last executing test programs: 7.738522225s ago: executing program 2: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000000)={[{@map_normal}, {@check_relaxed}, {@hide}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}, 0x1, 0x3c7, &(0x7f0000000840)="$eJzs3E1r3MYfwPGRH4jxH8wfQmPH8WHS9OAespHkes2Sk6qdXU+i1YgZbbBPJdR2MLXT0qTQ+GYobgvti8i1L6IvpvfQl5AiaTf186bxxmvM9wNhZqWfZn4jNjOszEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhxU3fDzyR6LS7Js8WN63pnHO+396nR4pz+hXCK/6JqSkxVx2au/nv6U+qRmarT7NiqiimxN7/bv3/4c2Jsf715yR0KV682vvm6c7O5vejTmT4fvqruvfnBrVVqp3RnaitpHZGNup1/8Fqy8mWTpRbd7nqyNiqKDdWLsafy6DRWJKqtm66absZJap/cOV+6Pt1+aiWqcg6kz54VHPxqk4SnbbLmOJ0EbNSfBEf61zmKupIubW9s7k0aCRFUPA+QeGgoNAPwyAIw6C+3Fhe8f2JEwf8Y8SJiNF/aTFaw5y+gQt521v/AQAAAADA9eWVz9iL3/+T5XN4T7R0ovxRpwUAAAAAAIao/Mv/bFFMFrU54fH7HwAAAACA6+aXgXvsXHbD+/NvYe2kt5+tfebtRkVctDteXTd+vMW8Ne/N9Bopi/pE71OsFrzbVdDtfvSbXrE1KA9vCAmI38R8FTO/UZUb/TNVL9MtnahabJKHgYiimbFcreU/PN/+UZTD/zXtzHhia3tns/b1tzsbZS77RSv7u70NFCf2UZyTy8t3+x5PH/Fk+SCm1+901a9/ePxj1eVj/6HPA3GnirkzXZXTR8c/VfQZ1M4afS+L4IIjPxALVczC4r2iuLd4ShbhoCzCw1l80L14jyyWBmWxdMEsAGBUtgasQt7Jhf8DZrnLWd0PxN0q5u58ObFOzJ8yo/uDZnT/gqvbHyfegXDWGlv0+/uxVfV1ccHrM/t1SegVt3D85e534taLV3v3t3efPtt8tvk8DJfq/he+vxyKyXIYvYK1BwBwCmXfeNP5z561OvsqaDSCKF9V0pr4sbS62VZSp7my8WqUtpXMrMlNbJKi8kQ3lZOum2XG5rJlrMyM02vlm19k79UvTnWiNNexyxIVOSVjk+ZRnMumdrHMul8m2q0qW17sMhXrlo6jXJtUOtO1sapJ6ZQ6FKibKs11SxfVVGZWdyK7Lp+YpNtRsqlcbHWWm6rBfl86bRnbKZutjfpmAwBwRbx7g91HrIx6jAAA4ChWaQAAAAAAAAAAAAAAAAAAAAAArr7L2P9Hhcq1rry9Uf1nuir5DKUy6pkJwMf2TwAAAP//3ZWhvA==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 7.599614255s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ae7000/0x14000)=nil, 0x14000}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000011a40)='./file0\x00', 0x1200014, &(0x7f0000000100)=ANY=[@ANYBLOB='data_checksum=xxhash,spr_hash=siphash,data_checksum=xxhash,compression=zstd,\x00'], 0x1, 0x11a0c, &(0x7f00000234c0)="$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") open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x2000) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) 5.016221631s ago: executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000050a245d5cde0de5ecfe64666f51b813167761a997422080045000028000000000002907800000000ffffffff11e090780000000062ea00"/70], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.983987331s ago: executing program 4: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4605062046000000000000000003003e0002000000740300000000000040000000000000003c020000000000000100000001013800010002000000f9ff00000070790000000900000000000000fbffffffffffffff070000000000000003000000000000000400000000000000200000000000000000000070d00000000700000000000000000000000000000005"], 0x61c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r1, 0x81000000) syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') futex(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) 3.78478681s ago: executing program 3: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x200, 0x3}, &(0x7f0000000100), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000680), 0xfe, 0x47c, &(0x7f00000001c0)="$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") unshare(0x8000000) semop(0x0, 0x0, 0x0) unshare(0x8000000) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002100df4d000000000000000002000000000000000800170000000000"], 0x24}}, 0x0) 3.749304927s ago: executing program 4: fanotify_mark(0xffffffffffffffff, 0x69c, 0x0, 0xffffffffffffffff, 0x0) 3.57231943s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r2, 0x11e, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff16) 3.435495137s ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x1900c1, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x63e}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@default_permissions}], [{@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '\'$]:\xb8%{'}}, {@fsuuid={'fsuuid', 0x3d, {[0x67, 0x0, 0x0, 0x31, 0x36, 0x36, 0x61, 0x64], 0x2d, [0x31, 0x61, 0x32, 0x33], 0x2d, [0x0, 0x0, 0x63, 0x38], 0x2d, [0x30, 0x66, 0x61, 0x64], 0x2d, [0x31, 0x0, 0x64, 0x34, 0x53, 0x39, 0x62, 0x62]}}}, {@obj_type={'obj_type', 0x3d, '/dev/ppp\x00'}}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ppp\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000280)="4ee9282a994368d4c6ab89c0e12bba6ba33288b1a167b8f3d7296d1ef99f8bff4d3f654b04227e89e8fea32ce43eb8400940f73a7ffd4391dc4a3b4854b6e90a880d34bf08f4397594acfd2823474a927600dc61dcce1bc366cb790ccb982fc2de5f184766f0ce5c0a83b1b5bbb3a1e5c067ff46d443fbc64e28bd771ef3a5b86efc30e74bf7bfdf25b45c70fd993e0c45ef5e8220da9f532425c9ce2687afa0f43b7c47b955c18a76a3dca4d17a15fa4a56a0407cd3736ccb4e2687b290ac5c71796a51144ff9fea0d7986121b690a716c112de6033dd2c1635f2b4") fspick(r0, &(0x7f0000000380)='./file0\x00', 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x0, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "6d011fe4"}, @main=@item_012={0x2, 0x0, 0x0, "1a79"}]}}, 0x0}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000001a80)={0x3, 0x100}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwritev(r3, 0x0, 0x0, 0x0, 0x0) 3.189553625s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000040)="c8", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) 2.997616105s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000001e80)) 2.811693674s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x280c415, &(0x7f0000000400)={[{}, {@jqfmt_vfsold}, {@tails_small}, {@usrquota}, {@notail, 0x3d}], [], 0x2}, 0x1, 0x110a, &(0x7f00000008c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 2.540795644s ago: executing program 0: r0 = socket(0x1e, 0x4, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)=""/211, 0xd3}], 0x1, &(0x7f0000000940)=""/71, 0x47}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000080)=@id, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="f6", 0x1}], 0x1}, 0x0) 2.383996414s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='\x00', 0xfffffffffffffd9f, 0x0, 0x0, 0x25) 2.065076736s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x40, &(0x7f0000000080), 0xfc, 0x558, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000002100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) 1.644879127s ago: executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) lseek(r0, 0x3000000, 0x4) 1.269733057s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000006b40)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x117, 0x2, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0) 1.058702413s ago: executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x3e) ioctl$NBD_CLEAR_SOCK(r5, 0xab03) 1.004770831s ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 966.678981ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x10, 0x62}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 872.980559ms ago: executing program 2: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000040)={[{@gquota}, {@uquota}]}, 0x1, 0x9856, &(0x7f000001c900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r6, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r7, 0x20, 0x0, 0x10000) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 838.615018ms ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000001e80)) 716.335663ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000280007010000000000000000030000000c0001"], 0x24}}, 0x0) 618.071459ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 591.358487ms ago: executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="080200000200000005fc"], 0x23d) 505.478422ms ago: executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'RTX'}, {0x20, 'Txtb'}, {0x20, 'x\xcbTu\xa0u\xb4Sv'}, {0x20, '^+]$)('}, {0x20, '-\xd6'}]}, 0x28) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006774700014000210b7a1ef66c88008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x48}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100030808004149004001040800", 0x58}], 0x1) 352.685685ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x2c}}, 0x0) 222.869787ms ago: executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x10) r1 = creat(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x8000000000000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000075c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='GPL\x00'}, 0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000001cc0), 0x8040, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000200), 0x1b, 0x4da, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r5, r6, 0x25, 0xa, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000007c0)=[0x0, 0x2, 0x400, 0x5, 0x5], &(0x7f0000000800)=[0x1, 0x0, 0x2], 0x8, 0x5, 0x1}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0xfffffff8, 0x0, 0xfffffff7, 0x3, 0xffffffffffffffff, 0xfffd, '\x00', 0x0, r2, 0x2, 0x1, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000000340)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x0, 0xc, &(0x7f0000002480)=ANY=[@ANYBLOB, @ANYBLOB="194ad483fcd1f41e922c1fac74146ad16ae24d205d78975ee3058a7f1558b56a7779caae6eac2375c423859c664c4a82a11e00fcddf4a1b6f64f5789c1ec5d4b8ace8919ab0d9153dbb0d18931ec86faa5887fbf9039040f721db21a1dd306e4f160ad14c80b804c464fa6", @ANYRES32, @ANYRESDEC, @ANYRES32=r4, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 178.645537ms ago: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x20}, {0x6, 0x0, 0x0, 0xfffffff9}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x3a, 0x1, 0x0, &(0x7f0000000000)) 20.378538ms ago: executing program 3: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2, &(0x7f0000002380)={[{@gid}, {@part={'part', 0x3d, 0x7fe}}, {@force}, {@type={'type', 0x3d, "fd4c0e11"}}, {@nls={'nls', 0x3d, 'macgaelic'}}, {@nobarrier}]}, 0xfd, 0x6bf, &(0x7f0000000a00)="$eJzs3UGIXHcdB/Dvm2xmMxHSbZumUYQsDRRtMNnNUBNBaBSRHIIEvfS6JJtmySYtm62kRcxErYInT9KDh4rEQ0UQEaGeivUsCF485eYh4M1DDurKe/Nmd3Z2sjubZHe27ecDb9//P///+/9/79f33sy8aXgBPrXOv5r9nRQ5f+LCrbJ+72578d7d9vVeOclkkkYy0V2laCXFR8m5dJd8tnyxHq542Dwv3/+gmHj3/Xa3NlEvVf/GZtv1++dDZ+gkB1Yr+5JMl4Vm/jNyHjaMVy3VOJd64z2yYjXuMmHHe4mDcVvZoLPW2Nhy85HOW2Bvu91939xgKjmY7rtr+Tkg9dVh6yvDOLTW1Ta9NnV2OhYAAADYeUO/y/d76kEe5FYO7U44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MlQdJ8ZWNRLo1eeTtF7/n+z75n6zTGHO8Rmj/sffNr/O1eq1bef2tGIAAAAAAAAAGCnHXuQB7mVQ736SlH95v9CVTlc/f1M3szNzGcpJ3Mrc1nOcpYym2Sqb6Dmrbnl5aXZjVv+POWWKysrt+stTw/d8vT6uAZ/qR/6fxps6AQAAAAAAAAAn1o/yPm13/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvKJJ93VW1HO6Vp9KYSHIgSbOYXu3eHGuwj6Ub+ofjDgMAAAB2z6Hif93CSlF95z9Sfe8/kDdzI8tZyHIWM5/L1b2A7lfnxt867cV7d9vXy2XjgF/717bmr0ZM997D8Jlnqh7PrW5xPt/Md3Ii07mYpSzku5nLcuYznW9UpbkUmarvXkzdu9tKL9aN8Z5bV7s4GNuxvnIZ39EqklauZKGK7WQuNXuhN+p+R/tm+2MzGZjxTpmd4pXaiDm6XK/LPfpZvd4bpqo937+akZk692U2nu7P+8bcb/M4GZxpNo3Ve1CH12Ypq4MzPVLOD9brXcj1Nm+lrc9E56dlrXf0Hdk858kX//7ni1cbN65dvXLzxN45jB7R4DHR7svE8yNlYrHMROcxMnHgceJ/cpp1NrpX0e1dLV+otj2UhXwrr+dy5nMmM5nN2czkKzmddk735fW5zfNanWuN7Z1rx79QF1pJflKvd9XkwxrKvD7dl9f+K91U1db/ylqWnhkhS0Uzw7P0j6GhTHyuLpRz/LDvHWf8BjMx25eJZzfPxC//u5Lk5uKNa0tX594Ycb4X63V52r6z/hr9qyeyQ9tX7255vDxT/scqKz/OuqOjbHu21zaQr2b9i8tEPdi6tmaq87nbttWZWo505M6wkbptzw+dpV21He1rW/cpJ69ncfVTCAB7ViMHXzrYbN1v/bX1XutHrautCwe+Pnl28vPN7P/LxJ/2/a7x68ZXi5fyXr6fQ+OOFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgluvvX2tbnFxfmlPVhIY4TOv83oA94Z2tRLRfeV5k7vV3eyD38z9vQ+0ULvQJrc7Ij6fZJNxmmOI/hWkp2d4thonTOxC7s8mSFNF1ZfaSWN1XiSXNsjD7gDdsKp5etvnLr51ttfWrg+99r8a/M3Tp8988qZ9pdnb5+6srA4P9P9O+4ogZ0w+LkUAAAAAAAAAAAA2Pt2419ZDJm26IxhXwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICPp/OvZn8nRWZnTs6U9Xt324vl0iuv9ZxI0khSfC8pPkrOpbtkqm+44mHzvHz/g1+8+O777bWxJnr9GwPb/eHfKyvb3ItOvWQ6yb56vbXJkca71DdeZ3j/LaYrVvewTNjxXuJg3P4fAAD//4DSBfs=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="e7", 0x1}], 0x1, 0xffff, 0x0, 0x0) fsync(r0) 0s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000300)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500000004000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000700)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r8, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5367 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94147cea9 code=0x7ffc0000 [ 78.063980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 78.121971][ T5388] input: syz1 as /devices/virtual/input/input5 [ 78.123234][ T29] audit: type=1326 audit(1718106940.228:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5367 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff94147cea9 code=0x7ffc0000 [ 78.173310][ T5151] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.173338][ T5154] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.214781][ T29] audit: type=1326 audit(1718106940.228:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5367 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94147cea9 code=0x7ffc0000 [ 78.246805][ T1100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.328322][ T29] audit: type=1326 audit(1718106940.228:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5367 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94147cea9 code=0x7ffc0000 [ 78.392917][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.424829][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.443296][ T29] audit: type=1326 audit(1718106940.228:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5367 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff94147cea9 code=0x7ffc0000 [ 78.476377][ T5154] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 78.477537][ T5151] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 78.543120][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.547042][ T29] audit: type=1326 audit(1718106940.228:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5367 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94147cea9 code=0x7ffc0000 [ 78.578599][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.607720][ T1100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.634186][ T5151] usb 1-1: config 0 descriptor?? [ 78.644179][ T5154] usb 4-1: config 0 descriptor?? [ 78.811011][ T1100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.877618][ T5395] loop1: detected capacity change from 0 to 4096 [ 78.991493][ T5395] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 79.008103][ T1100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.038498][ T5395] ntfs3: loop1: It is recommened to use chkdsk. [ 79.348663][ T5385] batadv_slave_1: entered promiscuous mode [ 79.438810][ T4479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.468139][ T4479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.498638][ T4479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.532125][ T4479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.540185][ T4479] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.548183][ T4479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.717190][ T5401] kvm: emulating exchange as write [ 79.768689][ T1100] bridge_slave_1: left allmulticast mode [ 79.802170][ T1100] bridge_slave_1: left promiscuous mode [ 79.830241][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.949330][ T1100] bridge_slave_0: left allmulticast mode [ 79.965673][ T1100] bridge_slave_0: left promiscuous mode [ 79.971724][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.044477][ T5151] usbhid 1-1:0.0: can't add hid device: -71 [ 80.059112][ T5151] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 80.099635][ T5151] usb 1-1: USB disconnect, device number 2 [ 80.450657][ T5154] pegasus 4-1:0.0: can't reset MAC [ 80.459706][ T5154] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 80.682495][ T5417] loop2: detected capacity change from 0 to 64 [ 80.837686][ T5411] loop0: detected capacity change from 0 to 32768 [ 80.842092][ T5409] loop1: detected capacity change from 0 to 40427 [ 80.850931][ T5411] btrfs: Deprecated parameter 'usebackuproot' [ 80.857384][ T5411] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 80.872501][ T5411] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5411) [ 80.892717][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.909596][ T5409] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 80.911118][ T5411] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 80.918375][ T5409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 80.939758][ T5411] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 80.951225][ T5411] BTRFS info (device loop0): using free-space-tree [ 80.958625][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.977077][ T1100] bond0 (unregistering): Released all slaves [ 80.988029][ T5409] F2FS-fs (loop1): invalid crc value [ 81.000090][ T5383] batadv_slave_1: left promiscuous mode [ 81.006624][ T5409] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.021599][ T5102] usb 4-1: USB disconnect, device number 2 [ 81.067276][ T5433] loop2: detected capacity change from 0 to 64 [ 81.137422][ T5411] BTRFS info (device loop0): rebuilding free space tree [ 81.229849][ T5409] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.244615][ T5409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.457707][ T5444] loop2: detected capacity change from 0 to 64 [ 81.486449][ T5444] hfs: unable to parse mount options [ 81.522107][ T5409] syz-executor.1: attempt to access beyond end of device [ 81.522107][ T5409] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 81.557561][ T5409] syz-executor.1: attempt to access beyond end of device [ 81.557561][ T5409] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 81.597211][ T4479] Bluetooth: hci3: command tx timeout [ 81.607292][ T1100] hsr_slave_0: left promiscuous mode [ 81.610175][ T5101] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 81.669100][ T1100] hsr_slave_1: left promiscuous mode [ 81.702054][ T5446] loop2: detected capacity change from 0 to 1024 [ 81.716108][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.756694][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.804755][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.823287][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.879038][ T5450] loop3: detected capacity change from 0 to 128 [ 81.933338][ T5450] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 81.948308][ T1100] veth1_macvtap: left promiscuous mode [ 81.973816][ T1100] veth0_macvtap: left promiscuous mode [ 81.979533][ T1100] veth1_vlan: left promiscuous mode [ 82.014314][ T1100] veth0_vlan: left promiscuous mode [ 82.049088][ T5099] syz-executor.1: attempt to access beyond end of device [ 82.049088][ T5099] loop1: rw=2051, sector=45096, nr_sectors = 16 limit=40427 [ 82.074290][ T5099] F2FS-fs (loop1): Issue discard(5637, 5637, 2) failed, ret: -5 [ 82.271040][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 82.272266][ T29] audit: type=1326 audit(1718106944.718:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 82.343643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.370309][ T29] audit: type=1326 audit(1718106944.718:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 82.394071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 82.413662][ T2922] hfsplus: b-tree write err: -5, ino 4 [ 82.433073][ T29] audit: type=1326 audit(1718106944.738:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 82.461793][ T29] audit: type=1326 audit(1718106944.738:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 82.522097][ T29] audit: type=1326 audit(1718106944.738:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 82.548358][ T29] audit: type=1326 audit(1718106944.738:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 82.583529][ T5102] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.638316][ T29] audit: type=1326 audit(1718106944.738:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 82.784152][ T29] audit: type=1326 audit(1718106944.738:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 82.851552][ T5102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.852674][ T29] audit: type=1326 audit(1718106944.738:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 82.901941][ T29] audit: type=1326 audit(1718106944.748:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f43a7baa0 code=0x7ffc0000 [ 82.907881][ T5102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.007847][ T5102] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 83.043267][ T5102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.070048][ T5102] usb 4-1: config 0 descriptor?? [ 83.275443][ T5452] loop0: detected capacity change from 0 to 32768 [ 83.320500][ T5452] XFS: noikeep mount option is deprecated. [ 83.379911][ T5452] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 83.388079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.485898][ T5452] XFS (loop0): Ending clean mount [ 83.526002][ T5452] XFS (loop0): Quotacheck needed: Please wait. [ 83.624279][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 83.641998][ T5452] XFS (loop0): Quotacheck: Done. [ 83.686089][ T4479] Bluetooth: hci3: command tx timeout [ 83.761074][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 83.825430][ T5101] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 83.873760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.883578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.374164][ T5465] loop2: detected capacity change from 0 to 40427 [ 84.395642][ T5465] F2FS-fs (loop2): invalid crc value [ 84.431686][ T5465] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.556887][ T5465] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 84.616807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.675478][ T5481] loop0: detected capacity change from 0 to 512 [ 84.726635][ T5098] syz-executor.2: attempt to access beyond end of device [ 84.726635][ T5098] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.731851][ T5481] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 84.755323][ T5098] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 84.776139][ T5481] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 2683928664 (level 1) [ 84.813712][ T5403] chnl_net:caif_netlink_parms(): no params data found [ 84.831358][ T5481] EXT4-fs (loop0): Remounting filesystem read-only [ 84.880424][ T5481] EXT4-fs (loop0): 1 truncate cleaned up [ 84.887821][ T5481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.893601][ T5477] lo: entered promiscuous mode [ 84.934290][ T5102] usbhid 4-1:0.0: can't add hid device: -71 [ 84.941873][ T5102] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 84.981468][ T5102] usb 4-1: USB disconnect, device number 3 [ 85.002068][ T5480] batadv_slave_1: entered promiscuous mode [ 85.028425][ T5486] tipc: Failed to remove unknown binding: 66,1,1/0:3439762681/3439762683 [ 85.068130][ T5472] batadv_slave_1: left promiscuous mode [ 85.071334][ T5486] tipc: Failed to remove unknown binding: 66,1,1/0:3439762681/3439762683 [ 85.076697][ T5472] lo: left promiscuous mode [ 85.116970][ T5489] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.163441][ T5101] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.335959][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.352260][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.354912][ T5499] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.375044][ T5403] bridge_slave_0: entered allmulticast mode [ 85.393227][ T5403] bridge_slave_0: entered promiscuous mode [ 85.402541][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.431203][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.440008][ T5403] bridge_slave_1: entered allmulticast mode [ 85.447597][ T5403] bridge_slave_1: entered promiscuous mode [ 85.485010][ T5501] dccp_close: ABORT with 62 bytes unread [ 85.508515][ T5502] input: syz1 as /devices/virtual/input/input6 [ 85.541025][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.586135][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.683730][ T5509] loop1: detected capacity change from 0 to 128 [ 85.695602][ T5506] loop2: detected capacity change from 0 to 2048 [ 85.716214][ T5506] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 85.719632][ T5403] team0: Port device team_slave_0 added [ 85.737154][ T5506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.741785][ T5403] team0: Port device team_slave_1 added [ 85.763227][ T4479] Bluetooth: hci3: command tx timeout [ 85.855703][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.881396][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.953435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.967875][ T5098] UDF-fs: error (device loop2): udf_read_inode: (ino 1347) failed !bh [ 85.987835][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.004192][ T5098] UDF-fs: error (device loop2): udf_read_inode: (ino 1347) failed !bh [ 86.023025][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.043348][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.134374][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.512593][ T5510] loop3: detected capacity change from 0 to 32768 [ 86.550640][ T5403] hsr_slave_0: entered promiscuous mode [ 86.572434][ T5403] hsr_slave_1: entered promiscuous mode [ 86.629306][ T5510] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 86.645637][ T5403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.691953][ T5403] Cannot create hsr debugfs directory [ 86.746221][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.843032][ T5510] XFS (loop3): Ending clean mount [ 86.999100][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.023390][ T5534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.064893][ T5111] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 87.237134][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.361071][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.373295][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.385116][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.403307][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.411261][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.426576][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.448935][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.493610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.642077][ T5546] dccp_close: ABORT with 62 bytes unread [ 87.841549][ T5114] Bluetooth: hci3: command tx timeout [ 87.930585][ T1100] bridge_slave_1: left allmulticast mode [ 87.936375][ T1100] bridge_slave_1: left promiscuous mode [ 87.948975][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.995109][ T1100] bridge_slave_0: left allmulticast mode [ 88.011607][ T1100] bridge_slave_0: left promiscuous mode [ 88.025591][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.983232][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 88.983277][ T29] audit: type=1326 audit(1718106951.408:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5563 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe00607cea9 code=0x0 [ 89.353811][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.368329][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.386483][ T1100] bond0 (unregistering): Released all slaves [ 89.504177][ T5114] Bluetooth: hci0: command tx timeout [ 89.933024][ T5598] loop1: detected capacity change from 0 to 128 [ 89.954056][ T5538] chnl_net:caif_netlink_parms(): no params data found [ 90.057583][ T1100] hsr_slave_0: left promiscuous mode [ 90.081212][ T1100] hsr_slave_1: left promiscuous mode [ 90.101239][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.113994][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.139507][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.153044][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.333603][ T1100] veth1_macvtap: left promiscuous mode [ 90.339464][ T1100] veth0_macvtap: left promiscuous mode [ 90.340776][ T5604] loop3: detected capacity change from 0 to 4096 [ 90.429666][ T5608] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.817729][ T1100] veth1_vlan: left promiscuous mode [ 91.116243][ T1100] veth0_vlan: left promiscuous mode [ 91.288534][ T5612] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.562820][ T5114] Bluetooth: hci0: command tx timeout [ 92.051097][ T5620] loop3: detected capacity change from 0 to 256 [ 92.131514][ T5620] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 92.148298][ T5620] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 92.158523][ T5620] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 92.166572][ T5620] UDF-fs: Scanning with blocksize 512 failed [ 92.183507][ T5620] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 92.205565][ T5620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.836729][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 92.917306][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 93.280392][ T5626] tipc: Failed to remove unknown binding: 66,1,1/0:2942300951/2942300953 [ 93.288875][ T5626] tipc: Failed to remove unknown binding: 66,1,1/0:2942300951/2942300953 [ 93.628671][ T5114] Bluetooth: hci0: command tx timeout [ 93.790954][ T5403] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.811932][ T5403] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.928544][ T5403] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.960105][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.967560][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.980387][ T5538] bridge_slave_0: entered allmulticast mode [ 93.988835][ T5538] bridge_slave_0: entered promiscuous mode [ 94.003697][ T5403] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.022303][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.039027][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.061364][ T5538] bridge_slave_1: entered allmulticast mode [ 94.077244][ T5538] bridge_slave_1: entered promiscuous mode [ 94.113631][ T5646] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.177854][ T5538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.251368][ T5538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.342213][ T5538] team0: Port device team_slave_0 added [ 94.366875][ T5538] team0: Port device team_slave_1 added [ 94.540031][ T5644] loop0: detected capacity change from 0 to 32768 [ 94.584190][ T5644] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.597481][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.613247][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.625331][ T5644] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 94.639350][ T5538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.664301][ T5644] XFS (loop0): Starting recovery (logdev: internal) [ 94.676447][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.683941][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.714773][ T5538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.717057][ T5644] XFS (loop0): Ending recovery (logdev: internal) [ 94.732654][ T5659] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.743945][ T5659] 0ª: renamed from bond_slave_0 (while UP) [ 94.753316][ T5659] 0ª: entered allmulticast mode [ 94.928261][ T5538] hsr_slave_0: entered promiscuous mode [ 94.939606][ T5101] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.954363][ T5538] hsr_slave_1: entered promiscuous mode [ 94.962870][ T5538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.980960][ T5538] Cannot create hsr debugfs directory [ 95.332206][ T5684] cgroup: Bad value for 'name' [ 95.701115][ T5114] Bluetooth: hci0: command tx timeout [ 96.687707][ T5682] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.702356][ T5687] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.826550][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.966431][ T5403] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.010855][ T5713] loop0: detected capacity change from 0 to 8192 [ 97.022963][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.030107][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.040505][ T29] audit: type=1800 audit(1718106959.536:72): pid=5718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="/" dev="fuse" ino=1 res=0 errno=0 [ 97.074765][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.081944][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.086099][ T5713] loop0: AHDI p1 p2 [ 97.105433][ T5713] loop0: p1 size 4294967295 extends beyond EOD, truncated [ 97.259045][ T5723] loop3: detected capacity change from 0 to 1024 [ 97.370969][ T5728] loop0: detected capacity change from 0 to 1024 [ 97.429213][ T1100] hfsplus: b-tree write err: -5, ino 4 [ 97.465675][ T1111] hfsplus: b-tree write err: -5, ino 4 [ 97.582640][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.656820][ T5538] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.674250][ T5538] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.692785][ T5538] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.707618][ T5741] cgroup: Bad value for 'name' [ 97.716231][ T5538] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.972739][ T5751] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 98.066281][ T5753] loop3: detected capacity change from 0 to 128 [ 98.079093][ T5753] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 98.246576][ T29] audit: type=1326 audit(1718106960.764:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 98.275984][ T29] audit: type=1326 audit(1718106960.795:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 98.301415][ T29] audit: type=1326 audit(1718106960.795:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 98.340430][ T29] audit: type=1326 audit(1718106960.795:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 98.363966][ T29] audit: type=1326 audit(1718106960.795:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 98.389886][ T29] audit: type=1326 audit(1718106960.795:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 98.412223][ T29] audit: type=1326 audit(1718106960.795:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 98.443427][ T29] audit: type=1326 audit(1718106960.795:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 98.465342][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.475233][ T29] audit: type=1326 audit(1718106960.795:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f43a7cea9 code=0x7ffc0000 [ 98.497140][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.534178][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.730944][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.744111][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.755740][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 98.767075][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.783015][ T9] usb 4-1: config 0 descriptor?? [ 100.047838][ T5403] veth0_vlan: entered promiscuous mode [ 100.078292][ T5538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.113082][ T5403] veth1_vlan: entered promiscuous mode [ 100.200589][ T5538] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.228373][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.235606][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.281229][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.288398][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.367373][ T5403] veth0_macvtap: entered promiscuous mode [ 100.415796][ T5403] veth1_macvtap: entered promiscuous mode [ 100.448383][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 100.489677][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.534651][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.555971][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.598041][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.622342][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.659584][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.686638][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.723272][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.797782][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.816545][ T5767] loop1: detected capacity change from 0 to 1024 [ 100.823177][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.834918][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.897406][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.927737][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.975150][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.009239][ T5403] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.022169][ T5403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.053196][ T5403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.135482][ T5403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.146323][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 101.153271][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 101.183361][ T9] usb 4-1: USB disconnect, device number 4 [ 101.272289][ T5775] misc userio: Begin command sent, but we're already running [ 101.304213][ T5538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.319130][ T1100] hfsplus: b-tree write err: -5, ino 4 [ 101.376107][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.384046][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.480579][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.497102][ T5538] veth0_vlan: entered promiscuous mode [ 101.519950][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.580756][ T5538] veth1_vlan: entered promiscuous mode [ 101.699640][ T5538] veth0_macvtap: entered promiscuous mode [ 101.771659][ T5538] veth1_macvtap: entered promiscuous mode [ 101.818795][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.838926][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.850167][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.870046][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.882185][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.907862][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.921296][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.994322][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.006240][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.037501][ T5154] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.054245][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.224252][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.252655][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.903621][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.981307][ T5154] usb 2-1: unable to get BOS descriptor set [ 102.994020][ T5154] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 103.003047][ T5154] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.013753][ T5154] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 103.026670][ T5154] usb 2-1: New USB device found, idVendor=046d, idProduct=c26e, bcdDevice= 0.40 [ 103.035923][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.044725][ T5154] usb 2-1: Product: syz [ 103.048983][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.049003][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.049022][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.049034][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.050519][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.105010][ T5154] usb 2-1: Manufacturer: syz [ 103.117749][ T5800] loop4: detected capacity change from 0 to 512 [ 103.131219][ T5154] usb 2-1: SerialNumber: syz [ 103.193341][ T5538] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.206655][ T5538] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.220296][ T5538] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.225537][ T5800] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 103.230794][ T5538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.452139][ T5800] EXT4-fs (loop4): 1 truncate cleaned up [ 103.516005][ T5800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.461148][ T5788] loop3: detected capacity change from 0 to 32768 [ 104.507006][ T5788] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.526240][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.534078][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.617543][ T9] usb 2-1: USB disconnect, device number 3 [ 104.647673][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.659407][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.741452][ T5824] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 104.813154][ T5826] loop1: detected capacity change from 0 to 256 [ 104.902063][ T5788] XFS (loop3): Ending clean mount [ 104.994959][ T5111] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.163690][ T5403] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.367583][ T5826] loop1: detected capacity change from 0 to 512 [ 105.397487][ T5826] ext3: Unknown parameter 'obj_type' [ 106.414252][ C1] hrtimer: interrupt took 1179870 ns [ 106.578361][ T5856] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 107.458286][ T5880] loop4: detected capacity change from 0 to 64 [ 107.673504][ T5880] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 108.037495][ T5892] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.069087][ T5894] loop0: detected capacity change from 0 to 1024 [ 108.195202][ T1041] hfsplus: b-tree write err: -5, ino 4 [ 108.499651][ T5913] loop0: detected capacity change from 0 to 64 [ 108.518301][ T5913] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 108.912244][ T5922] loop2: detected capacity change from 0 to 512 [ 109.036587][ T5924] loop4: detected capacity change from 0 to 256 [ 109.601674][ T5922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.646942][ T5922] ext4 filesystem being mounted at /root/syzkaller-testdir894865241/syzkaller.zIjPtL/8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.785122][ T5931] loop0: detected capacity change from 0 to 1024 [ 109.921120][ T11] hfsplus: b-tree write err: -5, ino 4 [ 109.941392][ T5922] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 109.953011][ T5902] loop3: detected capacity change from 0 to 32768 [ 109.992913][ T5922] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 110.045249][ T5922] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 110.099438][ T5922] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 110.309772][ T5917] loop1: detected capacity change from 0 to 32768 [ 110.351167][ T5917] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5917) [ 110.379175][ T5538] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.391963][ T5941] loop0: detected capacity change from 0 to 128 [ 110.419478][ T5917] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.442850][ T5917] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 110.464559][ T5917] BTRFS info (device loop1): using free-space-tree [ 110.632922][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.832106][ T5099] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.278162][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.190136][ T5982] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 112.357143][ T5990] loop3: detected capacity change from 0 to 128 [ 112.786032][ T5940] loop4: detected capacity change from 0 to 65536 [ 112.879180][ T5154] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.890784][ T5940] XFS (loop4): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 112.928910][ T784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.074227][ T5940] XFS (loop4): Ending clean mount [ 113.088634][ T5154] usb 2-1: Using ep0 maxpacket: 32 [ 113.106920][ T5154] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.129337][ T784] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 113.147635][ T5154] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.167605][ T784] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.199152][ T5154] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.209237][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.229385][ T5154] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 113.257219][ T5154] usb 2-1: Product: syz [ 113.263078][ T5154] usb 2-1: Manufacturer: syz [ 113.315389][ T5154] hub 2-1:4.0: USB hub found [ 113.413330][ T784] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 113.452405][ T5403] XFS (loop4): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 113.454271][ T5994] loop2: detected capacity change from 0 to 32768 [ 113.473455][ T5994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5994) [ 113.502358][ T5994] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.513183][ T5994] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 113.525255][ T5994] BTRFS info (device loop2): using free-space-tree [ 113.538082][ T5154] hub 2-1:4.0: 2 ports detected [ 113.551212][ T784] usb 1-1: USB disconnect, device number 3 [ 113.914529][ T5538] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.073199][ T6036] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 114.267611][ T6038] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 114.349889][ T6042] loop2: detected capacity change from 0 to 2048 [ 114.376610][ T6045] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.816354][ T45] hub 2-1:4.0: activate --> -90 [ 115.216555][ T45] usb 2-1-port2: cannot warm reset (err = -71) [ 115.229102][ T9] usb 2-1: USB disconnect, device number 4 [ 115.276025][ T45] usb 2-1-port2: attempt power cycle [ 115.286069][ T6065] loop0: detected capacity change from 0 to 1024 [ 115.353343][ T6065] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 115.384466][ T6065] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 115.397879][ T6065] hfsplus: xattr search failed [ 115.606025][ T6069] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 115.715861][ T6072] process 'syz-executor.0' launched './file0' with NULL argv: empty string added [ 115.730488][ T6049] loop3: detected capacity change from 0 to 40427 [ 115.759904][ T6049] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 115.784065][ T6049] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.799123][ T6060] loop2: detected capacity change from 0 to 32768 [ 115.807886][ T6074] syz-executor.4[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.808011][ T6074] syz-executor.4[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.855162][ T6060] btrfs: Deprecated parameter 'usebackuproot' [ 116.035144][ T6060] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 116.035982][ T6049] F2FS-fs (loop3): invalid crc value [ 116.699623][ T6077] xt_CT: No such helper "netbios-ns" [ 116.832037][ T6060] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6060) [ 116.865106][ T6049] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.979040][ T6060] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.004600][ T6060] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 117.053122][ T6060] BTRFS info (device loop2): using free-space-tree [ 117.069087][ T6049] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 117.095768][ T6049] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.109916][ T6093] loop0: detected capacity change from 0 to 2048 [ 117.160890][ T6104] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.164885][ T6049] syz-executor.3: attempt to access beyond end of device [ 117.164885][ T6049] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.227570][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 117.273497][ T6049] syz-executor.3: attempt to access beyond end of device [ 117.273497][ T6049] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 117.305796][ T6060] BTRFS warning (device loop2): couldn't read tree root [ 117.346329][ T6060] BTRFS warning (device loop2): try to load backup roots slot 1 [ 117.361177][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 117.405188][ T6060] BTRFS warning (device loop2): couldn't read tree root [ 117.412569][ T6060] BTRFS warning (device loop2): try to load backup roots slot 2 [ 117.430566][ T1100] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 117.447994][ T6060] BTRFS warning (device loop2): couldn't read tree root [ 117.473268][ T6060] BTRFS warning (device loop2): try to load backup roots slot 3 [ 117.484049][ T5111] syz-executor.3: attempt to access beyond end of device [ 117.484049][ T5111] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 117.497747][ T6060] BTRFS info (device loop2): rebuilding free space tree [ 117.534803][ T5111] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 117.564166][ T6060] BTRFS info (device loop2): checking UUID tree [ 117.904031][ T5538] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.029420][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.796531][ T6133] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 119.465410][ T6153] loop4: detected capacity change from 0 to 128 [ 119.479602][ T4479] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.490264][ T4479] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.503420][ T4479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.518390][ T4479] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.566114][ T4479] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 119.577270][ T4479] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.867484][ T1111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.878777][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.910369][ T6148] loop2: detected capacity change from 0 to 32768 [ 120.013902][ T1111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.026976][ T6148] syz-executor.2: attempt to access beyond end of device [ 120.026976][ T6148] loop2: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 120.093639][ T111] blkno = 5002c, nblocks = 1 [ 120.115233][ T111] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 120.115233][ T111] [ 120.163351][ T111] ERROR: (device loop2): remounting filesystem as read-only [ 120.184695][ T1111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.306802][ T1111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.622422][ T783] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.716565][ T6150] chnl_net:caif_netlink_parms(): no params data found [ 120.778749][ T1111] bridge_slave_1: left allmulticast mode [ 120.785787][ T1111] bridge_slave_1: left promiscuous mode [ 120.830009][ T783] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 120.842939][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.861857][ T783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.889123][ T1111] bridge_slave_0: left allmulticast mode [ 120.922343][ T783] usb 5-1: config 0 descriptor?? [ 120.927411][ T1111] bridge_slave_0: left promiscuous mode [ 120.958504][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.160400][ T783] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 121.343852][ T783] usb 5-1: USB disconnect, device number 2 [ 121.626043][ T4479] Bluetooth: hci5: command tx timeout [ 121.641392][ T6203] loop0: detected capacity change from 0 to 512 [ 121.665149][ T6205] loop2: detected capacity change from 0 to 1024 [ 121.675118][ T6203] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 121.736445][ T6203] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: iget: bad i_size value: -67835469387268086 [ 121.761466][ T6203] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 121.781043][ T6203] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.794921][ T6203] ext2 filesystem being mounted at /root/syzkaller-testdir320939266/syzkaller.Fgp1Nx/105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.077822][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.102147][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.116003][ T1111] bond0 (unregistering): Released all slaves [ 122.182199][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.211722][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.256974][ T6196] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 122.270354][ T6196] batadv_slave_0: entered promiscuous mode [ 122.322602][ T6213] loop4: detected capacity change from 0 to 2048 [ 122.373048][ T6214] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.568212][ T5101] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 122.783965][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.793000][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.812584][ T6150] bridge_slave_0: entered allmulticast mode [ 122.831699][ T6150] bridge_slave_0: entered promiscuous mode [ 122.902821][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.977649][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.992851][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.016095][ T45] kernel read not supported for file /usbmon0 (pid: 45 comm: kworker/1:1) [ 123.027244][ T6150] bridge_slave_1: entered allmulticast mode [ 123.343125][ T6150] bridge_slave_1: entered promiscuous mode [ 123.486980][ T1111] hsr_slave_0: left promiscuous mode [ 123.538411][ T1111] hsr_slave_1: left promiscuous mode [ 123.565809][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.587155][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.638159][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.646314][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.696885][ T4479] Bluetooth: hci5: command tx timeout [ 123.748970][ T1111] veth1_macvtap: left promiscuous mode [ 123.773566][ T1111] veth0_macvtap: left promiscuous mode [ 123.794811][ T1111] veth1_vlan: left promiscuous mode [ 123.818863][ T1111] veth0_vlan: left promiscuous mode [ 123.891086][ T6238] loop4: detected capacity change from 0 to 256 [ 123.958985][ T6238] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 124.076624][ T6238] exFAT-fs (loop4): error, in sector 160, dentry 5 should be unused, but 0xc1 [ 124.289768][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.311619][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.321694][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.334896][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.347417][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.355419][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.527679][ T6229] loop1: detected capacity change from 0 to 40427 [ 124.543512][ T6229] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 124.550413][ T6229] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 124.551930][ T6244] loop4: detected capacity change from 0 to 1024 [ 124.571948][ T6229] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.622172][ T6244] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 124.638563][ T6244] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 124.650453][ T6244] hfsplus: xattr search failed [ 124.691233][ T6229] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 124.701443][ T6229] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.729974][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 124.729990][ T29] audit: type=1800 audit(1718106987.398:108): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 124.852241][ T5099] syz-executor.1: attempt to access beyond end of device [ 124.852241][ T5099] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.884498][ T5099] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 125.243893][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 125.371644][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 125.779008][ T5114] Bluetooth: hci5: command tx timeout [ 126.410409][ T5114] Bluetooth: hci2: command tx timeout [ 126.579548][ T6270] loop1: detected capacity change from 0 to 256 [ 126.619661][ T6270] exfat: Deprecated parameter 'namecase' [ 126.667611][ T6270] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 126.956811][ T6150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.001189][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.085595][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.131008][ T6150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.374721][ T6150] team0: Port device team_slave_0 added [ 127.395853][ T6150] team0: Port device team_slave_1 added [ 127.422267][ T6282] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 127.556430][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.579862][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.607879][ T6289] loop4: detected capacity change from 0 to 128 [ 127.609518][ T6288] loop2: detected capacity change from 0 to 1024 [ 127.657201][ T6150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.699961][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.706948][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.738052][ T6291] loop1: detected capacity change from 0 to 512 [ 127.749757][ T6150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.825867][ T6291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 393: padding at end of block bitmap is not set [ 127.841561][ T5114] Bluetooth: hci5: command tx timeout [ 127.852012][ T6291] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 127.862646][ T6291] EXT4-fs (loop1): 2 truncates cleaned up [ 127.871817][ T6291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.883373][ T1100] hfsplus: b-tree write err: -5, ino 4 [ 128.096920][ T5099] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.154689][ T6150] hsr_slave_0: entered promiscuous mode [ 128.175557][ T6150] hsr_slave_1: entered promiscuous mode [ 128.189277][ T6150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.210933][ T6150] Cannot create hsr debugfs directory [ 128.319581][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.476278][ T5114] Bluetooth: hci2: command tx timeout [ 129.281376][ T1111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.453876][ T6239] chnl_net:caif_netlink_parms(): no params data found [ 129.556568][ T1111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.648887][ T6320] loop2: detected capacity change from 0 to 2048 [ 129.704710][ T1111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.732792][ T6320] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 129.753768][ T6320] UDF-fs: Scanning with blocksize 512 failed [ 129.776440][ T6320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.865106][ T1111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.062465][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.070638][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.078225][ T6239] bridge_slave_0: entered allmulticast mode [ 130.087454][ T6239] bridge_slave_0: entered promiscuous mode [ 130.132925][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.140519][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.159875][ T6239] bridge_slave_1: entered allmulticast mode [ 130.183453][ T6239] bridge_slave_1: entered promiscuous mode [ 130.373338][ T6239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.463431][ T6239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.513906][ T1111] bridge_slave_1: left allmulticast mode [ 130.525325][ T1111] bridge_slave_1: left promiscuous mode [ 130.547992][ T5114] Bluetooth: hci2: command tx timeout [ 130.554996][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.592365][ T1111] bridge_slave_0: left allmulticast mode [ 130.608463][ T1111] bridge_slave_0: left promiscuous mode [ 130.614810][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.681096][ T6330] loop2: detected capacity change from 0 to 256 [ 130.765668][ T6334] loop1: detected capacity change from 0 to 2048 [ 130.800452][ T6334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.867402][ T5099] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.086646][ T6340] loop4: detected capacity change from 0 to 1024 [ 131.537904][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.564713][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.591251][ T1111] bond0 (unregistering): Released all slaves [ 131.859749][ T6239] team0: Port device team_slave_0 added [ 131.999386][ T6352] loop2: detected capacity change from 0 to 128 [ 132.033395][ T6239] team0: Port device team_slave_1 added [ 132.416424][ T6239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.449947][ T6239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.479123][ T6239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.620831][ T5114] Bluetooth: hci2: command tx timeout [ 132.639325][ T1111] hsr_slave_0: left promiscuous mode [ 132.666693][ T1111] hsr_slave_1: left promiscuous mode [ 132.724827][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.746728][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.761810][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.789232][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.866500][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.873813][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.915972][ T1111] veth1_macvtap: left promiscuous mode [ 132.948912][ T1111] veth0_macvtap: left promiscuous mode [ 132.972355][ T1111] veth1_vlan: left promiscuous mode [ 132.987876][ T1111] veth0_vlan: left promiscuous mode [ 134.426529][ T6375] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.440379][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 134.509505][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 135.038849][ T6387] loop1: detected capacity change from 0 to 256 [ 135.052361][ T6387] exfat: Deprecated parameter 'namecase' [ 135.113276][ T6387] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 135.296216][ T6239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.327488][ T6239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.537696][ T6239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.669005][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.157090][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.289904][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.538263][ T6239] hsr_slave_0: entered promiscuous mode [ 136.554645][ T6239] hsr_slave_1: entered promiscuous mode [ 136.578250][ T6401] loop1: detected capacity change from 0 to 164 [ 136.888648][ T6150] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.968417][ T6416] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 136.992056][ T6150] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.074734][ T6150] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.178929][ T6150] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.580127][ T6433] loop2: detected capacity change from 0 to 164 [ 137.879073][ T6150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.073404][ T6150] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.171206][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.179149][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.217178][ T6239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.263299][ T6239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.311960][ T6239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.378261][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.386275][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.405901][ T6239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.429799][ T6150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.432671][ T6457] loop2: detected capacity change from 0 to 2048 [ 139.441294][ T6150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.573229][ T6239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.588831][ T6457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.750156][ T6239] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.759461][ T5538] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.789308][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.797077][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.856352][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.864225][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.230543][ T6150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.457641][ T6150] veth0_vlan: entered promiscuous mode [ 140.512670][ T6150] veth1_vlan: entered promiscuous mode [ 140.536730][ T6239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.704394][ T6239] veth0_vlan: entered promiscuous mode [ 140.714724][ T6458] loop4: detected capacity change from 0 to 40427 [ 140.749461][ T6239] veth1_vlan: entered promiscuous mode [ 140.759087][ T6458] F2FS-fs (loop4): invalid crc value [ 140.795292][ T6150] veth0_macvtap: entered promiscuous mode [ 140.818918][ T6458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.825883][ T6150] veth1_macvtap: entered promiscuous mode [ 140.941565][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.966998][ T6458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 140.976339][ T6479] loop1: detected capacity change from 0 to 1764 [ 140.993581][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.017458][ T6469] loop2: detected capacity change from 0 to 32768 [ 141.034456][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.073008][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.126768][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.174167][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.230988][ T6150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.255961][ T6239] veth0_macvtap: entered promiscuous mode [ 141.288418][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.677855][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.720952][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.905133][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.925729][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.967866][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.047325][ T6150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.070035][ T6239] veth1_macvtap: entered promiscuous mode [ 142.130191][ T6150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.154396][ T6150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.164059][ T6150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.173601][ T6150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.336342][ T6486] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.406439][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.412152][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.429865][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.442546][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.468188][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.495899][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.512632][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.523122][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.543139][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.557200][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.596244][ T6239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.620719][ T6491] loop1: detected capacity change from 0 to 256 [ 142.672666][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.712678][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.738032][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.767910][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.792890][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.817191][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.829531][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.846092][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.896495][ T6239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.936389][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.959518][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.041249][ T6239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.099257][ T6239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.113875][ T6239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.123895][ T6239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.167001][ T6497] pimreg: entered allmulticast mode [ 143.186583][ T6498] pimreg: left allmulticast mode [ 143.615124][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.662603][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.745296][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.791807][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.850038][ T6490] loop2: detected capacity change from 0 to 40427 [ 143.880804][ T6490] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 143.884910][ T6506] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 143.929173][ T6490] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.961857][ T6490] F2FS-fs (loop2): invalid crc value [ 143.987883][ T6490] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.045519][ T6514] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 144.095564][ T6514] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 144.157111][ T6490] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 144.188131][ T6490] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 144.248801][ T6521] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.275495][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.376433][ T6490] syz-executor.2: attempt to access beyond end of device [ 144.376433][ T6490] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.427876][ T6530] syz-executor.2: attempt to access beyond end of device [ 144.427876][ T6530] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 144.486570][ T6532] loop0: detected capacity change from 0 to 1024 [ 144.540709][ T6532] hfsplus: unable to parse mount options [ 144.547324][ T5538] syz-executor.2: attempt to access beyond end of device [ 144.547324][ T5538] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 144.548563][ T5538] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 144.592645][ T6532] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.592701][ T6532] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.690184][ T6540] loop4: detected capacity change from 0 to 1764 [ 144.745587][ T6544] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 145.017110][ T29] audit: type=1800 audit(1718107007.744:109): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 145.308171][ T29] audit: type=1800 audit(1718107007.794:110): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 147.049034][ T4479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.072722][ T4479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.082111][ T4479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.116036][ T4479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.124963][ T4479] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.134062][ T4479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.318304][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.582276][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.750781][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.842245][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.160298][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.268777][ T6599] loop2: detected capacity change from 0 to 128 [ 148.778724][ T51] bridge_slave_1: left allmulticast mode [ 148.822189][ T51] bridge_slave_1: left promiscuous mode [ 148.845010][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.882717][ T51] bridge_slave_0: left allmulticast mode [ 148.897657][ T51] bridge_slave_0: left promiscuous mode [ 148.911145][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.100158][ T6610] loop3: detected capacity change from 0 to 1024 [ 149.175362][ T6610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.204456][ T5114] Bluetooth: hci3: command tx timeout [ 149.235331][ T6591] loop0: detected capacity change from 0 to 32768 [ 149.323256][ T6591] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.687408][ T6591] XFS (loop0): Ending clean mount [ 149.700974][ T6601] loop1: detected capacity change from 0 to 40427 [ 149.765263][ T6601] F2FS-fs (loop1): invalid crc value [ 149.785040][ T6601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.955672][ T6601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.424012][ T6629] Bluetooth: MGMT ver 1.22 [ 151.076877][ T6239] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.261341][ T6601] syz-executor.1: attempt to access beyond end of device [ 151.261341][ T6601] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.333014][ T5114] Bluetooth: hci3: command tx timeout [ 151.381170][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.462239][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.512240][ T5099] syz-executor.1: attempt to access beyond end of device [ 151.512240][ T5099] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 151.546067][ T51] bond0 (unregistering): Released all slaves [ 151.546698][ T5099] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 151.658743][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 152.283779][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.293115][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.301293][ T6575] bridge_slave_0: entered allmulticast mode [ 152.309961][ T6575] bridge_slave_0: entered promiscuous mode [ 152.321589][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.329591][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.337442][ T6575] bridge_slave_1: entered allmulticast mode [ 152.374337][ T6575] bridge_slave_1: entered promiscuous mode [ 152.534359][ T51] hsr_slave_0: left promiscuous mode [ 152.611377][ T51] hsr_slave_1: left promiscuous mode [ 152.690672][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.708110][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.745731][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.769665][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.856533][ T51] veth1_macvtap: left promiscuous mode [ 152.867574][ T51] veth0_macvtap: left promiscuous mode [ 152.877770][ T51] veth1_vlan: left promiscuous mode [ 152.890189][ T51] veth0_vlan: left promiscuous mode [ 153.351584][ T5114] Bluetooth: hci3: command tx timeout [ 153.386848][ T6662] loop0: detected capacity change from 0 to 8192 [ 153.433322][ T6662] loop0: p1 p2[DM] p4 [ 153.451274][ T6662] loop0: p1 size 196608 extends beyond EOD, truncated [ 153.467373][ T6662] loop0: p2 start 4292936063 is beyond EOD, truncated [ 153.500094][ T6662] loop0: p4 size 50331648 extends beyond EOD, truncated [ 153.864925][ T6651] loop3: detected capacity change from 0 to 32768 [ 154.008764][ T6651] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 154.162767][ T6676] loop2: detected capacity change from 0 to 64 [ 154.214609][ T6651] XFS (loop3): Ending clean mount [ 154.427899][ T6651] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 154.608345][ T6671] loop0: detected capacity change from 0 to 32768 [ 154.633862][ T6671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6671) [ 154.703699][ T6671] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.737882][ T6671] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 154.757767][ T6671] BTRFS info (device loop0): using free-space-tree [ 154.783544][ T51] team0 (unregistering): Port device team_slave_1 removed [ 154.896465][ T51] team0 (unregistering): Port device team_slave_0 removed [ 155.057896][ T6239] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.426150][ T5114] Bluetooth: hci3: command tx timeout [ 155.738043][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.782609][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.849280][ T6708] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 155.997839][ T6575] team0: Port device team_slave_0 added [ 156.016797][ T6575] team0: Port device team_slave_1 added [ 156.106011][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.130343][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.183230][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.204981][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.223290][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.251663][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.367752][ T6575] hsr_slave_0: entered promiscuous mode [ 156.374623][ T6721] loop1: detected capacity change from 0 to 512 [ 156.385267][ T6575] hsr_slave_1: entered promiscuous mode [ 156.397065][ T6575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.405832][ T6575] Cannot create hsr debugfs directory [ 156.411901][ T6721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.433290][ T5152] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.440340][ T6721] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.457676][ T6721] EXT4-fs (loop1): can't mount with both data=journal and dax [ 156.594233][ T6723] loop3: detected capacity change from 0 to 2048 [ 156.616260][ T5152] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 156.656908][ T5152] usb 1-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 156.690262][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.717403][ T5152] usb 1-1: config 0 descriptor?? [ 156.751078][ T5152] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 156.758407][ T6727] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 156.921462][ T6736] loop3: detected capacity change from 0 to 256 [ 156.946088][ T6736] FAT-fs (loop3): Unrecognized mount option "ngdots" or missing value [ 156.986090][ T5150] usb 1-1: USB disconnect, device number 4 [ 157.088667][ T6740] loop2: detected capacity change from 0 to 512 [ 157.112664][ T6740] EXT4-fs: Ignoring removed orlov option [ 157.128321][ T6740] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 157.144483][ T6740] System zones: 1-12 [ 157.160868][ T6740] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 157.232651][ T6740] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 157.247864][ T6740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.406255][ T6575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.432837][ T5538] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.478816][ T6575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.522503][ T6575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.574450][ T6575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.654035][ T29] audit: type=1326 audit(1718107020.430:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be7cea9 code=0x7ffc0000 [ 157.744710][ T5114] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 157.754439][ T5114] Bluetooth: hci2: Injecting HCI hardware error event [ 157.765044][ T5114] Bluetooth: hci2: hardware error 0x00 [ 157.772952][ T29] audit: type=1326 audit(1718107020.461:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be7cea9 code=0x7ffc0000 [ 157.877578][ T29] audit: type=1326 audit(1718107020.471:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821be7cea9 code=0x7ffc0000 [ 157.906959][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.961383][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.980349][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.988252][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.999913][ T29] audit: type=1326 audit(1718107020.471:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be7cea9 code=0x7ffc0000 [ 158.006540][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.031032][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.072180][ T6758] loop2: detected capacity change from 0 to 64 [ 158.095525][ T6744] loop1: detected capacity change from 0 to 32768 [ 158.109970][ T29] audit: type=1326 audit(1718107020.471:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be7cea9 code=0x7ffc0000 [ 158.211558][ T6744] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 158.244838][ T29] audit: type=1326 audit(1718107020.471:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821be7cea9 code=0x7ffc0000 [ 158.401270][ T29] audit: type=1326 audit(1718107020.471:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be7cea9 code=0x7ffc0000 [ 158.461968][ T6744] XFS (loop1): Ending clean mount [ 158.472003][ T29] audit: type=1326 audit(1718107020.471:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f821be7a627 code=0x7ffc0000 [ 158.526574][ T29] audit: type=1326 audit(1718107020.471:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821be402e9 code=0x7ffc0000 [ 158.557613][ T29] audit: type=1326 audit(1718107020.481:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f821be7cea9 code=0x7ffc0000 [ 158.671278][ T6784] loop2: detected capacity change from 0 to 2048 [ 158.713297][ T6784] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 158.775580][ T6784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.785599][ T6744] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 158.803346][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.203744][ T6799] loop1: detected capacity change from 0 to 64 [ 159.322492][ T6575] veth0_vlan: entered promiscuous mode [ 159.357089][ T6575] veth1_vlan: entered promiscuous mode [ 159.453519][ T6575] veth0_macvtap: entered promiscuous mode [ 159.487348][ T6575] veth1_macvtap: entered promiscuous mode [ 159.534515][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.553970][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.564799][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.582594][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.592662][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.608782][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.621565][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.646884][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.669255][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.718837][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.752969][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.788584][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.834882][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.876256][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.927718][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.938557][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.950158][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.965287][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.974339][ T5114] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 160.120503][ T6818] evm: overlay not supported [ 160.635917][ T6575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.645644][ T6575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.657979][ T6575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.684546][ T6575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.750148][ T6817] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 160.889990][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.911708][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.037176][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.074118][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.217743][ T6828] loop2: detected capacity change from 0 to 2048 [ 161.273157][ T6828] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 161.307881][ T6828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.410578][ T5114] Bluetooth: hci3: command tx timeout [ 161.534350][ T6815] loop3: detected capacity change from 0 to 32768 [ 161.546272][ T6815] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6815) [ 161.594219][ T6815] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.605541][ T6815] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 161.630048][ T6815] BTRFS info (device loop3): using free-space-tree [ 161.759767][ T6150] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.807096][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.913830][ T5151] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.109393][ T5151] usb 2-1: Using ep0 maxpacket: 32 [ 162.121928][ T5151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.141277][ T5151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.164311][ T5151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.178276][ T5151] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 162.200341][ T5151] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 162.220777][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.241696][ T5151] usb 2-1: config 0 descriptor?? [ 162.465265][ T5151] usbhid 2-1:0.0: can't add hid device: -71 [ 162.476656][ T5151] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 162.511615][ T5151] usb 2-1: USB disconnect, device number 9 [ 163.374545][ T6913] syz-executor.0: attempt to access beyond end of device [ 163.374545][ T6913] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 163.396732][ T6913] syz-executor.0: attempt to access beyond end of device [ 163.396732][ T6913] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 163.432612][ T6913] syz-executor.0: attempt to access beyond end of device [ 163.432612][ T6913] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 163.473594][ T6913] syz-executor.0: attempt to access beyond end of device [ 163.473594][ T6913] nbd0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 163.488886][ T5152] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.511367][ T6913] syz-executor.0: attempt to access beyond end of device [ 163.511367][ T6913] nbd0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 163.536145][ T6913] syz-executor.0: attempt to access beyond end of device [ 163.536145][ T6913] nbd0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 163.543043][ T6923] loop2: detected capacity change from 0 to 512 [ 163.560877][ T6913] VFS: unable to find oldfs superblock on device nbd0 [ 163.580157][ T6923] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 163.624824][ T6923] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 163.658680][ T6923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.706207][ T5152] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.744774][ T5152] usb 5-1: config 0 has no interfaces? [ 163.776187][ T5152] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice=a4.40 [ 163.794326][ T5152] usb 5-1: New USB device strings: Mfr=148, Product=2, SerialNumber=3 [ 163.828317][ T5152] usb 5-1: Product: syz [ 163.838882][ T5152] usb 5-1: Manufacturer: syz [ 163.843582][ T5152] usb 5-1: SerialNumber: syz [ 163.873537][ T5152] usb 5-1: config 0 descriptor?? [ 164.114722][ T9] usb 5-1: USB disconnect, device number 3 [ 164.399174][ T5538] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.439512][ T6940] loop3: detected capacity change from 0 to 128 [ 164.825797][ T6960] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.160186][ T6972] loop1: detected capacity change from 0 to 128 [ 165.919829][ T6987] xt_HMARK: proto mask must be zero with L3 mode [ 166.095203][ T6995] loop3: detected capacity change from 0 to 64 [ 166.158057][ T6998] loop4: detected capacity change from 0 to 256 [ 166.225244][ T6998] FAT-fs (loop4): unable to read block(12884901888) for building NFS inode [ 166.485893][ T6980] loop2: detected capacity change from 0 to 32768 [ 166.644296][ T6980] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 166.658847][ T6980] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 166.719206][ T6980] bcachefs (loop2): alloc_read... done [ 166.725714][ T6980] bcachefs (loop2): stripes_read... done [ 166.731941][ T6980] bcachefs (loop2): snapshots_read... done [ 166.760237][ T6980] bcachefs (loop2): journal_replay... done [ 166.766467][ T6980] bcachefs (loop2): resume_logged_ops... done [ 166.805129][ T6980] bcachefs (loop2): going read-write [ 166.834593][ T6980] bcachefs (loop2): done starting filesystem [ 166.980032][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 166.980048][ T29] audit: type=1800 audit(1718107029.783:127): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=4102 res=0 errno=0 [ 167.017359][ T7029] xt_HMARK: proto mask must be zero with L3 mode [ 167.214413][ T7007] loop0: detected capacity change from 0 to 32768 [ 167.275309][ T7038] syz-executor.4: attempt to access beyond end of device [ 167.275309][ T7038] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 167.305812][ T7038] syz-executor.4: attempt to access beyond end of device [ 167.305812][ T7038] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 167.327054][ T7042] tmpfs: Bad value for 'mpol' [ 167.357179][ T7038] syz-executor.4: attempt to access beyond end of device [ 167.357179][ T7038] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 167.386746][ T7047] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 167.429008][ T7038] syz-executor.4: attempt to access beyond end of device [ 167.429008][ T7038] nbd4: rw=0, sector=18, nr_sectors = 2 limit=0 [ 167.442063][ T7007] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 167.453893][ T7007] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 167.487441][ T7007] bcachefs (loop0): alloc_read... done [ 167.492991][ T7007] bcachefs (loop0): stripes_read... done [ 167.498911][ T7007] bcachefs (loop0): snapshots_read... done [ 167.507513][ T7007] bcachefs (loop0): journal_replay... done [ 167.514474][ T7007] bcachefs (loop0): resume_logged_ops... done [ 167.517941][ T7038] VFS: unable to find oldfs superblock on device nbd4 [ 167.520736][ T7007] bcachefs (loop0): going read-write [ 167.542099][ T7007] bcachefs (loop0): done starting filesystem [ 167.560643][ T29] audit: type=1326 audit(1718107030.364:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe00607cea9 code=0x0 [ 167.627921][ T6980] syz-executor.2 (6980) used greatest stack depth: 14648 bytes left [ 167.710190][ T7028] syz-executor.2 (7028) used greatest stack depth: 11416 bytes left [ 167.753845][ T5538] bcachefs (loop2): shutting down [ 167.753864][ T6239] bcachefs (loop0): shutting down [ 167.754036][ T5538] bcachefs (loop2): going read-only [ 167.778458][ T5538] bcachefs (loop2): finished waiting for writes to stop [ 167.792493][ T5538] bcachefs (loop2): flushing journal and stopping allocators, journal seq 9 [ 167.800550][ T6239] bcachefs (loop0): going read-only [ 167.833305][ T6239] bcachefs (loop0): finished waiting for writes to stop [ 167.837141][ T7057] loop3: detected capacity change from 0 to 256 [ 167.841167][ T5538] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 167.864857][ T6239] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 167.869550][ T5538] bcachefs (loop2): shutdown complete, journal seq 12 [ 167.878710][ T7057] FAT-fs (loop3): unable to read block(12884901888) for building NFS inode [ 167.894071][ T5538] bcachefs (loop2): marking filesystem clean [ 167.903623][ T6239] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 9 [ 167.920464][ T6239] bcachefs (loop0): shutdown complete, journal seq 10 [ 167.930259][ T6239] bcachefs (loop0): marking filesystem clean [ 167.976194][ T6239] bcachefs (loop0): shutdown complete [ 167.999340][ T5538] bcachefs (loop2): shutdown complete [ 168.380275][ T7061] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 168.387214][ T7061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.453119][ T7061] vhci_hcd vhci_hcd.0: Device attached [ 168.492804][ T7068] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 168.499357][ T7068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 168.536679][ T7075] tmpfs: Bad value for 'mpol' [ 168.581549][ T7066] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 168.588201][ T7066] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 168.607366][ T7068] vhci_hcd vhci_hcd.0: Device attached [ 168.653463][ T7066] vhci_hcd vhci_hcd.0: Device attached [ 168.679355][ T7061] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5) [ 168.686007][ T7061] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 168.703595][ T45] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 168.717812][ T7061] vhci_hcd vhci_hcd.0: Device attached [ 168.769603][ T7072] vhci_hcd: connection closed [ 168.771050][ T7070] vhci_hcd: connection closed [ 168.778681][ T7062] vhci_hcd: connection reset by peer [ 168.783389][ T1111] vhci_hcd: stop threads [ 168.784205][ T1111] vhci_hcd: release socket [ 168.789918][ T7078] vhci_hcd: connection closed [ 168.863143][ T1111] vhci_hcd: disconnect device [ 168.921910][ T1111] vhci_hcd: stop threads [ 168.932193][ T1111] vhci_hcd: release socket [ 168.958329][ T1111] vhci_hcd: disconnect device [ 168.984943][ T1111] vhci_hcd: stop threads [ 168.999918][ T1111] vhci_hcd: release socket [ 169.013409][ T1111] vhci_hcd: disconnect device [ 169.040864][ T1111] vhci_hcd: stop threads [ 169.054558][ T1111] vhci_hcd: release socket [ 169.079432][ T1111] vhci_hcd: disconnect device [ 169.153956][ T7094] loop3: detected capacity change from 0 to 2048 [ 169.242639][ T7094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.488744][ T7103] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 169.553153][ T7106] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.605840][ T7092] loop0: detected capacity change from 0 to 32768 [ 169.624755][ T29] audit: type=1326 audit(1718107032.419:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f909687cea9 code=0x0 [ 169.774993][ T7092] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 169.792978][ T7092] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 169.842787][ T7092] bcachefs (loop0): alloc_read... done [ 169.848946][ T7092] bcachefs (loop0): stripes_read... done [ 169.855537][ T7092] bcachefs (loop0): snapshots_read... done [ 169.856523][ T7121] loop2: detected capacity change from 0 to 1024 [ 169.866792][ T7092] bcachefs (loop0): journal_replay... done [ 169.878382][ T7092] bcachefs (loop0): resume_logged_ops... done [ 169.885248][ T7092] bcachefs (loop0): going read-write [ 169.997783][ T7092] bcachefs (loop0): done starting filesystem [ 170.028716][ T6150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.064272][ T7129] fuse: Bad value for 'fd' [ 170.076716][ T29] audit: type=1800 audit(1718107032.870:130): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4102 res=0 errno=0 [ 170.108814][ T7121] hfsplus: bad catalog entry type [ 170.140583][ T29] audit: type=1800 audit(1718107032.880:131): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4102 res=0 errno=0 [ 170.227139][ T35] hfsplus: b-tree write err: -5, ino 4 [ 170.358836][ T7134] loop1: detected capacity change from 0 to 1024 [ 170.529064][ T51] hfsplus: b-tree write err: -5, ino 4 [ 170.603332][ T6239] bcachefs (loop0): shutting down [ 170.634510][ T6239] bcachefs (loop0): going read-only [ 170.640262][ T6239] bcachefs (loop0): finished waiting for writes to stop [ 170.676572][ T6239] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 170.729008][ T6239] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 170.773096][ T6239] bcachefs (loop0): shutdown complete, journal seq 12 [ 170.790015][ T6239] bcachefs (loop0): marking filesystem clean [ 170.841423][ T6239] bcachefs (loop0): shutdown complete [ 171.068947][ T5109] Bluetooth: hci3: command 0x0405 tx timeout [ 171.191351][ T7142] loop3: detected capacity change from 0 to 40427 [ 171.292863][ T7142] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.357984][ T7159] IPVS: Unknown mcast interface: [ 171.408526][ T7142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 171.509416][ T7142] bio_check_eod: 2 callbacks suppressed [ 171.509436][ T7142] syz-executor.3: attempt to access beyond end of device [ 171.509436][ T7142] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 171.608000][ T29] audit: type=1804 audit(1718107034.413:132): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1133714701/syzkaller.PxXzmx/53/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 171.610393][ T7142] syz-executor.3: attempt to access beyond end of device [ 171.610393][ T7142] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 171.820811][ T7165] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 171.884390][ T6150] syz-executor.3: attempt to access beyond end of device [ 171.884390][ T6150] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.888925][ T7175] sctp: [Deprecated]: syz-executor.4 (pid 7175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.888925][ T7175] Use struct sctp_sack_info instead [ 171.906476][ T6150] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 172.747570][ T5154] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 172.954674][ T5154] usb 3-1: Using ep0 maxpacket: 8 [ 172.982210][ T5154] usb 3-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 173.010221][ T5154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.032314][ T5154] usb 3-1: Product: syz [ 173.046909][ T5154] usb 3-1: Manufacturer: syz [ 173.052000][ T5154] usb 3-1: SerialNumber: syz [ 173.068806][ T5154] usb 3-1: config 0 descriptor?? [ 173.329963][ T5154] kaweth 3-1:0.0: Firmware present in device. [ 173.512106][ T5154] kaweth 3-1:0.0: Statistics collection: 0 [ 173.591208][ T5154] kaweth 3-1:0.0: Multicast filter limit: 0 [ 173.603946][ T5154] kaweth 3-1:0.0: MTU: 0 [ 173.619121][ T5154] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 174.671755][ T5154] kaweth 3-1:0.0: Error setting SOFS wait [ 174.680228][ T5154] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 174.694678][ T5154] usb 3-1: USB disconnect, device number 2 [ 174.741450][ T45] vhci_hcd: vhci_device speed not set [ 174.807742][ T7267] loop4: detected capacity change from 0 to 512 [ 174.816154][ T7262] loop0: detected capacity change from 0 to 4096 [ 174.845440][ T7262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.888829][ T7267] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 5: invalid block bitmap [ 174.920488][ T7267] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 174.951006][ T7267] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 3 (level 2) [ 174.976750][ T7267] EXT4-fs (loop4): 1 orphan inode deleted [ 174.995948][ T7267] EXT4-fs (loop4): 1 truncate cleaned up [ 175.008771][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.022896][ T29] audit: type=1800 audit(1718107037.820:133): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 175.025960][ T7281] loop1: detected capacity change from 0 to 136 [ 175.258392][ T7286] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 175.261203][ T6239] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.288386][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.307558][ T6575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.549838][ T7298] tun0: tun_chr_ioctl cmd 2148553947 [ 175.562782][ T7294] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 175.880715][ T7313] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.917834][ T7314] loop0: detected capacity change from 0 to 512 [ 175.968403][ T7316] loop4: detected capacity change from 0 to 4096 [ 175.976356][ T7314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 5: invalid block bitmap [ 176.008610][ T7316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.031491][ T7314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 176.061719][ T7314] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 3 (level 2) [ 176.069199][ T7320] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 176.087323][ T783] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 176.103898][ T7314] EXT4-fs (loop0): 1 orphan inode deleted [ 176.119948][ T7314] EXT4-fs (loop0): 1 truncate cleaned up [ 176.137670][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.154071][ T7314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.267149][ T7302] loop1: detected capacity change from 0 to 32768 [ 176.286812][ T783] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.315195][ T783] usb 3-1: config 0 has no interfaces? [ 176.333850][ T783] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice=a4.40 [ 176.350555][ T6239] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.357749][ T783] usb 3-1: New USB device strings: Mfr=148, Product=2, SerialNumber=3 [ 176.375208][ T783] usb 3-1: Product: syz [ 176.379549][ T783] usb 3-1: Manufacturer: syz [ 176.384162][ T783] usb 3-1: SerialNumber: syz [ 176.398559][ T783] usb 3-1: config 0 descriptor?? [ 176.534605][ T6575] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.682331][ T9] usb 3-1: USB disconnect, device number 3 [ 176.687960][ T7302] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 176.703451][ T7302] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 176.815751][ T7334] loop3: detected capacity change from 0 to 16 [ 176.887524][ T7334] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.134560][ T7334] syz-executor.3: attempt to access beyond end of device [ 177.134560][ T7334] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 177.293112][ T7334] syz-executor.3: attempt to access beyond end of device [ 177.293112][ T7334] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 177.343496][ T7332] syz-executor.3: attempt to access beyond end of device [ 177.343496][ T7332] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 177.359996][ T7332] syz-executor.3: attempt to access beyond end of device [ 177.359996][ T7332] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 177.378110][ T783] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 177.399860][ T7302] bcachefs (loop1): alloc_read... done [ 177.405425][ T7302] bcachefs (loop1): stripes_read... done [ 177.419613][ T7302] bcachefs (loop1): snapshots_read... done [ 177.430474][ T7302] bcachefs (loop1): journal_replay... done [ 177.436400][ T7302] bcachefs (loop1): resume_logged_ops... done [ 177.442726][ T7302] bcachefs (loop1): going read-write [ 177.452236][ T7302] bcachefs (loop1): done starting filesystem [ 177.537210][ T29] audit: type=1800 audit(1718107040.325:134): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=4102 res=0 errno=0 [ 177.562760][ T29] audit: type=1800 audit(1718107040.335:135): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=4102 res=0 errno=0 [ 177.588896][ T783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 177.600470][ T783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 177.867794][ T7342] loop4: detected capacity change from 0 to 64 [ 177.880877][ T783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.893960][ T783] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.952942][ T783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.983793][ T783] usb 1-1: config 0 descriptor?? [ 178.010639][ T7329] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 178.298008][ T5099] bcachefs (loop1): shutting down [ 178.335539][ T5099] bcachefs (loop1): going read-only [ 178.368212][ T5099] bcachefs (loop1): finished waiting for writes to stop [ 178.444122][ T5099] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 178.517486][ T5099] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 178.769757][ T5099] bcachefs (loop1): shutdown complete, journal seq 12 [ 178.791020][ T783] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 178.803448][ T783] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 178.809931][ T5099] bcachefs (loop1): marking filesystem clean [ 178.837880][ T783] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 179.502082][ T5099] bcachefs (loop1): shutdown complete [ 179.575605][ T783] usb 1-1: USB disconnect, device number 5 [ 179.727683][ T7366] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 179.736867][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.107422][ T7380] loop2: detected capacity change from 0 to 136 [ 180.191126][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.372285][ T7382] loop3: detected capacity change from 0 to 8192 [ 180.405496][ T45] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 180.440289][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.554820][ T45] usb 5-1: config 0 descriptor?? [ 180.643205][ T45] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 180.891181][ T5109] Bluetooth: hci1: command 0x0406 tx timeout [ 181.162134][ T7372] /dev/sg0: Can't lookup blockdev [ 181.424792][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.508533][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.680036][ T45] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 181.687511][ T45] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 181.701484][ T45] usb 5-1: USB disconnect, device number 4 [ 182.037094][ T7386] loop2: detected capacity change from 0 to 32768 [ 182.062862][ T7413] loop1: detected capacity change from 0 to 136 [ 182.073584][ T7386] bcachefs (/dev/loop2): error validating superblock: Invalid superblock layout: too many superblocks [ 182.516159][ T29] audit: type=1326 audit(1718107045.344:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6e67cea9 code=0x7ffc0000 [ 182.578326][ T29] audit: type=1326 audit(1718107045.344:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6e67cea9 code=0x7ffc0000 [ 182.678030][ T29] audit: type=1326 audit(1718107045.374:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d6e67cea9 code=0x7ffc0000 [ 182.765702][ T29] audit: type=1326 audit(1718107045.374:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6e67cea9 code=0x7ffc0000 [ 182.863477][ T29] audit: type=1326 audit(1718107045.374:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6e67cea9 code=0x7ffc0000 [ 182.895015][ T29] audit: type=1326 audit(1718107045.374:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d6e67cea9 code=0x7ffc0000 [ 183.013001][ T29] audit: type=1326 audit(1718107045.374:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6e67cea9 code=0x7ffc0000 [ 183.057424][ T7446] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 183.124733][ T29] audit: type=1326 audit(1718107045.384:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d6e67a627 code=0x7ffc0000 [ 183.228549][ T29] audit: type=1326 audit(1718107045.384:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d6e6402e9 code=0x7ffc0000 [ 183.308706][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 183.349909][ T29] audit: type=1326 audit(1718107045.384:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f1d6e67cea9 code=0x7ffc0000 [ 183.356761][ T7435] kvm: pic: non byte read [ 183.375602][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x6 [ 183.385737][ T7435] kvm: pic: non byte read [ 183.404357][ T7435] kvm: pic: non byte read [ 183.418538][ T7415] loop0: detected capacity change from 0 to 32768 [ 183.420087][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.439048][ T7435] kvm: pic: non byte read [ 183.442345][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.464201][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.473303][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.491302][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.499515][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.532885][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.541649][ T7435] kvm: pic: non byte read [ 183.568948][ T7435] kvm: pic: non byte read [ 183.584823][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.593280][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.601916][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.611747][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.625576][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.630050][ T7435] kvm: pic: non byte read [ 183.642423][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.650872][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.660734][ T5150] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 183.675864][ T783] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 183.680605][ T5150] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 183.694745][ T5114] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 183.704020][ T5114] Bluetooth: hci0: Injecting HCI hardware error event [ 183.715186][ T5114] Bluetooth: hci0: hardware error 0x00 [ 183.754662][ T7435] kvm: pic: non byte read [ 183.817611][ T7435] kvm: pic: non byte read [ 183.822836][ T7435] kvm: pic: non byte read [ 183.869635][ T7415] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 183.900395][ T7415] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 183.934157][ T783] usb 3-1: config 0 has no interfaces? [ 183.940021][ T783] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 183.993868][ T783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.036917][ T7415] bcachefs (loop0): alloc_read... done [ 184.050267][ T783] usb 3-1: config 0 descriptor?? [ 184.058055][ T7415] bcachefs (loop0): stripes_read... done [ 184.080887][ T7415] bcachefs (loop0): snapshots_read... done [ 184.106723][ T7415] bcachefs (loop0): journal_replay... done [ 184.131404][ T7415] bcachefs (loop0): resume_logged_ops... done [ 184.153123][ T7463] loop3: detected capacity change from 0 to 512 [ 184.159793][ T7415] bcachefs (loop0): going read-write [ 184.207039][ T7463] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 184.222016][ T7415] bcachefs (loop0): done starting filesystem [ 184.235418][ T7463] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 184.251888][ T7463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.645556][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.684956][ T7443] loop2: detected capacity change from 0 to 512 [ 184.832742][ T784] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 184.937118][ T7443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.960638][ T7443] ext4 filesystem being mounted at /root/syzkaller-testdir894865241/syzkaller.zIjPtL/103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.108650][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.198749][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 185.217588][ T784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.251251][ T784] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.253221][ T6239] bcachefs (loop0): shutting down [ 185.265729][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.279906][ T784] usb 2-1: config 0 descriptor?? [ 185.280472][ T6239] bcachefs (loop0): going read-only [ 185.294634][ T7476] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.353851][ T6239] bcachefs (loop0): finished waiting for writes to stop [ 185.365377][ T6239] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 185.390540][ T6150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.430713][ T6239] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 185.467757][ T6239] bcachefs (loop0): shutdown complete, journal seq 12 [ 185.488824][ T6239] bcachefs (loop0): marking filesystem clean [ 185.586834][ T6239] bcachefs (loop0): shutdown complete [ 185.758476][ T784] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 185.779273][ T7487] loop4: detected capacity change from 0 to 8192 [ 185.787241][ T784] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 185.808046][ T7491] loop3: detected capacity change from 0 to 1024 [ 185.816538][ T784] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 185.841465][ T5114] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 185.844934][ T784] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 185.866155][ T7491] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (28) [ 185.878647][ T7487] REISERFS warning (device loop4): super-6503 reiserfs_getopt: the option "notail" does not require an argument [ 185.878647][ T7487] [ 186.267031][ T784] usb 3-1: USB disconnect, device number 4 [ 186.536974][ T5538] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.677691][ T5152] usb 2-1: USB disconnect, device number 10 [ 186.861960][ T7502] block nbd1: shutting down sockets [ 187.093297][ T7512] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 187.105154][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.475963][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.826209][ T7529] loop3: detected capacity change from 0 to 1024 [ 187.846547][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 187.846564][ T29] audit: type=1800 audit(2000000000.000:207): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 292.817323][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 292.824318][ C0] rcu: 1-...!: (0 ticks this GP) idle=e63c/1/0x4000000000000000 softirq=18064/18064 fqs=0 [ 292.835998][ C0] rcu: (detected by 0, t=10502 jiffies, g=25017, q=319 ncpus=2) [ 292.843740][ C0] Sending NMI from CPU 0 to CPUs 1: [ 292.848960][ C1] NMI backtrace for cpu 1 [ 292.848984][ C1] CPU: 1 PID: 7528 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller #0 [ 292.849000][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 292.849009][ C1] RIP: 0010:__lock_acquire+0x133/0x1fd0 [ 292.849036][ C1] Code: 84 c0 48 89 3c 24 0f 85 b3 15 00 00 8b 17 48 c7 c0 e0 c6 76 94 48 c1 e8 03 0f b6 04 30 84 c0 48 89 54 24 30 0f 85 bd 15 00 00 <83> 3d e6 5a 04 13 00 75 09 83 fa 30 0f 83 d1 13 00 00 44 89 6c 24 [ 292.849049][ C1] RSP: 0018:ffffc90000a18a30 EFLAGS: 00000097 [ 292.849064][ C1] RAX: 0000000000000004 RBX: ffffffff92c5be48 RCX: ffffffff9476c603 [ 292.849075][ C1] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffff8880260c28d8 [ 292.849086][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 292.849096][ C1] R10: dffffc0000000000 R11: fffffbfff1f583d6 R12: ffffffff8e333fa0 [ 292.849108][ C1] R13: 0000000000000001 R14: ffff8880260c1e00 R15: 0000000000000002 [ 292.849118][ C1] FS: 00007fe006d786c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 292.849131][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.849142][ C1] CR2: 00000000203f4030 CR3: 000000002c660000 CR4: 00000000003506f0 [ 292.849155][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.849164][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.849174][ C1] Call Trace: [ 292.849182][ C1] [ 292.849189][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 292.849213][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 292.849229][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 292.849255][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 292.849272][ C1] ? nmi_handle+0x14f/0x5a0 [ 292.849293][ C1] ? nmi_handle+0x2a/0x5a0 [ 292.849313][ C1] ? __lock_acquire+0x133/0x1fd0 [ 292.849328][ C1] ? default_do_nmi+0x63/0x160 [ 292.849348][ C1] ? exc_nmi+0x123/0x1f0 [ 292.849366][ C1] ? end_repeat_nmi+0xf/0x53 [ 292.849389][ C1] ? __lock_acquire+0x133/0x1fd0 [ 292.849404][ C1] ? __lock_acquire+0x133/0x1fd0 [ 292.849420][ C1] ? __lock_acquire+0x133/0x1fd0 [ 292.849435][ C1] [ 292.849440][ C1] [ 292.849452][ C1] lock_acquire+0x1ed/0x550 [ 292.849467][ C1] ? advance_sched+0xa02/0xca0 [ 292.849488][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 292.849503][ C1] ? advance_sched+0x9b4/0xca0 [ 292.849519][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 292.849538][ C1] ? __pfx_lock_release+0x10/0x10 [ 292.849556][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.849575][ C1] ? taprio_set_budgets+0x32c/0x370 [ 292.849592][ C1] ? advance_sched+0xa02/0xca0 [ 292.849610][ C1] advance_sched+0xa1e/0xca0 [ 292.849628][ C1] ? advance_sched+0xa02/0xca0 [ 292.849651][ C1] ? __pfx_advance_sched+0x10/0x10 [ 292.849668][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 292.849688][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 292.849711][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 292.849731][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 292.849750][ C1] hrtimer_interrupt+0x396/0x990 [ 292.849778][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 292.849799][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 292.849817][ C1] [ 292.849821][ C1] [ 292.849827][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.849845][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 292.849865][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 2e f2 6f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 63 eb dc f5 65 8b 05 c4 25 7b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 292.849878][ C1] RSP: 0018:ffffc900047d79c0 EFLAGS: 00000206 [ 292.849896][ C1] RAX: 70609c4ce2ff6900 RBX: 1ffff920008faf3c RCX: ffffffff9476c603 [ 292.849907][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb60 RDI: 0000000000000001 [ 292.849918][ C1] RBP: ffffc900047d7a50 R08: ffffffff8fac1eaf R09: 1ffffffff1f583d5 [ 292.849929][ C1] R10: dffffc0000000000 R11: fffffbfff1f583d6 R12: dffffc0000000000 [ 292.849941][ C1] R13: 1ffff920008faf38 R14: ffffc900047d79e0 R15: 0000000000000246 [ 292.849960][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.849978][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.849997][ C1] ? ttwu_do_activate+0x200/0x7e0 [ 292.850016][ C1] try_to_wake_up+0x8fb/0x1470 [ 292.850036][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 292.850053][ C1] ? __pfx_lock_release+0x10/0x10 [ 292.850068][ C1] ? plist_del+0x3f1/0x410 [ 292.850089][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.850109][ C1] wake_up_q+0xc8/0x120 [ 292.850124][ C1] futex_wake+0x523/0x5c0 [ 292.850142][ C1] ? clock_was_set+0x78e/0x810 [ 292.850161][ C1] ? __pfx_futex_wake+0x10/0x10 [ 292.850175][ C1] ? add_device_randomness+0xe6/0x130 [ 292.850193][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 292.850211][ C1] ? timekeeping_update+0x3e5/0x450 [ 292.850228][ C1] do_futex+0x392/0x560 [ 292.850240][ C1] ? cap_capable+0x1b4/0x250 [ 292.850260][ C1] ? __pfx_do_futex+0x10/0x10 [ 292.850274][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 292.850291][ C1] __se_sys_futex+0x3f9/0x480 [ 292.850308][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 292.850322][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.850340][ C1] ? syscall_user_dispatch+0x4e/0x90 [ 292.850358][ C1] ? __x64_sys_futex+0x21/0xf0 [ 292.850373][ C1] do_syscall_64+0xf3/0x230 [ 292.850390][ C1] ? clear_bhb_loop+0x35/0x90 [ 292.850407][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.850424][ C1] RIP: 0033:0x7fe00607cea9 [ 292.850438][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 292.850450][ C1] RSP: 002b:00007fe006d78178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 292.850464][ C1] RAX: ffffffffffffffda RBX: 00007fe0061b3f88 RCX: 00007fe00607cea9 [ 292.850476][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe0061b3f8c [ 292.850486][ C1] RBP: 00007fe0061b3f80 R08: 7fffffffffffffff R09: 00007fe006d786c0 [ 292.850497][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe0061b3f8c [ 292.850507][ C1] R13: 000000000000000b R14: 00007ffef2fe0720 R15: 00007ffef2fe0808 [ 292.850524][ C1] [ 292.850954][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g25017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 293.462456][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 293.472427][ C0] rcu: RCU grace-period kthread stack dump: [ 293.478309][ C0] task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 293.490052][ C0] Call Trace: [ 293.493333][ C0] [ 293.496269][ C0] __schedule+0x1796/0x49d0 [ 293.500809][ C0] ? __pfx___schedule+0x10/0x10 [ 293.505668][ C0] ? __pfx_lock_release+0x10/0x10 [ 293.510694][ C0] ? __asan_memset+0x23/0x50 [ 293.515295][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 293.521110][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.527443][ C0] ? schedule+0x90/0x320 [ 293.531694][ C0] schedule+0x14b/0x320 [ 293.535859][ C0] schedule_timeout+0x1be/0x310 [ 293.540712][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 293.546089][ C0] ? __pfx_process_timeout+0x10/0x10 [ 293.551385][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 293.556937][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 293.561796][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 293.566749][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 293.573251][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 293.578536][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 293.584447][ C0] ? finish_swait+0xd4/0x1e0 [ 293.589043][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 293.593640][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 293.598924][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 293.604824][ C0] ? __kthread_parkme+0x169/0x1d0 [ 293.609854][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 293.615053][ C0] kthread+0x2f0/0x390 [ 293.619126][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 293.624322][ C0] ? __pfx_kthread+0x10/0x10 [ 293.628918][ C0] ret_from_fork+0x4b/0x80 [ 293.633337][ C0] ? __pfx_kthread+0x10/0x10 [ 293.637930][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.642717][ C0] [ 293.645744][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 293.652064][ C0] CPU: 0 PID: 1041 Comm: kworker/u8:5 Not tainted 6.10.0-rc3-syzkaller #0 [ 293.660566][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 293.670623][ C0] Workqueue: events_unbound toggle_allocation_gate [ 293.677132][ C0] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 293.683902][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 99 09 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 44 05 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 28 05 [ 293.703680][ C0] RSP: 0018:ffffc90004517700 EFLAGS: 00000293 [ 293.709755][ C0] RAX: ffffffff818a20e8 RBX: 1ffff110172a88a1 RCX: ffff888022180000 [ 293.717731][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 293.725700][ C0] RBP: ffffc900045178e0 R08: ffffffff818a20b7 R09: 1ffffffff25ee8b0 [ 293.733674][ C0] R10: dffffc0000000000 R11: fffffbfff25ee8b1 R12: dffffc0000000000 [ 293.741649][ C0] R13: ffff8880b9544508 R14: ffff8880b943f8c0 R15: 0000000000000001 [ 293.749623][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 293.758559][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.765140][ C0] CR2: 0000001b32525000 CR3: 000000000e132000 CR4: 00000000003506f0 [ 293.773118][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.781177][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.789146][ C0] Call Trace: [ 293.792424][ C0] [ 293.795273][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 293.801609][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 293.807346][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 293.813154][ C0] ? __pfx_lock_release+0x10/0x10 [ 293.818191][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 293.824435][ C0] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 293.829821][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 293.835456][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 293.840679][ C0] ? acct_account_cputime+0x207/0x210 [ 293.846071][ C0] ? update_process_times+0x1ce/0x230 [ 293.851457][ C0] ? tick_nohz_handler+0x37c/0x500 [ 293.856588][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 293.862057][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 293.867441][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 293.873442][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 293.879170][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 293.885246][ C0] ? hrtimer_interrupt+0x396/0x990 [ 293.890387][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 293.896555][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 293.902361][ C0] [ 293.905291][ C0] [ 293.908221][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.914385][ C0] ? smp_call_function_many_cond+0x1847/0x29d0 [ 293.920564][ C0] ? smp_call_function_many_cond+0x1878/0x29d0 [ 293.926730][ C0] ? smp_call_function_many_cond+0x1860/0x29d0 [ 293.932901][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 293.938976][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 293.944002][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 293.950093][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 293.956425][ C0] ? __pfx___might_resched+0x10/0x10 [ 293.961713][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 293.967283][ C0] ? __pfx___might_resched+0x10/0x10 [ 293.972590][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 293.977631][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 293.982764][ C0] text_poke_bp_batch+0x352/0xb30 [ 293.987816][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 293.993366][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 293.998429][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 294.004703][ C0] text_poke_finish+0x30/0x50 [ 294.009416][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 294.015509][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 294.021426][ C0] static_key_enable+0x1a/0x20 [ 294.026205][ C0] toggle_allocation_gate+0xb5/0x250 [ 294.031535][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 294.037532][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.043886][ C0] ? process_scheduled_works+0x945/0x1830 [ 294.049614][ C0] process_scheduled_works+0xa2c/0x1830 [ 294.055199][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.061193][ C0] ? assign_work+0x364/0x3d0 [ 294.065793][ C0] worker_thread+0x86d/0xd70 [ 294.070402][ C0] ? __kthread_parkme+0x169/0x1d0 [ 294.075431][ C0] ? __pfx_worker_thread+0x10/0x10 [ 294.080544][ C0] kthread+0x2f0/0x390 [ 294.084622][ C0] ? __pfx_worker_thread+0x10/0x10 [ 294.089732][ C0] ? __pfx_kthread+0x10/0x10 [ 294.094351][ C0] ret_from_fork+0x4b/0x80 [ 294.098787][ C0] ? __pfx_kthread+0x10/0x10 [ 294.103388][ C0] ret_from_fork_asm+0x1a/0x30 [ 294.108196][ C0]