last executing test programs: 4m13.619750175s ago: executing program 32 (id=22): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) syz_usb_disconnect(r0) r3 = socket$tipc(0x1e, 0x5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m54.209300969s ago: executing program 33 (id=289): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2m54.150354225s ago: executing program 3 (id=294): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r1, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m53.411646744s ago: executing program 3 (id=298): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) 2m52.06714945s ago: executing program 3 (id=301): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x4020400) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x4004}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 2m51.535656717s ago: executing program 2 (id=302): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 2m51.338633787s ago: executing program 3 (id=304): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[], 0x1, 0x5fb, &(0x7f0000001200)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x24142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x171c, 0x0, 0x0, 0x0, 0x1, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000010000000000000f0ffeffffff0ff00", [0x1]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x100000000000000) 2m50.824400397s ago: executing program 2 (id=307): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m49.993653398s ago: executing program 2 (id=309): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x40, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 2m49.622493764s ago: executing program 3 (id=311): setuid(0xee00) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 2m49.559314358s ago: executing program 2 (id=312): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000000380), 0xfe, 0x55b, &(0x7f0000001640)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2m48.87669593s ago: executing program 3 (id=314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8310fc1bf01e2fad, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) 2m48.186367825s ago: executing program 34 (id=314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8310fc1bf01e2fad, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) 2m47.966905579s ago: executing program 2 (id=317): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000729, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x7, 0x4) 2m44.572185105s ago: executing program 2 (id=328): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)='1', 0x1}], 0x1}}], 0x1, 0x60008001) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2m42.261738109s ago: executing program 35 (id=328): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)='1', 0x1}], 0x1}}], 0x1, 0x60008001) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2m4.442429163s ago: executing program 8 (id=440): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000180)=[0x0], 0x1, r4, r3, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x2, 0x0, 0x25, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 2m3.934536139s ago: executing program 8 (id=443): r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m3.097488403s ago: executing program 8 (id=446): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x891c, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 2m2.139461309s ago: executing program 8 (id=451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000000380), 0xfe, 0x55b, &(0x7f0000001640)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2m0.178256009s ago: executing program 8 (id=462): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff041, 0x0) 1m55.96101203s ago: executing program 8 (id=478): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x29ff, 0xfffffffd, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x11}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m54.520621404s ago: executing program 36 (id=478): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x29ff, 0xfffffffd, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x11}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.357867566s ago: executing program 9 (id=526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$chown(0x4, r2, 0x0, 0x0) 1m35.95465217s ago: executing program 9 (id=528): userfaultfd(0x80001) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x800) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x80000000000001, 0x3, 0x0, 0x8, 0x1, 0x200000000}, 0x0, 0x0) 1m35.691927116s ago: executing program 9 (id=529): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00'}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd, 0x0, 0xfffffffc}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x2, 0x20000000, 0x4) 1m35.312929632s ago: executing program 9 (id=532): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723d447466f52c6e6c733d63703835372c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030363734352c00"], 0x3, 0x6a4, &(0x7f0000000100)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') 1m32.81953517s ago: executing program 9 (id=544): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x40000) ppoll(&(0x7f0000000200)=[{r0, 0x4000}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 1m31.160320577s ago: executing program 9 (id=552): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x10) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000002c00)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 1m30.425739657s ago: executing program 37 (id=552): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x10) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000002c00)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 51.60468106s ago: executing program 7 (id=704): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 50.992253075s ago: executing program 7 (id=709): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000001440)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x1}}, 0x10, 0x0}, 0x0) close(r0) 50.129599632s ago: executing program 7 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x18, r3, 0x309, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 49.697171742s ago: executing program 7 (id=719): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@noblock_validity}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x6a}}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4ba, 0x0, 0x0, 0x0, 0x0, 0x1, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00000000000000000000000000004000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 48.672088308s ago: executing program 7 (id=721): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000004) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a6243c, &(0x7f0000003080)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 46.848835113s ago: executing program 7 (id=729): semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) shmget$private(0x0, 0x400000, 0x1, &(0x7f000000e000/0x400000)=nil) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x204a) 46.84865353s ago: executing program 38 (id=729): semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) shmget$private(0x0, 0x400000, 0x1, &(0x7f000000e000/0x400000)=nil) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x204a) 14.733138701s ago: executing program 0 (id=873): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180)="a7", 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080), 0x8) 14.10098183s ago: executing program 0 (id=866): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x51c, &(0x7f00000008c0)="$eJzs3U9vG2kZAPBnnDhJ2yzJAodlpV1W7KJ0BbWTDbsbcdgtAnGrBCr3EiVOFMWJo9gpTVShVHwAJISgV05ckPgASKgfAVWqRO8IEAhBCwcOwKCxxzQ14yZVY7ub/H7S2O+8M36f502T8Tt/OhPAufVWRFyNiLGIeDciZvL6Uj7FYWfK1nv86PZKNmVLrv81iSSvO9peVncp/9hU561Qc/9gc7ler+3m89XW1k61uX9wZWNreb22XtteXFz4YOnDpfeX5k+ln1m/PvrGH3/yw59/86Nff/l7v7vx58vfz3L9er68tx+n5WH7tZz9LP5nPCJ2BxFsBMby/pRHnQgAACeSjfE/HRFfaI//Z2KsPZpr6x3STQ0/OwAAAOA0pB9Px7+SiBQAAAA4sz6OiOlISpX8WoDpKJUqlc41vJ+Ni6V6o9n60lpjb3s1WxYxG+XS2ka9Np9fUzsb5SSbX2iXn8y/1zO/GBGvRsSPZy605ysrjfrqqA9+AAAAwDlxqWf//x8znf1/AAAA4IyZHXUCAAAAwMD12/9PhpwHAAAAMDj99v8nh5wHAAAAMBDfunYtm9Lu869Xb+7vbTZuXlmtNTcrW3srlZXG7k5lvdFYb9+zb+u49uqNxs5XYnvvVrVVu5pUm/sHN7Yae9utGxueHwgAAACj8urn7z1MIuLwqxfaU2Yiexnr8wH3CoAzo/Q8K/9hcHkAw9fvax44+8ZHnQAwOoejTgAYtadu9VEwKDh68U7p6Mq/GWBSAADAqZr7XPH5/2wXoDzq5ICBeq7z/8CZ4vw/nF/Pef7//qDyAIav/GQE4FIgOKeOe9RH35t3FJ3/nyhaMU2PbQsAABio6fZrUqrk5wKno1SqVCJeaf9X/3KytlGvzUfEpyLitzPlyWx+ofMZjwcEAAAAAAAAAAAAAAAAAAAAAAAAgBNK0yRSAAAA4EyLKP0pyZ//NTfzznTv8YGJ5J8z0XmkV/f5gK3dhaz+b936aN29/tNby63W7nvDPnoBAAAAFOnup7ffF0adDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnzeNHt1fyaWKYcf/ytYiYfSr+SmfJeEy136eiHBEX/57E+JHPJRExdgrxD+9ExGtF8ZMsrZjNs+iNX4qIC8OJ/0aapoXxL51CfDjP7mXbn6tFf3+leKv9Xvz3P55PL6q7/ZssiN/d/o312f69csIYrz/4ZbVv/DsRr48Xb3+68ZM+8d8uarDgh/Ld7xwc/F9lp/FIfxYxF8Xxj8aqtrZ2qs39gysbW8vrtfXa9uLiwgdLHy69vzRfXduo1/LXwj7+6I1f/aen6t9pR7v/0Sf+7DH9fycrlI9Upr1h8mAPbj36TKdY7mmiHf/y28W/f689I372O/HF/HsgWz7XLR92yke9+Yv7bxYmlsdf7dP/4/79L/drtMe73/7B70+4KgAwBM39g83ler22O/DC3TRNX6Sdi8NL9VwWuqO7gYWYell6+kksTEbE8IKexpEtAADgZfNk0D/qTAAAAAAAAAAAAAAAAAAAAOD8au5HadC3E+uNeTiargIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNN/AwAA//9hzdao") truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) 13.485467748s ago: executing program 0 (id=868): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setgid(0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x16}]}) mkdir(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.013370645s ago: executing program 0 (id=875): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 10.769364066s ago: executing program 0 (id=881): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x880ff, 0x0) 9.448716891s ago: executing program 0 (id=885): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd", @ANYRES16=r1], 0x9) 8.374041954s ago: executing program 4 (id=892): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff, 0x0, 0x1000000400}, 0x0, 0x0) 6.335425679s ago: executing program 6 (id=896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 5.495536089s ago: executing program 4 (id=897): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) sendto$inet(r0, &(0x7f00000005c0)="c1", 0x1, 0x40051, 0x0, 0x0) 5.005737951s ago: executing program 1 (id=898): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000240)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 4.315944137s ago: executing program 5 (id=899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@alu, @jmp={0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f27"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 3.987676024s ago: executing program 6 (id=900): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xfffffffc, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="0e", 0x1, 0x2404084c, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 3.878412881s ago: executing program 1 (id=901): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$inet6(r1, 0x0, 0x0, 0x0) 3.700286682s ago: executing program 5 (id=902): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) 3.632841246s ago: executing program 4 (id=903): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4c0, &(0x7f00000031c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000540)="9e", 0x1, 0xfecf) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x4000) 3.399385031s ago: executing program 5 (id=904): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.236499542s ago: executing program 6 (id=905): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x20008000) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x5, 0x0, &(0x7f0000000040)) 2.452786441s ago: executing program 4 (id=906): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000035c0)=""/4099, 0x1003}], 0x1, 0x0, 0x0, 0x407006}, 0x104) 2.25267186s ago: executing program 1 (id=907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg\x00', 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f00000001c0)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 2.176531662s ago: executing program 6 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2.154751072s ago: executing program 5 (id=909): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_delete(r0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)) 1.576819789s ago: executing program 1 (id=910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x60, r5, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}]}}]}, 0x60}}, 0x0) 1.488929038s ago: executing program 5 (id=911): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[], 0x9, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 1.113110713s ago: executing program 5 (id=912): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6f5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 988.0729ms ago: executing program 1 (id=913): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000040), 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) dup3(r0, r1, 0x0) 767.279261ms ago: executing program 6 (id=914): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8622}, 0x2f) 760.333884ms ago: executing program 4 (id=915): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x64, &(0x7f0000000300)=ANY=[], 0x0) 372.682629ms ago: executing program 1 (id=916): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x0, 'pimreg0\x00', {0x3}, 0x46}) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 355.900872ms ago: executing program 4 (id=917): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=918): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4c0, &(0x7f00000031c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000540)="9e", 0x1, 0xfecf) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x4000) kernel console output (not intermixed with test programs): e #11: comm syz-executor: invalid size [ 335.054899][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.164893][ T5816] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.174188][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.391686][ T13] bridge_slave_1: left allmulticast mode [ 335.397626][ T13] bridge_slave_1: left promiscuous mode [ 335.404474][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.424701][ T13] bridge_slave_0: left allmulticast mode [ 335.430872][ T13] bridge_slave_0: left promiscuous mode [ 335.441778][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.761355][ T5816] Bluetooth: hci2: command tx timeout [ 336.018731][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.077272][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.136816][ T13] bond0 (unregistering): Released all slaves [ 336.488996][ T6942] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.568840][ T6942] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.628530][ T6942] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.737656][ T6942] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.980007][ T7023] loop5: detected capacity change from 0 to 16 [ 337.063161][ T7023] erofs (device loop5): mounted with root inode @ nid 36. [ 337.207900][ T5816] Bluetooth: hci3: command tx timeout [ 337.528574][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.771046][ T13] hsr_slave_0: left promiscuous mode [ 337.802168][ T13] hsr_slave_1: left promiscuous mode [ 337.828981][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.836910][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.851164][ T5816] Bluetooth: hci2: command tx timeout [ 337.875125][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.883061][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.920369][ T13] veth1_macvtap: left promiscuous mode [ 337.926401][ T13] veth0_macvtap: left promiscuous mode [ 337.932442][ T13] veth1_vlan: left promiscuous mode [ 337.938017][ T13] veth0_vlan: left promiscuous mode [ 338.700172][ T13] team0 (unregistering): Port device team_slave_1 removed [ 338.728631][ T13] team0 (unregistering): Port device team_slave_0 removed [ 339.009719][ T7003] chnl_net:caif_netlink_parms(): no params data found [ 339.281260][ T5816] Bluetooth: hci3: command tx timeout [ 339.493480][ T6942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.659780][ T6942] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.701294][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.709003][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.789605][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.797385][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.031297][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.038992][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.052355][ T7003] bridge_slave_0: entered allmulticast mode [ 340.061372][ T7003] bridge_slave_0: entered promiscuous mode [ 340.130993][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.138721][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.151623][ T7003] bridge_slave_1: entered allmulticast mode [ 340.160825][ T7003] bridge_slave_1: entered promiscuous mode [ 340.522380][ T7003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.628673][ T7003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.893272][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.921388][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.936692][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.961494][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.974750][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.976663][ T7003] team0: Port device team_slave_0 added [ 341.013660][ T7003] team0: Port device team_slave_1 added [ 341.031942][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.361688][ T5816] Bluetooth: hci3: command tx timeout [ 341.496107][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.509940][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.536351][ T7003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.556207][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.563538][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.593680][ T7003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.959718][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.967041][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.999296][ T6942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.215255][ T7003] hsr_slave_0: entered promiscuous mode [ 342.261565][ T7003] hsr_slave_1: entered promiscuous mode [ 342.271886][ T7003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.282036][ T7003] Cannot create hsr debugfs directory [ 342.416044][ T7045] chnl_net:caif_netlink_parms(): no params data found [ 343.137182][ T51] Bluetooth: hci4: command tx timeout [ 343.144995][ T7003] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 343.256028][ T7003] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 343.287552][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 343.294134][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 343.304190][ T7003] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 343.372094][ T7003] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 343.447193][ T5820] Bluetooth: hci3: command tx timeout [ 343.965611][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 343.966790][ T6942] veth0_vlan: entered promiscuous mode [ 343.972090][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 344.021598][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 344.201536][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.209265][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.219239][ T7045] bridge_slave_0: entered allmulticast mode [ 344.228350][ T7045] bridge_slave_0: entered promiscuous mode [ 344.265168][ T6942] veth1_vlan: entered promiscuous mode [ 344.310157][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.318736][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.326807][ T7045] bridge_slave_1: entered allmulticast mode [ 344.336158][ T7045] bridge_slave_1: entered promiscuous mode [ 344.353228][ T44] libceph: connect (1)[c::]:6789 error -101 [ 344.359567][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 344.535681][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.601952][ T7003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.638302][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.687368][ T7078] ceph: No mds server is up or the cluster is laggy [ 344.733999][ T6942] veth0_macvtap: entered promiscuous mode [ 344.757373][ T7003] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.942639][ T3881] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.950286][ T3881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.973365][ T6942] veth1_macvtap: entered promiscuous mode [ 344.990263][ T7045] team0: Port device team_slave_0 added [ 345.064883][ T3881] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.072615][ T3881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.105311][ T7045] team0: Port device team_slave_1 added [ 345.162131][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.178528][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.188783][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.199542][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.209721][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.220616][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.221172][ T5816] Bluetooth: hci4: command tx timeout [ 345.235306][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.255539][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.270107][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.281477][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.294342][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.305613][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.316700][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.331915][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.397973][ T6942] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.408547][ T6942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.419105][ T6942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.428296][ T6942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.890822][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.898019][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.926273][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.007534][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.015155][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.041697][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.462838][ T7045] hsr_slave_0: entered promiscuous mode [ 346.522741][ T7045] hsr_slave_1: entered promiscuous mode [ 346.563382][ T7045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.571371][ T7045] Cannot create hsr debugfs directory [ 347.285529][ T5816] Bluetooth: hci4: command tx timeout [ 347.744617][ T7045] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 347.774442][ T7045] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 347.842989][ T7045] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 347.925288][ T7045] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 348.138740][ T7003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.228955][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.362857][ T5816] Bluetooth: hci4: command tx timeout [ 349.413941][ T7045] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.458198][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.465936][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.486489][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.494239][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.552638][ T7138] overlayfs: failed to resolve './file0': -2 [ 350.741719][ T7003] veth0_vlan: entered promiscuous mode [ 350.893955][ T7003] veth1_vlan: entered promiscuous mode [ 351.007975][ T7003] veth0_macvtap: entered promiscuous mode [ 351.037128][ T7003] veth1_macvtap: entered promiscuous mode [ 351.092480][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.105342][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.116129][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.127233][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.137415][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.148238][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.158477][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.169278][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.184080][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.222421][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.234312][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.245429][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.257278][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.267545][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.278620][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.288804][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.299564][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.316912][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.566523][ T7003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.575998][ T7003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.585264][ T7003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.594490][ T7003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.728794][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.896317][ T4120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.904554][ T4120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.077615][ T4120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.085824][ T4120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.241116][ T7045] veth0_vlan: entered promiscuous mode [ 353.369356][ T7045] veth1_vlan: entered promiscuous mode [ 353.679560][ T7045] veth0_macvtap: entered promiscuous mode [ 353.820149][ T7045] veth1_macvtap: entered promiscuous mode [ 354.032536][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.043389][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.053597][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.064406][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.077770][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.090989][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.102178][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.112949][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.123110][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.133930][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.149235][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.299917][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.310828][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.321797][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.333015][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.343331][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.354131][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.364324][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.375226][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.388385][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.400085][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.416256][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.572140][ T7045] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.581407][ T7045] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.593649][ T7045] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.603879][ T7045] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.796202][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 356.821851][ T7190] vlan2: entered promiscuous mode [ 356.827159][ T7190] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 356.835851][ T7190] vlan2: entered allmulticast mode [ 356.845534][ T7190] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 356.943316][ T7190] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 356.950929][ T7190] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 357.878699][ T7203] IPv4: Oversized IP packet from 172.20.20.24 [ 357.889467][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 357.897934][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 358.244297][ T44] kernel read not supported for file inotify (pid: 44 comm: kworker/1:1) [ 359.215882][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 359.581421][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 359.613843][ T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.625409][ T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.669294][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.677589][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.775266][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 359.784884][ T8] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 359.793950][ T8] usb 6-1: Product: syz [ 359.798359][ T8] usb 6-1: Manufacturer: syz [ 359.865315][ T8] hub 6-1:4.0: USB hub found [ 359.986485][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.995081][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.096840][ T8] hub 6-1:4.0: 2 ports detected [ 360.769227][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.367'. [ 360.809165][ T8] hub 6-1:4.0: set hub depth failed [ 360.836796][ T8] usb 6-1: USB disconnect, device number 5 [ 360.923944][ T7236] loop7: detected capacity change from 0 to 1024 [ 360.943484][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.952293][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.119175][ T7236] hfsplus: extend alloc file! (8192,65536,366) [ 361.123831][ T4663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.135397][ T4663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.046010][ T7245] loop8: detected capacity change from 0 to 512 [ 362.057960][ T7245] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 362.125004][ T7245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 362.151459][ T7245] System zones: 1-12 [ 362.182757][ T7245] EXT4-fs (loop8): 1 truncate cleaned up [ 362.190423][ T7245] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.568158][ T7256] loop6: detected capacity change from 0 to 256 [ 362.629995][ T7256] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 362.747515][ T7256] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 362.759201][ T7256] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 362.767376][ T7256] UDF-fs: Scanning with blocksize 512 failed [ 362.857372][ T7256] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 362.910863][ T7045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.997344][ T7256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.343990][ T7263] process 'syz.8.374' launched './file0' with NULL argv: empty string added [ 363.357390][ T29] audit: type=1326 audit(1732441624.177:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 363.381457][ T29] audit: type=1326 audit(1732441624.187:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 363.408353][ T29] audit: type=1326 audit(1732441624.207:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 363.432107][ T29] audit: type=1326 audit(1732441624.207:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 363.456284][ T29] audit: type=1326 audit(1732441624.207:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 363.478701][ T29] audit: type=1326 audit(1732441624.207:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 363.505204][ T29] audit: type=1326 audit(1732441624.207:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 363.528817][ T29] audit: type=1326 audit(1732441624.217:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 363.550984][ T29] audit: type=1326 audit(1732441624.217:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 363.573205][ T29] audit: type=1326 audit(1732441624.217:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.8.374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 364.053965][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.8.378'. [ 364.128167][ T7271] loop5: detected capacity change from 0 to 512 [ 364.171043][ T7271] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 364.249071][ T7271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 364.275877][ T7271] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.379: corrupted in-inode xattr: e_value size too large [ 364.435617][ T7271] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.379: couldn't read orphan inode 15 (err -117) [ 364.567489][ T7271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.679215][ T6062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.078259][ T7295] loop7: detected capacity change from 0 to 256 [ 366.315594][ T7299] loop5: detected capacity change from 0 to 4096 [ 366.354049][ T7295] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 366.382174][ T7299] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 366.449435][ T7295] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 366.461027][ T7295] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 366.474491][ T7295] UDF-fs: Scanning with blocksize 512 failed [ 366.526436][ T7295] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 366.622026][ T7295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.272192][ T7299] syz.5.387 (7299) used greatest stack depth: 3584 bytes left [ 367.779256][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.392'. [ 368.424827][ T7322] loop6: detected capacity change from 0 to 512 [ 368.478029][ T7320] loop7: detected capacity change from 0 to 512 [ 368.499107][ T7320] ext4: Unknown parameter 'seclabel' [ 368.520461][ T7322] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 368.822701][ T7322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 368.854363][ T7322] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.399: corrupted in-inode xattr: e_value size too large [ 368.895114][ T7322] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.399: couldn't read orphan inode 15 (err -117) [ 369.089653][ T7322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.178607][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.403'. [ 369.203281][ T7333] vlan2: entered promiscuous mode [ 369.208597][ T7333] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 369.217217][ T7333] vlan2: entered allmulticast mode [ 369.222852][ T7333] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 369.440304][ T7333] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 369.458575][ T7333] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 369.797527][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.908770][ T7339] loop8: detected capacity change from 0 to 256 [ 370.013008][ T7339] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 370.079282][ T7339] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 370.089581][ T7339] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 370.098675][ T7339] UDF-fs: Scanning with blocksize 512 failed [ 370.326937][ T7339] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 370.453892][ T7339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.671580][ T5883] ------------[ cut here ]------------ [ 370.677263][ T5883] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 370.691106][ T5883] WARNING: CPU: 1 PID: 5883 at net/mac80211/rate.c:404 __rate_control_send_low+0x892/0x8e0 [ 370.701589][ T5883] Modules linked in: [ 370.705747][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:4 Tainted: G W 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 370.718072][ T5883] Tainted: [W]=WARN [ 370.722131][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.732522][ T5883] Workqueue: mld mld_ifc_work [ 370.737528][ T5883] RIP: 0010:__rate_control_send_low+0x892/0x8e0 [ 370.744212][ T5883] Code: 8b 5d a8 75 32 45 85 e4 75 3b 83 7d c4 00 75 47 48 c7 c7 79 fd 37 91 44 89 fa 89 d9 44 8b 45 94 44 8b 4d a4 e8 df 21 3f f2 90 <0f> 0b 90 90 48 8b 5d b8 e9 6e fd ff ff e8 9c 11 35 f3 48 8b 75 b0 [ 370.764189][ T5883] RSP: 0000:ffff888022fa2708 EFLAGS: 00010293 [ 370.770729][ T5883] RAX: ffffffff8159ebe9 RBX: 0000000000000000 RCX: ffff8881199620c0 [ 370.778959][ T5883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.787257][ T5883] RBP: ffff888022fa27c0 R08: ffffffff8159ebdf R09: 0000000000000000 [ 370.795568][ T5883] R10: ffff8880227a2350 R11: 0000000000000004 R12: 0000000000000000 [ 370.803885][ T5883] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000ffffffff [ 370.812186][ T5883] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 370.821474][ T5883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.828348][ T5883] CR2: 00000000f7450b78 CR3: 00000000604ca000 CR4: 00000000003526f0 [ 370.836665][ T5883] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 370.844964][ T5883] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 370.853259][ T5883] Call Trace: [ 370.856729][ T5883] [ 370.859843][ T5883] ? show_trace_log_lvl+0x268/0x3d0 [ 370.865420][ T5883] ? rate_control_send_low+0x26f/0xa50 [ 370.871288][ T5883] ? show_regs+0xb4/0xe0 [ 370.875813][ T5883] ? __warn+0x2c7/0x780 [ 370.880234][ T5883] ? __rate_control_send_low+0x892/0x8e0 [ 370.886303][ T5883] ? report_bug+0x929/0xbd0 [ 370.891183][ T5883] ? __rate_control_send_low+0x892/0x8e0 [ 370.897143][ T5883] ? handle_bug+0x6d/0x90 [ 370.901825][ T5883] ? exc_invalid_op+0x1f/0x50 [ 370.906799][ T5883] ? asm_exc_invalid_op+0x1f/0x30 [ 370.908776][ T7348] loop5: detected capacity change from 0 to 1024 [ 370.912132][ T5883] ? __warn_printk+0x43f/0x470 [ 370.912290][ T5883] ? __warn_printk+0x449/0x470 [ 370.928687][ T5883] ? __rate_control_send_low+0x892/0x8e0 [ 370.934728][ T5883] ? __rate_control_send_low+0x891/0x8e0 [ 370.940804][ T5883] rate_control_send_low+0x26f/0xa50 [ 370.941559][ T7348] hfsplus: extend alloc file! (8192,65536,366) [ 370.946330][ T5883] rate_control_get_rate+0x1bb/0xc90 [ 370.958171][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 370.964408][ T5883] ieee80211_tx_h_rate_ctrl+0x1278/0x1ca0 [ 370.970503][ T5883] invoke_tx_handlers_late+0xd9/0x2960 [ 370.976365][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 370.982603][ T5883] ? ieee80211_tx_h_select_key+0xfc9/0x1c90 [ 370.988851][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 370.995091][ T5883] ieee80211_tx_dequeue+0x55eb/0x7260 [ 371.000889][ T5883] ? filter_irq_stacks+0x60/0x1a0 [ 371.006235][ T5883] ieee80211_handle_wake_tx_queue+0x152/0x3b0 [ 371.012725][ T5883] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 371.019638][ T5883] ieee80211_queue_skb+0x2e74/0x3ac0 [ 371.025344][ T5883] ieee80211_tx+0x406/0x570 [ 371.030178][ T5883] ieee80211_xmit+0x54a/0x5b0 [ 371.035253][ T5883] __ieee80211_subif_start_xmit+0x1413/0x1c40 [ 371.041767][ T5883] ieee80211_subif_start_xmit+0xab/0x680 [ 371.047727][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 371.053344][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 371.059493][ T5883] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 371.066159][ T5883] dev_hard_start_xmit+0x247/0xa20 [ 371.071654][ T5883] __dev_queue_xmit+0x366a/0x57d0 [ 371.076963][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 371.083181][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 371.088705][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 371.094917][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 371.100425][ T5883] ? __dev_queue_xmit+0x3d6/0x57d0 [ 371.105967][ T5883] neigh_resolve_output+0x9d0/0xaf0 [ 371.111559][ T5883] ? __pfx_eth_header+0x10/0x10 [ 371.116732][ T5883] ? __pfx_neigh_resolve_output+0x10/0x10 [ 371.122813][ T5883] ip6_finish_output2+0x2429/0x2c30 [ 371.128333][ T5883] ip6_finish_output+0xbb8/0x1560 [ 371.133728][ T5883] ip6_output+0x356/0x620 [ 371.138327][ T5883] ? __pfx_ip6_finish_output+0x10/0x10 [ 371.144141][ T5883] ? __pfx_ip6_output+0x10/0x10 [ 371.149256][ T5883] mld_sendpack+0xcb2/0x1530 [ 371.154247][ T5883] ? __pfx_dst_output+0x10/0x10 [ 371.159434][ T5883] mld_ifc_work+0x1250/0x18c0 [ 371.164557][ T5883] ? kmsan_get_metadata+0x13e/0x1c0 [ 371.170121][ T5883] ? __pfx_mld_ifc_work+0x10/0x10 [ 371.175630][ T5883] process_scheduled_works+0xae0/0x1c40 [ 371.181613][ T5883] worker_thread+0xea7/0x14f0 [ 371.186614][ T5883] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 371.192862][ T5883] kthread+0x3e2/0x540 [ 371.197195][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 371.202699][ T5883] ? __pfx_kthread+0x10/0x10 [ 371.207555][ T5883] ret_from_fork+0x6d/0x90 [ 371.212333][ T5883] ? __pfx_kthread+0x10/0x10 [ 371.217195][ T5883] ret_from_fork_asm+0x1a/0x30 [ 371.222366][ T5883] [ 371.225568][ T5883] ---[ end trace 0000000000000000 ]--- [ 372.172267][ T7356] loop7: detected capacity change from 0 to 256 [ 374.444287][ T3837] Bluetooth: hci5: Frame reassembly failed (-84) [ 374.610855][ T7391] syzkaller1: entered promiscuous mode [ 374.721243][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 375.584398][ T7400] loop5: detected capacity change from 0 to 256 [ 376.482527][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 376.486345][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 376.664935][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.672889][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.680844][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.688592][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.696440][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.709155][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.718510][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.726889][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.734723][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.742580][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.750296][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.758213][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.766043][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.773841][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.781649][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.789365][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.797205][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.810157][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.821656][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.829393][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.837426][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.845307][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.853104][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.860899][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.868617][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.876546][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.884461][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.892277][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.899999][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.912698][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.922005][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 376.929811][ T5883] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 377.042327][ T5883] hid-generic 0000:0000:0003.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 377.351314][ T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 377.489258][ T7411] loop5: detected capacity change from 0 to 2048 [ 377.537574][ T44] usb 1-1: config 0 has no interfaces? [ 377.543745][ T44] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 377.553373][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.657222][ T44] usb 1-1: config 0 descriptor?? [ 378.063726][ T44] usb 1-1: USB disconnect, device number 9 [ 378.083818][ T7411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.512865][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 378.512944][ T29] audit: type=1804 audit(1732441639.387:35): pid=7411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.448" name="/newroot/74/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 378.888018][ T6062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.539372][ T7461] loop8: detected capacity change from 0 to 1024 [ 380.715326][ T7461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.731236][ T7465] loop5: detected capacity change from 0 to 256 [ 380.751594][ T7465] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 380.803581][ T7465] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 380.813631][ T7465] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 380.821742][ T7465] UDF-fs: Scanning with blocksize 512 failed [ 380.843937][ T44] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 380.947692][ T7465] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 381.031953][ T7465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.078401][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.090030][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.100312][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 381.117999][ T44] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 381.128785][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.374671][ T44] usb 1-1: config 0 descriptor?? [ 382.116135][ T7482] loop7: detected capacity change from 0 to 16 [ 382.174937][ T7482] erofs (device loop7): mounted with root inode @ nid 36. [ 382.192251][ T7482] syz.7.460: attempt to access beyond end of device [ 382.192251][ T7482] loop7: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 382.206683][ T7482] erofs (device loop7): read error -5 @ 0 of nid 36 [ 382.378320][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 382.412069][ T44] a4tech 0003:09DA:022B.0008: item fetching failed at offset 5/7 [ 382.424861][ T44] a4tech 0003:09DA:022B.0008: parse failed [ 382.431362][ T44] a4tech 0003:09DA:022B.0008: probe with driver a4tech failed with error -22 [ 382.451847][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 382.502605][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 382.597058][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 382.619019][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 382.639744][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 382.687036][ T44] usb 1-1: USB disconnect, device number 10 [ 382.803768][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 382.906848][ T7486] loop5: detected capacity change from 0 to 512 [ 382.976669][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 383.010642][ T7489] loop6: detected capacity change from 0 to 1024 [ 383.078344][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 383.112931][ T7486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.126460][ T7486] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.170955][ T7045] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 383.299555][ T29] audit: type=1804 audit(1732441644.167:36): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.465" name="/newroot/77/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 383.323140][ T7486] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 383.411159][ T7486] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 383.424069][ T7486] EXT4-fs (loop5): This should not happen!! Data will be lost [ 383.424069][ T7486] [ 383.434282][ T7486] EXT4-fs (loop5): Total free blocks count 0 [ 383.442144][ T7486] EXT4-fs (loop5): Free/Dirty block details [ 383.448299][ T7486] EXT4-fs (loop5): free_blocks=65280 [ 383.453973][ T7486] EXT4-fs (loop5): dirty_blocks=1 [ 383.459236][ T7486] EXT4-fs (loop5): Block reservation details [ 383.470314][ T7486] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 383.482983][ T29] audit: type=1804 audit(1732441644.227:37): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.465" name="/newroot/77/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 383.889572][ T6062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.216866][ T7495] loop7: detected capacity change from 0 to 2048 [ 384.331278][ T7504] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.878459][ T7003] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 384.889125][ T7003] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=16) [ 385.097212][ T7003] Remounting filesystem read-only [ 385.106791][ T7003] NILFS (loop7): error -5 truncating bmap (ino=16) [ 385.166609][ T7003] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 386.038148][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.194012][ T7045] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.216313][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.507530][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.724122][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.801290][ T7530] loop7: detected capacity change from 0 to 512 [ 386.863971][ T7530] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 386.971016][ T7530] EXT4-fs (loop7): 1 truncate cleaned up [ 386.978554][ T7530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.051033][ T11] bridge_slave_1: left allmulticast mode [ 387.056950][ T11] bridge_slave_1: left promiscuous mode [ 387.063882][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.155517][ T11] bridge_slave_0: left allmulticast mode [ 387.161761][ T11] bridge_slave_0: left promiscuous mode [ 387.168364][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.996826][ T7003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.563093][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.680914][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.707563][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.720029][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.731117][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.745452][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.830642][ T5816] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 388.834354][ T11] bond0 (unregistering): Released all slaves [ 388.871919][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.329928][ T7553] loop5: detected capacity change from 0 to 256 [ 389.373829][ T7554] input: syz0 as /devices/virtual/input/input11 [ 389.539504][ T7553] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 390.319471][ T11] hsr_slave_0: left promiscuous mode [ 390.359028][ T11] hsr_slave_1: left promiscuous mode [ 390.414140][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.422105][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.516453][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.524452][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.666162][ T11] veth1_macvtap: left promiscuous mode [ 390.672135][ T11] veth0_macvtap: left promiscuous mode [ 390.678054][ T11] veth1_vlan: left promiscuous mode [ 390.683789][ T11] veth0_vlan: left promiscuous mode [ 391.029735][ T5816] Bluetooth: hci4: command tx timeout [ 391.685755][ T11] team0 (unregistering): Port device team_slave_1 removed [ 391.770200][ T11] team0 (unregistering): Port device team_slave_0 removed [ 392.052521][ T7543] chnl_net:caif_netlink_parms(): no params data found [ 392.719770][ T7543] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.727575][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.737669][ T7543] bridge_slave_0: entered allmulticast mode [ 392.747026][ T7543] bridge_slave_0: entered promiscuous mode [ 392.759262][ T7543] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.767077][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.777437][ T7543] bridge_slave_1: entered allmulticast mode [ 392.792230][ T7543] bridge_slave_1: entered promiscuous mode [ 392.869023][ T7543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.896529][ T7543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.968203][ T7543] team0: Port device team_slave_0 added [ 392.990798][ T7543] team0: Port device team_slave_1 added [ 393.041798][ T5816] Bluetooth: hci4: command tx timeout [ 393.062629][ T7543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.069761][ T7543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.099888][ T7543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.118100][ T7543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.131649][ T7543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.160970][ T7543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.287584][ T7543] hsr_slave_0: entered promiscuous mode [ 393.310835][ T7543] hsr_slave_1: entered promiscuous mode [ 393.319213][ T7543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.327113][ T7543] Cannot create hsr debugfs directory [ 393.697712][ T7543] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 393.728507][ T7543] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 393.756526][ T7543] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 393.776177][ T7543] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 394.128476][ T7543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.185601][ T7543] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.224242][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.231996][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.265866][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.273457][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.909571][ T7543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.121417][ T5816] Bluetooth: hci4: command tx timeout [ 395.579266][ T7543] veth0_vlan: entered promiscuous mode [ 395.614559][ T7543] veth1_vlan: entered promiscuous mode [ 395.741164][ T7543] veth0_macvtap: entered promiscuous mode [ 395.769570][ T7543] veth1_macvtap: entered promiscuous mode [ 395.822793][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.834721][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.844980][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.861719][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.873586][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.884313][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.894484][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.905220][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.915393][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.926097][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.941209][ T7543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.968950][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.980502][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.990721][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.001478][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.011708][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.022531][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.032730][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.043477][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.053905][ T7543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.068529][ T7543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.084855][ T7543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.127313][ T7543] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.136531][ T7543] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.146008][ T7543] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.156077][ T7543] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.201109][ T5816] Bluetooth: hci4: command tx timeout [ 398.068827][ T4120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.077619][ T4120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.180230][ T4745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.188767][ T4745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.262160][ T7618] loop9: detected capacity change from 0 to 256 [ 399.347983][ T7618] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 399.385098][ T7618] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 399.395096][ T7618] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 399.403664][ T7618] UDF-fs: Scanning with blocksize 512 failed [ 399.514325][ T7618] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 399.632439][ T7618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.754009][ T7626] loop6: detected capacity change from 0 to 1024 [ 399.763540][ T7626] EXT4-fs: Ignoring removed nobh option [ 399.795231][ T7627] tipc: Started in network mode [ 399.800331][ T7627] tipc: Node identity 4, cluster identity 9 [ 399.806771][ T7627] tipc: Node number set to 4 [ 400.044589][ T7626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.057657][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.896793][ T5864] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 401.981179][ T44] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 402.162493][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 402.208881][ T5864] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.214674][ T44] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.220242][ T5864] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.243554][ T5864] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 402.254079][ T5864] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 402.283776][ T5864] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.293418][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 402.305893][ T5864] usb 6-1: SerialNumber: syz [ 402.326056][ T44] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.336002][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.344683][ T44] usb 10-1: Product: syz [ 402.349202][ T44] usb 10-1: Manufacturer: syz [ 402.356109][ T44] usb 10-1: SerialNumber: syz [ 402.446253][ T7662] loop7: detected capacity change from 0 to 512 [ 402.464997][ T5864] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 402.484537][ T5864] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 402.702144][ T29] audit: type=1326 audit(1732441663.577:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.0.514" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x0 [ 402.951931][ T7662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.967172][ T7662] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.056657][ T29] audit: type=1800 audit(1732441663.927:39): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.513" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 403.134033][ T29] audit: type=1800 audit(1732441664.007:40): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.513" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 403.425059][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.435103][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.549593][ T44] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 403.556503][ T44] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 403.564818][ T44] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 403.638900][ T5864] usb 6-1: USB disconnect, device number 6 [ 403.732749][ T7003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.953691][ T44] cdc_ncm 10-1:1.0: setting tx_max = 88 [ 403.973310][ T44] cdc_ncm 10-1:1.0 eth17: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 404.132232][ T44] usb 10-1: USB disconnect, device number 2 [ 404.139759][ T44] cdc_ncm 10-1:1.0 eth17: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 404.444579][ T7680] binder: 7679:7680 ioctl c0306201 200003c0 returned -22 [ 406.291257][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 406.483707][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 406.515868][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.526660][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.598690][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 406.612047][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.620341][ T44] usb 1-1: Product: syz [ 406.626379][ T44] usb 1-1: Manufacturer: syz [ 406.631892][ T44] usb 1-1: SerialNumber: syz [ 406.685331][ T44] usb 1-1: config 0 descriptor?? [ 406.700811][ T44] usb-storage 1-1:0.0: USB Mass Storage device detected [ 406.969289][ T44] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 406.975976][ T44] gspca_stv06xx: st6422 sensor detected [ 407.093133][ T7711] Process accounting resumed [ 407.243552][ T44] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 407.365018][ T44] usb 1-1: USB disconnect, device number 11 [ 408.058063][ T7716] loop9: detected capacity change from 0 to 4096 [ 408.201527][ T29] audit: type=1326 audit(1732441668.937:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.224112][ T29] audit: type=1326 audit(1732441668.937:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.251352][ T29] audit: type=1326 audit(1732441668.947:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.277079][ T29] audit: type=1326 audit(1732441668.957:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.301622][ T29] audit: type=1326 audit(1732441668.957:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.325796][ T29] audit: type=1326 audit(1732441668.957:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.354964][ T29] audit: type=1326 audit(1732441668.957:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.381516][ T29] audit: type=1326 audit(1732441668.967:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.405496][ T29] audit: type=1326 audit(1732441668.967:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.429975][ T29] audit: type=1326 audit(1732441668.967:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 408.560172][ T7729] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 408.891122][ T7716] loop9: detected capacity change from 4096 to 0 [ 408.965709][ T7731] syz.9.532: attempt to access beyond end of device [ 408.965709][ T7731] loop9: rw=0, sector=264, nr_sectors = 8 limit=0 [ 408.979832][ T7731] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130) [ 409.551795][ T4663] Bluetooth: hci5: Frame reassembly failed (-84) [ 409.681698][ T7740] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 410.067681][ T7729] segctord: attempt to access beyond end of device [ 410.067681][ T7729] loop9: rw=0, sector=224, nr_sectors = 8 limit=0 [ 410.082006][ T7729] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 410.124292][ T4120] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.175869][ T7729] segctord: attempt to access beyond end of device [ 410.175869][ T7729] loop9: rw=0, sector=224, nr_sectors = 8 limit=0 [ 410.194525][ T7729] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 410.314455][ T7729] segctord: attempt to access beyond end of device [ 410.314455][ T7729] loop9: rw=0, sector=224, nr_sectors = 8 limit=0 [ 410.327938][ T7729] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 410.381230][ T7729] segctord: attempt to access beyond end of device [ 410.381230][ T7729] loop9: rw=0, sector=224, nr_sectors = 8 limit=0 [ 410.399468][ T7729] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 410.429775][ T7729] segctord: attempt to access beyond end of device [ 410.429775][ T7729] loop9: rw=0, sector=224, nr_sectors = 8 limit=0 [ 410.443362][ T7729] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 410.454733][ T7543] syz-executor: attempt to access beyond end of device [ 410.454733][ T7543] loop9: rw=0, sector=224, nr_sectors = 8 limit=0 [ 410.468675][ T7543] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 410.509930][ T7543] syz-executor: attempt to access beyond end of device [ 410.509930][ T7543] loop9: rw=0, sector=224, nr_sectors = 8 limit=0 [ 410.525240][ T7543] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 410.554287][ T7543] syz-executor: attempt to access beyond end of device [ 410.554287][ T7543] loop9: rw=0, sector=224, nr_sectors = 8 limit=0 [ 410.568263][ T7543] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 410.779004][ T4120] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.856627][ T7543] syz-executor: attempt to access beyond end of device [ 410.856627][ T7543] loop9: rw=0, sector=224, nr_sectors = 8 limit=0 [ 410.871605][ T7543] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0) [ 410.880444][ T7543] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 410.965355][ T4120] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.035080][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.551'. [ 411.056330][ T7543] Buffer I/O error on dev loop9, logical block 511, lost sync page write [ 411.065553][ T7543] NILFS (loop9): unable to write superblock: err=-5 [ 411.072889][ T7543] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 411.081561][ T7543] NILFS (loop9): unable to write superblock: err=-5 [ 411.503920][ T4120] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.631607][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 411.638243][ T5816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 412.093890][ T4120] bridge_slave_1: left allmulticast mode [ 412.099807][ T4120] bridge_slave_1: left promiscuous mode [ 412.106513][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.209496][ T4120] bridge_slave_0: left allmulticast mode [ 412.215540][ T4120] bridge_slave_0: left promiscuous mode [ 412.222282][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.628490][ T5856] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 412.828383][ T4120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.909196][ T4120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.046829][ T4120] bond0 (unregistering): Released all slaves [ 413.081924][ T7775] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 413.296486][ T5856] usb 7-1: Using ep0 maxpacket: 32 [ 413.319328][ T5856] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 413.339768][ T5856] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 413.349755][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.358253][ T5856] usb 7-1: Product: syz [ 413.368805][ T5856] usb 7-1: Manufacturer: syz [ 413.375190][ T5856] usb 7-1: SerialNumber: syz [ 413.388283][ T5856] usb 7-1: config 0 descriptor?? [ 413.396909][ T7762] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 413.426992][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.445205][ T5856] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 413.499167][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.528219][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.570970][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.643346][ T5864] IPVS: starting estimator thread 0... [ 413.682176][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 413.741868][ T7780] IPVS: using max 240 ests per chain, 12000 per kthread [ 413.794414][ T5856] usb 7-1: USB disconnect, device number 2 [ 413.806180][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 414.588193][ T7769] udevd[7769]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.541444][ T7806] loop6: detected capacity change from 0 to 256 [ 415.552165][ T7806] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 415.623292][ T7801] loop7: detected capacity change from 0 to 128 [ 415.940801][ T4120] hsr_slave_0: left promiscuous mode [ 415.959807][ T4120] hsr_slave_1: left promiscuous mode [ 415.971153][ T5856] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 416.006965][ T51] Bluetooth: hci4: command tx timeout [ 416.021920][ T4120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.034217][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.053039][ T4120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.060882][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.079203][ T4120] veth1_macvtap: left promiscuous mode [ 416.085655][ T4120] veth0_macvtap: left promiscuous mode [ 416.091733][ T4120] veth1_vlan: left promiscuous mode [ 416.097363][ T4120] veth0_vlan: left promiscuous mode [ 416.258999][ T5856] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 416.267716][ T5856] usb 1-1: config 179 has no interface number 0 [ 416.274426][ T5856] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 416.286010][ T5856] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 416.297430][ T5856] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 416.309191][ T5856] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 416.320927][ T5856] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 416.337617][ T5856] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 416.348793][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.398395][ T7810] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 416.430269][ T7810] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 418.087285][ T51] Bluetooth: hci4: command tx timeout [ 419.426889][ T4120] team0 (unregistering): Port device team_slave_1 removed [ 419.499104][ T5864] usb 1-1: USB disconnect, device number 12 [ 419.499103][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 419.499319][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 419.614595][ T4120] team0 (unregistering): Port device team_slave_0 removed [ 419.991104][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 420.165581][ T51] Bluetooth: hci4: command tx timeout [ 420.190724][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 420.206593][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.218214][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 420.232017][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.309682][ T10] usb 8-1: config 0 descriptor?? [ 420.817631][ T10] hub 8-1:0.0: USB hub found [ 420.848878][ T10] hub 8-1:0.0: 1 port detected [ 421.277570][ T7776] chnl_net:caif_netlink_parms(): no params data found [ 422.013343][ T5863] usb 8-1: USB disconnect, device number 2 [ 422.341065][ T51] Bluetooth: hci4: command tx timeout [ 422.958400][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.966768][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.974800][ T7776] bridge_slave_0: entered allmulticast mode [ 422.984049][ T7776] bridge_slave_0: entered promiscuous mode [ 423.140177][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.148003][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.156009][ T7776] bridge_slave_1: entered allmulticast mode [ 423.165517][ T7776] bridge_slave_1: entered promiscuous mode [ 423.566843][ T7776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.630774][ T7776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.786696][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 424.151814][ T7863] team0 (unregistering): Port device team_slave_0 removed [ 424.191988][ T7863] team0 (unregistering): Port device team_slave_1 removed [ 424.279773][ T7776] team0: Port device team_slave_0 added [ 424.322751][ T7776] team0: Port device team_slave_1 added [ 424.615220][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.622676][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.653048][ T7776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.699880][ T7867] loop7: detected capacity change from 0 to 4096 [ 424.709343][ T7867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.793045][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.800402][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.826996][ T7776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.093800][ T7867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.299439][ T7776] hsr_slave_0: entered promiscuous mode [ 425.315368][ T7776] hsr_slave_1: entered promiscuous mode [ 425.329488][ T7776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.337559][ T7776] Cannot create hsr debugfs directory [ 426.006651][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 426.102342][ T7003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.402563][ T7899] binder_alloc: binder_alloc_mmap_handler: 7898 20ffc000-20ffd000 already mapped failed -16 [ 427.571413][ T5883] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 427.654678][ T7905] loop6: detected capacity change from 0 to 1024 [ 427.664775][ T7905] EXT4-fs: Ignoring removed oldalloc option [ 427.684511][ T7905] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 427.763063][ T5883] usb 8-1: Using ep0 maxpacket: 32 [ 427.777445][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.789530][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.803683][ T5883] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 427.814292][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.879392][ T7905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.935895][ T5883] usb 8-1: config 0 descriptor?? [ 428.042731][ T5883] hub 8-1:0.0: USB hub found [ 428.045666][ T7776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 428.181595][ T5883] hub 8-1:0.0: 1 port detected [ 428.185677][ T7776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 428.271810][ T7776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.348218][ T7776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.508358][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.090260][ T5883] hub 8-1:0.0: activate --> -90 [ 429.361741][ T51] Bluetooth: hci2: command tx timeout [ 429.455934][ T7776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.723982][ T7776] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.808134][ T3881] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.815922][ T3881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.930013][ T7776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.940871][ T7776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.993620][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.001420][ T4663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.244322][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 430.244457][ T29] audit: type=1326 audit(1732441691.107:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.276264][ T29] audit: type=1326 audit(1732441691.107:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.299691][ T29] audit: type=1326 audit(1732441691.107:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.322209][ T29] audit: type=1326 audit(1732441691.107:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.345555][ T29] audit: type=1326 audit(1732441691.107:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.371935][ T29] audit: type=1326 audit(1732441691.107:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.394321][ T29] audit: type=1326 audit(1732441691.107:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.416827][ T29] audit: type=1326 audit(1732441691.107:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.439330][ T29] audit: type=1326 audit(1732441691.107:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.461699][ T29] audit: type=1326 audit(1732441691.107:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7fc00000 [ 430.610395][ T5863] usb 8-1: USB disconnect, device number 3 [ 430.698653][ T7916] 9pnet_fd: Insufficient options for proto=fd [ 430.801604][ T5883] usb 8-1-port1: config error [ 431.458330][ T7776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.471978][ T5883] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 431.700808][ T5883] usb 7-1: Using ep0 maxpacket: 32 [ 431.717094][ T5883] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 431.728509][ T5883] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.739000][ T5883] usb 7-1: config 0 interface 0 has no altsetting 0 [ 431.746013][ T5883] usb 7-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 431.755591][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.884743][ T5883] usb 7-1: config 0 descriptor?? [ 432.402014][ T5883] wacom 0003:056A:00C4.0009: unknown main item tag 0x0 [ 432.483366][ T5883] wacom 0003:056A:00C4.0009: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.6-1/input0 [ 432.881396][ T7928] wacom 0003:056A:00C4.0009: pid 7928 passed too large report [ 432.942956][ T5883] usb 7-1: USB disconnect, device number 3 [ 433.905303][ T7776] veth0_vlan: entered promiscuous mode [ 433.988308][ T7776] veth1_vlan: entered promiscuous mode [ 434.423716][ T7776] veth0_macvtap: entered promiscuous mode [ 434.447642][ T7776] veth1_macvtap: entered promiscuous mode [ 434.506515][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.517445][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.528532][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.539514][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.549649][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.564435][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.575915][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.586660][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.596791][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.607506][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.622688][ T7776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.634137][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.631'. [ 434.642508][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.654100][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.668132][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.680326][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.690601][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.701450][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.711655][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.722475][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.732736][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.743494][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.758258][ T7776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.827032][ T7969] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.836280][ T7969] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.845887][ T7969] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.855098][ T7969] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.864378][ T7969] vxlan0: entered promiscuous mode [ 434.895540][ T7776] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.905374][ T7776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.914713][ T7776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.923874][ T7776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.012198][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 435.181165][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 435.198360][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.211322][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 435.220970][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.246189][ T10] usb 6-1: config 0 descriptor?? [ 435.279923][ T10] hub 6-1:0.0: USB hub found [ 435.485806][ T10] hub 6-1:0.0: 1 port detected [ 435.961497][ T7978] vivid-007: disconnect [ 435.972428][ T7975] vivid-007: reconnect [ 436.890769][ T5883] usb 6-1: USB disconnect, device number 7 [ 437.135099][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.7.639'. [ 438.125913][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 438.125991][ T29] audit: type=1326 audit(1732441698.997:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 438.248983][ T29] audit: type=1326 audit(1732441699.077:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 438.314896][ T29] audit: type=1326 audit(1732441699.177:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 438.339071][ T29] audit: type=1326 audit(1732441699.177:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 438.950247][ T8021] loop7: detected capacity change from 0 to 164 [ 439.068072][ T8021] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 439.204441][ T8021] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 439.797668][ T8031] Bluetooth: Short BCSP packet [ 440.727039][ T4745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.736069][ T4745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.752965][ T8046] loop7: detected capacity change from 0 to 1024 [ 440.820816][ T8046] EXT4-fs: Ignoring removed orlov option [ 440.850812][ T8046] EXT4-fs (loop7): Test dummy encryption mode enabled [ 440.860084][ T8046] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 440.941198][ T4120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.949576][ T4120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.984262][ T8046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.514011][ T7003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.762718][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 442.441640][ T5883] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 442.624907][ T5883] usb 8-1: Using ep0 maxpacket: 8 [ 442.687231][ T5883] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 442.696855][ T5883] usb 8-1: config 179 has no interface number 0 [ 442.704205][ T5883] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 442.715646][ T5883] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 442.727366][ T5883] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 442.738915][ T5883] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 442.755959][ T5883] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 442.771387][ T5883] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 442.780906][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.827341][ T8059] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 442.942214][ T1667] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 443.152096][ T1667] usb 7-1: Using ep0 maxpacket: 16 [ 443.169440][ T8072] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 443.304838][ T1667] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 443.315082][ T1667] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.324237][ T1667] usb 7-1: Product: syz [ 443.329392][ T1667] usb 7-1: Manufacturer: syz [ 443.332081][ T10] usb 8-1: USB disconnect, device number 4 [ 443.334674][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 443.348865][ T1667] usb 7-1: SerialNumber: syz [ 443.353721][ C1] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 443.462345][ T1667] usb 7-1: config 0 descriptor?? [ 443.560066][ T1667] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 443.781615][ T1667] gp8psk: usb in 128 operation failed. [ 443.793902][ T1667] gp8psk: usb in 137 operation failed. [ 443.799601][ T1667] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 443.874140][ T1667] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 443.890968][ T1667] usb 7-1: media controller created [ 443.949761][ T1667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.023657][ T1667] gp8psk_fe: Frontend revision 1 attached [ 444.029656][ T1667] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 444.038622][ T1667] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 444.099129][ T1667] gp8psk: usb in 138 operation failed. [ 444.104962][ T1667] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 444.115631][ T1667] gp8psk: found Genpix USB device pID = 201 (hex) [ 444.130043][ T1667] usb 7-1: USB disconnect, device number 4 [ 444.338690][ T8078] loop4: detected capacity change from 0 to 2048 [ 444.442972][ T8078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.462984][ T1667] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 444.950790][ T8085] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 445.243048][ T8090] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 445.273195][ T8096] bridge0: entered allmulticast mode [ 445.324950][ T8078] EXT4-fs: Ignoring removed orlov option [ 445.352434][ T8096] pim6reg: entered allmulticast mode [ 445.378530][ T8078] EXT4-fs (loop4): can't enable nombcache during remount [ 445.801598][ T7776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.150820][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 447.279591][ T8130] loop7: detected capacity change from 0 to 22 [ 447.314900][ T8130] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 447.340793][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 447.402255][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.412600][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 447.419524][ T10] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 447.429391][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.497069][ T8130] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 447.544429][ T10] usb 6-1: config 0 descriptor?? [ 447.988214][ T10] hid (null): unknown global tag 0xc [ 447.994799][ T10] hid (null): unknown global tag 0xe [ 448.000968][ T10] hid (null): report_id 58501 is invalid [ 448.008473][ T10] hid (null): unknown global tag 0x1c [ 448.021761][ T10] hid (null): unknown global tag 0xe [ 448.027321][ T10] hid (null): unknown global tag 0xe [ 448.033249][ T10] hid (null): unknown global tag 0xe [ 448.039783][ T10] hid (null): unknown global tag 0xe [ 448.045879][ T10] hid (null): invalid report_count 1640429044 [ 448.053573][ T10] hid (null): invalid report_size -421006298 [ 448.059937][ T10] hid (null): unknown global tag 0xc [ 448.065704][ T10] hid (null): unknown global tag 0xc [ 448.071384][ T10] hid (null): nested delimiters [ 448.081733][ T10] hid (null): unknown global tag 0xd [ 448.087279][ T10] hid (null): report_id 2863014418 is invalid [ 448.095698][ T10] hid (null): report_id 2384115945 is invalid [ 448.315502][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x6 [ 448.323624][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x7 [ 448.331169][ T10] cougar 0003:060B:500A.000A: unknown global tag 0xc [ 448.338115][ T10] cougar 0003:060B:500A.000A: item 0 2 1 12 parsing failed [ 448.350203][ T10] cougar 0003:060B:500A.000A: parse failed [ 448.356776][ T10] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22 [ 448.451528][ T10] usb 6-1: USB disconnect, device number 8 [ 448.668626][ T1667] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 448.868399][ T1667] usb 8-1: Using ep0 maxpacket: 16 [ 448.892650][ T1667] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.908796][ T1667] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.922234][ T1667] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 448.936269][ T1667] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 448.945726][ T1667] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.026389][ T1667] usb 8-1: config 0 descriptor?? [ 449.774921][ T1667] microsoft 0003:045E:07DA.000B: report is too long [ 449.782142][ T1667] microsoft 0003:045E:07DA.000B: item 0 0 0 11 parsing failed [ 449.867203][ T1667] microsoft 0003:045E:07DA.000B: parse failed [ 449.874106][ T1667] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22 [ 449.956050][ T1667] usb 8-1: USB disconnect, device number 5 [ 451.616738][ T8185] loop4: detected capacity change from 0 to 512 [ 451.798377][ T8185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.811976][ T8185] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.930824][ T8198] loop6: detected capacity change from 0 to 128 [ 452.145284][ T8198] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 452.165491][ T8198] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 452.522848][ T6942] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.705334][ T7776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.841269][ T8208] loop7: detected capacity change from 0 to 1024 [ 452.851184][ T8208] EXT4-fs: Ignoring removed orlov option [ 452.857308][ T8208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.946288][ T8208] EXT4-fs (loop7): stripe (106) is not aligned with cluster size (16), stripe is disabled [ 452.958337][ T8216] 9pnet_fd: Insufficient options for proto=fd [ 453.076664][ T8208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.185903][ T29] audit: type=1800 audit(1732441714.037:73): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.719" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 453.271743][ T8208] loop7: detected capacity change from 1024 to 1021 [ 453.676714][ T7003] EXT4-fs error (device loop7): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /71/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 454.045991][ T8229] netlink: 'syz.4.722': attribute type 11 has an invalid length. [ 454.080381][ T8231] overlayfs: failed to resolve './file0': -2 [ 454.164403][ T7003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.894341][ T4663] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.382395][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 455.408532][ T8242] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.417947][ T8242] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.427284][ T8242] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.436615][ T8242] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.452269][ T8242] vxlan0: entered promiscuous mode [ 455.832852][ T4663] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.881379][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 455.914986][ T4663] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.995054][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.033259][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.053850][ T4663] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.091339][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 456.101726][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.101978][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.200065][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.223579][ T5820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 456.243178][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.259013][ T10] usb 5-1: config 0 descriptor?? [ 456.671826][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 456.740459][ T4663] bridge_slave_1: left allmulticast mode [ 456.746505][ T4663] bridge_slave_1: left promiscuous mode [ 456.753209][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.805402][ T10] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 456.928686][ T4663] bridge_slave_0: left allmulticast mode [ 456.935026][ T4663] bridge_slave_0: left promiscuous mode [ 456.942274][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.344409][ T10] playstation 0003:054C:0DF2.000C: Invalid reportID received, expected 9 got 14 [ 457.354202][ T10] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -22 [ 457.364285][ T10] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 457.373515][ T10] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 457.480047][ T10] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 457.614821][ T10] usb 5-1: USB disconnect, device number 2 [ 458.032554][ T4663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.052541][ T8268] serio: Serial port ttyS3 [ 458.084558][ T4663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.197490][ T4663] bond0 (unregistering): Released all slaves [ 458.405313][ T4663] tipc: Left network mode [ 458.412299][ T5816] Bluetooth: hci3: command tx timeout [ 459.367670][ T8249] chnl_net:caif_netlink_parms(): no params data found [ 459.638327][ T5883] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 459.678656][ T4663] hsr_slave_0: left promiscuous mode [ 459.733652][ T4663] hsr_slave_1: left promiscuous mode [ 459.757295][ T4663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.765541][ T4663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.793858][ T4663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.801838][ T4663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.819493][ T5883] usb 7-1: Using ep0 maxpacket: 32 [ 459.861333][ T5883] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 459.873334][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 459.885133][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 459.896737][ T5883] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 459.906200][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.962827][ T4663] veth1_macvtap: left promiscuous mode [ 459.968642][ T4663] veth0_macvtap: left promiscuous mode [ 459.974775][ T4663] veth1_vlan: left promiscuous mode [ 459.980387][ T4663] veth0_vlan: left promiscuous mode [ 460.008087][ T5883] usb 7-1: config 0 descriptor?? [ 460.016711][ T8284] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 460.045279][ T5883] hub 7-1:0.0: USB hub found [ 460.245792][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 460.451374][ T5883] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 460.494945][ T5816] Bluetooth: hci3: command tx timeout [ 460.714426][ T5883] hid-generic 0003:046D:C314.000D: unknown main item tag 0x0 [ 460.811893][ T5883] hid-generic 0003:046D:C314.000D: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.6-1/input0 [ 460.857317][ T4663] team0 (unregistering): Port device team_slave_1 removed [ 460.942911][ T4663] team0 (unregistering): Port device team_slave_0 removed [ 461.212943][ T1667] usb 7-1: USB disconnect, device number 5 [ 461.344568][ T8291] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.353916][ T8291] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.363191][ T8291] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.372330][ T8291] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.381720][ T8291] vxlan0: entered promiscuous mode [ 462.014064][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.021992][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.029824][ T8249] bridge_slave_0: entered allmulticast mode [ 462.039007][ T8249] bridge_slave_0: entered promiscuous mode [ 462.094485][ T4663] IPVS: stop unused estimator thread 0... [ 462.097081][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.111082][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.118907][ T8249] bridge_slave_1: entered allmulticast mode [ 462.128229][ T8249] bridge_slave_1: entered promiscuous mode [ 462.459817][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.551849][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.576485][ T5816] Bluetooth: hci3: command tx timeout [ 462.897352][ T8249] team0: Port device team_slave_0 added [ 462.914948][ T8249] team0: Port device team_slave_1 added [ 463.032636][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.039844][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.066207][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.075507][ T8249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.109955][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.117469][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.143687][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.153655][ T8249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.404908][ T8249] hsr_slave_0: entered promiscuous mode [ 463.419533][ T8249] hsr_slave_1: entered promiscuous mode [ 463.472413][ T8249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.480370][ T8249] Cannot create hsr debugfs directory [ 464.641456][ T5816] Bluetooth: hci3: command tx timeout [ 464.866689][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.874983][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.039762][ T8249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 465.083121][ T8249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 465.180200][ T8249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 465.293378][ T8249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.525952][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.631119][ T5883] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 466.694369][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.793451][ T3881] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.801246][ T3881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.861297][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 466.902422][ T5883] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 466.912132][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.925002][ T5883] usb 6-1: Product: syz [ 466.929420][ T5883] usb 6-1: Manufacturer: syz [ 466.938702][ T5883] usb 6-1: SerialNumber: syz [ 466.962048][ T3881] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.969801][ T3881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.056471][ T5883] usb 6-1: config 0 descriptor?? [ 467.142058][ T5883] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 467.319801][ T5883] gp8psk: usb in 128 operation failed. [ 467.447188][ T5883] gp8psk: usb in 137 operation failed. [ 467.453306][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.468617][ T5883] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 467.478560][ T5883] usb 6-1: media controller created [ 467.529717][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.644917][ T5883] gp8psk_fe: Frontend revision 1 attached [ 467.651162][ T5883] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 467.659590][ T5883] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 467.867772][ T5883] gp8psk: usb in 138 operation failed. [ 467.873812][ T5883] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 467.884287][ T5883] gp8psk: found Genpix USB device pID = 201 (hex) [ 468.005463][ T5883] usb 6-1: USB disconnect, device number 9 [ 468.598288][ T5883] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 469.040056][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.182289][ T8249] veth0_vlan: entered promiscuous mode [ 469.222722][ T8249] veth1_vlan: entered promiscuous mode [ 469.395784][ T8249] veth0_macvtap: entered promiscuous mode [ 469.417478][ T8249] veth1_macvtap: entered promiscuous mode [ 469.472134][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.484916][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.495984][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.506876][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.517103][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.529935][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.540643][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.553072][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.564282][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.575074][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.592765][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.601819][ T8384] tipc: Started in network mode [ 469.607000][ T8384] tipc: Node identity ac1414aa, cluster identity 4711 [ 469.615867][ T8384] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.623817][ T8384] tipc: Enabled bearer , priority 10 [ 469.662596][ T5863] IPVS: starting estimator thread 0... [ 469.677573][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.691268][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.703024][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.713851][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.724054][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.734875][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.745404][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.756512][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.761023][ T8385] IPVS: using max 240 ests per chain, 12000 per kthread [ 469.765832][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.781558][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.794315][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.809846][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.829467][ T8249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.839620][ T8249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.848802][ T8249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.858017][ T8249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.890729][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.030806][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.170715][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.310705][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.419850][ T8392] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-22) [ 470.450819][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.590874][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.732684][ T5863] tipc: Node number set to 2886997162 [ 470.733310][ T29] audit: type=1326 audit(1732441731.597:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 470.760658][ T29] audit: type=1326 audit(1732441731.597:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 470.783066][ T29] audit: type=1326 audit(1732441731.607:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 470.805369][ T29] audit: type=1326 audit(1732441731.607:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 470.870783][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.141062][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.260844][ T29] audit: type=1326 audit(1732441731.707:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 471.283758][ T29] audit: type=1326 audit(1732441731.707:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 472.352352][ T8420] netlink: 'syz.5.794': attribute type 1 has an invalid length. [ 472.360365][ T8420] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.794'. [ 472.971987][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 473.160964][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 473.216630][ T8429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.344203][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 473.354109][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.364045][ T10] usb 5-1: Product: syz [ 473.371201][ T10] usb 5-1: Manufacturer: syz [ 473.376885][ T10] usb 5-1: SerialNumber: syz [ 473.394652][ T10] usb 5-1: config 0 descriptor?? [ 473.617748][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 473.959293][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 473.987652][ T10] usb 5-1: USB disconnect, device number 3 [ 474.800828][ C0] net_ratelimit: 3 callbacks suppressed [ 474.800907][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.197413][ T8456] loop4: detected capacity change from 0 to 1024 [ 475.353500][ T8456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.749965][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.758208][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.840714][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.936558][ T3771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.944913][ T3771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.055455][ T7776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.456124][ T8472] loop6: detected capacity change from 0 to 1024 [ 476.563425][ T8472] EXT4-fs: Ignoring removed orlov option [ 476.569459][ T8472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.711807][ T8472] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 476.871566][ T8472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.880742][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.497424][ T8484] input: syz0 as /devices/virtual/input/input15 [ 477.587273][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.814'. [ 477.920730][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.991441][ T6942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.341174][ T8496] loop1: detected capacity change from 0 to 128 [ 478.714829][ T8496] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.761290][ T8496] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.960747][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.825638][ T8249] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.000725][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.040761][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.081981][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.831'. [ 481.372460][ T5863] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 481.615108][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.625768][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.639494][ T5863] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 481.649079][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.705105][ T5863] usb 2-1: config 0 descriptor?? [ 482.053778][ T5863] usb 2-1: USB disconnect, device number 6 [ 482.082638][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.258455][ T8544] overlayfs: failed to decode file handle (len=7, type=0, flags=0, err=-22) [ 482.374543][ T7624] udevd[7624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.120720][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 483.780964][ T5863] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 483.976900][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.988507][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.999067][ T5863] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 484.013852][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.128167][ T5863] usb 6-1: config 0 descriptor?? [ 484.160723][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.886100][ T5863] holtek_kbd 0003:04D9:A055.000E: collection stack underflow [ 484.894279][ T5863] holtek_kbd 0003:04D9:A055.000E: item 0 0 0 12 parsing failed [ 484.969645][ T5863] holtek_kbd 0003:04D9:A055.000E: probe with driver holtek_kbd failed with error -22 [ 485.162695][ T5863] usb 6-1: USB disconnect, device number 10 [ 485.200727][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.724759][ T8591] loop1: detected capacity change from 0 to 512 [ 486.089877][ T8591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.103306][ T8591] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.240720][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.435603][ T8591] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 486.439256][ T29] audit: type=1804 audit(1732441747.307:80): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.852" name="/newroot/7/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 486.451534][ T8591] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 486.487932][ T8591] EXT4-fs (loop1): This should not happen!! Data will be lost [ 486.487932][ T8591] [ 486.499029][ T8591] EXT4-fs (loop1): Total free blocks count 0 [ 486.505490][ T8591] EXT4-fs (loop1): Free/Dirty block details [ 486.511777][ T8591] EXT4-fs (loop1): free_blocks=65280 [ 486.517296][ T8591] EXT4-fs (loop1): dirty_blocks=1 [ 486.522747][ T8591] EXT4-fs (loop1): Block reservation details [ 486.528953][ T8591] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 486.593461][ T29] audit: type=1804 audit(1732441747.457:81): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.852" name="/newroot/7/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 487.074498][ T8249] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.280723][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 488.273268][ T29] audit: type=1326 audit(1732441749.127:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 488.295812][ T29] audit: type=1326 audit(1732441749.157:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 488.317725][ C1] vkms_vblank_simulate: vblank timer overrun [ 488.320778][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 488.395261][ T8631] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 488.504819][ T29] audit: type=1326 audit(1732441749.237:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 488.529527][ T29] audit: type=1326 audit(1732441749.237:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 488.552920][ T29] audit: type=1326 audit(1732441749.237:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 488.575363][ T29] audit: type=1326 audit(1732441749.257:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 488.597806][ T29] audit: type=1326 audit(1732441749.257:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 488.620745][ T29] audit: type=1326 audit(1732441749.257:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 489.024748][ T8638] loop6: detected capacity change from 0 to 256 [ 489.292849][ T8642] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 489.360733][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.406705][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.613021][ T8653] loop1: detected capacity change from 0 to 1024 [ 490.732089][ T8653] hfsplus: request for non-existent node 3 in B*Tree [ 490.739132][ T8653] hfsplus: request for non-existent node 3 in B*Tree [ 491.135454][ T4120] hfsplus: found bad thread record in catalog [ 491.440732][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.480711][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.607603][ T8673] loop4: detected capacity change from 0 to 256 [ 492.917464][ T8677] netlink: 96 bytes leftover after parsing attributes in process `syz.1.886'. [ 493.520739][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 493.537455][ T8673] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 493.821061][ T5883] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 494.044833][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 494.406752][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.417439][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.515274][ T5883] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 494.524814][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.533730][ T5883] usb 2-1: Product: syz [ 494.538152][ T5883] usb 2-1: Manufacturer: syz [ 494.543182][ T5883] usb 2-1: SerialNumber: syz [ 494.560708][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.849172][ T5883] usb 2-1: config 0 descriptor?? [ 494.951160][ T5883] usb-storage 2-1:0.0: USB Mass Storage device detected [ 495.600791][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.315733][ T5883] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 496.326125][ T5883] gspca_stv06xx: st6422 sensor detected [ 496.640713][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.874196][ T5883] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 497.012909][ T5883] usb 2-1: USB disconnect, device number 7 [ 497.680728][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.858984][ T8794] loop1: detected capacity change from 0 to 128 [ 498.026675][ T8794] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 498.128687][ T8794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.723527][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 498.782645][ T8804] loop4: detected capacity change from 0 to 512 [ 499.000821][ T8804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.014260][ T8804] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.152328][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 499.152412][ T29] audit: type=1804 audit(1732441760.027:104): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.903" name="/newroot/43/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 499.342964][ T29] audit: type=1804 audit(1732441760.157:105): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.903" name="/newroot/43/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 499.760710][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.969726][ T7776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.588218][ T8826] 9pnet_fd: Insufficient options for proto=fd [ 500.800739][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.800993][ T5863] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 501.840705][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.103353][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.115858][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.126865][ T5863] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 502.137324][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.201562][ T5863] usb 6-1: config 0 descriptor?? [ 502.380678][ T8843] ===================================================== [ 502.388175][ T8843] BUG: KMSAN: uninit-value in io_nop+0x549/0x8a0 [ 502.395104][ T8843] io_nop+0x549/0x8a0 [ 502.399429][ T8843] io_issue_sqe+0x420/0x2130 [ 502.404771][ T8843] io_submit_sqes+0x11bc/0x2f80 [ 502.409950][ T8843] __se_sys_io_uring_enter+0x423/0x4aa0 [ 502.415984][ T8843] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 502.422128][ T8843] ia32_sys_call+0xd59/0x4180 [ 502.427163][ T8843] __do_fast_syscall_32+0xb0/0x110 [ 502.433506][ T8843] do_fast_syscall_32+0x38/0x80 [ 502.438665][ T8843] do_SYSENTER_32+0x1f/0x30 [ 502.443606][ T8843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.452925][ T8843] [ 502.455359][ T8843] Uninit was created at: [ 502.461154][ T8843] __alloc_pages_noprof+0x9a7/0xe00 [ 502.466677][ T8843] alloc_pages_mpol_noprof+0x299/0x990 [ 502.472599][ T8843] alloc_pages_noprof+0x1bf/0x1e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 502.477921][ T8843] allocate_slab+0x320/0x12e0 [ 502.483151][ T8843] ___slab_alloc+0x12ef/0x35e0 [ 502.488255][ T8843] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 502.494740][ T8843] __io_alloc_req_refill+0x84/0x5b0 [ 502.500260][ T8843] io_submit_sqes+0x9a2/0x2f80 [ 502.505430][ T8843] __se_sys_io_uring_enter+0x423/0x4aa0 [ 502.511421][ T8843] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 502.517416][ T8843] ia32_sys_call+0xd59/0x4180 [ 502.523122][ T8843] __do_fast_syscall_32+0xb0/0x110 [ 502.528549][ T8843] do_fast_syscall_32+0x38/0x80 [ 502.533850][ T8843] do_SYSENTER_32+0x1f/0x30 [ 502.538650][ T8843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.545466][ T8843] [ 502.548021][ T8843] CPU: 0 UID: 0 PID: 8843 Comm: syz.1.916 Tainted: G W 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 502.562871][ T8843] Tainted: [W]=WARN [ 502.566799][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.579847][ T8843] ===================================================== [ 502.587478][ T8843] Disabling lock debugging due to kernel taint [ 502.594055][ T8843] Kernel panic - not syncing: kmsan.panic set ... [ 502.600622][ T8843] CPU: 0 UID: 0 PID: 8843 Comm: syz.1.916 Tainted: G B W 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 502.612579][ T8843] Tainted: [B]=BAD_PAGE, [W]=WARN [ 502.617722][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.627935][ T8843] Call Trace: [ 502.631330][ T8843] [ 502.634389][ T8843] dump_stack_lvl+0x216/0x2d0 [ 502.639259][ T8843] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 502.645331][ T8843] dump_stack+0x1e/0x30 [ 502.649677][ T8843] panic+0x4e2/0xcf0 [ 502.653758][ T8843] ? kmsan_get_metadata+0x81/0x1c0 [ 502.659112][ T8843] kmsan_report+0x2c7/0x2d0 [ 502.663830][ T8843] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.669274][ T8843] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.674708][ T8843] ? __msan_warning+0x95/0x120 [ 502.679687][ T8843] ? io_nop+0x549/0x8a0 [ 502.684051][ T8843] ? io_issue_sqe+0x420/0x2130 [ 502.689022][ T8843] ? io_submit_sqes+0x11bc/0x2f80 [ 502.694270][ T8843] ? __se_sys_io_uring_enter+0x423/0x4aa0 [ 502.700222][ T8843] ? __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 502.706268][ T8843] ? ia32_sys_call+0xd59/0x4180 [ 502.711359][ T8843] ? __do_fast_syscall_32+0xb0/0x110 [ 502.716835][ T8843] ? do_fast_syscall_32+0x38/0x80 [ 502.722041][ T8843] ? do_SYSENTER_32+0x1f/0x30 [ 502.726916][ T8843] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.733619][ T8843] ? mod_objcg_state+0x6ee/0xe00 [ 502.738748][ T8843] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.744185][ T8843] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 502.750248][ T8843] ? __memcg_slab_post_alloc_hook+0xbdd/0x1540 [ 502.756637][ T8843] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.762066][ T8843] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 502.768106][ T8843] __msan_warning+0x95/0x120 [ 502.772903][ T8843] io_nop+0x549/0x8a0 [ 502.777092][ T8843] ? __pfx_io_nop+0x10/0x10 [ 502.781786][ T8843] io_issue_sqe+0x420/0x2130 [ 502.786585][ T8843] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.792011][ T8843] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 502.798072][ T8843] io_submit_sqes+0x11bc/0x2f80 [ 502.803165][ T8843] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 502.809740][ T8843] __se_sys_io_uring_enter+0x423/0x4aa0 [ 502.815532][ T8843] ? futex_wait+0x2bf/0x360 [ 502.820229][ T8843] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 502.826791][ T8843] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.832223][ T8843] ? do_futex+0x341/0x4a0 [ 502.836730][ T8843] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.842154][ T8843] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 502.848213][ T8843] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 502.854266][ T8843] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 502.860180][ T8843] ia32_sys_call+0xd59/0x4180 [ 502.865099][ T8843] __do_fast_syscall_32+0xb0/0x110 [ 502.870414][ T8843] ? irqentry_exit+0x16/0x60 [ 502.875181][ T8843] do_fast_syscall_32+0x38/0x80 [ 502.880232][ T8843] do_SYSENTER_32+0x1f/0x30 [ 502.884927][ T8843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.891452][ T8843] RIP: 0023:0xf745d579 [ 502.895684][ T8843] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 502.915519][ T8843] RSP: 002b:00000000f514655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 502.924142][ T8843] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002d3e [ 502.932281][ T8843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.940679][ T8843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.948807][ T8843] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.956943][ T8843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.965091][ T8843] [ 502.968535][ T8843] Kernel Offset: disabled [ 502.972928][ T8843] Rebooting in 86400 seconds..