962290][T12364] Bluetooth: hci7: command tx timeout [ 789.008631][ T11] bond0 (unregistering): Released all slaves [ 789.481627][T14552] loop2: detected capacity change from 0 to 1024 [ 789.551157][T14552] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 789.582935][T14552] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 789.615991][T14552] JBD2: no valid journal superblock found [ 789.627384][T14552] EXT4-fs (loop2): Could not load journal inode [ 789.679990][T14556] loop5: detected capacity change from 0 to 64 [ 789.750259][T14552] loop2: detected capacity change from 0 to 512 [ 789.809909][T14552] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: writeback. [ 789.970446][T14558] loop1: detected capacity change from 0 to 512 [ 790.027885][T14558] msdos filesystem being mounted at /root/syzkaller-testdir133800827/syzkaller.NC4z7s/61/file0 supports timestamps until 2108-01-01 (0x10391694a) [ 790.269935][ T29] audit: type=1326 audit(8244246826.576:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9667cf29 code=0x7ffc0000 [ 790.326705][ T29] audit: type=1326 audit(8244246826.576:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9667cf29 code=0x7ffc0000 [ 790.412026][ T29] audit: type=1326 audit(8244246826.576:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb9667cf29 code=0x7ffc0000 [ 790.497893][ T29] audit: type=1326 audit(8244246826.576:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9667cf29 code=0x7ffc0000 [ 790.530410][ T29] audit: type=1326 audit(8244246826.576:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9667cf29 code=0x7ffc0000 [ 790.582123][ T29] audit: type=1326 audit(8244246826.576:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb9667cf29 code=0x7ffc0000 [ 790.657978][ T29] audit: type=1326 audit(8244246826.616:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9667cf29 code=0x7ffc0000 [ 791.052052][T12364] Bluetooth: hci7: command tx timeout [ 791.439407][T14562] loop1: detected capacity change from 0 to 32768 [ 791.557950][T14562] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 791.740915][T14562] XFS (loop1): Ending clean mount [ 791.759280][T14562] XFS (loop1): Quotacheck needed: Please wait. [ 791.930131][T14562] XFS (loop1): Quotacheck: Done. [ 792.311660][T13682] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 792.854129][T14579] loop5: detected capacity change from 0 to 1024 [ 793.122195][T12364] Bluetooth: hci7: command tx timeout [ 793.474115][T14585] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.819163][T14589] loop1: detected capacity change from 0 to 4096 [ 793.875525][T14589] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 795.202167][T12364] Bluetooth: hci7: command tx timeout [ 803.101084][ T11] hsr_slave_0: left promiscuous mode [ 803.169839][ T11] hsr_slave_1: left promiscuous mode [ 803.202295][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.210609][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.300952][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.332244][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.398596][ T11] veth1_macvtap: left promiscuous mode [ 803.412057][ T11] veth0_macvtap: left promiscuous mode [ 803.418741][ T11] veth1_vlan: left promiscuous mode [ 803.427626][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 803.427643][ T29] audit: type=1800 audit(8244246839.736:1257): pid=14594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 803.444641][ T11] veth0_vlan: left promiscuous mode [ 804.359455][T14605] loop5: detected capacity change from 0 to 64 [ 804.655005][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 804.670617][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 804.693338][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 804.714897][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 804.725670][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 804.733851][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 805.174807][T14601] loop1: detected capacity change from 0 to 32768 [ 805.390896][T14601] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 805.637357][T14601] XFS (loop1): Ending clean mount [ 805.685069][T14601] XFS (loop1): Quotacheck needed: Please wait. [ 805.758539][T14601] XFS (loop1): Quotacheck: Done. [ 806.085084][T13682] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 806.491214][T14623] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 806.822765][ T53] Bluetooth: hci3: command tx timeout [ 807.609862][ T11] team0 (unregistering): Port device team_slave_1 removed [ 807.812194][ T11] team0 (unregistering): Port device team_slave_0 removed [ 808.246470][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.262192][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.290670][T14638] loop1: detected capacity change from 0 to 2048 [ 808.330510][T14638] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 808.367821][T14638] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 808.886114][ T53] Bluetooth: hci3: command tx timeout [ 809.366017][T14638] loop1: detected capacity change from 0 to 32768 [ 809.587791][T14638] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 809.604196][T14638] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 809.782938][T14638] XFS (loop1): Ending clean mount [ 809.793530][T14638] XFS (loop1): Quotacheck needed: Please wait. [ 809.988291][T14638] XFS (loop1): Quotacheck: Done. [ 810.196167][ T29] audit: type=1800 audit(8244246846.506:1258): pid=14648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1945 res=0 errno=0 [ 810.349720][T14638] rtc_cmos 00:00: Alarms can be up to one day in the future [ 810.969124][ T53] Bluetooth: hci3: command tx timeout [ 811.012229][T14638] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 811.193681][T10943] rtc_cmos 00:00: Alarms can be up to one day in the future [ 811.228998][T10943] rtc_cmos 00:00: Alarms can be up to one day in the future [ 811.264843][T10943] rtc_cmos 00:00: Alarms can be up to one day in the future [ 811.282214][T10943] rtc_cmos 00:00: Alarms can be up to one day in the future [ 811.289546][T10943] rtc rtc0: __rtc_set_alarm: err=-22 [ 811.543370][T14524] chnl_net:caif_netlink_parms(): no params data found [ 811.948437][ T1107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.077289][T14606] chnl_net:caif_netlink_parms(): no params data found [ 812.413320][ T1107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.550872][T14669] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 812.959664][T14669] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 813.015926][T14669] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 813.042037][ T53] Bluetooth: hci3: command tx timeout [ 813.173968][T14669] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 813.368107][T14669] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.084754][T14524] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.102501][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.122308][T14524] bridge_slave_0: entered allmulticast mode [ 814.148716][T14524] bridge_slave_0: entered promiscuous mode [ 814.760232][ T1107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.852444][T14524] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.876134][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.912619][T14524] bridge_slave_1: entered allmulticast mode [ 814.920343][T14524] bridge_slave_1: entered promiscuous mode [ 815.117796][ T1107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.305731][T14524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.356403][ T29] audit: type=1326 audit(8244246851.666:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a3e7cf29 code=0x7ffc0000 [ 815.474927][ T29] audit: type=1326 audit(8244246851.736:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a3e7cf29 code=0x7ffc0000 [ 815.545806][ T29] audit: type=1326 audit(8244246851.736:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59a3e7cf29 code=0x7ffc0000 [ 815.591304][T14524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.606957][ T29] audit: type=1326 audit(8244246851.736:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a3e7cf29 code=0x7ffc0000 [ 815.685320][ T29] audit: type=1326 audit(8244246851.746:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59a3e7cf29 code=0x7ffc0000 [ 815.736109][T14606] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.760395][T14606] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.765154][ T29] audit: type=1326 audit(8244246851.746:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a3e7cf29 code=0x7ffc0000 [ 815.791006][T14606] bridge_slave_0: entered allmulticast mode [ 815.802293][T14606] bridge_slave_0: entered promiscuous mode [ 815.862161][ T29] audit: type=1326 audit(8244246851.746:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f59a3e7a6a7 code=0x7ffc0000 [ 815.951859][ T29] audit: type=1326 audit(8244246851.746:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59a3e40379 code=0x7ffc0000 [ 816.032027][ T29] audit: type=1326 audit(8244246851.746:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f59a3e7a6a7 code=0x7ffc0000 [ 816.072012][ T29] audit: type=1326 audit(8244246851.746:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59a3e40379 code=0x7ffc0000 [ 816.224704][T14606] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.243833][T14606] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.266621][T14606] bridge_slave_1: entered allmulticast mode [ 816.294136][T14606] bridge_slave_1: entered promiscuous mode [ 816.432557][T14524] team0: Port device team_slave_0 added [ 816.473045][T14524] team0: Port device team_slave_1 added [ 816.822452][T14606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.875191][T12364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 816.889123][T12364] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 816.893595][T14705] loop1: detected capacity change from 0 to 40427 [ 816.900332][T12364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 816.918820][T12364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 816.927128][T12364] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 816.927410][T14705] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 816.940700][T12364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 816.942824][T14705] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 816.998923][T14705] F2FS-fs (loop1): Found nat_bits in checkpoint [ 817.075763][T14705] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 817.083187][T14705] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 817.471333][T14606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.052123][T12364] Bluetooth: hci4: command tx timeout [ 820.562063][T12364] Bluetooth: hci5: command 0x0406 tx timeout [ 821.132329][ T53] Bluetooth: hci4: command tx timeout [ 823.212278][ T53] Bluetooth: hci4: command tx timeout [ 824.990916][T10943] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 825.292472][ T53] Bluetooth: hci4: command tx timeout [ 825.312904][T10943] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 825.343170][T10943] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 825.372110][T10943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.393445][T10943] usb 5-1: config 0 descriptor?? [ 829.552947][T14524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.559958][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.632018][T14524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.754206][T14606] team0: Port device team_slave_0 added [ 829.789644][T14606] team0: Port device team_slave_1 added [ 830.270488][T14524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.312019][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.391984][T14524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.537082][T14606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.552558][T14606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.589621][T14606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.654011][T14606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.661505][T14606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.734338][T14606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.046159][ T1107] bridge_slave_1: left allmulticast mode [ 832.052490][ T1107] bridge_slave_1: left promiscuous mode [ 832.058288][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.086547][ T780] usb 5-1: USB disconnect, device number 5 [ 832.200442][ T1107] bridge_slave_0: left allmulticast mode [ 832.230919][ T1107] bridge_slave_0: left promiscuous mode [ 832.243515][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.092670][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.137544][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.185165][ T1107] bond0 (unregistering): Released all slaves [ 834.306876][T14524] hsr_slave_0: entered promiscuous mode [ 834.358619][T14524] hsr_slave_1: entered promiscuous mode [ 834.441470][T14762] loop5: detected capacity change from 0 to 512 [ 834.490270][T14762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 834.500059][T14762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 834.551123][T14762] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 834.569571][T14762] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 834.627626][T14762] EXT4-fs (loop5): orphan cleanup on readonly fs [ 834.655899][T14762] __quota_error: 34 callbacks suppressed [ 834.655923][T14762] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 834.732173][T14762] EXT4-fs warning (device loop5): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 834.771090][T14762] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 834.847050][T14762] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor.5: bg 0: block 40: padding at end of block bitmap is not set [ 834.924422][T14762] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 834.953849][T14762] EXT4-fs (loop5): 1 truncate cleaned up [ 834.961053][T14762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 835.044005][T14606] hsr_slave_0: entered promiscuous mode [ 835.082923][T14606] hsr_slave_1: entered promiscuous mode [ 835.100067][T14606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.122145][T14606] Cannot create hsr debugfs directory [ 835.256246][T13839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.574116][ T1107] hsr_slave_0: left promiscuous mode [ 835.611166][ T1107] hsr_slave_1: left promiscuous mode [ 835.633142][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.640606][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.667538][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.699457][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.795256][ T1107] veth1_macvtap: left promiscuous mode [ 835.810697][ T1107] veth0_macvtap: left promiscuous mode [ 835.822869][ T1107] veth1_vlan: left promiscuous mode [ 835.832551][ T1107] veth0_vlan: left promiscuous mode [ 836.157427][T14769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.352486][T14231] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 837.554105][T14231] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 837.572029][T14231] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 837.602838][T14231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.625126][T14231] usb 2-1: config 0 descriptor?? [ 839.007902][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 839.236781][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 840.668899][T14819] loop5: detected capacity change from 0 to 1024 [ 840.770805][T14819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.052096][T12364] Bluetooth: hci0: command 0x0406 tx timeout [ 841.100697][T13839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.800088][T10943] usb 2-1: USB disconnect, device number 8 [ 842.176595][T14830] loop5: detected capacity change from 0 to 512 [ 842.218995][T14830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02d, mo2=0002] [ 842.228994][T14830] System zones: 1-12 [ 842.240632][T14830] EXT4-fs error (device loop5): __ext4_iget:4906: inode #11: block 393240: comm syz-executor.5: invalid block [ 842.266801][T14830] EXT4-fs (loop5): Remounting filesystem read-only [ 842.288311][T14830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.411585][T14706] chnl_net:caif_netlink_parms(): no params data found [ 842.916309][T14706] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.952901][T14706] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.960250][T14706] bridge_slave_0: entered allmulticast mode [ 842.996219][T14706] bridge_slave_0: entered promiscuous mode [ 843.034094][T14706] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.041286][T14706] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.079098][T14706] bridge_slave_1: entered allmulticast mode [ 843.116235][T14706] bridge_slave_1: entered promiscuous mode [ 843.253314][T13839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.335529][T14706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.402794][T14706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.682631][ T29] audit: type=1804 audit(8244246879.996:1303): pid=14841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4026686887/syzkaller.CmWJ7B/76/bus" dev="sda1" ino=1949 res=1 errno=0 [ 843.997131][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.068789][T14843] loop5: detected capacity change from 0 to 1024 [ 844.115479][T14843] EXT4-fs error (device loop5): __ext4_fill_super:5447: inode #2: comm syz-executor.5: casefold flag without casefold feature [ 844.172075][T14843] EXT4-fs (loop5): get root inode failed [ 844.177778][T14843] EXT4-fs (loop5): mount failed [ 844.390088][T14706] team0: Port device team_slave_0 added [ 844.619830][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.727589][T14706] team0: Port device team_slave_1 added [ 845.115411][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.351299][T14706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.361852][T14706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.411244][T14706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.638763][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.787791][T14706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.821989][T14706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.879186][T14706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.925660][T12364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 845.937279][T12364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 845.951308][T12364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 845.962449][T12364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 845.970526][T12364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 845.979664][T12364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 846.295593][T14706] hsr_slave_0: entered promiscuous mode [ 846.313391][T14706] hsr_slave_1: entered promiscuous mode [ 846.330958][T14706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.348344][T14706] Cannot create hsr debugfs directory [ 846.544152][ T1107] bridge_slave_1: left allmulticast mode [ 846.549871][ T1107] bridge_slave_1: left promiscuous mode [ 846.568081][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.597808][ T1107] bridge_slave_0: left allmulticast mode [ 846.631994][ T1107] bridge_slave_0: left promiscuous mode [ 846.637868][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.687205][T14862] loop1: detected capacity change from 0 to 512 [ 847.712658][T14862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 847.732080][T14862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 847.852783][T14862] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 847.861049][T14862] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 847.921795][T14862] EXT4-fs (loop1): orphan cleanup on readonly fs [ 847.962150][T14862] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 847.971574][T14862] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 848.042169][T14862] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 848.072933][T14862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 848.092127][ T53] Bluetooth: hci0: command tx timeout [ 848.130487][T14862] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 848.167932][T14862] EXT4-fs (loop1): 1 truncate cleaned up [ 848.178996][T14862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 848.463748][T13682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.817268][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.850677][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.887542][ T1107] bond0 (unregistering): Released all slaves [ 850.073263][T12364] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 850.086684][T12364] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 850.095348][T12364] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 850.106403][T12364] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 850.128428][T12364] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 850.135765][ T1107] hsr_slave_0: left promiscuous mode [ 850.142266][T12364] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 850.162403][T12364] Bluetooth: hci0: command tx timeout [ 850.173407][ T1107] hsr_slave_1: left promiscuous mode [ 850.220001][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.241612][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.283293][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.312361][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.417697][ T1107] veth1_macvtap: left promiscuous mode [ 850.423534][ T1107] veth0_macvtap: left promiscuous mode [ 850.429226][ T1107] veth1_vlan: left promiscuous mode [ 850.434816][ T1107] veth0_vlan: left promiscuous mode [ 850.577322][ T29] audit: type=1800 audit(8244246886.886:1304): pid=14881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 852.242859][T12364] Bluetooth: hci8: command tx timeout [ 852.250697][T12364] Bluetooth: hci0: command tx timeout [ 852.646778][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 852.850545][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 854.325517][T12364] Bluetooth: hci0: command tx timeout [ 854.330995][T12364] Bluetooth: hci8: command tx timeout [ 855.821540][T14881] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 855.830258][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 856.077826][T14873] chnl_net:caif_netlink_parms(): no params data found [ 856.402558][T12364] Bluetooth: hci8: command tx timeout [ 856.543547][T14606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 856.935323][T14606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 857.124046][T14606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 857.223652][T14902] loop1: detected capacity change from 0 to 512 [ 857.244479][T14606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 857.276254][T14902] EXT4-fs: quotafile must be on filesystem root [ 857.343771][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.360722][T14873] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.389012][T14873] bridge_slave_0: entered allmulticast mode [ 857.433896][T14873] bridge_slave_0: entered promiscuous mode [ 857.461538][T14852] chnl_net:caif_netlink_parms(): no params data found [ 857.577355][T14873] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.606077][T14873] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.633372][T14873] bridge_slave_1: entered allmulticast mode [ 857.653298][T14873] bridge_slave_1: entered promiscuous mode [ 857.989914][T14873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.142641][T14873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.381459][T14873] team0: Port device team_slave_0 added [ 858.492513][ T53] Bluetooth: hci8: command tx timeout [ 858.530454][T14873] team0: Port device team_slave_1 added [ 858.977447][T14852] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.025887][T14852] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.072261][T14852] bridge_slave_0: entered allmulticast mode [ 859.092152][T14852] bridge_slave_0: entered promiscuous mode [ 859.259882][T14873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.267353][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.352086][T14873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.477816][T14852] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.502324][T14852] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.523968][T14852] bridge_slave_1: entered allmulticast mode [ 859.531783][T14852] bridge_slave_1: entered promiscuous mode [ 859.795572][T14873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.812082][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.864409][T14873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.042030][T14852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.235708][T14852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.370662][T14873] hsr_slave_0: entered promiscuous mode [ 860.511080][T14873] hsr_slave_1: entered promiscuous mode [ 860.562523][ T53] Bluetooth: hci8: command 0x0405 tx timeout [ 860.856128][T14873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.868666][T14873] Cannot create hsr debugfs directory [ 860.982177][ T780] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 861.048615][T14706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 861.138583][T14852] team0: Port device team_slave_0 added [ 861.176070][T14706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 861.192456][ T780] usb 2-1: Using ep0 maxpacket: 32 [ 861.206231][ T780] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 861.206787][T14706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 861.214940][ T780] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 861.264079][T14852] team0: Port device team_slave_1 added [ 861.267066][ T780] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 861.273304][T14706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 861.312051][ T780] usb 2-1: config 1 has no interface number 0 [ 861.318193][ T780] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 861.380287][ T780] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 861.413486][ T780] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 861.439877][ T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.480902][ T780] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 861.595653][T14606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.624081][T14852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.631047][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.673418][T14852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.695265][ T780] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 861.715458][T14852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.731961][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.793456][T14852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.901260][ T5175] usb 2-1: USB disconnect, device number 9 [ 861.916046][ T5175] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 861.937089][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 862.177521][T14606] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.505677][T14852] hsr_slave_0: entered promiscuous mode [ 862.521667][T14852] hsr_slave_1: entered promiscuous mode [ 862.546361][T14852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.554440][T14852] Cannot create hsr debugfs directory [ 862.716658][ T1107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.860538][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.867798][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.102161][ T1107] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.156160][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.163577][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.413091][ T1107] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.726611][ T1107] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.366431][T14929] loop1: detected capacity change from 0 to 2048 [ 864.389663][T14929] EXT4-fs: Ignoring removed orlov option [ 864.442722][ T29] audit: type=1800 audit(8244246900.756:1305): pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 864.495113][T14929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 864.625751][T14929] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 864.731479][T14929] EXT4-fs (loop1): Remounting filesystem read-only [ 864.732412][T14936] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 864.758167][T14930] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 865.591999][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 865.611831][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 865.620259][T14930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 865.644547][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 865.672825][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 865.692803][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 865.702259][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 865.757245][T14706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.781816][T13682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.182777][T14943] loop1: detected capacity change from 0 to 256 [ 866.278920][T14706] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.352340][ T1107] bridge_slave_1: left allmulticast mode [ 866.358056][ T1107] bridge_slave_1: left promiscuous mode [ 866.390303][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.404768][ T1107] bridge_slave_0: left allmulticast mode [ 866.410447][ T1107] bridge_slave_0: left promiscuous mode [ 866.426727][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.469623][ T1107] bridge_slave_1: left allmulticast mode [ 866.487549][ T1107] bridge_slave_1: left promiscuous mode [ 866.502163][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.541396][ T1107] bridge_slave_0: left allmulticast mode [ 866.550899][ T1107] bridge_slave_0: left promiscuous mode [ 866.582206][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.592077][ T5177] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 866.812135][ T5177] usb 2-1: Using ep0 maxpacket: 8 [ 866.819973][ T5177] usb 2-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 866.862108][ T5177] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 866.871215][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.925264][ T5177] usb 2-1: config 0 descriptor?? [ 867.155847][ T5177] usb 2-1: USB disconnect, device number 10 [ 867.653607][ T1107] dvmrp0 (unregistering): left allmulticast mode [ 867.784252][T12364] Bluetooth: hci3: command tx timeout [ 868.016083][T14945] dccp_invalid_packet: pskb_may_pull failed [ 868.448697][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.476950][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.505565][ T1107] bond0 (unregistering): Released all slaves [ 869.439765][T14954] hub 9-0:1.0: USB hub found [ 869.450826][T14954] hub 9-0:1.0: 8 ports detected [ 869.915247][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.922743][T12364] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 869.922750][ T53] Bluetooth: hci3: command tx timeout [ 869.930975][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.342647][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.389370][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.413403][ T1107] bond0 (unregistering): Released all slaves [ 870.710064][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.717403][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.991996][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.999213][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.492466][ T1107] hsr_slave_0: left promiscuous mode [ 871.509754][ T1107] hsr_slave_1: left promiscuous mode [ 871.517477][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.535757][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.580030][ T1107] hsr_slave_0: left promiscuous mode [ 871.642115][ T1107] hsr_slave_1: left promiscuous mode [ 871.650432][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.670133][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.698103][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.712081][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.823258][ T1107] veth1_macvtap: left promiscuous mode [ 871.831051][ T1107] veth0_macvtap: left promiscuous mode [ 871.845259][ T1107] veth1_vlan: left promiscuous mode [ 871.855034][ T1107] veth0_vlan: left promiscuous mode [ 872.003086][ T53] Bluetooth: hci3: command tx timeout [ 872.114543][T14969] loop1: detected capacity change from 0 to 1024 [ 872.146596][T14969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.549542][T14971] loop1: detected capacity change from 1024 to 1023 [ 872.574227][T14972] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 832) has entry at pos 0 with incorrect tag 1 [ 873.029774][T13682] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 832) has entry at pos 0 with incorrect tag 1 [ 873.099116][T13682] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 832) has entry at pos 0 with incorrect tag 1 [ 873.344701][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 873.437040][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 874.092593][ T53] Bluetooth: hci3: command tx timeout [ 875.792999][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 875.946630][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 879.692184][T14940] chnl_net:caif_netlink_parms(): no params data found [ 880.027448][T14873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 880.064341][T14873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 880.182084][T14873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 880.466640][T14873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 880.813121][T12364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 880.832176][T12364] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 880.849785][T12364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 880.858602][T14984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 880.868676][T12364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 880.878686][T12364] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 880.886375][T12364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 880.895786][T12364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 880.921743][T12364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 880.931008][T12364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 880.942938][T12364] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 880.950383][T12364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 881.194624][T14940] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.202496][T14940] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.209742][T14940] bridge_slave_0: entered allmulticast mode [ 881.245621][T14940] bridge_slave_0: entered promiscuous mode [ 881.311266][T14940] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.342300][T14940] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.349620][T14940] bridge_slave_1: entered allmulticast mode [ 881.413003][T14940] bridge_slave_1: entered promiscuous mode [ 881.625087][T14940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.664349][T14852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 881.695077][T14852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 881.808371][T14940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.887680][T14852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 882.012010][T14852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 882.070166][T14940] team0: Port device team_slave_0 added [ 882.095696][T14940] team0: Port device team_slave_1 added [ 882.312803][T14940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.352566][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.412383][T14940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.444535][T14940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.451548][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.522016][T14940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.972559][T12364] Bluetooth: hci4: command tx timeout [ 883.043365][T12364] Bluetooth: hci5: command tx timeout [ 883.180892][T14940] hsr_slave_0: entered promiscuous mode [ 883.214241][T14940] hsr_slave_1: entered promiscuous mode [ 883.849086][T14982] chnl_net:caif_netlink_parms(): no params data found [ 883.931612][T14873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.568571][T14980] chnl_net:caif_netlink_parms(): no params data found [ 884.699785][T14982] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.712121][T14982] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.728999][T14982] bridge_slave_0: entered allmulticast mode [ 884.745557][T14982] bridge_slave_0: entered promiscuous mode [ 884.845304][T14873] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.862396][T14982] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.869619][T14982] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.879239][T14982] bridge_slave_1: entered allmulticast mode [ 884.887048][T14982] bridge_slave_1: entered promiscuous mode [ 884.943080][T14852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.046186][T12364] Bluetooth: hci4: command tx timeout [ 885.132968][T12364] Bluetooth: hci5: command tx timeout [ 885.254457][T14982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.309100][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.316362][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.351342][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.358608][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.535850][T14982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.751813][ T1107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.001325][T14852] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.059089][T14982] team0: Port device team_slave_0 added [ 886.093974][T14982] team0: Port device team_slave_1 added [ 886.225630][ T1107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.323156][T14980] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.330553][T14980] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.362388][T14980] bridge_slave_0: entered allmulticast mode [ 886.370206][T14980] bridge_slave_0: entered promiscuous mode [ 886.565209][T14982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.583743][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.632035][T14982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.743143][ T1107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.772501][T14980] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.779678][T14980] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.804908][T14980] bridge_slave_1: entered allmulticast mode [ 886.826328][T14980] bridge_slave_1: entered promiscuous mode [ 886.853185][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.860389][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.944901][T14982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.954769][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.012102][T14982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.143041][T12364] Bluetooth: hci4: command tx timeout [ 887.159884][ T1107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.202509][T12364] Bluetooth: hci5: command tx timeout [ 887.606810][T10011] syz-executor.4: attempt to access beyond end of device [ 887.606810][T10011] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 887.650030][T14873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.652546][T10011] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 887.684303][T10011] syz-executor.4: attempt to access beyond end of device [ 887.684303][T10011] loop4: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 887.732298][T10011] Buffer I/O error on dev loop4, logical block 8833403, async page read [ 887.743470][T10011] syz-executor.4: attempt to access beyond end of device [ 887.743470][T10011] loop4: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 887.792163][T10011] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 887.800695][T10011] syz-executor.4: attempt to access beyond end of device [ 887.800695][T10011] loop4: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 887.828514][T10011] Buffer I/O error on dev loop4, logical block 8073606, async page read [ 887.855955][T14980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.895529][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.902779][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.002447][T14982] hsr_slave_0: entered promiscuous mode [ 888.022548][T14982] hsr_slave_1: entered promiscuous mode [ 888.043341][T14982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.050944][T14982] Cannot create hsr debugfs directory [ 888.087987][T14980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.394598][T14980] team0: Port device team_slave_0 added [ 888.413905][ T1107] bridge_slave_1: left allmulticast mode [ 888.419598][ T1107] bridge_slave_1: left promiscuous mode [ 888.432343][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.442766][ T1107] bridge_slave_0: left allmulticast mode [ 888.448465][ T1107] bridge_slave_0: left promiscuous mode [ 888.473654][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.515895][ T1107] bridge_slave_1: left allmulticast mode [ 888.521679][ T1107] bridge_slave_1: left promiscuous mode [ 888.533715][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.564498][ T1107] bridge_slave_0: left allmulticast mode [ 888.570201][ T1107] bridge_slave_0: left promiscuous mode [ 888.582193][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.620310][ T1107] bridge_slave_1: left allmulticast mode [ 888.632008][ T1107] bridge_slave_1: left promiscuous mode [ 888.637808][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.664769][ T1107] bridge_slave_0: left allmulticast mode [ 888.670466][ T1107] bridge_slave_0: left promiscuous mode [ 888.688720][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.216780][T12364] Bluetooth: hci4: command tx timeout [ 889.302908][T12364] Bluetooth: hci5: command tx timeout [ 890.193366][T12365] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 890.212261][T12365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 890.232193][T12365] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 890.244490][T12365] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 890.253635][T12365] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 890.261140][T12365] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 891.544903][ T1107] dvmrp8 (unregistering): left allmulticast mode [ 891.603752][ T1107] dvmrp0 (unregistering): left allmulticast mode [ 892.407362][T12364] Bluetooth: hci7: command tx timeout [ 892.513005][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.526132][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.546903][ T1107] bond0 (unregistering): Released all slaves [ 893.007302][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.043532][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.073088][ T1107] bond0 (unregistering): Released all slaves [ 893.658618][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.682655][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.708736][ T1107] bond0 (unregistering): Released all slaves [ 893.920592][T14980] team0: Port device team_slave_1 added [ 894.489123][T12364] Bluetooth: hci7: command tx timeout [ 894.809758][T14980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.822092][T14980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.882166][T14980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.039369][T14940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 895.070059][T14940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.097748][T14980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.112608][T14980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.169106][T14980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.322047][T14940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 895.364693][T14940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 895.654393][T14873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.821855][T14980] hsr_slave_0: entered promiscuous mode [ 895.833883][T14980] hsr_slave_1: entered promiscuous mode [ 895.853167][T14980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.874632][T14980] Cannot create hsr debugfs directory [ 896.266821][ T1107] hsr_slave_0: left promiscuous mode [ 896.278101][ T1107] hsr_slave_1: left promiscuous mode [ 896.302806][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.322827][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.369814][ T1107] hsr_slave_0: left promiscuous mode [ 896.382972][ T1107] hsr_slave_1: left promiscuous mode [ 896.404716][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.422334][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.443289][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.450770][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.542532][ T1107] hsr_slave_0: left promiscuous mode [ 896.562634][T12364] Bluetooth: hci7: command tx timeout [ 896.568221][ T1107] hsr_slave_1: left promiscuous mode [ 896.582844][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.613315][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.767344][ T1107] veth1_macvtap: left promiscuous mode [ 896.784395][ T1107] veth0_macvtap: left promiscuous mode [ 896.790128][ T1107] veth1_vlan: left promiscuous mode [ 896.829561][ T1107] veth0_vlan: left promiscuous mode [ 898.083981][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 898.277963][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 898.643747][T12364] Bluetooth: hci7: command tx timeout [ 901.364001][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 901.565382][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 904.002642][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 904.106499][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 906.042756][T14873] veth0_vlan: entered promiscuous mode [ 906.778414][T14873] veth1_vlan: entered promiscuous mode [ 906.949171][T15008] chnl_net:caif_netlink_parms(): no params data found [ 907.035337][T14940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.112994][T14873] veth0_macvtap: entered promiscuous mode [ 907.277456][T14873] veth1_macvtap: entered promiscuous mode [ 907.416352][T14940] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.619176][T10943] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.626401][T10943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.717841][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.725127][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.843962][T14982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 907.933998][T14982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 908.067798][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.102118][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.137607][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.166721][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.178564][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.183900][T12365] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 908.189087][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.223581][T12365] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 908.232316][T12365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 908.234408][T14873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.271897][T12365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 908.280035][T12365] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 908.287621][T12365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 908.443003][T14982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 908.525526][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.571978][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.601831][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.623182][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.642211][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.665412][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.694742][T14873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.764627][T15008] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.771859][T15008] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.802246][T15008] bridge_slave_0: entered allmulticast mode [ 908.810109][T15008] bridge_slave_0: entered promiscuous mode [ 908.892041][T14982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 908.943144][T14873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.964107][T14873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.982157][T14873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.001988][T14873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.126105][T15008] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.148202][T15008] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.166789][T15008] bridge_slave_1: entered allmulticast mode [ 909.189433][T15008] bridge_slave_1: entered promiscuous mode [ 909.517694][T15008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.576605][T15008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.693144][T14940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.967941][T15008] team0: Port device team_slave_0 added [ 910.197377][T15008] team0: Port device team_slave_1 added [ 910.322458][T12364] Bluetooth: hci0: command tx timeout [ 910.657585][T15008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.682462][T15008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.762108][T15008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.805557][T15008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.842093][T15008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.916654][T15008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.126979][T10011] sysv_free_block: flc_count > flc_size [ 911.140519][T14980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 911.153484][T10011] sysv_free_block: flc_count > flc_size [ 911.156401][T12365] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 911.159045][T10011] sysv_free_block: flc_count > flc_size [ 911.173635][T12365] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 911.182580][T12365] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 911.199983][T10011] sysv_free_block: flc_count > flc_size [ 911.207207][T12365] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 911.215606][T10011] sysv_free_block: flc_count > flc_size [ 911.221596][T10011] sysv_free_block: flc_count > flc_size [ 911.227347][T10011] sysv_free_block: flc_count > flc_size [ 911.232948][T10011] sysv_free_block: flc_count > flc_size [ 911.238842][T12365] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 911.247631][T12365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 911.254172][T14940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.254909][T10011] sysv_free_block: flc_count > flc_size [ 911.267531][T10011] sysv_free_block: flc_count > flc_size [ 911.273872][T10011] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 911.369518][T14980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 911.412761][T14980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 911.568863][T15008] hsr_slave_0: entered promiscuous mode [ 911.586803][T15008] hsr_slave_1: entered promiscuous mode [ 911.613433][T15008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.621150][T15008] Cannot create hsr debugfs directory [ 911.678953][T14980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 912.060982][ T1107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.138031][T14982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.308815][ T1107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.402721][T12364] Bluetooth: hci0: command tx timeout [ 912.475642][T14940] veth0_vlan: entered promiscuous mode [ 912.573023][ T1107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.686385][T14940] veth1_vlan: entered promiscuous mode [ 912.769689][ T1107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.871031][T14982] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.931337][T15021] chnl_net:caif_netlink_parms(): no params data found [ 913.036245][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.043499][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.141122][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.148347][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.362963][T12364] Bluetooth: hci6: command tx timeout [ 913.663512][T15008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.875801][T15008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.908458][T15021] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.922506][T15021] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.929964][T15021] bridge_slave_0: entered allmulticast mode [ 913.951630][T15021] bridge_slave_0: entered promiscuous mode [ 913.973473][T15021] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.985353][T15021] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.997913][T15021] bridge_slave_1: entered allmulticast mode [ 914.007074][T15021] bridge_slave_1: entered promiscuous mode [ 914.017461][T14940] veth0_macvtap: entered promiscuous mode [ 914.049854][T15029] chnl_net:caif_netlink_parms(): no params data found [ 914.243492][T15008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.279607][T14940] veth1_macvtap: entered promiscuous mode [ 914.483116][T12364] Bluetooth: hci0: command tx timeout [ 914.503746][T15008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.540020][T15021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.556947][T15021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.783483][T14980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.811418][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.837523][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.855725][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.871953][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.881783][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.906563][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.927427][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.945982][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.964087][T14940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.079275][T15021] team0: Port device team_slave_0 added [ 915.146163][T15021] team0: Port device team_slave_1 added [ 915.170366][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.207710][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.231994][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.264934][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.282180][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.309779][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.324916][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.337229][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.349632][T14940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.443102][T12364] Bluetooth: hci6: command tx timeout [ 915.589722][T14980] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.620761][T15021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.641828][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.670494][T15021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.695904][T15021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.712205][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.755280][T15021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.793482][T14940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.806572][T14940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.822104][T14940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.832691][T14940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.868167][T15029] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.875899][T15029] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.892378][T15029] bridge_slave_0: entered allmulticast mode [ 915.902481][T15029] bridge_slave_0: entered promiscuous mode [ 915.926422][T15029] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.942083][T15029] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.949434][T15029] bridge_slave_1: entered allmulticast mode [ 915.957462][T15029] bridge_slave_1: entered promiscuous mode [ 916.131170][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.138421][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.296489][T15029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.309512][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.316753][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.463584][T15029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.548479][T15021] hsr_slave_0: entered promiscuous mode [ 916.563403][T12364] Bluetooth: hci0: command tx timeout [ 916.563912][T15021] hsr_slave_1: entered promiscuous mode [ 916.589781][T15021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 916.598014][T15021] Cannot create hsr debugfs directory [ 916.643483][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.651477][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.661037][T15008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 916.686545][T15008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 916.755610][T15008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 916.792264][T15008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 916.866240][T15029] team0: Port device team_slave_0 added [ 916.910505][T14980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 916.933720][T14980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 916.960792][ T1107] bridge_slave_1: left allmulticast mode [ 916.975202][ T1107] bridge_slave_1: left promiscuous mode [ 916.981063][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.006938][ T1107] bridge_slave_0: left allmulticast mode [ 917.020639][ T1107] bridge_slave_0: left promiscuous mode [ 917.031114][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.061127][ T1107] bridge_slave_1: left allmulticast mode [ 917.071966][ T1107] bridge_slave_1: left promiscuous mode [ 917.077779][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.111434][ T1107] bridge_slave_0: left allmulticast mode [ 917.141849][ T1107] bridge_slave_0: left promiscuous mode [ 917.149079][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.162524][ T1107] bridge_slave_1: left allmulticast mode [ 917.168203][ T1107] bridge_slave_1: left promiscuous mode [ 917.174264][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.185324][ T1107] bridge_slave_0: left allmulticast mode [ 917.191020][ T1107] bridge_slave_0: left promiscuous mode [ 917.197680][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.522135][T12364] Bluetooth: hci6: command tx timeout [ 919.413717][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.428727][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.444319][ T1107] bond0 (unregistering): Released all slaves [ 919.607269][T12364] Bluetooth: hci6: command tx timeout [ 919.760200][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.789932][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.817061][ T1107] bond0 (unregistering): Released all slaves [ 920.090397][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.107406][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.132950][ T1107] bond0 (unregistering): Released all slaves [ 920.166219][T14982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.247835][T15029] team0: Port device team_slave_1 added [ 920.434350][ T6373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.451083][ T6373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.767666][T15029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.784306][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.830287][T15029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.859759][T15029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.874337][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.912507][T15029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.285004][ T1107] hsr_slave_0: left promiscuous mode [ 921.308828][ T1107] hsr_slave_1: left promiscuous mode [ 921.332424][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.339969][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.367702][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.381616][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.407325][ T1107] hsr_slave_0: left promiscuous mode [ 921.442639][ T1107] hsr_slave_1: left promiscuous mode [ 921.452581][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.466743][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.504242][ T1107] hsr_slave_0: left promiscuous mode [ 921.511884][ T1107] hsr_slave_1: left promiscuous mode [ 921.531470][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.552264][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.573245][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.580709][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.775409][ T1107] veth1_macvtap: left promiscuous mode [ 921.781015][ T1107] veth0_macvtap: left promiscuous mode [ 921.800821][ T1107] veth1_vlan: left promiscuous mode [ 921.806407][ T1107] veth0_vlan: left promiscuous mode [ 921.823475][ T1107] veth1_macvtap: left promiscuous mode [ 921.829066][ T1107] veth0_macvtap: left promiscuous mode [ 921.843387][ T1107] veth1_vlan: left promiscuous mode [ 921.848879][ T1107] veth0_vlan: left promiscuous mode [ 922.775657][T15059] loop2: detected capacity change from 0 to 40427 [ 922.862103][T15059] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 922.869894][T15059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 922.943980][T15059] F2FS-fs (loop2): Found nat_bits in checkpoint [ 923.072829][T15059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 923.079931][T15059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 923.189474][T15059] syz-executor.2: attempt to access beyond end of device [ 923.189474][T15059] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 924.156410][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 924.329363][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 925.591225][T15073] loop2: detected capacity change from 0 to 8 [ 925.647592][T15073] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 925.727601][T15073] cramfs: Error -5 while decompressing! [ 925.741979][T15073] cramfs: ffffffff948d0a28(18)->ffff888054b12000(4096) [ 925.749993][T15073] cramfs: Error -5 while decompressing! [ 925.772115][T15073] cramfs: ffffffff948d0a28(18)->ffff888054b12000(4096) [ 925.861405][ T29] audit: type=1800 audit(8244246962.156:1306): pid=15073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="loop2" ino=324 res=0 errno=0 [ 926.247432][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 926.397886][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 929.077846][T15083] loop2: detected capacity change from 0 to 32768 [ 929.127490][T15083] jfs filesystem being mounted at /root/syzkaller-testdir3726755545/syzkaller.NlCBHr/14/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 929.145197][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 929.199650][T15083] read_mapping_page failed! [ 929.218817][T15083] ERROR: (device loop2): txCommit: [ 929.218817][T15083] [ 929.304813][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 929.376328][T14940] ERROR: (device loop2): diFree: numfree > numinos [ 929.376328][T14940] [ 930.920255][T15029] hsr_slave_0: entered promiscuous mode [ 930.945683][T15029] hsr_slave_1: entered promiscuous mode [ 930.969312][T15029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 930.986449][T15029] Cannot create hsr debugfs directory [ 931.133461][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.139824][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.236704][T14982] veth0_vlan: entered promiscuous mode [ 931.558423][T14982] veth1_vlan: entered promiscuous mode [ 931.707519][T14980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.195840][T15096] loop2: detected capacity change from 0 to 8 [ 932.205166][T15008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.245971][T15096] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 932.270706][T15096] cramfs: Error -5 while decompressing! [ 932.285566][T14982] veth0_macvtap: entered promiscuous mode [ 932.302193][T15096] cramfs: ffffffff948d4a28(18)->ffff888082a7e000(4096) [ 932.322758][T15096] cramfs: Error -5 while decompressing! [ 932.328362][T15096] cramfs: ffffffff948d4a28(18)->ffff888082a7e000(4096) [ 932.385742][T15008] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.395745][ T29] audit: type=1800 audit(8244246968.696:1307): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="loop2" ino=324 res=0 errno=0 [ 932.460552][T14982] veth1_macvtap: entered promiscuous mode [ 932.553948][T10943] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.561172][T10943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.587755][T10943] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.595147][T10943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.664482][T14980] veth0_vlan: entered promiscuous mode [ 932.768709][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.799239][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.828543][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.852069][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.872094][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.889966][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.921770][T14982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.947424][T14980] veth1_vlan: entered promiscuous mode [ 932.979689][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.005352][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.037963][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.052149][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.062189][T14982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.072886][T14982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.114358][T14982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.356586][T14982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.392073][T14982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.461812][T14982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.556332][T14982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.792397][T15021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 933.862909][T15021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 933.935840][T15021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 934.031621][T15021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 934.419205][T14980] veth0_macvtap: entered promiscuous mode [ 934.443823][ T1107] bridge_slave_1: left allmulticast mode [ 934.458691][ T1107] bridge_slave_1: left promiscuous mode [ 934.469482][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.494511][ T1107] bridge_slave_0: left allmulticast mode [ 934.517542][ T1107] bridge_slave_0: left promiscuous mode [ 934.527019][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.498322][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.529325][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.552627][ T1107] bond0 (unregistering): Released all slaves [ 935.587133][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.591152][T14980] veth1_macvtap: entered promiscuous mode [ 935.616067][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.058865][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.074093][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.174306][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.197080][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.214569][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.231027][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.241268][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.257553][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.267537][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.280275][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.296554][T14980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.320726][T15008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.436472][ T1107] hsr_slave_0: left promiscuous mode [ 936.443503][ T1107] hsr_slave_1: left promiscuous mode [ 936.460067][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.480027][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.504766][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.522059][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.601285][ T1107] veth1_macvtap: left promiscuous mode [ 936.614121][ T1107] veth0_macvtap: left promiscuous mode [ 936.632426][ T1107] veth1_vlan: left promiscuous mode [ 936.638284][ T1107] veth0_vlan: left promiscuous mode [ 937.828024][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 937.970379][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 939.135696][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.154587][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.166963][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.180322][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.190290][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.200814][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.226416][T14980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.279581][T15029] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 939.303146][T15029] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 939.331316][T14980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.350179][T14980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.375370][T14980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.394120][T14980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.453773][T15029] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 939.610645][T15029] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 939.674595][T15021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.866260][T15021] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.043595][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.050958][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.248399][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.255637][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.364353][T15008] veth0_vlan: entered promiscuous mode [ 940.528169][T15008] veth1_vlan: entered promiscuous mode [ 940.584723][T10489] ================================================================== [ 940.592862][T10489] BUG: KASAN: use-after-free in sysv_new_inode+0xfd3/0x1170 [ 940.600204][T10489] Read of size 2 at addr ffff8880441301ce by task syz-executor.0/10489 [ 940.608469][T10489] [ 940.610807][T10489] CPU: 1 PID: 10489 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00148-g50736169ecc8 #0 [ 940.621328][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 940.631396][T10489] Call Trace: [ 940.634681][T10489] [ 940.637609][T10489] dump_stack_lvl+0x241/0x360 [ 940.642410][T10489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.647652][T10489] ? __pfx__printk+0x10/0x10 [ 940.652267][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.657920][T10489] ? _printk+0xd5/0x120 [ 940.662092][T10489] ? __virt_addr_valid+0x183/0x520 [ 940.667325][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.672965][T10489] print_report+0x169/0x550 [ 940.677483][T10489] ? __virt_addr_valid+0x183/0x520 [ 940.682610][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.688290][T10489] ? __virt_addr_valid+0x44e/0x520 [ 940.693416][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.699058][T10489] ? __phys_addr+0xba/0x170 [ 940.703634][T10489] ? sysv_new_inode+0xfd3/0x1170 [ 940.708595][T10489] kasan_report+0x143/0x180 [ 940.713206][T10489] ? sysv_new_inode+0xfd3/0x1170 [ 940.718170][T10489] sysv_new_inode+0xfd3/0x1170 [ 940.722977][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.728647][T10489] ? __pfx_sysv_new_inode+0x10/0x10 [ 940.733886][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.739523][T10489] ? _raw_spin_unlock+0x28/0x50 [ 940.744389][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.750019][T10489] ? __d_add+0x503/0x810 [ 940.754275][T10489] sysv_mknod+0x4e/0xe0 [ 940.758439][T10489] ? __pfx_sysv_create+0x10/0x10 [ 940.763565][T10489] path_openat+0x1427/0x3280 [ 940.768205][T10489] ? __pfx_path_openat+0x10/0x10 [ 940.773162][T10489] do_filp_open+0x235/0x490 [ 940.777675][T10489] ? __pfx_do_filp_open+0x10/0x10 [ 940.782731][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.788384][T10489] ? _raw_spin_unlock+0x28/0x50 [ 940.793347][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.798984][T10489] ? alloc_fd+0x5a1/0x640 [ 940.803328][T10489] do_sys_openat2+0x13e/0x1d0 [ 940.808118][T10489] ? __might_fault+0xaa/0x120 [ 940.812876][T10489] ? __pfx_do_sys_openat2+0x10/0x10 [ 940.818088][T10489] ? rcu_is_watching+0x15/0xb0 [ 940.822857][T10489] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 940.828938][T10489] __x64_sys_openat+0x247/0x2a0 [ 940.833942][T10489] ? __pfx___x64_sys_openat+0x10/0x10 [ 940.839357][T10489] ? do_syscall_64+0x100/0x230 [ 940.844132][T10489] ? do_syscall_64+0xb6/0x230 [ 940.848858][T10489] do_syscall_64+0xf3/0x230 [ 940.853374][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 940.859098][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.865038][T10489] RIP: 0033:0x7f133407cf29 [ 940.869458][T10489] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 940.889122][T10489] RSP: 002b:00007f1334ec90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 940.897546][T10489] RAX: ffffffffffffffda RBX: 00007f13341b3f80 RCX: 00007f133407cf29 [ 940.905525][T10489] RDX: 0000000000101042 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 940.913502][T10489] RBP: 00007f13340ec074 R08: 0000000000000000 R09: 0000000000000000 [ 940.921570][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.929559][T10489] R13: 000000000000000b R14: 00007f13341b3f80 R15: 00007ffd132808c8 [ 940.937980][T10489] [ 940.940996][T10489] [ 940.943317][T10489] The buggy address belongs to the physical page: [ 940.949892][T10489] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xe6 pfn:0x44130 [ 940.958783][T10489] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 940.965904][T10489] page_type: 0xffffff7f(buddy) [ 940.970694][T10489] raw: 00fff00000000000 ffffea0000d31408 ffffea00014eae08 0000000000000000 [ 940.979304][T10489] raw: 00000000000000e6 0000000000000003 00000000ffffff7f 0000000000000000 [ 940.987892][T10489] page dumped because: kasan: bad access detected [ 940.994301][T10489] page_owner tracks the page as freed [ 940.999660][T10489] page last allocated via order 0, migratetype Movable, gfp_mask 0x100cca(GFP_HIGHUSER_MOVABLE), pid 14619, tgid 14618 (syz-executor.5), ts 805804494564, free_ts 806850574188 [ 941.016974][T10489] post_alloc_hook+0x1f3/0x230 [ 941.021753][T10489] get_page_from_freelist+0x2e43/0x2f00 [ 941.027316][T10489] __alloc_pages_noprof+0x256/0x6c0 [ 941.032526][T10489] alloc_pages_mpol_noprof+0x3e8/0x680 [ 941.037987][T10489] shmem_alloc_and_add_folio+0x24d/0xdb0 [ 941.043634][T10489] shmem_get_folio_gfp+0x82d/0x1f50 [ 941.048866][T10489] shmem_fault+0x252/0x6f0 [ 941.053306][T10489] __do_fault+0x137/0x460 [ 941.057651][T10489] handle_pte_fault+0x3d15/0x7090 [ 941.063239][T10489] handle_mm_fault+0x10df/0x1ba0 [ 941.068185][T10489] __get_user_pages+0x6ef/0x1590 [ 941.073132][T10489] populate_vma_page_range+0x264/0x330 [ 941.078608][T10489] __mm_populate+0x27a/0x460 [ 941.083209][T10489] vm_mmap_pgoff+0x2c3/0x3d0 [ 941.087793][T10489] do_syscall_64+0xf3/0x230 [ 941.092308][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.098228][T10489] page last free pid 14621 tgid 14618 stack trace: [ 941.104848][T10489] free_unref_folios+0xf23/0x19e0 [ 941.109876][T10489] folios_put_refs+0x93a/0xa60 [ 941.114639][T10489] shmem_undo_range+0x6de/0x1df0 [ 941.119584][T10489] shmem_evict_inode+0x29b/0xa60 [ 941.124535][T10489] evict+0x2aa/0x630 [ 941.128425][T10489] __dentry_kill+0x20d/0x630 [ 941.133022][T10489] dput+0x19f/0x2b0 [ 941.136868][T10489] __fput+0x68c/0x8b0 [ 941.140874][T10489] task_work_run+0x251/0x310 [ 941.145508][T10489] do_exit+0xa27/0x27e0 [ 941.149692][T10489] do_group_exit+0x207/0x2c0 [ 941.154282][T10489] get_signal+0x16a1/0x1740 [ 941.158793][T10489] arch_do_signal_or_restart+0x96/0x860 [ 941.164341][T10489] syscall_exit_to_user_mode+0xc9/0x370 [ 941.169890][T10489] do_syscall_64+0x100/0x230 [ 941.174492][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.180393][T10489] [ 941.182741][T10489] Memory state around the buggy address: [ 941.188364][T10489] ffff888044130080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 941.196510][T10489] ffff888044130100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 941.204576][T10489] >ffff888044130180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 941.212643][T10489] ^ [ 941.219057][T10489] ffff888044130200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 941.227127][T10489] ffff888044130280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2231/04/02 12:36:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 941.235221][T10489] ================================================================== [ 941.315212][T15142] loop1: detected capacity change from 0 to 256 [ 941.322307][T10489] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 941.329532][T10489] CPU: 0 PID: 10489 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00148-g50736169ecc8 #0 [ 941.340051][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 941.350125][T10489] Call Trace: [ 941.353421][T10489] [ 941.356365][T10489] dump_stack_lvl+0x241/0x360 [ 941.361083][T10489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 941.366318][T10489] ? __pfx__printk+0x10/0x10 [ 941.371034][T10489] ? preempt_schedule+0xe1/0xf0 [ 941.375916][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 941.381604][T10489] ? vscnprintf+0x5d/0x90 [ 941.385961][T10489] panic+0x349/0x860 [ 941.389898][T10489] ? check_panic_on_warn+0x21/0xb0 [ 941.395049][T10489] ? __pfx_panic+0x10/0x10 [ 941.399545][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 941.405215][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 941.410958][T10489] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 941.416998][T10489] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 941.423369][T10489] ? print_report+0x502/0x550 [ 941.428086][T10489] check_panic_on_warn+0x86/0xb0 [ 941.433148][T10489] ? sysv_new_inode+0xfd3/0x1170 [ 941.438125][T10489] end_report+0x77/0x160 [ 941.442403][T10489] kasan_report+0x154/0x180 [ 941.446940][T10489] ? sysv_new_inode+0xfd3/0x1170 [ 941.451923][T10489] sysv_new_inode+0xfd3/0x1170 [ 941.456750][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 941.462412][T10489] ? __pfx_sysv_new_inode+0x10/0x10 [ 941.467675][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 941.473327][T10489] ? _raw_spin_unlock+0x28/0x50 [ 941.478210][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 941.483861][T10489] ? __d_add+0x503/0x810 [ 941.488137][T10489] sysv_mknod+0x4e/0xe0 [ 941.492389][T10489] ? __pfx_sysv_create+0x10/0x10 [ 941.497415][T10489] path_openat+0x1427/0x3280 [ 941.502121][T10489] ? __pfx_path_openat+0x10/0x10 [ 941.507108][T10489] do_filp_open+0x235/0x490 [ 941.511642][T10489] ? __pfx_do_filp_open+0x10/0x10 [ 941.516887][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 941.522575][T10489] ? _raw_spin_unlock+0x28/0x50 [ 941.527468][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 941.533132][T10489] ? alloc_fd+0x5a1/0x640 [ 941.537502][T10489] do_sys_openat2+0x13e/0x1d0 [ 941.542220][T10489] ? __might_fault+0xaa/0x120 [ 941.546935][T10489] ? __pfx_do_sys_openat2+0x10/0x10 [ 941.552165][T10489] ? rcu_is_watching+0x15/0xb0 [ 941.556980][T10489] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 941.563082][T10489] __x64_sys_openat+0x247/0x2a0 [ 941.567974][T10489] ? __pfx___x64_sys_openat+0x10/0x10 [ 941.573390][T10489] ? do_syscall_64+0x100/0x230 [ 941.578237][T10489] ? do_syscall_64+0xb6/0x230 [ 941.582948][T10489] do_syscall_64+0xf3/0x230 [ 941.587483][T10489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 941.593141][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.599066][T10489] RIP: 0033:0x7f133407cf29 [ 941.603570][T10489] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 941.623213][T10489] RSP: 002b:00007f1334ec90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 941.631713][T10489] RAX: ffffffffffffffda RBX: 00007f13341b3f80 RCX: 00007f133407cf29 [ 941.639715][T10489] RDX: 0000000000101042 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 941.647712][T10489] RBP: 00007f13340ec074 R08: 0000000000000000 R09: 0000000000000000 [ 941.655705][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.663701][T10489] R13: 000000000000000b R14: 00007f13341b3f80 R15: 00007ffd132808c8 [ 941.671713][T10489] [ 941.674999][T10489] Kernel Offset: disabled [ 941.679368][T10489] Rebooting in 86400 seconds..