last executing test programs: 8.418069732s ago: executing program 4 (id=3996): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64c42, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_fuse_handle_req(r2, &(0x7f0000000600)="68a885e9b82ec9bd19f824c610d4d9065609cba469a365527477f3a54201b21825ea3826192b448e6e7e64375e185219ce333214d865de7349f16484f1a6bffb9b7136043b2bddf1d462bb39183e305ec9abca67feb68f8f2d54aecdc1c42b49197da125002fbb6a0bc68751eb2c7e332bd53efe2f3c6dcea176f4a0e838a095c158f92dfb8de416ea0717116dbe2c1e4596526b8cbcf619f2404d661aa2972cae2ead4ffeaa2b71e590e9e16a9ddc4b8e8a87614af0c87ac9c7a72b2c0ec5b384b8578cc9593a872229d74c66c6e559760266ee88d893b7daf814894f90d717916fe7c2a8329a79f1e24daf672ef237af34a3364f08b5020dbc4a2565c1ff4dc2eb6a4322214617c1aaceb7274ba0e3a319aba0ab584319f531e64d347e16dfe51409104da703360b870ad72028d2b37c102bc34156075f675127c4da3937e4d6db081aa35490822626e22c864b72e06af9605405c8d6b49df39ea0b9b18c73ecb1bad7c55c5ca1a38e7734eb6562fc2840ad7b0a2656bb32eb47599d15d6c760505e54e7b79846ea5c544382bc9638bbaa5063720b4f9aff8c44fe6851f010981d579b9af8058204a9b9819e646b3255c4f00f4e3b4f2d2063823f1f212d5e3b4afa68bf3ad195ddd29e5274b7445388ec2cd9700bede6074f49781989321d9a76ba348eed89ade90f0e34e75eae413f36014f55f8a731e1e5937239e91e11748108508077a3da2df8c6db0ea3daa70391e97e860c7b077aa227fa5509844395075016378f0bd79edb9196f74b555ee4925d9f10a1240106f7599eccfbbe5142393d07291fa0fa686ad1fa8602d80213d64050af5448027d963bdf115cf9da88f0e21882cf86efadc1baaf7593b8e37db756237b2aaed1189733b9359e7e88e66066c6a74eb5c53a9723a572f02fa5fa936536b9c62ae1384fe145ea42b831aaf1af8c8e4ffc23fdbac65d3c98b0babc628456512a8732d6b3767a45caae84b0f7eaf03e0aa65bf3a7b46d6c9d5559337a492aa42c08730bd273868b144c06ab811a28665521d7ee1f61b73746a777b4ede146f184067cee367529d67e8b5d6fed8500f981698dc2cbc6fe101634ac9cfce2534149f26da2d423f3e9d4565e5f5a1eb2d7c0949d3151ee8ec13a62fb46fcf5d8efcb46e6d0b265e126ce63e6cecb5506d1ab1a16e453a6c0cdbf336e85e56f8d0fde22adb7b29036bc86509bee7e196372f56b0aad4b4e622ab13f9df434908e70c5e97c21930eee2d8b729df786c8a3cb7e61b958236e54e10852fa981224a81caeae1c17615bfddeaad5058103ad098b4a4851081a7b67905c22232b0a46b455650499179b5b7f0ec90b9c6b763a49b3aecb2ac04de862e0a8c6d6c45d72f41795c5d9473b0152824264b6a992ce30e13d73f3cf6015f643214c08b0fce48c33b6ef2063321dc908275640950c887c3ff6070b25a7b7148d41b1e02260fcd43b49af89f0440be61f3e7570f79664a28d13ded040412797ab2d27de4b8b348ebdc4a69ced7aca0818f358fd72003184c679782ff5dfe64c3fd50fa31ccf1aabfe79ddfcfc78c5e0a9ecd1a7ef8e36f005b3b94fa67e8d9fd9962d532cd7fc9f6fedfde6acd545a36caff5d5a4444bc81d7c9d8758b229053a82ea572f5525d944f08067b0b2c13b50a0599534d61a4dc7bda81687e85ce2ffb6ade9dcc1535d5dd34cc6e744f98dc48a37ab130e23c984dc54b15bd14ad013c6ac8854c29ab574617fe4c2f4061e015e30ad372b231a43cc5b00706ae17343b2e85f490fc888f70b1fab42b0a5ff39fc53f7f95f8973dc30d9eddb29905961b8e112a31a62daa6c629debf9c21fdde3cc662d70c503bdee2a5a331a5b277837497a8ea40c009ce9686eaa3b3c8b2acf834d36065b49be3df9c94bb4f31024fbf6b0cea54472208cdf566666b08bdcbca337f91a2d0142c6807a0c8c376d6f7de986da3d1e27739f8215c24c971777330f58cae4b8ad45f048b2e389b6406ddcfab3bd19a1d3a9363636e3abd9450d39d69b923845cf7845f0664bb57738efb830edf7aa3642a2ce96a60c9181f18684f519b67f525c553c9defa1135a7243e04272be0a49c938f6e58764569bf785c8564a40f1d656534d61bd8073048e8265459c8c05cd340c8f1e97261cc67c01d18b76962f61853d2405c27c6bd18365c5c1f7e013f14dfd8e0caf18936a99e236d554d89de64168971f1ea2ba7ff01a5a4138bbf4a0168d1a4bbecde33f834bae82a413bb971a2464289564ab8aa0cd4f800e4d045f2e751d300ffc7d818392aa500011873d0871910d91b0e1e7f96ff7dab55df8d770c5edbf2f8e5d3a995146c4f900408746f8a18c8619d4b611da49a0e4018e2d9479906a078a803a47cfa35cd1d3c021ee4b30c93594d210ad326e34186883e305a70625b02dc81371d7acd2bfe6eb19469dee63910de57b7f9af96a27e72649595b350af8bcf56d813d434d9cb702b6cb9102cf5b0286f6ef9fa46dc94fa34f6aa55b43dcc8bc86c98887fe98d9fdaaa9bfd7108715abeaf6777ca01942bb65376271f06446cc04bddc09307338c240999bb2d9125c2d306bc65d0f6aa0f2393d8770856b3de32c50060d5524bb7e36544342ca42c56bfa73ce7a3487450034168ad65eecb07f0b8e30827f0f94459b8ce182bc0db2957327af20bb8a31b7b4e764d42ee98b82f1b5ed2c5df836130c955ee037e249d974a2c0aac153ad0c512430511026b1565fe0d15d96d6ea5cc7dbc27359b5bc7d905f33c6642b772842527b1a973f9c455ded69e5962d22859525cc3770223c552572efc133bcfd05029cd62ff425eda4fce2b29a42251c9fd39f5993e7ee826335db6e37f70aa668e66001d739b306dbcbf429763ffff19562b7a095c18f823ff57681c975f64310305d68568d1d2897ad718b6c8666989517ca63f0519177a13e48ae1e7bfe7d729b8980713a3d68f824c6342ca7405c77588c8af93e15de4271beb55b99e12a78b242d361e9f06f8be7fc5549e0caa6b695714a80a8db4892026143f28a6f139593891aee31c4911d3f655e7475941818091d7e83f2c1a3fb731c102e6519ece62989bf9a9f05d5796cc051535ed50f4426759858f684c24bf71d20615bd3db498b4cf9027356233e0132f993c675a2b420b3e378ac4811744ebdd534aae4260a065b138b56fe7f76ee86c9a4ba33fd744c0b4e52a60dfaa3c6d73c538e43b33a344d2fb39b627ebcbaf58ecb09dadad8472190cb0cce8517890e525d9e9883d49b09cdd655ef5795b1cd2354895ce15c56de3bdbf79af29417386ae5947d9ce1fe62ff7ef90e86d5327b8bebab32f1343e2c9c5fdc4cc46fd7c46aa1f5e6e3abd20de7dec5f6d2651c0a46b3e473eec5126229f3f8ffac4a825f69056333861bfdf7f33ae4ffa75d4fde7a8465b331642f2f3bf4009df1d18905c25def16964155909e03ef30b4c05b891965531088233a7ccc79ed5461dffd2b3a85daa3e5335aa15be735a6f3cdca27afaf60f02976c66ccfb51025fba665a053b51e083d679b9598125237db133a2bda332cd10722af553b4b7da0d7e429bf318af867405ea87c5c5e8967645a84a824c33a78a07b1606b0796957e01f1bfecbe2f680f32d2ab23c380aa913d2f4e2f3f88ac12e290a67414df892448d18919e67017651e3e93cfe2ff1d53fff76c9c2bd1aa11d607147f6d76d7b71ccb090a382f6519be7943003d602d3289054014aaaa1f77c46538293a95e5826c7eb9dc3bcba27941f128ac8a711119749cc0dbbff6bfbc89dd661e844cc6c90d595edecf672e335ccfdaf90762179862697bd2269ae3b8dfeddd089cc19cd73268f10d4b3567d993a761ddea66a4ce049dc42752b50815a7aa4a53204c28e39063f1e1a2a0e8495bcffe14b0189a1332b0bb424c949362036750a199ae3f6334e2f4a5a4f4d19c730ac5effca51432a44a47b12906ff7ab66d430c552e34ba35b77b50980a705b22bb81f0933df9c95f14205828268994513e10e3ae8701c1d6280da279edcb0cb34741de2a84c78093303d24648ab0efa9def379fa43dfc78f6c6a32d4100cdeb41ad90fb9249dc383cc23f6bbd5dc129e309250b00a487eaa1aeb65ed94335dc07502158f998b5fdd8851ef25d099b73fafd5e56b04213a5ae7226e3507cf8ddb6f0c5d0e1535331c34121d99839641773f98a0f7cb2f5d96deb025f184081d76ffcb5af5fb2fc229f20c5c4c9373542abac9011c7a6068762994547d85ed69d4862a7d026f469db88d4b9928fed4ff8c4ec3bd54b9f7b82cc20de1203efef8775d7131e08cb98c68ed748bfad5fc54cf1ad78d8dd2ec323176fdf00ed34453b061820180af9d7197d8317547a70c07c788887c41959cb32fb9195caa09aa600d0b979208d105b2f578e6b0d447fd3d37a89af696049245c22f2456d4ebffb6d931a4b86191b92470daefb7657b9a13901486e1a64ea39eb442b8e22524e40fe44a5456d05a9b86aef9492aee99a715ed66e916f418bed33167a237603c36b8f6d27fb7e589572132c7844e40df18a594efef79d3e5cd52ff263f4a4cfe9d55baba3fd50024fdb863d6f25bd010fccd83ae2806f0db7e9b41e3cf4728ee0cb446536654722e93d5043605534b3d4177463aa5afcac83854f7166c1a00573131ce6748cb1f6c515a22a895337b04f6dde555650df27c64ebf459fbbfc062ae8ffb30f8c2f431a0f0cff69e50a516e8ecfefab5a24ea9932dd588bad31630f168d7c69d3894dca9cf64eafc66f13d6baec85eac304048343a95ea1e8ba4a6e37048fd97979cab3636900ae04d5cd365b5231c3df9e6964cefdceb2a87c1d6d6bdcf1105191e9f1702b2d59ae109afb8364df52d02ddd21c71afbb9bc318b9a65a5c2f45139abc9851046e8c06c2112be096e94b7afbc450e78d9dfa585e4cbecdc06effa89d70a8501e231cfb2029103b854d0bf0df48a2a8d24f3ce0ef036dbd4286c4b79f7c3a5c2492d2f418c1a64b641b39d1589368eebc27a53a5b1acb1de75297b3c4fffc54890a34059e9799a87166073f964fc9e738d2ce86b883216ddcb1b05a09223f8dde00b6475333b6d949c431153c559a171a634b1cd59280bd722877b71295474bbb2122e3d2eb2f7db69b83f2f28c94d59271cb1ca4ef35e30b398f8dbdfad49d2709751860a0fab38b208a256a88dd68ad8efaef21a1271517a61ebea98408e3c70d60722fcede9e46588d46afbb5346bccc3144eab30fc541e48836d4e38511ea956b6f0a16f7de03f626db182c015b8128c560f2c1c705113ba2ad0bb5e9c1c17d5460d4f9604ee1474fa5f6400f5d93d705421f0539f585d9a3dc4a7bce51a11c7a2b7a96185b232c9cb9d05d4f6cc4c6ca33304f799d1ee3d31f5bb0b49bb64076e51a74c0600dd6cb6b999252fb7ac85481033bec5463b13c076394072cbe2b2d9e97b451a51c05b7a13687bd8070ad48de365fe8fc2daf19a443d02a9f4d20b79659160ac6f718d741804ae93f62273c223a031cfee4ff66a35e43e6b67d27a546209bcc1b397146820921e6c9f623c9357a0f30f5e483e27e560a79ac5f4bde9f060a8d250fcc496d683cb2dd6c81e177a32037b564e3912222588bb831b83222825562d724ee15c97f091d1afb08210f15ee8640db9a8ec2864f639265627622335777eb214f34894357a5c6acec041636abb62f60e7616e450e42c2322db80ff1d73b86ebb3dc81af67ed7d0c3cdf92e421f1748b6940377568af54db50cd8c445c2f1087695ecee4ab984238b099d432d94180ce0d7f69db42e3701f97c474aa147672a26ea11c4f063cda7bfa0c1da10571942be0bd571e70e4e21243a161a0dcab4c1767817238acbee7c7f35b12b12434f1198fcc9c417c9f7249972cdabad4ab8e65eb3efdf2272b1f894cae5dca4208a9cde9cc50a448aec4caad6b1c6831e979ba16981fd3f121930faa67b33286c7004d87845b02af886efe8e65b362d29dee50e8d583aeb72e1e29fcd4d712b8396d11b37bd3c354a64523712181b010a1116065c0f84a64b810215f5198c35b6d8e91400ddd0e4b3b6cd30d5f33e4144afc88ed2d102a9854fe8e6372a3c2019d7d6b73eab1653479d71378ace9a8dcfff46bb245596477c4307da0b0bf4d0c61414b29176984cd6d59bf8d116ecd922723c81eb275aaea9f764824d9e379e30afc4b464bec971e57def6f62587b4ba6195c1c8998db46ddda8a8dc76d1b01a79c930ea86dd22ec4774283dd97686718442c7e5fa652f93781a3b9e183015a6280e3fa1f2a291fa54e94bb7ea46111ce724ae858b02d762c81f71128ca17c512d1629d4badbeffe906fb4c741c1ca3c4dbe1925c904a6ebeeeb953ab19fb77ed082edb78b34c7956eac46ce43f572dfd472de573685f4a91d9c68eca69c91e005859542e41703c410175cffff57a250807d5bdbad751ac129a8eeb58402541ccaafe019105069b65085b7c186f4f825d9c16c813c69ba824e75e03487c2d72f1cdb8ffa74cca8c7092993f4c2e417c4f8839080b35ac129941946c4a3471983c2880a298df883ecacd1a40134cbbbb56af5b028c8fa53849c641bd5880aa8a52eecff01000ef664c2b8f87668ba2ee02a00338eb96a88ba2f8025c1110b4fc8f2534f464ed5a7120497b1ff13c2448c18ca7de0bd42a8ced4d0e458d48c4b83b013046bdca973bb44db6212732c7e279e457dab46f288ade557620fd9f2e5ff2d664de5c20a81455d3882c2156b73620c356d2bb47e5cf2b4f7f8f52c0e387b88a15caaa7dacda36ee74ad3090fcd7a5ac09b2d62b808255720c1c4b331de6951ce04e037af25a22f27375369e6d4f10a1b97b59dbf0797d57a828c9898ad3293ea75e75400bd60c772e601b638d278417c404ff2bf3060d82a89e48c863f84538ac39d5ec2a5fc956826a5f8885c64804a75373ab890d8eb3b3516a4f7cc5833d5689ada2d2ecd5cafdcc7bf31e7a89a9a9e445a6485ba953f58a835b6c78f21762a4af83d38f514ef0d3630df9d77ebba7102bcf8c047884cbc8ae38ca64e896411c9cd556100accbc60adf8846ac1871dc9ef891175064ecb7d8e42447f8f1ce30038869dfcf220d943b8660646a41f54b474bf19dfa5f99d69af22b129c714bd760cd4678b0dc00aee23b3d2a209f3627e7ad7f3c96c2e0fad6758560fa908494550951b698940ce702857d6e2c286af4cde5dd9a148ec462e8f32065a573f7d223ea645475431b49c5810b7781a47141ab6c48aadbfd2f5f8c9d4719d8fed7bf2566f6834177352a883c2fd7bf02af6570137983cea5841daaa74ca4261360638688a36ee15da3fcbb0b9d1ca5199f56a50494af7d423ce4648a9761038329941310032c8fe428331b8c4d7bbf13b1f7dea5b966cc0f5ab3b07e4a635ffff6e4fffa40e56d182c4ef0559e4211443a8dd9c321d9fd64c8a14f15872e75991773dcadeef5da085c622093130472f9245de96d11230e4f48cfa647d52856be903c9a1df203a1911198e95d37b82b67ef2c94a376144d80c158836f86c0db33a4a20391203b817124f36e03f3adfe400d30db4891ff9cf0f71bc1f46b7d9b927550b6d86723f84c10877854678371dae12387a14657096d3b1075d4b986ff23001ce9863aec18c24703699c6ac17399990422dd6f1bdb6139f9ddba1b98288e06909c20391cb2f6dcd887917c3eae42aa1601458f3a435ce02f9554b8cfaf8f8f86aba5c1f476f0283d9b9c5d10a380c47987d3406405ba6d0dc0a1cbd2cf49d74f56a14ab6fc343600ab39daaee3aa752e1eb78b18d1a94d43f2e722f775e6add46706f2ee35ad408f6081fc30c80f375bce4133a98b19600498d75aa325e8236f5627a50738fe5d7eff86e54d13113092f893de3a8cee4e9c7c760486419078b8faea0477c11847cb370bb533d94d0f439a95a9709f6d29fcd7924aeb9ecd7011b844276122aa8533a12159d6be91debd9ba77561839123aa79a36704f4bdb242f1cd19f6340a1b1e4cb3ffd926364ae8c969c3d1aef8bd1e79eefd6552f72def0e739408b0e7493b7e5b2847c09382d4757abb4daa7759c5cba7f621b2a615ce00659a057d5fa6a6b1a0cb3a7321d13af3f4509cf2a650b5dbe2b5360e7a40e9e07d5781dc3ae4f649ef788bd47fae4863cf24195b8151e1a7f8dd01c1440efcb6c1256d7674a6094e9003c711153d52d9fbb670307292a51af8e200b3f1a44b6cd16ec38db34d7b91e5531ab6d6e00214108e721792b10efc4ae9454d0af52f8c39784c52b93d3ef21bb815ca7c1d517c1bc302db89b997e0bf392accf1c0ebf0898b8378fbd04a8fea97bce4c32b5a7fca6736b16a792c7b7749af944ecd79db8eab17f2942a0c07b15b936be4ea46e567e26777f5629e8dd374da0dcbd84e79eaa54443d2eb2b216c9bfba55f2808379f7330f8a8030a30e9d8c4da36e338acdc9db39abafed21a332b68fc93c99c6f46bda472b9701c7a6b27cb5e743ebbc12ee0685f39aab95146a429cfa87f63c74f9833e31533c2b16588a01adb0f4b689cebd7103759d97224368c436c5a0f4146fc69c956a43b5d0760b357a09ce8f89bf02d6159b02d4178088681786b2b1eac36737dfbc10d1d5db722638d2636a35fc68ba64d935d47d7f8cdefc33813e617524af5a0fc302614122efb775185586f09f9b01c191a18ddef023a044d8e2d2433169dd9006822ea8dbca50832828125d2a0340ee979b260c55dc0c5e0c60cb9c837064031a7820b379d23e39ce431eadea37fbfc19aaa42064e271d0f73e4235a44b26dcfc3be6c583ac91571e04c5f0095db7ddca52c89bf9655b8f37ee0223e2145bd64787581372025aed5ba69893df1ae8ed7bcd079454d01a95c082484ff8e611d5823a84fabf621fd978dd65c57491b2d51b21edaac48349cb084c523ea954e6afd25816845e832583a5b75dc4b79c870fd55dc2942d4d428db8fdc4837e2d3b10e8b10f7af1700c1624ba9762e12ae62f20bfd95e88ca112d58905c879220cf82e3a5524d8b912fdbfeed50c84c8bf9caa4bc02adb244339ca2a810edf396c42c13413fbdda3f4df4fb9609be7c0caea55914e75044493850b47920f97e933e61ce6c39ca51367b6f56dff85061af1437f23c23b21021941351900f4ecba2d3956a259e46dd33fe708fffd6fa6d24082b75eae56283cfdf56ff0abb496b1ff55a9571d763954e52331ce0c8b3a30b670ca6c29d114a20410f5ba224cf0b4e6102d658f44545219daf8d5f2c9c842604d487a8f434b51554906cf2d4a8d50f11e38819bf79e867f17d55c6163d7844f4c3c1759acd0427bfbf5aaa13280be33398c77c003f4a04812e39cbebcb1971c7e6a60d1b4217ebf80242a9a42a91227e224a37085360267b15e3d25f19f895a66d1a05e8cb01c266d0c0134d1764e1f63d7075321dd33c4df21c2c5723b41931c7003ac1b815e1c5f0a6e66960e64bc8bf872ee069868d1b9bcaea6589b3d36c64364bdbc6994d69fc9db8551cffbbbed73a537d56a1c796ac68e8809ee9dd746536e7f49e6a7d78c763524308643ab41ebda493c13ce453077f1157d55cac0e9ce5cb7e3d4f91ac6e93e88d4c34071e7174c78606f3886a1f526a501f07074a7aad7a796927b6f284edcf84c0e7baf301107e6e87e1467c72a532f2edf68cecdc4640b5b8ef43f7395b57fa0841d42b4c5b19990ccf6f151b65f34df232e4d0af55cf10651f64aa41a0821bd4a13b475a112af7daa427c570dfb86f28bc43f7894437d1cce6a9f173623610f86edf3578b5209a474e37561c881dd804b3fbf1cb9b43195f5b15ba06ffd0bfd550ff2a1a880fb5b3382207eaab4e494a9bdc6ae96f507d7933a7aa742c2771f7aa7356500998896767c92958e9fe80a1a8f98653934cf13f9ae554395489c68435bdf997b66695ceddb872646d7d10bf1502e01d33a504d80a65450770901ac6788b1ddcf92f85cf63bb00f34e9c38eefb484f10ada8899628879bcbaf51b92bc1da9ca4904bc156ad26378284b4b9f1f4ffd678ec05e0f257b0ad6b7d508c5dfdfbd7824e2da44b073187042a241b9d13a8d0c21ee83ad33d007e60cd9ab2594093e7a6f85a145586ad142790cd2ea00ab61fdef3156face008b82273a4513427de377fa303a1ca34d81747498873894d63a2f6ee4fedae7f0de6a0c6ab35d3f7e784b9479b725363dc43f3d2ebabd94718d5d0279341cdaf30244a945f68da7d09feb52077a3edafaebd8e568b316a9d40d07055f2539b39ce99e97c2705e583af26f6d8c55ac46be8e77065abad8a9d677509c2782ebbb093a9195ac6ddf6faddc2673c140e8b5526010ff1e629cea9e4ef5418c4f62f1cddb7aeab93b938aaba2f79641b0f3b6dcf3404a43ff0a2f9364fd38c94da3bd415edaae4c7cd2e3cb90e842d8fc71dd6aab81c8cc535d90a0c98cd4dcc5ae3eca3a02aeca7704fa4222a559994ff2e6b971fc0db1db9b9508b1e952171c34c1c8931f1e7259e065b0db7205d519d40f35c7b6d55668257c114aa7db058cc811e2c01729f4380c56d68bffe10775cad0d84195c94049d78b8d896ea88680091c80e1de475feb05d048e72f70b1f7de5e564a10402f378252e649332fd02348a9791221fc46773a049d2c995a0f049a1d28feb1207443bc9d1856ab249e214a5ea25ffe7512570fe89b781fd09883b66edb88e4467941179c365c731b7b99d32330faa3d2763edd4420034f8eca23c5de83636a19d3c355222211dc2c6655aaa10c208889e7ab43650f2cdf64a2253a7e4468a4b17f576d2311cc632292257d1831bb228bc979bbe5417d981fcc39bceaeed96eeb725966b97e342c80e133b27b5f752cf2294397b83fd2fbed0f2d86062541bb6b6a12782f63176a3263e43e501a0c7e8cdd1c480539896f8ab64a3c3c295302b96bad0947e3e2acee65b5a89bd8bf4e6f7465dde0ca08f9f34acbd874edc25beb1949ecb13146d661c6acc5dfead9714b86437aff355e446369edc7952bee87b9837f0b113ecd9a7e58e9ec8bfb920a1bd4d1833a1664eb25dbc4588822e19c2c2fcfec8176f97a9904b45ea97020312a3c06e8e83b22ae7a95b973ce0e08df0b868ce7b2522709afb403d662c722fa2c8a321c8f14927e6881139b68308426e243bf5419dd5fc906e78ee044b8d6fd511f5fc71bff383f25637bdbd07842ba41ee6663593336be256e2e2a89c668c4272705e3125c75cb6d30d5ea8e6ea0c06ff233732b1c3d0bc43bb2eac864fff007e73cf543c04b59422fd4c2a9fb9cd54bdf3aace9cec65d4b4f658807762c02cd3070a74c69893b463d579b620dd5cdff4a10fbe592b45a10107e8da1070ce1ce45faaf9c8da44bab7a9bbcfba6a0afc8b4acc08b4add3949ef32fea95642187bf290d5e29d3eafa2f423bac5cd915c4a65ab5d10c4840c71a5e5e0d8690128fb17359f3568a5692c90e313b5f381606161bf58cf316f517e9ede62ede130052583c19085deec8118b44f21fe6078436e7046d034e6c0b61d8acc723dc72ef938", 0x307e00, &(0x7f00000070c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.293132994s ago: executing program 2 (id=3998): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000ff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) 7.166662574s ago: executing program 2 (id=3999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000ff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) 6.984080709s ago: executing program 2 (id=4000): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3810744, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@errors_remount}, {@noinit_itable}, {@mblk_io_submit}, {@i_version}, {@acl}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$eJzs3M9LI2cYwPEnP4xJxEwOpaWF4kt7aXsYNO25EIpCaaCiplQLhVEnbcg0kUywpJRqT72W/ge97EE8ehN29x/wsrfdy1725mVhDyuL7CyZH5roJO6OZqPr9wMy78zzPOP7khieCc4c/vjvb7WKrVeMlsTTSmIiIkcieYlLIOZv4+44Jd225fOJZw8/Xlxe+a5YKs0uKDVXXPqyoJTKTd39/c+Mn7Y/Lgf5nw+fFp4cvH/w4eHLpV+rtqraqt5oKUOtNh63jFXLVOtVu6YrNW+Zhm2qat02m1684cUrVmNjo62M+vpkdqNp2rYy6m1VM9uq1VCtZlsZvxjVutJ1XU1mJUwq9OhtVd5ZWDCKEYvXrngyiOqF4zgDwk6saCREJHMuUt4Z6rwAAMC1dKb/T7gtfaT+X3Ju/99JPu3/dz+535r4YS/n9//7qbD+/6tH3rl6+v+0iFxp/58OWf35jujG23qT5Ev1/7geps5f08Z69prNopH1/35df/+0O+0O6P8BAAAAAAAAAAAAAAAAAAAAALgJjhxHcxxHC7b+zxenGd6xUc4Rw9Pn9dfG/Tumgv1RzxPDsbi8Imn3xr1kTsT6Z7O8Wfa2fjxInBZNjt33g68zDu48Uh15uWdt+fVbm+WEGylWpCqWmDIjmuTP1jvO3Lel2Rnl6a0fk2x3fUE0eS+8vhBan5LPPu2q10WTB2vSEEvWO+/rY+ek/q8Zpb75vnSmPuPmAQAAAADwLtDVidDrd13vF/fqT66ve78fEOm6Pp8OvT5Pah8lR7t2AAAAAABuC7v9R82wLLM5YJCRi3OiD5LRyscG5SS6VtgTku2+S075Twge3koHDIJ/pKilukJp+d8/HOXMwfqHM+e4RKmaEmfcm9VlfnvwtVG/HJkf9uuV7BP64L87z6OdOeY/tbc79PVe+oKVDm0w9lofHk7ikp8+AAAAAN6moOnP2O5ubNTzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNhrwGLDkVT1ObNRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6LVwEAAP//mxn/6g==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) 6.204918113s ago: executing program 4 (id=4004): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, 0x0, 0x800000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x400) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x2a, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$wireguard(0x0, r2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xd, 0x20000}, 0x20) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESDEC], 0xd) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4, 0x36e}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x20) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502) 5.607837981s ago: executing program 0 (id=4006): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 5.479796202s ago: executing program 0 (id=4008): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e6d0d02"], 0x70) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)=0x1) rmdir(&(0x7f00000000c0)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xffffffd7}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000), 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f00000021c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 3.695028158s ago: executing program 4 (id=4012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x400000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r4 = dup(r3) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000040)=0xffffffffffffffff, 0x5e) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0x5008, 0x0) readv(r2, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, 0x0, &(0x7f00000000c0)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 2.653105163s ago: executing program 4 (id=4014): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x30, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="15"], 0x6) 2.605965657s ago: executing program 4 (id=4015): socket$inet6(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)="8b", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) 2.505711285s ago: executing program 2 (id=4018): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, 0x0) 2.397235644s ago: executing program 0 (id=4019): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000019640)=""/102400, 0x19000}, {0x0}, {&(0x7f0000032640)=""/208, 0xd0}], 0x3, 0xfffffffd, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000080)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x88, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000), 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="40e47dcb003e4932a1", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000000010000000000000000000000000004300001802c0001801f000300fc0200000000000000000000000000000000040000000000000000000000000000000000180002800600034000030000b00de0c06b528f6287daf1230c0002800500010000000000983a3aeef3f36818ee4d14bf131c998c0c15e6a6f7c11889d1a0ffee414e9459b2ed788cbeada144743505067dc1250577eb33eeb128cd5c319a691d7468df4de30e7a79034e4f1eb077772419806a882bdcaee0b2ab7e799a1d07b8998a286e097384e5a767516321a7ed56"], 0x2d}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ad9925}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_TTL={0xfffffffffffffcfd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r9 = socket(0x1e, 0x4, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r8, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.136898265s ago: executing program 0 (id=4024): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa7, 0x0, &(0x7f00000000c0)) 2.009085676s ago: executing program 0 (id=4027): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setreuid(0x0, 0xee01) 1.674631483s ago: executing program 4 (id=4029): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e6d0d02"], 0x70) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)=0x1) rmdir(&(0x7f00000000c0)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xffffffd7}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000), 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f00000021c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 1.4651831s ago: executing program 3 (id=4031): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}}}}}}, 0x0) 1.448855702s ago: executing program 1 (id=4033): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private0, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10200}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000011c0)={'ip6tnl0\x00', &(0x7f0000001140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 1.421442564s ago: executing program 3 (id=4034): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000440)={0x0, 0x900, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0d0300000000fdffffff04"], 0x14}}, 0x0) 1.368890378s ago: executing program 1 (id=4035): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000019640)=""/102400, 0x19000}, {0x0}, {&(0x7f0000032640)=""/208, 0xd0}], 0x3, 0xfffffffd, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000080)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x88, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000), 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="40e47dcb003e4932a1", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000000010000000000000000000000000004300001802c0001801f000300fc0200000000000000000000000000000000040000000000000000000000000000000000180002800600034000030000b00de0c06b528f6287daf1230c0002800500010000000000983a3aeef3f36818ee4d14bf131c998c0c15e6a6f7c11889d1a0ffee414e9459b2ed788cbeada144743505067dc1250577eb33eeb128cd5c319a691d7468df4de30e7a79034e4f1eb077772419806a882bdcaee0b2ab7e799a1d07b8998a286e097384e5a767516321a7ed56"], 0x2d}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ad9925}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_TTL={0xfffffffffffffcfd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r9 = socket(0x1e, 0x4, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r8, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.268219726s ago: executing program 3 (id=4036): r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0}, 0x80c0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.122787478s ago: executing program 3 (id=4037): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa7, 0x0, &(0x7f00000000c0)) 1.067850453s ago: executing program 1 (id=4038): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x1517, &(0x7f0000001780)="$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") pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) splice(r0, 0x0, r2, 0x0, 0xfdef, 0x0) write$P9_ROPEN(r1, &(0x7f0000000300)={0x18}, 0x18) 1.009420448s ago: executing program 3 (id=4039): socket$inet6(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)="8b", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) 866.942929ms ago: executing program 1 (id=4040): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 777.089936ms ago: executing program 2 (id=4041): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}}) 719.809541ms ago: executing program 2 (id=4042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x452) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r3 = syz_usbip_server_init(0x5) write(r3, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec90823a", 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0x18) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000280)) sendmmsg$inet6(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0xfff, @mcast1, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="01fff52f904098ee90b257f4e63b933e31a92e0b3d3b72b9ea8d47564ed5a635", 0x20}, {&(0x7f00000002c0)="a3b17c443cabe49a6c7ddbdeadb5b5231ea7970bdf103c66325609e7e5e55280174464823234a1b1213741a3c1f534e36ddb45ca28eb7bf166f704b4a6728fb3aa32b07f7971bab54d163b7ae5729a47208d963a417e816303", 0x59}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000029000000040000000000000000000000c204000001010000540000002900000039000000290801010000000000000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff0a010102200100000000000000000000000000008400000029000000360000003b0d000000000000c2040000002d010500000000000000000100000100000100040181f7508aa7a1a7b2700d4ad04b1beaecaea1b5391cb251dabf6ae37e2a40940c01ccce59a06b97f59563798f6d7088e958ac982257bdaf9e2d9919cf22bd00000000dd8eff835020c02ea19f9eb9aa6ef4706402d7d4"], 0xf4}}], 0x2, 0x4008800) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 648.327467ms ago: executing program 1 (id=4043): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000080f600fc0e00"}) write(r0, &(0x7f00000002c0)="75a33cfa187943c188a4af529c3eb5ec3853012fc2215239fea9c75d3dfbbaa05f7989732f2356219489e03f2c556b6f8eb4e0252113fd10038458b8d7d25721dd97c475ce74153b55763b5040615a17c4f039db855a5df7b82cf80648eb0eb5240b4655e2e51b62d02424595f45b6b8fccdd6003ec1a8271348cca0cd2c550bf92a413c14e87040094ffb5ed54f26cb1b1b36c65cf0ccac2aab455243a834dbf433bd1e421744f82130b134d274b16e85ae36f50110c4f142267012bb0a", 0xbe) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) r3 = dup(r2) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 512.821718ms ago: executing program 0 (id=4044): syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000700000000000019078ac1e0001ac1414aa0c00907800000000450000000000000000060000ac1414aae00000010094040000863800000000000b4d93c18ed4000cc1e3d2f87550e046c9db000ac2ae024df3c94c330009047754f357502a00087a53787cbb1300000000000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x545c, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 71.155964ms ago: executing program 1 (id=4045): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x0, r6, r5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000002b00)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=4046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x95ee}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}, 0x1, 0xba01}, 0x0) kernel console output (not intermixed with test programs): x89 has invalid maxpacket 33032, setting to 1024 [ 1070.843740][ T5456] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1070.853378][ T3826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1070.867093][ T5456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.877248][ T3826] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1070.896742][ T5456] usb 1-1: config 0 descriptor?? [ 1070.905603][ T3826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.918659][ T3826] usb 5-1: config 0 descriptor?? [ 1071.319294][T17966] loop3: detected capacity change from 0 to 4096 [ 1071.328138][T17966] ntfs3: Unknown parameter 'É0' [ 1071.338099][T10192] Bluetooth: Unexpected continuation frame (len 10) [ 1071.695857][T17949] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 1071.718339][T17949] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1071.750423][T17950] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 1071.793541][T17950] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1072.125767][T17949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.832970][T17949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.852304][T17950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.888283][T17950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.898506][T17949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.928845][T17949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.944094][T17950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.957856][T17950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.979229][ T5456] hid-generic 0003:0158:0100.0053: unknown main item tag 0x1 [ 1072.990068][T17981] netlink: 'syz.1.3619': attribute type 21 has an invalid length. [ 1072.990417][ T3826] hid-generic 0003:0158:0100.0054: unknown main item tag 0x1 [ 1073.008945][ T5456] hid-generic 0003:0158:0100.0053: unexpected long global item [ 1073.019858][T17981] netlink: 'syz.1.3619': attribute type 1 has an invalid length. [ 1073.020028][ T3826] hid-generic 0003:0158:0100.0054: unexpected long global item [ 1073.041307][ T5456] hid-generic: probe of 0003:0158:0100.0053 failed with error -22 [ 1073.057402][ T3826] hid-generic: probe of 0003:0158:0100.0054 failed with error -22 [ 1073.058189][T17956] loop2: detected capacity change from 0 to 40427 [ 1073.191192][ T5456] usb 5-1: USB disconnect, device number 75 [ 1073.197474][ T3826] usb 1-1: USB disconnect, device number 95 [ 1073.346361][ T3628] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1073.502423][T17993] loop2: detected capacity change from 0 to 4096 [ 1073.509778][T17993] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1073.534478][T17993] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1073.592232][ T3628] usb 4-1: Using ep0 maxpacket: 32 [ 1073.629005][T11393] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 1073.715349][T17997] device bpq0 left promiscuous mode [ 1073.822685][T18003] loop0: detected capacity change from 0 to 512 [ 1073.851540][T18003] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1073.866746][T18003] EXT4-fs (loop0): 1 truncate cleaned up [ 1073.873295][ T3628] usb 4-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 1073.887807][T18003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1073.907285][ T3628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.915742][ T3628] usb 4-1: Product: syz [ 1073.920498][ T3628] usb 4-1: Manufacturer: syz [ 1073.927981][ T3628] usb 4-1: SerialNumber: syz [ 1073.939650][ T3628] usb 4-1: config 0 descriptor?? [ 1073.986822][ T3628] usb 4-1: bad CDC descriptors [ 1073.995053][ T3628] cp210x 4-1:0.0: cp210x converter detected [ 1074.223407][T18007] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 4: comm syz.0.3628: lblock 0 mapped to illegal pblock 4 (length 1) [ 1074.286001][T17985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.452881][T17985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.888088][T18006] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1075.311456][T18011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.341449][T18011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.991286][T15196] EXT4-fs (loop0): unmounting filesystem. [ 1078.027616][ T3628] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1078.051855][ T3628] cp210x 4-1:0.0: querying part number failed [ 1078.067204][ T3628] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1078.113736][ T3628] usb 4-1: USB disconnect, device number 93 [ 1078.159318][T18025] loop1: detected capacity change from 0 to 512 [ 1078.166313][ T3628] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1078.180027][T18024] netlink: 'syz.0.3633': attribute type 21 has an invalid length. [ 1078.181958][ T3628] cp210x 4-1:0.0: device disconnected [ 1078.196604][T10192] Bluetooth: hci1: SCO packet for unknown connection handle 1032 [ 1078.234070][T18025] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1078.280057][T18024] netlink: 'syz.0.3633': attribute type 1 has an invalid length. [ 1078.307865][T18025] EXT4-fs (loop1): 1 truncate cleaned up [ 1078.313700][T18025] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1078.544153][T18021] loop3: detected capacity change from 0 to 8192 [ 1078.554242][T18036] loop0: detected capacity change from 0 to 128 [ 1078.603232][T18030] loop4: detected capacity change from 0 to 4096 [ 1078.758765][T18039] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3635: lblock 0 mapped to illegal pblock 4 (length 1) [ 1078.774353][ T3826] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1078.783014][T18030] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1078.843657][T18029] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1078.861085][T18040] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3635: lblock 0 mapped to illegal pblock 4 (length 1) [ 1078.933222][T18021] loop3: p1 p2 p4[EZD] [ 1078.968988][T18030] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1079.192297][T18021] loop3: p1 size 16128 extends beyond EOD, truncated [ 1079.219617][T18036] loop0: detected capacity change from 0 to 512 [ 1079.226714][T18036] ext4: Unknown parameter 'grpidmin_batch_time' [ 1079.273249][T18021] loop3: p2 size 2130728454 extends beyond EOD, truncated [ 1079.300318][ T3628] kernel write not supported for file /sysvipc/shm (pid: 3628 comm: kworker/1:8) [ 1079.328226][T11124] EXT4-fs (loop1): unmounting filesystem. [ 1079.362437][T18021] loop3: p4 start 788531456 is beyond EOD, truncated [ 1079.417328][ T3826] usb 3-1: Using ep0 maxpacket: 16 [ 1079.455648][T18042] loop1: detected capacity change from 0 to 512 [ 1079.519000][T18042] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1079.547344][ T3826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1079.554211][T18042] EXT4-fs (loop1): 1 truncate cleaned up [ 1079.560926][ T3826] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1079.566235][T18042] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1079.579108][ T3826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.618942][ T3826] usb 3-1: config 0 descriptor?? [ 1079.752632][T15484] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 1080.633086][T18048] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1080.648306][T18049] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3639: lblock 0 mapped to illegal pblock 4 (length 1) [ 1080.663607][T18050] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3639: lblock 0 mapped to illegal pblock 4 (length 1) [ 1080.676710][T18033] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 1080.753000][T18033] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1080.753105][T11124] EXT4-fs (loop1): unmounting filesystem. [ 1080.867703][T10192] Bluetooth: hci3: SCO packet for unknown connection handle 1032 [ 1080.879237][T18060] loop1: detected capacity change from 0 to 512 [ 1080.904105][T18060] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1080.915400][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.916203][T18060] EXT4-fs (loop1): 1 truncate cleaned up [ 1080.937102][T18060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1081.125883][T18033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.198823][T18065] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3643: lblock 0 mapped to illegal pblock 4 (length 1) [ 1081.212100][T18033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.692767][T10192] Bluetooth: Unexpected continuation frame (len 10) [ 1081.700700][T18033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.726651][T18066] loop3: detected capacity change from 0 to 4096 [ 1081.748116][T18066] ntfs3: Unknown parameter 'É0' [ 1081.807555][T18033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.865803][ T3826] hid-generic 0003:0158:0100.0055: unknown main item tag 0x1 [ 1081.886789][ T3826] hid-generic 0003:0158:0100.0055: unexpected long global item [ 1081.896525][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.925654][ T3826] hid-generic: probe of 0003:0158:0100.0055 failed with error -22 [ 1082.031255][T11124] EXT4-fs (loop1): unmounting filesystem. [ 1082.066324][ T4265] usb 3-1: USB disconnect, device number 87 [ 1082.099330][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.205422][T18078] loop1: detected capacity change from 0 to 64 [ 1082.223712][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1082.235663][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1082.244581][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1082.244708][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.264247][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1082.273430][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1082.281618][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1082.352360][ T3628] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1082.520373][T18079] chnl_net:caif_netlink_parms(): no params data found [ 1082.602548][ T3628] usb 4-1: Using ep0 maxpacket: 16 [ 1082.703953][T18075] loop4: detected capacity change from 0 to 40427 [ 1082.713156][T18075] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1082.721435][T18075] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1082.723611][ T3628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1082.752438][ T3628] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1082.764944][T18075] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1082.767290][ T3628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.788201][ T3628] usb 4-1: config 0 descriptor?? [ 1082.833272][T18075] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1082.841851][T18075] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1082.847128][T18087] loop2: detected capacity change from 0 to 8192 [ 1082.859554][T18079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.867773][T18079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.877632][T18079] device bridge_slave_0 entered promiscuous mode [ 1082.886466][T18079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.890263][ T27] audit: type=1804 audit(1720869268.725:122): pid=18075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3648" name="/newroot/164/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 1082.894181][T18079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.933270][T18079] device bridge_slave_1 entered promiscuous mode [ 1082.938573][ T27] audit: type=1804 audit(1720869268.755:123): pid=18075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3648" name="/newroot/164/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 1082.992255][T15484] syz-executor: attempt to access beyond end of device [ 1082.992255][T15484] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1083.006415][T18087] loop2: p1 p2 p4[EZD] [ 1083.019311][T18087] loop2: p1 size 16128 extends beyond EOD, truncated [ 1083.080697][T18087] loop2: p2 size 2130728454 extends beyond EOD, truncated [ 1083.096765][T18079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.117345][T18074] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 1083.127713][T18087] loop2: p4 start 788531456 is beyond EOD, truncated [ 1083.141920][T18074] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1083.165630][T18079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.276701][T18079] team0: Port device team_slave_0 added [ 1083.296487][T18079] team0: Port device team_slave_1 added [ 1083.409438][T18079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.427745][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.464073][T18074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.482070][T18074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.500159][T18079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.511515][T18074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.521987][T18074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.533945][T18079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.545983][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.561580][ T3628] hid-generic 0003:0158:0100.0056: unknown main item tag 0x1 [ 1083.574754][T18079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.607028][ T3628] hid-generic 0003:0158:0100.0056: unexpected long global item [ 1083.626897][ T3628] hid-generic: probe of 0003:0158:0100.0056 failed with error -22 [ 1083.737438][T18100] loop4: detected capacity change from 0 to 8192 [ 1083.747478][T18091] loop2: detected capacity change from 0 to 40427 [ 1083.750438][T18079] device hsr_slave_0 entered promiscuous mode [ 1083.764410][T18079] device hsr_slave_1 entered promiscuous mode [ 1083.771040][T18079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1083.782957][ T3628] usb 4-1: USB disconnect, device number 94 [ 1083.790392][T18079] Cannot create hsr debugfs directory [ 1083.796566][T18100] loop4: p1 p2 p4[EZD] [ 1083.801191][T18100] loop4: p1 size 16128 extends beyond EOD, truncated [ 1083.833044][T18100] loop4: p2 size 2130728454 extends beyond EOD, truncated [ 1083.853097][T18100] loop4: p4 start 788531456 is beyond EOD, truncated [ 1084.172372][ T9] device hsr_slave_0 left promiscuous mode [ 1084.178931][ T9] device hsr_slave_1 left promiscuous mode [ 1084.186804][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.212980][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.231152][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.247676][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.266166][ T9] device bridge_slave_1 left promiscuous mode [ 1084.274270][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.284774][ T9] device bridge_slave_0 left promiscuous mode [ 1084.291030][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.396373][ T47] Bluetooth: hci2: command tx timeout [ 1084.550886][ T9] device veth1_macvtap left promiscuous mode [ 1084.623087][ T9] device veth0_macvtap left promiscuous mode [ 1084.687248][ T9] device veth1_vlan left promiscuous mode [ 1084.750214][ T9] device veth0_vlan left promiscuous mode [ 1085.190649][T18113] loop1: detected capacity change from 0 to 512 [ 1085.199212][T18101] loop4: detected capacity change from 0 to 40427 [ 1085.239801][T18113] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1085.266379][T18113] EXT4-fs (loop1): 1 truncate cleaned up [ 1085.272719][T18113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1085.743731][T18117] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1085.768798][T18118] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3658: lblock 0 mapped to illegal pblock 4 (length 1) [ 1085.808064][T18117] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3658: lblock 0 mapped to illegal pblock 4 (length 1) [ 1086.264486][T11124] EXT4-fs (loop1): unmounting filesystem. [ 1086.451910][T10192] Bluetooth: hci2: command tx timeout [ 1086.646368][T17038] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1086.694473][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1086.751396][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1086.805125][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.866078][T18125] loop3: detected capacity change from 0 to 512 [ 1086.873608][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.886999][T18125] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1086.901691][T18125] EXT4-fs (loop3): 1 truncate cleaned up [ 1086.909741][T18125] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1086.921587][T17038] usb 2-1: Using ep0 maxpacket: 16 [ 1087.052795][T17038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1087.064312][T17038] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1087.078200][T17038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.092696][T17038] usb 2-1: config 0 descriptor?? [ 1087.336546][T18128] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 4: comm syz.3.3661: lblock 0 mapped to illegal pblock 4 (length 1) [ 1087.384449][T18128] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 4: comm syz.3.3661: lblock 0 mapped to illegal pblock 4 (length 1) [ 1087.416880][T18128] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1087.484184][T10192] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1087.920122][T16876] EXT4-fs (loop3): unmounting filesystem. [ 1088.164307][ T9] bond0 (unregistering): Released all slaves [ 1088.172199][T18129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.186731][T18129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.200684][T18129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.209333][T18129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.234642][T17038] hid-generic 0003:0158:0100.0057: unknown main item tag 0x1 [ 1088.248119][T17038] hid-generic 0003:0158:0100.0057: unexpected long global item [ 1088.256302][T17038] hid-generic: probe of 0003:0158:0100.0057 failed with error -22 [ 1088.285620][T18104] device bpq0 entered promiscuous mode [ 1088.291641][T18104] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1088.301365][T18121] device bpq0 left promiscuous mode [ 1088.328968][T18123] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 1088.347761][T18123] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1088.550950][T10192] Bluetooth: hci2: command tx timeout [ 1089.197614][ T3826] usb 2-1: USB disconnect, device number 86 [ 1089.369343][T18151] xt_hashlimit: overflow, try lower: 0/0 [ 1089.626861][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3668'. [ 1090.109185][T18079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1090.153378][T18079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1090.180667][T18079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1090.224187][T18079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1090.279158][T18164] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3669'. [ 1090.303911][T18163] loop4: detected capacity change from 0 to 2048 [ 1090.322075][T18163] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1090.341858][ T14] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1090.349660][T18163] NILFS (loop4): mounting unchecked fs [ 1090.360927][T18163] NILFS (loop4): recovery required for readonly filesystem [ 1090.377962][T18163] NILFS (loop4): write access will be enabled during recovery [ 1090.406027][T18163] NILFS (loop4): recovery complete [ 1090.488452][T18168] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1090.519336][T18079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.593407][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1090.601349][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1090.612022][T10192] Bluetooth: hci2: command tx timeout [ 1090.616494][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 1090.636126][T18079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.654756][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1090.664043][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1090.682591][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.689723][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.737122][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1090.745737][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1090.763480][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1090.775569][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1090.800559][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.806107][ T14] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1090.807699][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.856244][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.886462][ T14] usb 4-1: config 0 descriptor?? [ 1090.902946][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1090.937324][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1095.503347][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1095.547948][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1095.587246][T18079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1095.632012][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 1095.638204][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 1095.671269][ T14] usb 4-1: USB disconnect, device number 95 [ 1095.686239][T18079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1095.744881][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1095.765452][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1095.798099][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1095.824924][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1095.855972][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1095.876670][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1095.904822][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1095.945844][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1096.791489][ T3628] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1096.884291][T18199] device bpq0 entered promiscuous mode [ 1096.900553][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1097.032026][ T3628] usb 2-1: Using ep0 maxpacket: 16 [ 1097.057940][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1097.066021][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1097.099490][T18079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.142782][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1097.151622][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1097.152189][ T3628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1097.198886][ T3628] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1097.205031][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1097.229369][ T3628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.232626][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1097.258784][ T3628] usb 2-1: config 0 descriptor?? [ 1097.281055][T18079] device veth0_vlan entered promiscuous mode [ 1097.292147][T18187] loop3: detected capacity change from 0 to 40427 [ 1097.301983][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1097.309905][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1097.322415][T18187] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1097.330756][T18187] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1097.346638][T18079] device veth1_vlan entered promiscuous mode [ 1097.400418][T14058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1097.412536][T14058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1097.427369][T18187] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1097.441477][T14058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1097.462930][T14058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1097.487561][T18079] device veth0_macvtap entered promiscuous mode [ 1097.516554][T18079] device veth1_macvtap entered promiscuous mode [ 1097.537220][T18187] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1097.546567][T18189] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 1097.557095][T18189] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1097.567574][T18187] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1097.582021][T18207] netlink: 'syz.2.3683': attribute type 21 has an invalid length. [ 1097.593224][T18207] netlink: 'syz.2.3683': attribute type 1 has an invalid length. [ 1097.630552][T18079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.691948][ T27] audit: type=1804 audit(1720869283.535:124): pid=18187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3678" name="/newroot/66/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 1097.713727][T18079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.732006][T18079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.751996][ T27] audit: type=1804 audit(1720869283.565:125): pid=18187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3678" name="/newroot/66/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 1097.781802][T18079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.802055][T18079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.833012][T18079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.851858][T18079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.871928][T18079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.887640][T18189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.903639][T18079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.904709][T18189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.918513][T16876] syz-executor: attempt to access beyond end of device [ 1097.918513][T16876] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1097.972140][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1097.980433][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1097.988453][T18189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.008590][T18189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.017458][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1098.053299][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1098.081344][ T3628] hid-generic 0003:0158:0100.0058: unknown main item tag 0x1 [ 1098.094768][T18079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.101948][ T3628] hid-generic 0003:0158:0100.0058: unexpected long global item [ 1098.126356][T18079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.138329][ T3628] hid-generic: probe of 0003:0158:0100.0058 failed with error -22 [ 1098.156480][T18079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.177260][T18079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.200909][T18079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.211660][T18079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.223098][T18079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.251795][T18079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.263647][T18079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.274843][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1098.291327][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1098.309305][T18079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.320024][ T3826] usb 2-1: USB disconnect, device number 87 [ 1098.336490][T18079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.349635][T18079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.359723][T18079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.442073][ T3628] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1098.511648][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.532254][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.566374][ T5456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1098.578505][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.587763][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.615645][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1098.692306][ T3628] usb 5-1: Using ep0 maxpacket: 16 [ 1098.853247][ T3628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1102.781879][ T3628] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1102.809417][ T3628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.850150][ T3628] usb 5-1: config 0 descriptor?? [ 1102.856474][T18246] loop4: detected capacity change from 0 to 256 [ 1102.882176][ T3628] usb 5-1: can't set config #0, error -71 [ 1102.891964][ T3628] usb 5-1: USB disconnect, device number 76 [ 1102.938098][T18250] xt_hashlimit: overflow, try lower: 0/0 [ 1103.056117][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3692'. [ 1103.255749][T18257] kvm: pic: non byte write [ 1104.629193][ T47] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1104.749967][T18252] loop3: detected capacity change from 0 to 40427 [ 1104.772907][T18252] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1104.796101][T18252] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1104.823350][T18252] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1104.847288][ T3826] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1104.876448][T18252] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1104.883748][T18252] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1104.919337][ T27] audit: type=1804 audit(1720869290.755:126): pid=18252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3695" name="/newroot/70/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 1104.951343][T16876] syz-executor: attempt to access beyond end of device [ 1104.951343][T16876] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1104.974182][ T27] audit: type=1804 audit(1720869290.755:127): pid=18252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3695" name="/newroot/70/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 1105.107501][T18287] loop4: detected capacity change from 0 to 512 [ 1105.127412][ T3826] usb 1-1: Using ep0 maxpacket: 16 [ 1105.151371][T18287] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1105.174795][T18287] EXT4-fs (loop4): 1 truncate cleaned up [ 1105.180486][T18287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1105.261717][T18295] xt_hashlimit: overflow, try lower: 0/0 [ 1105.282289][ T3826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1105.316824][ T3826] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1105.338182][ T3826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.384894][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1105.405976][ T3826] usb 1-1: config 0 descriptor?? [ 1105.604251][T18299] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 4: comm syz.4.3706: lblock 0 mapped to illegal pblock 4 (length 1) [ 1105.643424][ T47] Bluetooth: hci1: command tx timeout [ 1106.068497][T18301] loop1: detected capacity change from 0 to 256 [ 1106.095143][T18279] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 1106.175081][T18279] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1106.195481][T15484] EXT4-fs (loop4): unmounting filesystem. [ 1108.922274][T18321] loop3: detected capacity change from 0 to 64 [ 1108.942071][ T3826] usbhid 1-1:0.0: can't add hid device: -71 [ 1108.963745][ T3826] usbhid: probe of 1-1:0.0 failed with error -71 [ 1108.989046][ T3826] usb 1-1: USB disconnect, device number 96 [ 1109.007770][T18325] loop1: detected capacity change from 0 to 512 [ 1109.077812][T18325] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1109.103387][T18325] EXT4-fs (loop1): 1 truncate cleaned up [ 1109.109400][T18325] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1109.315096][T18332] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3715: lblock 0 mapped to illegal pblock 4 (length 1) [ 1109.367832][T18334] loop2: detected capacity change from 0 to 128 [ 1109.698492][T18334] loop2: detected capacity change from 0 to 512 [ 1109.712644][T18334] ext4: Unknown parameter 'grpidmin_batch_time' [ 1109.776727][T18338] device bpq0 left promiscuous mode [ 1109.814191][T14061] kernel write not supported for file /sysvipc/shm (pid: 14061 comm: kworker/1:1) [ 1109.838020][T11124] EXT4-fs (loop1): unmounting filesystem. [ 1110.021619][T18343] xt_hashlimit: overflow, try lower: 0/0 [ 1110.164415][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1110.314133][ T4375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.456393][ T4375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.619108][ T4375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.789021][ T4375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.862077][ T3590] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1110.911990][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1110.924637][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1110.933571][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1110.943553][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1110.951433][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1110.960113][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1111.101843][ T3590] usb 1-1: Using ep0 maxpacket: 16 [ 1111.113453][T18367] loop3: detected capacity change from 0 to 512 [ 1111.130072][T18367] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1111.140671][T18367] EXT4-fs (loop3): 1 truncate cleaned up [ 1111.156853][T18365] loop4: detected capacity change from 0 to 2048 [ 1111.169047][T18367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1111.178369][ T47] Bluetooth: hci2: command tx timeout [ 1111.179432][T18372] loop1: detected capacity change from 0 to 512 [ 1111.198581][T18365] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1111.216579][T18365] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1111.229155][ T3590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1111.245850][T18372] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1111.254249][ T3590] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1111.254363][T18365] NILFS (loop4): unable to fall back to spare super block [ 1111.263705][ T3590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.280650][ T3590] usb 1-1: config 0 descriptor?? [ 1111.347312][T18374] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 4: comm syz.3.3730: lblock 0 mapped to illegal pblock 4 (length 1) [ 1111.351947][T18365] NILFS (loop4): error -22 while searching super root [ 1111.416679][T18372] EXT4-fs (loop1): 1 truncate cleaned up [ 1111.425980][T18372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1111.895826][T18352] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 1111.916387][T18352] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1112.065970][T18360] chnl_net:caif_netlink_parms(): no params data found [ 1112.174855][T18381] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3731: lblock 0 mapped to illegal pblock 4 (length 1) [ 1112.598354][T11124] EXT4-fs (loop1): unmounting filesystem. [ 1112.604311][T18377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.631959][T18377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.640833][T18352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.693807][T16876] EXT4-fs (loop3): unmounting filesystem. [ 1112.706093][T18352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.749050][ T3590] hid-generic 0003:0158:0100.0059: unknown main item tag 0x1 [ 1112.757553][ T3590] hid-generic 0003:0158:0100.0059: unexpected long global item [ 1112.773466][ T3590] hid-generic: probe of 0003:0158:0100.0059 failed with error -22 [ 1112.943283][T18360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.959075][T14061] usb 1-1: USB disconnect, device number 97 [ 1112.970882][T18360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.984276][T18365] loop4: detected capacity change from 0 to 32768 [ 1112.993781][T18360] device bridge_slave_0 entered promiscuous mode [ 1113.000450][T18365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3729 (18365) [ 1113.013122][T10192] Bluetooth: hci0: command tx timeout [ 1113.041230][T18365] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1113.052731][T18365] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1113.061501][T18365] BTRFS info (device loop4): using free space tree [ 1113.071721][T18360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.079322][T18360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.090870][T18360] device bridge_slave_1 entered promiscuous mode [ 1113.168884][T18360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.213310][T18360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.304859][T18365] BTRFS info (device loop4): enabling ssd optimizations [ 1113.306800][T18360] team0: Port device team_slave_0 added [ 1113.324331][T18360] team0: Port device team_slave_1 added [ 1113.375035][T18360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.382672][T18360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.410175][T18360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.433415][T18360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.440478][T18360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.467095][T18360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.628837][T15484] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1114.789902][T18360] device hsr_slave_0 entered promiscuous mode [ 1114.805165][T18360] device hsr_slave_1 entered promiscuous mode [ 1114.825503][T18360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.846574][T18360] Cannot create hsr debugfs directory [ 1114.879292][ T4375] device hsr_slave_0 left promiscuous mode [ 1114.891240][ T4375] device hsr_slave_1 left promiscuous mode [ 1114.907644][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.935278][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.938004][T18422] loop4: detected capacity change from 0 to 256 [ 1114.955334][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.975293][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.997608][ T4375] device bridge_slave_1 left promiscuous mode [ 1115.012001][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.043718][ T4375] device bridge_slave_0 left promiscuous mode [ 1115.060160][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.092531][T10192] Bluetooth: hci0: command tx timeout [ 1115.137702][T18426] loop4: detected capacity change from 0 to 512 [ 1115.144691][ T4375] device veth1_macvtap left promiscuous mode [ 1115.150761][ T4375] device veth0_macvtap left promiscuous mode [ 1115.157816][ T4375] device veth1_vlan left promiscuous mode [ 1115.164035][ T4375] device veth0_vlan left promiscuous mode [ 1115.166737][T18426] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1115.228736][T18426] EXT4-fs (loop4): 1 truncate cleaned up [ 1115.241989][T18426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1115.667077][T18432] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 4: comm syz.4.3739: lblock 0 mapped to illegal pblock 4 (length 1) [ 1115.735587][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.743728][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.139995][T18437] loop0: detected capacity change from 0 to 128 [ 1116.207806][T18437] loop0: detected capacity change from 0 to 512 [ 1116.218376][T18439] loop1: detected capacity change from 0 to 512 [ 1116.228395][T18437] ext4: Unknown parameter 'grpidmin_batch_time' [ 1116.305275][T18439] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1116.321964][ T4090] kernel write not supported for file /sysvipc/shm (pid: 4090 comm: kworker/1:10) [ 1116.336367][T18439] EXT4-fs (loop1): 1 truncate cleaned up [ 1116.362003][T18439] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1116.698324][T10192] Bluetooth: hci2: command tx timeout [ 1116.700866][T18435] loop3: detected capacity change from 0 to 40427 [ 1116.712540][T18442] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1116.728375][T18435] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1116.755952][T18435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1116.818654][T18442] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3743: lblock 0 mapped to illegal pblock 4 (length 1) [ 1116.834383][T18435] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1116.911519][T18435] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1116.916841][T18443] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.3743: lblock 0 mapped to illegal pblock 4 (length 1) [ 1116.930643][T18435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1116.980274][ T27] audit: type=1804 audit(1720869302.815:128): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3741" name="/newroot/77/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 1117.022000][ T27] audit: type=1804 audit(1720869302.815:129): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3741" name="/newroot/77/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 1117.171830][ T47] Bluetooth: hci0: command tx timeout [ 1117.220496][T16876] syz-executor: attempt to access beyond end of device [ 1117.220496][T16876] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1117.574705][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 1117.647832][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 1117.738153][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.803180][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.864082][T11124] EXT4-fs (loop1): unmounting filesystem. [ 1117.893408][T18369] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1118.003273][T18453] xt_hashlimit: overflow, try lower: 0/0 [ 1118.149864][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1118.396918][ T4375] bond0 (unregistering): Released all slaves [ 1118.526530][T15484] EXT4-fs (loop4): unmounting filesystem. [ 1118.639462][T18457] loop4: detected capacity change from 0 to 512 [ 1118.667476][T18457] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1118.685653][T18457] EXT4-fs (loop4): 1 truncate cleaned up [ 1118.691352][T18457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1119.087419][T18470] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1119.219833][T18471] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 4: comm syz.4.3747: lblock 0 mapped to illegal pblock 4 (length 1) [ 1119.251860][ T47] Bluetooth: hci0: command tx timeout [ 1119.254152][T18471] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 4: comm syz.4.3747: lblock 0 mapped to illegal pblock 4 (length 1) [ 1119.256334][T10192] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1119.603438][T18360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1119.645937][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1119.658334][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1119.667079][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1119.674904][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1119.684090][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1119.691338][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1119.731035][T18476] loop1: detected capacity change from 0 to 256 [ 1119.803815][T18360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1119.850588][T18360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1119.904933][T18360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1119.963836][T18478] loop1: detected capacity change from 0 to 128 [ 1120.029808][T18478] loop1: detected capacity change from 0 to 512 [ 1120.062396][T18478] ext4: Unknown parameter 'grpidmin_batch_time' [ 1120.124643][T18417] kernel write not supported for file /sysvipc/shm (pid: 18417 comm: kworker/0:8) [ 1120.322404][T18360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.409372][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1120.427483][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1120.475577][T18360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.508310][T18482] loop3: detected capacity change from 0 to 128 [ 1120.558912][T18473] chnl_net:caif_netlink_parms(): no params data found [ 1120.597602][T18482] loop3: detected capacity change from 0 to 512 [ 1120.602395][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1120.612424][T18482] ext4: Unknown parameter 'grpidmin_batch_time' [ 1120.623041][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1120.647890][ T4090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.655050][ T4090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.677872][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1120.689875][T17038] kernel write not supported for file /sysvipc/shm (pid: 17038 comm: kworker/0:6) [ 1120.703015][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1120.722141][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1120.731043][ T4090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.738293][ T4090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.805349][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1120.821723][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1120.922614][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1120.933153][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1120.941867][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1120.950606][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1120.959300][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1120.972180][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1120.981039][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1120.989275][T15484] EXT4-fs (loop4): unmounting filesystem. [ 1121.137277][T18360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1121.192401][T18360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1121.251447][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1121.272999][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1121.292192][T18473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.308604][T18473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.350502][T18473] device bridge_slave_0 entered promiscuous mode [ 1121.375227][T18473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.398335][T18473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.419438][T18473] device bridge_slave_1 entered promiscuous mode [ 1121.541492][T18473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.611204][T18473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.688812][ T3558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1121.700699][ T3558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1121.712396][ T3558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1121.722353][ T3558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1121.732149][ T3558] Bluetooth: hci2: command tx timeout [ 1121.739198][ T3558] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1121.746635][ T3558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1121.836343][T18473] team0: Port device team_slave_0 added [ 1121.856729][T18473] team0: Port device team_slave_1 added [ 1121.875790][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1121.899903][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1121.936265][T18360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.997310][T10192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1122.013746][T10192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1122.024636][T10192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1122.046298][T10192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1122.056128][T10192] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1122.064324][T10192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1122.094460][T18488] loop4: detected capacity change from 0 to 40427 [ 1122.103843][T18488] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1122.112117][T18488] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1122.127997][T18488] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1122.131509][ T4375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.155838][T18473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.165551][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.198325][T18473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.216639][T18488] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1122.231887][T18488] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1122.261295][ T27] audit: type=1804 audit(1720869308.105:130): pid=18488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3760" name="/newroot/189/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 1122.285516][ T4375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.301731][ T27] audit: type=1804 audit(1720869308.125:131): pid=18488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3760" name="/newroot/189/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 1122.324267][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1122.338085][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1122.348500][T18473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.360270][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.388654][T18473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.438406][ T4375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.505574][T18419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1122.520688][T18419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1122.529078][T15484] syz-executor: attempt to access beyond end of device [ 1122.529078][T15484] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1122.553970][T18360] device veth0_vlan entered promiscuous mode [ 1122.576621][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1122.585971][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1122.609651][ T4375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.627926][T18360] device veth1_vlan entered promiscuous mode [ 1122.657551][T18473] device hsr_slave_0 entered promiscuous mode [ 1122.669429][T18473] device hsr_slave_1 entered promiscuous mode [ 1122.692067][T18473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1122.699634][T18473] Cannot create hsr debugfs directory [ 1122.717550][T18419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1122.806821][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1122.817506][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1122.928836][T18360] device veth0_macvtap entered promiscuous mode [ 1122.975075][T18360] device veth1_macvtap entered promiscuous mode [ 1123.067414][T18360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.103880][T18360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.121793][T18360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.141786][T18360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.151708][T18360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.182248][T18360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.212743][T18360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.231789][T18360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.244130][T18360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.278205][T18493] chnl_net:caif_netlink_parms(): no params data found [ 1123.313018][T18419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1123.321009][T18419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1123.345242][T18419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1123.362576][T18419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1123.391295][T18497] chnl_net:caif_netlink_parms(): no params data found [ 1123.444884][T18506] loop4: detected capacity change from 0 to 40427 [ 1123.461848][T18506] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1123.469995][T18506] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1123.482261][T18360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.493651][T18360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.511883][T18360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.516212][T18506] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1123.522691][T18360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.538842][T18360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.549391][T18360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.559372][T18360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.577379][T18360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.581147][T18506] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1123.588780][T18360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.603445][T18506] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1123.635115][ T27] audit: type=1804 audit(1720869309.475:132): pid=18506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3763" name="/newroot/190/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 1123.657722][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1123.668752][ T27] audit: type=1804 audit(1720869309.485:133): pid=18506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3763" name="/newroot/190/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 1123.670047][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1123.754072][T18360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.766814][T18360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.777689][T18360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.791431][T18360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.812063][T10192] Bluetooth: hci2: command tx timeout [ 1123.812103][ T3558] Bluetooth: hci3: command tx timeout [ 1123.850690][T15484] syz-executor: attempt to access beyond end of device [ 1123.850690][T15484] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1123.926876][T18493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.934262][T18493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.942494][T18493] device bridge_slave_0 entered promiscuous mode [ 1124.057593][T18473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.092193][T18493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.099296][T18493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.118315][T18493] device bridge_slave_1 entered promiscuous mode [ 1124.132394][T10192] Bluetooth: hci4: command tx timeout [ 1124.170441][T18497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.179878][T18497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.192283][T18497] device bridge_slave_0 entered promiscuous mode [ 1124.201013][T18497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.210019][T18497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.218887][T18497] device bridge_slave_1 entered promiscuous mode [ 1124.257998][T18473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.383139][T18493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.399874][T18493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.453540][T18473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.578678][T18497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.644229][T18473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.759083][T18497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.879855][T18493] team0: Port device team_slave_0 added [ 1124.996617][T18497] team0: Port device team_slave_0 added [ 1125.021458][T18493] team0: Port device team_slave_1 added [ 1125.041704][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.063594][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.122018][T18497] team0: Port device team_slave_1 added [ 1125.155033][T18419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1125.203776][T18497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.210741][T18497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.272017][T18497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.291102][T18493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.298381][T18493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.324974][T18493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.377479][T18497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.382646][T14465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.389988][T18497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.401918][T14465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.446534][T18497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.664365][T18493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.677124][T18493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.795810][T18493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.892222][ T3558] Bluetooth: hci2: command tx timeout [ 1125.901955][ T3558] Bluetooth: hci3: command tx timeout [ 1126.049046][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1126.212920][T10192] Bluetooth: hci4: command tx timeout [ 1126.299496][ T4375] device hsr_slave_0 left promiscuous mode [ 1126.314494][ T4375] device hsr_slave_1 left promiscuous mode [ 1126.326283][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.339206][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.370853][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.388752][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.417825][ T4375] device bridge_slave_1 left promiscuous mode [ 1126.431287][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.446566][ T4375] device bridge_slave_0 left promiscuous mode [ 1126.458532][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.511091][ T4375] device veth1_macvtap left promiscuous mode [ 1126.523320][ T4375] device veth0_macvtap left promiscuous mode [ 1126.529458][ T4375] device veth1_vlan left promiscuous mode [ 1126.544903][ T4375] device veth0_vlan left promiscuous mode [ 1126.600893][T18532] loop2: detected capacity change from 0 to 40427 [ 1126.626349][T18532] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1126.634926][T18532] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1126.650222][T18532] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1126.695438][T18532] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1126.702681][T18532] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1126.731965][ T27] audit: type=1804 audit(1720869312.565:134): pid=18532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3724" name="/newroot/0/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 1126.754558][ T27] audit: type=1804 audit(1720869312.565:135): pid=18532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3724" name="/newroot/0/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 1127.028807][T18360] syz-executor: attempt to access beyond end of device [ 1127.028807][T18360] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1127.409753][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 1127.452178][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 1127.491406][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.535381][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.972009][T10192] Bluetooth: hci3: command tx timeout [ 1127.977984][ T3558] Bluetooth: hci2: command tx timeout [ 1127.979724][ T4375] bond0 (unregistering): Released all slaves [ 1128.070948][T18497] device hsr_slave_0 entered promiscuous mode [ 1128.078972][T18497] device hsr_slave_1 entered promiscuous mode [ 1128.085863][T18497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1128.093722][T18497] Cannot create hsr debugfs directory [ 1128.102830][T18493] device hsr_slave_0 entered promiscuous mode [ 1128.110631][T18493] device hsr_slave_1 entered promiscuous mode [ 1128.118531][T18493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1128.126315][T18493] Cannot create hsr debugfs directory [ 1128.142217][T18538] netlink: 'syz.4.3768': attribute type 15 has an invalid length. [ 1128.222480][T18473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1128.234009][ T27] audit: type=1326 audit(1720869314.075:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.2.3771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4406375bd9 code=0x0 [ 1128.268510][T18473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1128.292062][ T3558] Bluetooth: hci4: command tx timeout [ 1128.319232][T18473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1128.365750][T18473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1128.779045][T18473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.839901][T18473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.869523][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1128.883282][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1128.944905][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1128.964652][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1128.997535][ T4090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.004786][ T4090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.046358][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1129.064054][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1129.080172][ T4090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.087357][ T4090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.128721][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1129.150498][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1129.190163][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1129.213438][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1129.235523][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1129.267911][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1129.286401][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1129.309302][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1129.338456][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1129.358587][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1129.383453][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1129.399547][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1129.425233][T18473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1129.441953][T17038] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1129.535828][T18571] netlink: 'syz.4.3777': attribute type 4 has an invalid length. [ 1129.660190][T18493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.790127][T18493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.832276][T17038] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1129.832350][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1129.853985][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1129.866593][T18473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.869074][T17038] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1129.905345][T17038] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1129.924552][T17038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.950106][T17038] usb 3-1: config 0 descriptor?? [ 1129.967063][T18493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.998013][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1130.011661][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1130.012177][T18564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1130.051997][ T3558] Bluetooth: hci3: command tx timeout [ 1130.064194][T17038] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1130.110265][T18493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.135689][T18473] device veth0_vlan entered promiscuous mode [ 1130.162136][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1130.170709][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1130.189598][T18473] device veth1_vlan entered promiscuous mode [ 1130.201603][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1130.210837][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1130.219011][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1130.285304][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1130.294728][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1130.304696][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1130.316058][T18473] device veth0_macvtap entered promiscuous mode [ 1130.324538][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1130.363495][T18473] device veth1_macvtap entered promiscuous mode [ 1130.378548][ T3558] Bluetooth: hci4: command tx timeout [ 1130.425253][T18473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.436722][T18473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.447027][T18473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.458413][T18473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.468681][T18473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.479650][T18473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.491862][T18473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.502912][T18473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.514625][T18473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.525187][T18473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.536640][T18473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.546993][T18473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.558027][T18473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.588824][T18473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.610317][T18473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.620732][T18473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.632213][T18473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.643486][T18473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.659055][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1130.679488][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1130.689070][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1130.698131][ T4090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1130.714786][T18473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.730622][T18473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.739536][T18473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.748588][T18473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.784380][T18493] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1130.843588][T18493] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1130.855247][T18493] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1130.884662][T18493] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1131.016752][ T4084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.034165][ T4084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.049970][T18497] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1131.077704][T18497] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1131.099102][T18418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1131.118448][T18497] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1131.145106][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.156499][T18497] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1131.160830][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.205902][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1131.316707][T18493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.351281][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1131.360160][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1131.383631][T18493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.409754][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1131.418996][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1131.427925][T14061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.435052][T14061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.444943][T18608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3788'. [ 1131.471975][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1131.480847][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1131.489861][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1131.499295][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.506440][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.514737][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1131.542184][T18497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.549546][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1131.572209][T18418] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1131.616860][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1131.634566][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1131.647279][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1131.656412][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1131.666149][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1131.674671][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1131.683493][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1131.694886][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1131.703000][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1131.711425][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1131.720124][T17038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1131.733255][T18493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1131.747832][T18497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.775021][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1131.792676][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1131.801392][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.808554][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.846234][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1131.859931][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1131.862179][T18418] usb 1-1: Using ep0 maxpacket: 32 [ 1131.870284][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1131.890871][T14061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.898137][T14061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.927532][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1131.947676][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1131.982204][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1132.002096][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1132.017248][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1132.032960][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1132.069168][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1132.099970][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1132.133380][T18497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1132.148213][T14061] usb 3-1: USB disconnect, device number 88 [ 1132.174516][ T27] audit: type=1326 audit(1720869318.015:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18628 comm="syz.2.3796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4406375bd9 code=0x0 [ 1132.180488][T18497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1132.220876][T18631] loop4: detected capacity change from 0 to 2048 [ 1132.227513][T18418] usb 1-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 1132.240935][T18493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.243848][T18418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.252235][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1132.264116][T18631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1132.264626][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1132.270734][T18631] ext4: Bad value for 'barrier' [ 1132.281403][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1132.293447][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1132.297499][T18418] usb 1-1: Product: syz [ 1132.301522][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1132.313740][T18418] usb 1-1: Manufacturer: syz [ 1132.318798][T18418] usb 1-1: SerialNumber: syz [ 1132.340796][T18418] usb 1-1: config 0 descriptor?? [ 1132.356232][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1132.378055][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1132.393006][T18418] usb 1-1: bad CDC descriptors [ 1132.398439][T18418] cp210x 1-1:0.0: cp210x converter detected [ 1132.415906][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1132.433194][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1132.450331][T18493] device veth0_vlan entered promiscuous mode [ 1132.470390][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1132.479765][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1132.496150][T18493] device veth1_vlan entered promiscuous mode [ 1132.555279][T18636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1132.585067][T18636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1132.594408][T18636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1132.596539][T18603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.625116][T18603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.637247][T18603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.645980][T18603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.715223][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1132.723121][T18418] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1132.733201][T18418] cp210x 1-1:0.0: querying part number failed [ 1132.742673][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1132.750980][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1132.758884][T18418] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1132.767319][T18418] usb 1-1: USB disconnect, device number 98 [ 1132.778422][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1132.789549][T18418] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1132.797817][T18418] cp210x 1-1:0.0: device disconnected [ 1132.806237][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1132.824297][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1132.842515][T18493] device veth0_macvtap entered promiscuous mode [ 1132.860896][T18493] device veth1_macvtap entered promiscuous mode [ 1132.887901][T18497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.921304][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1132.922419][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.946351][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.957368][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.972218][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.985827][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.997089][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.017828][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.041635][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.051857][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.063046][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.076110][T18493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.096946][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1133.120535][T18640] device geneve2 entered promiscuous mode [ 1133.136443][T18418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1133.145071][T18418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1133.153470][T18418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1133.162744][T18418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1133.177871][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.209150][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.232440][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.243209][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.262067][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.278047][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.303974][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.322120][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.338746][T18493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.349321][T18493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.387568][T18493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.431707][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1133.461271][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1133.484651][T18493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.502145][T18493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.521137][T18493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.531788][T18493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.623160][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1133.647018][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1133.698741][T18497] device veth0_vlan entered promiscuous mode [ 1133.810616][ T3994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.839053][ T3994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.929478][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1133.942955][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1133.967187][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1134.033618][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1134.103129][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1134.666156][T18497] device veth1_vlan entered promiscuous mode [ 1134.684416][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.711858][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1134.720583][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1134.729074][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.744285][T18417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1134.780659][T18497] device veth0_macvtap entered promiscuous mode [ 1134.809116][T18497] device veth1_macvtap entered promiscuous mode [ 1134.896928][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.952352][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.970689][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.981533][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.998442][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.019805][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.050146][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.079020][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.092095][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.092328][ T3558] Bluetooth: hci0: command 0x0c20 tx timeout [ 1135.111955][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.131926][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.159630][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.203704][T18497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.270200][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1135.302614][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1135.310771][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1135.342656][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1135.400421][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.471862][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.502419][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.558846][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.591619][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.629117][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.652320][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.672591][T18680] loop4: detected capacity change from 0 to 32768 [ 1135.691892][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.708645][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.730224][T18680] XFS (loop4): Mounting V5 Filesystem [ 1135.759485][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.788916][T18497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.829837][T18497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.860651][T18497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.933456][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1135.942240][T18680] XFS (loop4): Ending clean mount [ 1135.948771][T17038] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 [ 1135.951470][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1135.979743][T18497] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.984854][T17038] XFS (loop4): Unmount and run xfs_repair [ 1136.010520][T18497] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.032042][T17038] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1136.039459][T17038] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1136.051815][T18497] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.060575][T18497] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.076686][T17038] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1136.094288][T17038] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1136.117458][T17038] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1136.134515][T17038] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1136.148128][T17038] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1136.160517][T17038] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1136.192840][T17038] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1136.227217][T18680] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74 [ 1136.265677][T18680] XFS (loop4): Failed to initialize disk quotas. [ 1136.340432][T18417] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 [ 1136.381549][T18417] XFS (loop4): Unmount and run xfs_repair [ 1136.391239][T18417] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1136.411833][T18417] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1136.451399][T18417] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1136.491845][T18417] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1136.532037][T18417] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1136.568064][T18417] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1136.601802][T18417] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1136.610707][T18417] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1136.658635][T18417] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1136.701449][T18680] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74 [ 1136.810832][T15484] XFS (loop4): Unmounting Filesystem [ 1136.833180][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.881884][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.908444][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1136.948737][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.976465][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.043071][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1137.139326][T18725] loop1: detected capacity change from 0 to 32768 [ 1137.210172][T18725] XFS (loop1): Mounting V5 Filesystem [ 1137.327056][T18729] loop0: detected capacity change from 0 to 32768 [ 1137.377407][T18725] XFS (loop1): Ending clean mount [ 1137.403149][T18725] XFS (loop1): Unmounting Filesystem [ 1137.408605][T18729] XFS (loop0): Mounting V5 Filesystem [ 1137.633118][T18729] XFS (loop0): Ending clean mount [ 1137.681428][T18729] XFS (loop0): Quotacheck needed: Please wait. [ 1137.762532][T18729] XFS (loop0): Quotacheck: Done. [ 1137.844352][T18473] XFS (loop0): Unmounting Filesystem [ 1137.929852][T18742] loop2: detected capacity change from 0 to 32768 [ 1138.017867][T18779] loop4: detected capacity change from 0 to 512 [ 1138.025727][T18751] loop3: detected capacity change from 0 to 32768 [ 1138.038548][T18742] XFS (loop2): Mounting V5 Filesystem [ 1138.147645][T18751] XFS (loop3): Mounting V5 Filesystem [ 1138.197378][T18779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1138.222211][T18779] ext4 filesystem being mounted at /228/bus supports timestamps until 2038 (0x7fffffff) [ 1138.262913][T18751] XFS (loop3): Ending clean mount [ 1138.293410][ T27] audit: type=1326 audit(1720869324.135:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18774 comm="syz.4.3827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f285cd75bd9 code=0x0 [ 1138.333133][T18742] XFS (loop2): Ending clean mount [ 1138.449605][ T3590] hid-generic 0000:0000:0000.005A: item fetching failed at offset 0/1 [ 1138.469268][ T3590] hid-generic: probe of 0000:0000:0000.005A failed with error -22 [ 1138.485819][T18742] syz.2.3825 (18742) used greatest stack depth: 17432 bytes left [ 1138.510182][T18360] XFS (loop2): Unmounting Filesystem [ 1138.670706][ T3590] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 [ 1138.695082][ T3590] XFS (loop3): Unmount and run xfs_repair [ 1138.701069][ T3590] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1138.715107][ T3590] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1138.726168][ T3590] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1138.735297][ T3590] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1138.745437][ T3590] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1138.764656][ T3590] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1138.767402][T18819] loop0: detected capacity change from 0 to 1024 [ 1138.789560][ T3590] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1138.801101][T18819] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1138.815383][ T3590] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1138.822309][T18819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1138.833858][ T3590] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1138.843284][T18751] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74 [ 1138.874800][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1138.888604][T15484] EXT4-fs (loop4): unmounting filesystem. [ 1138.900866][T18497] XFS (loop3): Unmounting Filesystem [ 1138.944530][T18473] EXT4-fs (loop0): unmounting filesystem. [ 1139.081495][T18826] netlink: 'syz.1.3836': attribute type 5 has an invalid length. [ 1139.572131][T18419] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1139.790099][T18864] ubi0: attaching mtd0 [ 1139.801736][T18864] ubi0: scanning is finished [ 1139.807031][T18864] ubi0: empty MTD device detected [ 1140.213548][T18419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.294807][T18419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.310578][T18419] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 1140.320686][T18419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.471950][T18419] usb 1-1: config 0 descriptor?? [ 1140.482051][T18864] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1140.615684][T18419] usbhid 1-1:0.0: can't add hid device: -22 [ 1140.621693][T18419] usbhid: probe of 1-1:0.0 failed with error -22 [ 1140.748642][ T52] block nbd3: Attempted send on invalid socket [ 1140.755288][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1141.261227][T18872] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1141.274030][T18872] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1141.298941][T18872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1141.569042][T18880] NILFS (nullb0): couldn't find nilfs on the device [ 1142.889651][ T5454] usb 1-1: USB disconnect, device number 99 [ 1143.471274][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3863'. [ 1143.548642][T18932] netlink: 'syz.0.3863': attribute type 5 has an invalid length. [ 1143.659244][T18898] loop4: detected capacity change from 0 to 32768 [ 1143.729323][T18945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1143.762834][T18898] XFS (loop4): Mounting V5 Filesystem [ 1143.800158][T18898] XFS (loop4): Starting recovery (logdev: internal) [ 1143.814495][T18898] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x1 [ 1143.832220][T18898] XFS (loop4): Unmount and run xfs_repair [ 1143.837990][T18898] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1143.847882][T18903] loop3: detected capacity change from 0 to 32768 [ 1143.865966][T18898] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 20 d1 XAGF.......... . [ 1143.891594][T18898] 00000010: 90 c7 29 01 00 00 00 02 00 00 00 05 00 00 00 01 ..)............. [ 1143.935582][T18903] XFS (loop3): Mounting V5 Filesystem [ 1143.956014][T18898] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 1144.017186][T18898] 00000030: 00 00 00 06 00 00 13 e3 00 00 13 e0 00 00 00 00 ................ [ 1144.040140][T18903] XFS (loop3): Ending clean mount [ 1144.048040][T18898] 00000040: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1144.059646][T18903] XFS (loop3): Quotacheck needed: Please wait. [ 1144.069702][T18898] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 1144.081345][T18898] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1144.096564][T18898] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1144.109094][T18898] XFS (loop4): metadata I/O error in "xfs_read_agf+0x2e2/0x680" at daddr 0x1 len 1 error 74 [ 1144.199360][T18903] XFS (loop3): Quotacheck: Done. [ 1144.404176][T18497] XFS (loop3): Unmounting Filesystem [ 1144.554355][T18981] loop0: detected capacity change from 0 to 256 [ 1144.742521][T18981] FAT-fs (loop0): Directory bread(block 64) failed [ 1144.762139][T18981] FAT-fs (loop0): Directory bread(block 65) failed [ 1144.768969][T18981] FAT-fs (loop0): Directory bread(block 66) failed [ 1144.802145][T18981] FAT-fs (loop0): Directory bread(block 67) failed [ 1144.808792][T18981] FAT-fs (loop0): Directory bread(block 68) failed [ 1144.826834][ T27] audit: type=1326 audit(1720869330.665:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18985 comm="syz.2.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4406375bd9 code=0x7ffc0000 [ 1144.874034][T18981] FAT-fs (loop0): Directory bread(block 69) failed [ 1144.880700][T18981] FAT-fs (loop0): Directory bread(block 70) failed [ 1144.891998][ T27] audit: type=1326 audit(1720869330.695:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18985 comm="syz.2.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4406375bd9 code=0x7ffc0000 [ 1144.919200][T18981] FAT-fs (loop0): Directory bread(block 71) failed [ 1144.942022][T18981] FAT-fs (loop0): Directory bread(block 72) failed [ 1144.948595][T18981] FAT-fs (loop0): Directory bread(block 73) failed [ 1144.965911][ T27] audit: type=1326 audit(1720869330.705:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18985 comm="syz.2.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4406375bd9 code=0x7ffc0000 [ 1145.017394][ T27] audit: type=1326 audit(1720869330.755:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18987 comm="syz.2.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44063a7bc5 code=0x7ffc0000 [ 1145.098443][ T27] audit: type=1326 audit(1720869330.905:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18987 comm="syz.2.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4406375bd9 code=0x7ffc0000 [ 1145.134699][T18997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1145.144561][T18996] loop3: detected capacity change from 0 to 256 [ 1145.209611][T19001] loop0: detected capacity change from 0 to 1024 [ 1145.281236][T19006] loop1: detected capacity change from 0 to 1024 [ 1145.282072][ T5454] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1145.302308][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1145.359911][T19008] netlink: 'syz.4.3882': attribute type 5 has an invalid length. [ 1145.507449][ T33] hfsplus: b-tree write err: -5, ino 4 [ 1145.652098][T14061] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1145.776123][ T5454] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1145.794008][ T5454] usb 3-1: can't read configurations, error -71 [ 1145.807710][T19020] loop1: detected capacity change from 0 to 256 [ 1146.029390][T14061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.052693][T14061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.082091][T14061] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1146.091181][T14061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.124650][T14061] usb 1-1: config 0 descriptor?? [ 1146.157333][T19028] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.3890' resets device [ 1146.232343][T19032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1146.310631][T19034] loop1: detected capacity change from 0 to 256 [ 1146.634523][T14061] hid-multitouch 0003:1FD2:6007.005B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 1146.837710][T14061] usb 1-1: USB disconnect, device number 100 [ 1147.535557][T19053] loop2: detected capacity change from 0 to 2048 [ 1147.673295][T19053] loop2: p2 < > [ 1148.671896][T19069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1149.010620][T19073] loop4: detected capacity change from 0 to 8192 [ 1149.042184][T19073] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1149.062685][T19073] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1149.078610][T19073] REISERFS (device loop4): using ordered data mode [ 1149.086225][T19073] reiserfs: using flush barriers [ 1149.098663][T19073] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1149.122243][T19073] REISERFS (device loop4): checking transaction log (loop4) [ 1149.145251][T19073] REISERFS (device loop4): Using r5 hash to sort names [ 1149.158403][T19073] REISERFS (device loop4): using 3.5.x disk format [ 1149.169004][T19073] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1150.162144][ T3590] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1150.547733][T19105] loop2: detected capacity change from 0 to 8192 [ 1150.637243][T19105] REISERFS warning (device loop2): super-6514 reiserfs_parse_options: unknown quota format specified. [ 1150.945628][T19108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1151.119019][T19071] loop0: detected capacity change from 0 to 40427 [ 1151.136900][T19071] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1151.146943][T19071] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1151.178918][T19071] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1151.251931][ T3628] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1151.409926][ T3590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.465787][ T3590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.514138][T19071] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1151.540598][ T3590] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1151.557350][T19071] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1151.595849][ T3590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.631983][ T3628] usb 5-1: Using ep0 maxpacket: 32 [ 1151.736784][ T3590] usb 2-1: config 0 descriptor?? [ 1151.752224][ T3628] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1151.784890][ T3628] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1151.864168][ T3628] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1151.886437][ T3628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1151.900282][ T3628] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1151.910153][ T3628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1151.920592][ T3628] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1151.930570][ T3628] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1151.943646][ T3628] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1151.952824][ T3628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.962432][ T3628] usb 5-1: config 0 descriptor?? [ 1152.228170][T19129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1152.232962][ T3628] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1152.236139][T19129] IPv6: NLM_F_CREATE should be set when creating new route [ 1152.249833][ T3590] hid-multitouch 0003:1FD2:6007.005C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1152.467261][ T3628] usb 2-1: USB disconnect, device number 88 [ 1152.475436][T18417] usb 5-1: USB disconnect, device number 77 [ 1152.503394][T18417] usblp0: removed [ 1152.528386][T19141] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1152.643697][T19145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1153.010163][T19154] loop0: detected capacity change from 0 to 4096 [ 1153.187677][T19154] loop0: detected capacity change from 0 to 512 [ 1153.196650][T19154] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1153.239948][T19154] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 1153.246728][T19154] EXT4-fs (loop0): mount failed [ 1153.530508][T19186] mmap: syz.1.3946 (19186) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1155.102695][T19248] loop4: detected capacity change from 0 to 8192 [ 1155.865441][T19248] REISERFS warning (device loop4): super-6514 reiserfs_parse_options: unknown quota format specified. [ 1156.153989][T19259] netlink: 'syz.1.3970': attribute type 21 has an invalid length. [ 1156.171987][T19259] netlink: 'syz.1.3970': attribute type 1 has an invalid length. [ 1156.625433][T19281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.633409][T19285] tipc: Started in network mode [ 1156.640843][T19285] tipc: Node identity ac1414aa, cluster identity 4711 [ 1156.650503][T19285] tipc: Enabled bearer , priority 0 [ 1156.659342][T19285] tipc: Disabling bearer [ 1157.128792][T19308] Bluetooth: MGMT ver 1.22 [ 1157.355032][T19316] loop1: detected capacity change from 0 to 512 [ 1157.385997][T19316] EXT4-fs: Ignoring removed mblk_io_submit option [ 1157.401946][T19316] EXT4-fs: Ignoring removed i_version option [ 1157.453029][T19316] EXT4-fs error (device loop1): __ext4_iget:5044: inode #11: block 1: comm syz.1.3995: invalid block [ 1157.494038][T19316] EXT4-fs (loop1): Remounting filesystem read-only [ 1157.501169][T19316] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.3995: couldn't read orphan inode 11 (err -117) [ 1157.643703][T19316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1158.491604][T19329] fuse: Bad value for 'user_id' [ 1158.811549][T19336] loop2: detected capacity change from 0 to 512 [ 1158.839244][T19336] EXT4-fs: Ignoring removed mblk_io_submit option [ 1158.858518][T19336] EXT4-fs: Ignoring removed i_version option [ 1158.889155][T19336] EXT4-fs error (device loop2): __ext4_iget:5044: inode #11: block 1: comm syz.2.4000: invalid block [ 1158.910957][T19336] EXT4-fs (loop2): Remounting filesystem read-only [ 1158.922179][T19336] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.4000: couldn't read orphan inode 11 (err -117) [ 1158.991201][T19336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1159.000791][T19321] loop4: detected capacity change from 0 to 40427 [ 1159.046257][T19321] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1159.074125][T19321] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1159.119609][T19321] F2FS-fs (loop4): invalid crc value [ 1159.157027][T19321] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1159.318698][T19321] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1159.336233][T19321] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1160.186613][T18493] EXT4-fs (loop1): unmounting filesystem. [ 1160.298807][T19361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1160.724782][T19367] loop1: detected capacity change from 0 to 8192 [ 1160.807484][T19367] REISERFS warning (device loop1): super-6514 reiserfs_parse_options: unknown quota format specified. [ 1161.341836][ T4090] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1161.361286][T19373] ubi0: attaching mtd0 [ 1161.367305][T19373] ubi0: scanning is finished [ 1161.974413][T19373] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1162.080587][T19376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1162.094700][T19376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1162.165310][ T4090] usb 1-1: device descriptor read/64, error -71 [ 1162.173918][T19376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1162.190807][T19376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1162.982113][ T4090] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1163.179224][ T4090] usb 1-1: device descriptor read/64, error -71 [ 1163.238487][T18360] EXT4-fs (loop2): unmounting filesystem. [ 1163.314476][ T4090] usb usb1-port1: attempt power cycle [ 1163.444688][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 1163.477999][T19400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 1163.517099][T19400] device geneve2 entered promiscuous mode [ 1163.604076][T14061] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1163.743412][ T1026] block nbd3: Attempted send on invalid socket [ 1163.749650][ T1026] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.761555][ T1026] block nbd3: Attempted send on invalid socket [ 1163.768047][ T1026] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.777592][T19422] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1163.787572][ T1026] block nbd3: Attempted send on invalid socket [ 1163.793961][ T1026] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.804059][T19422] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1163.819672][T19422] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1163.829976][T19422] UDF-fs: Scanning with blocksize 512 failed [ 1163.845040][ T52] block nbd3: Attempted send on invalid socket [ 1163.851295][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.864794][ T52] block nbd3: Attempted send on invalid socket [ 1163.871181][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.880834][T14061] usb 3-1: Using ep0 maxpacket: 8 [ 1163.886280][T19422] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1163.902713][ T1026] block nbd3: Attempted send on invalid socket [ 1163.908923][ T1026] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.918424][T19422] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1163.928102][T19422] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1163.935843][T19422] UDF-fs: Scanning with blocksize 1024 failed [ 1163.942713][ T1026] block nbd3: Attempted send on invalid socket [ 1163.948906][ T1026] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.958467][ T52] block nbd3: Attempted send on invalid socket [ 1163.964998][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.977187][T19422] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1163.996443][ T52] block nbd3: Attempted send on invalid socket [ 1164.002873][ T52] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.022052][T14061] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1164.033369][T19422] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1164.040952][T14061] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1164.061836][T14061] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1164.066411][T19422] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1164.073279][T14061] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.092682][T14061] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1164.101720][T14061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.110179][T19422] UDF-fs: Scanning with blocksize 2048 failed [ 1164.132687][ T52] block nbd3: Attempted send on invalid socket [ 1164.138913][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.148877][T19422] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1164.160421][T19422] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1164.170122][T19422] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1164.178337][T19422] UDF-fs: Scanning with blocksize 4096 failed [ 1164.184766][T19422] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1164.376221][T14061] usb 3-1: usb_control_msg returned -71 [ 1164.391935][ T4265] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1164.399692][T14061] usbtmc 3-1:16.0: can't read capabilities [ 1164.412988][T14061] usb 3-1: USB disconnect, device number 91 [ 1164.439593][T19437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 1164.468998][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4035'. [ 1164.509371][T19437] device geneve2 entered promiscuous mode [ 1164.589769][ T4265] usb 5-1: device descriptor read/64, error -71 [ 1164.637796][T19441] loop1: detected capacity change from 0 to 256 [ 1164.675270][T19441] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xe1fd6063, utbl_chksum : 0xe619d30d) [ 1164.709795][T19441] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1164.738450][T19441] syz.1.4038: attempt to access beyond end of device [ 1164.738450][T19441] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 1164.760520][T19441] syz.1.4038: attempt to access beyond end of device [ 1164.760520][T19441] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 1164.787100][T19441] syz.1.4038: attempt to access beyond end of device [ 1164.787100][T19441] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 1164.808372][ T27] audit: type=1800 audit(1720869350.644:144): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4038" name="file1" dev="loop1" ino=1048663 res=0 errno=0 [ 1164.880043][ T4265] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1164.955416][T19452] 9pnet_fd: Insufficient options for proto=fd [ 1164.985682][T19454] loop1: detected capacity change from 0 to 16 [ 1165.000146][T19454] erofs: (device loop1): mounted with root inode @ nid 36. [ 1165.074026][T19456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4042'. [ 1165.083510][ T4265] usb 5-1: device descriptor read/64, error -71 [ 1165.099579][T19456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.100809][T18493] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 1165.138071][T18493] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1165.140126][T19456] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1165.153033][T19456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1165.170484][T18493] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1165.181490][T18493] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1165.183627][T19456] vhci_hcd vhci_hcd.0: Device attached [ 1165.203869][T18493] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1165.215849][ T4265] usb usb5-port1: attempt power cycle [ 1165.226158][T18493] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1165.238953][T18493] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1165.275781][T19457] vhci_hcd: connection closed [ 1165.278497][ T4084] vhci_hcd: stop threads [ 1165.290636][ T4084] vhci_hcd: release socket [ 1165.295381][ T4084] vhci_hcd: disconnect device [ 1165.634921][ T4084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.692139][ T4265] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1270.761775][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1270.768741][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3994/1:b..l [ 1270.777226][ C1] (detected by 1, t=10502 jiffies, g=124941, q=395 ncpus=2) [ 1270.784573][ C1] task:kworker/u4:7 state:R running task stack:19224 pid:3994 ppid:2 flags:0x00004000 [ 1270.796786][ C1] Workqueue: bat_events batadv_nc_worker [ 1270.802427][ C1] Call Trace: [ 1270.805702][ C1] [ 1270.808619][ C1] __schedule+0x142d/0x4550 [ 1270.813120][ C1] ? __sched_text_start+0x8/0x8 [ 1270.817955][ C1] ? print_irqtrace_events+0x210/0x210 [ 1270.823400][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 1270.828663][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 1270.833771][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 1270.839476][ C1] irqentry_exit+0x53/0x80 [ 1270.843963][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1270.849935][ C1] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 1270.855203][ C1] Code: 2b 00 74 08 4c 89 f7 e8 ef ae 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1270.875051][ C1] RSP: 0018:ffffc90005107a80 EFLAGS: 00000206 [ 1270.881100][ C1] RAX: 0000000000000001 RBX: 1ffff92000a20f5c RCX: 1ffff92000a20efc [ 1270.889076][ C1] RDX: dffffc0000000000 RSI: ffffffff8aec13c0 RDI: ffffffff8b3d47e0 [ 1270.897043][ C1] RBP: ffffc90005107be0 R08: dffffc0000000000 R09: fffffbfff2093845 [ 1270.905022][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000a20f58 [ 1270.912979][ C1] R13: dffffc0000000000 R14: ffffc90005107ae0 R15: 0000000000000246 [ 1270.921136][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1270.926496][ C1] ? batadv_nc_worker+0xc7/0x610 [ 1270.931418][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 1270.936570][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1270.942555][ C1] batadv_nc_worker+0xe8/0x610 [ 1270.947327][ C1] ? batadv_nc_worker+0xc7/0x610 [ 1270.952258][ C1] ? batadv_nc_worker+0xc7/0x610 [ 1270.957181][ C1] ? process_one_work+0x7a9/0x11d0 [ 1270.962285][ C1] process_one_work+0x8a9/0x11d0 [ 1270.967213][ C1] ? worker_detach_from_pool+0x260/0x260 [ 1270.972851][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1270.978398][ C1] ? kthread_data+0x4e/0xc0 [ 1270.982920][ C1] ? wq_worker_running+0x97/0x190 [ 1270.988218][ C1] worker_thread+0xa47/0x1200 [ 1270.992909][ C1] kthread+0x28d/0x320 [ 1270.996968][ C1] ? worker_clr_flags+0x190/0x190 [ 1271.001975][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1271.006554][ C1] ret_from_fork+0x1f/0x30 [ 1271.010965][ C1] [ 1271.014141][ C1] rcu: rcu_preempt kthread starved for 10525 jiffies! g124941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1271.025405][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1271.035357][ C1] rcu: RCU grace-period kthread stack dump: [ 1271.041224][ C1] task:rcu_preempt state:R running task stack:26072 pid:16 ppid:2 flags:0x00004000 [ 1271.051980][ C1] Call Trace: [ 1271.055255][ C1] [ 1271.058182][ C1] __schedule+0x142d/0x4550 [ 1271.062681][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1271.067526][ C1] ? __sched_text_start+0x8/0x8 [ 1271.072360][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 1271.077712][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1271.083585][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1271.088420][ C1] schedule+0xbf/0x180 [ 1271.092483][ C1] schedule_timeout+0x1b9/0x300 [ 1271.097314][ C1] ? console_conditional_schedule+0x40/0x40 [ 1271.103185][ C1] ? update_process_times+0x1b0/0x1b0 [ 1271.108541][ C1] ? prepare_to_swait_event+0x329/0x350 [ 1271.114068][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 1271.118905][ C1] ? dump_blkd_tasks+0x810/0x810 [ 1271.123821][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1271.129004][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 1271.133748][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1271.139625][ C1] ? finish_swait+0xcf/0x1e0 [ 1271.144195][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 1271.148767][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1271.153870][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1271.159747][ C1] ? __kthread_parkme+0x168/0x1c0 [ 1271.165018][ C1] kthread+0x28d/0x320 [ 1271.169235][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1271.174330][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1271.178898][ C1] ret_from_fork+0x1f/0x30 [ 1271.183303][ C1] [ 1271.186304][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1271.192604][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1271.197882][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340