last executing test programs: 1m58.801098569s ago: executing program 2 (id=2990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "543f06fcde9e0821fad184a7cae1985949c797cb7c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x20000005) ftruncate(0xffffffffffffffff, 0x7fc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/246, 0x36, 0xf6, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1m54.43294674s ago: executing program 2 (id=3008): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r2, 0x2}, 0x10) 1m54.323085355s ago: executing program 2 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8090) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000280)={{}, {0x6a8}, 0x48, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES16=r0], 0x217}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffe6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000000c0)="510003000000", 0x6) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x121085) dup2(r6, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) write$cgroup_pressure(r8, &(0x7f00000001c0)={'some'}, 0x2f) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000400)=0x100a4, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000d80)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "1e520b4c951ee12e"}}}}}}}, 0x0) recvmmsg(r9, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) 1m51.999244397s ago: executing program 2 (id=3022): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nombcache}, {@stripe}]}, 0x3, 0x453, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000009c0)=ANY=[], 0xe00f, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000100)='./file1\x00', 0x0) 1m2.517091115s ago: executing program 2 (id=3022): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nombcache}, {@stripe}]}, 0x3, 0x453, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000009c0)=ANY=[], 0xe00f, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000100)='./file1\x00', 0x0) 31.054729447s ago: executing program 2 (id=3022): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nombcache}, {@stripe}]}, 0x3, 0x453, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000009c0)=ANY=[], 0xe00f, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000100)='./file1\x00', 0x0) 23.536465327s ago: executing program 3 (id=3212): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000080)="bb", 0x1}], 0x1}}], 0x1, 0x410) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000905000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000200ac14149708000400ac1414aa"], 0x28}}, 0x0) 22.758361313s ago: executing program 3 (id=3213): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 21.486620689s ago: executing program 3 (id=3215): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 21.127192804s ago: executing program 3 (id=3216): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x40}}, './bus\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x184, r2, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "4ceb"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7a7ad8cb9718b06d693ff38ea5"}]}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "e5"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bfc20d13d7c92b11783e96ec30"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "98"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "83031171f2"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_SSID={0x24, 0x34, @random="70ca4671195a29019bdcb6b6a9de9924734e7dbfb1780a9e75abe65b8aac865c"}, @NL80211_ATTR_SSID={0x16, 0x34, @random="ddc91d7e5ff1c2ac15b24e78c67a56f4a3d3"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4ae}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]]}, 0x184}, 0x1, 0x0, 0x0, 0x40010}, 0x8801) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc53, 0x0) move_mount(r3, &(0x7f0000000080)='./file0/file0\x00', r3, &(0x7f0000000040)='./file0/../file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendfile(r5, r4, 0x0, 0x100800001) 20.740154389s ago: executing program 3 (id=3218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r3}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a40)={0x80, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4040010) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc836], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 16.283348002s ago: executing program 3 (id=3226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r3, r2, 0x2}, 0x10) 10.473959538s ago: executing program 4 (id=3244): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000080)="bb", 0x1}], 0x1}}], 0x1, 0x410) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000905000000000000000002200000", @ANYRES32, @ANYBLOB="08000200ac14149708000400ac1414aa"], 0x28}}, 0x0) 9.503025632s ago: executing program 4 (id=3246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 9.086951566s ago: executing program 4 (id=3249): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)='\x00', 0x0) 8.892979087s ago: executing program 4 (id=3250): r0 = socket$netlink(0x10, 0x3, 0x10) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240)={[{@lazytime}, {}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x4c) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.238479206s ago: executing program 1 (id=3251): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, r7, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) 5.527738819s ago: executing program 0 (id=3253): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0857f9f582f03", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.527063757s ago: executing program 1 (id=3254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 5.391918716s ago: executing program 4 (id=3255): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x7) 5.227380644s ago: executing program 0 (id=3256): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000080)="bb", 0x1}], 0x1}}], 0x1, 0x410) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 5.226787104s ago: executing program 1 (id=3257): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000003000000000a"], 0x1c}}, 0x0) 4.671424228s ago: executing program 1 (id=3258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) 4.670977404s ago: executing program 0 (id=3259): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)='\x00', 0x0) 4.670703662s ago: executing program 0 (id=3260): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x50, 0xf) 4.670399637s ago: executing program 4 (id=3261): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32, @ANYBLOB="000000000000000048001a803c000a80050008"], 0x68}}, 0x0) syz_usb_connect(0x0, 0x1a2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x400) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 4.052684902s ago: executing program 1 (id=3262): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000040), 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 3.687295798s ago: executing program 0 (id=3263): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$eJzs3U9oHNUfAPDvzGZ//ZefqaCg0kNRoULpJukfrZ7aq1go9CB4qctmG0I22ZDdaBNySO9F7EFUeqk3PXhUPHgQLx69elE8C6JBoelBVvZf2iabuK1JtnY+H5jd9+Zt9vvezH7f7gwzJIDMOtp8SCOejYiLScTIPW1D0Wk82n7d2upy6c7qcimJRuPSb0kkEXF7dbnUfX3SeT4UESsR8UxEfJuPOJ5ujltbXJouVirl+U59tD4zN1pbXDoxNVOcLE+WZ0+98uqZs6fPjJ8c37GxXv/pxnvXv3/91o3PPj+yUvqgmMS5GO603TuOndTeJvk4t2H96d0INkDJoDvAQ8l18jwfEU/HSOQ6WQ88/hr7IhpARiXyHzKq+zugefzbXfby98ev59sHIM24a52l3TLUPjcR+1vHJgf/SO47Mmkebx7ey47yWFq5FhFjQ0ObP/9J5/P38MZ2ooPsqm/Ot3fU5v2frs8/0WP+Ge6eO/2XuvPf2qb572783Bbz38U+Y/z11s8fbxn/WsRzPeMn6/GTHvHTiHi7z/g33/zq7FZtjU8ijkXv+F3J9ueHR69MVcpj7ceeMb4+duS17cZ/cIv47XO2+1tfM722/1yf4//yuy+eX9km/ksvbL//e23/AxHxfp/xn7z96RtbtTXjT2wx/u3iN9fd6jP+y+eO/tjnSwEAAAAAAAAAgAeQtq5lS9LCejlNC4X2PbxPxcG0Uq3Vj1+pLsxOtK95Oxz5tHul1Ui7njTr453rcbv1kxvqp3KdgLkDrXqhVK1MDHjsAAAAAAAAAAAAAAAAAAAA8Kg4tOH+/z9z7fv/gYzwL78hu+Q/ZNf9+Z8MrB/A3vP9D5nVkP+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/AAAAAAAAAAAAAAAAAAAAAAAAAADsiosXLjSXxp3V5VKzPjG0uDBdfefERLk2XZhZKBVK1fm5wmS1OlkpF0rVmX96v0q1OjcWswtXR+vlWn20trh0eaa6MFu/PDVTnCxfLuf3ZFQAAAAAAAAAAAAAAAAAAADw3zLcWpK0EBFpq5ymhULE/yPicOSTK1OV8lhEPBERP+Ty+5r18UF3GgAAAAAAAAAAAAAAAAAAAB4ztcWl6WKlUp5X2FyIiJWdfefmOz7wX+U7++pR2SwKWSgMeGICAAAAAAAAAAAAAAAAAIAMunvT76B7AgAAAAAAAAAAAAAAAAAAAFmW/pJERHM5NvLi8MbW/yVrudZzRLx789KHV4v1+vx4c/3v6+vrH3XWnxxE/4F+dfO0m8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXbXFpelipVKe38XCoMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DD+DgAA//+H69Sv") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48010000", @ANYRES16=r6, @ANYBLOB], 0x148}}, 0x0) 2.901997006s ago: executing program 1 (id=3264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 0 (id=3265): ioprio_set$pid(0x2, 0x0, 0x4004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010105}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000841}, 0x8c5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001"], 0xfe44, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000040)={[{@user_xattr}, {@oldalloc}, {@norecovery}]}, 0x0, 0x236, &(0x7f0000000300)="$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") epoll_create1(0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) kernel console output (not intermixed with test programs): subj=unconfined pid=16218 comm="syz.4.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1003.151797][T16019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.184275][T16019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.208265][T16019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.218320][ T29] audit: type=1326 audit(1002.256:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16218 comm="syz.4.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1003.268155][T16019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.310771][T16019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.356940][T16019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.388683][T16019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.419597][T16019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1003.455910][T16019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.477443][T16019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.506188][T16019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.521959][T16247] loop1: detected capacity change from 0 to 2048 [ 1003.568105][T16019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.615267][T16019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.664074][T16019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.706061][T16019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.527418][T16019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.559800][T16019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.710702][T16019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.720606][T16019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.768085][T16019] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.813915][T16019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.881686][ T4690] loop1: p1 p2 p3 [ 1005.066169][ T5495] udevd[5495]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1005.092565][ T9921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.109222][ T5250] udevd[5250]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1005.128446][ T9921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.129061][ T5252] udevd[5252]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1005.177581][T10029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.202543][T16267] loop4: detected capacity change from 0 to 2048 [ 1005.207988][T10029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.456549][T16271] loop1: detected capacity change from 0 to 2048 [ 1005.500714][T16271] EXT4-fs: Ignoring removed bh option [ 1005.536268][T16266] Process accounting resumed [ 1005.545147][T16271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1005.587240][T16271] EXT4-fs: Ignoring removed nobh option [ 1005.816232][T16271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.015533][T16299] syz.0.2863[16299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1006.015633][T16299] syz.0.2863[16299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1006.110956][T16299] syz.0.2863[16299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1006.188017][T16291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1006.193206][T16299] syz.0.2863 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1006.559523][T16317] fuse: Bad value for 'user_id' [ 1006.590736][T16317] fuse: Bad value for 'user_id' [ 1007.116698][T16292] loop4: detected capacity change from 0 to 32768 [ 1007.205643][T11098] XFS (loop4): Metadata CRC error detected at xfs_sb_read_verify+0x303/0x440, xfs_sb block 0x0 [ 1007.217575][T16305] loop3: detected capacity change from 0 to 32768 [ 1007.259364][T11098] XFS (loop4): Unmount and run xfs_repair [ 1007.265154][T11098] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1007.279908][T11098] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 1007.289727][T11098] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1007.311654][T11098] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1007.324370][T11098] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 11 40 .......@.......@ [ 1007.329071][T16305] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1007.336448][T11098] 00000040: 00 00 00 00 00 00 11 41 00 00 00 00 00 00 11 42 .......A.......B [ 1007.422294][T11098] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1007.464873][T11098] 00000060: 00 00 04 3e b4 b5 02 00 04 00 00 04 00 00 00 00 ...>............ [ 1007.508063][T11098] 00000070: 00 00 00 00 00 00 00 00 0c 09 0a 02 0c 00 00 0a ................ [ 1007.528855][T16292] XFS (loop4): SB validate failed with error -74. [ 1007.564303][T16305] XFS (loop3): Ending clean mount [ 1007.581452][T16305] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 [ 1007.622292][T16305] XFS (loop3): Unmount and run xfs_repair [ 1007.653556][T16305] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1007.683357][T16305] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1007.719738][T16305] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1007.743548][T16305] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1007.765993][T16305] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1007.784005][T16314] loop2: detected capacity change from 0 to 32768 [ 1007.788386][T16305] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1007.828514][T16305] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1007.837446][T16305] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1007.866260][T16314] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1007.878167][T16305] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1007.892843][T16305] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74 [ 1007.908440][T16305] XFS (loop3): Failed to initialize disk quotas. [ 1007.983294][ T5290] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 [ 1007.998688][ T5290] XFS (loop3): Unmount and run xfs_repair [ 1008.004465][ T5290] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1008.017702][ T5290] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1008.028126][ T5290] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1008.037024][ T5290] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1008.046067][ T5290] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1008.055076][ T5290] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1008.065449][ T5290] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1008.075186][ T5290] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1008.084277][ T5290] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1008.093447][T16305] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74 [ 1008.152247][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.180002][T16305] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1008.221775][T16305] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1008.287227][T16314] XFS (loop2): Ending clean mount [ 1008.310989][T16314] XFS (loop2): Quotacheck needed: Please wait. [ 1008.379714][T14875] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1008.497062][T16314] XFS (loop2): Quotacheck: Done. [ 1009.149015][T16019] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1009.277158][T16378] fuse: Bad value for 'user_id' [ 1009.298044][T16378] fuse: Bad value for 'user_id' [ 1009.375231][T16382] loop1: detected capacity change from 0 to 128 [ 1009.423635][T16382] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1009.519167][T15594] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1010.304161][T16403] fuse: Bad value for 'rootmode' [ 1010.878018][T11061] Bluetooth: hci1: command 0x0406 tx timeout [ 1011.200168][T16415] loop4: detected capacity change from 0 to 128 [ 1011.289279][T16419] loop0: detected capacity change from 0 to 16 [ 1011.297610][T16419] erofs: (device loop0): mounted with root inode @ nid 36. [ 1011.361070][T16416] loop1: detected capacity change from 0 to 512 [ 1011.390342][T16421] syz.0.2895: attempt to access beyond end of device [ 1011.390342][T16421] loop0: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1011.403661][T16421] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1011.434997][T16416] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1011.476925][T16416] UDF-fs: Scanning with blocksize 512 failed [ 1011.563612][T16416] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1011.578565][T16415] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1011.614250][T16416] UDF-fs: Scanning with blocksize 1024 failed [ 1011.663962][T16423] syz.0.2895: attempt to access beyond end of device [ 1011.663962][T16423] loop0: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1011.701517][T16416] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1011.707407][T16425] loop3: detected capacity change from 0 to 512 [ 1011.721376][T16416] UDF-fs: Scanning with blocksize 2048 failed [ 1011.766852][T16423] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1011.836338][T16416] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1011.876710][T16429] loop2: detected capacity change from 0 to 512 [ 1011.884093][T16429] ext4: Unknown parameter 'noacl' [ 1011.971009][T15592] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1012.015768][T16416] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1012.108837][ T2640] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1012.467109][ T2640] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1012.478522][ T2640] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1012.490259][ T2640] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1012.500864][ T2640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.511422][T16445] loop4: detected capacity change from 0 to 512 [ 1012.519817][T16427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1012.625146][T16445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1013.154715][T16453] fuse: Bad value for 'rootmode' [ 1013.644715][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2897'. [ 1013.775765][T15592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1013.918439][T16456] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1014.010036][ T2640] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1014.071353][ T2640] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input37 [ 1014.177299][T16467] overlay: ./file1 is not a directory [ 1014.226745][ T2640] usb 4-1: USB disconnect, device number 21 [ 1014.232777][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1014.311773][T16469] loop4: detected capacity change from 0 to 128 [ 1014.367170][T16469] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1014.505325][T16469] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1014.514213][T16441] loop2: detected capacity change from 0 to 32768 [ 1014.606323][T16441] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1014.705776][T15592] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1014.886355][T16485] loop0: detected capacity change from 0 to 16 [ 1014.930941][T16441] XFS (loop2): Ending clean mount [ 1014.951913][T16441] XFS (loop2): Quotacheck needed: Please wait. [ 1014.978035][T16485] erofs: (device loop0): mounted with root inode @ nid 36. [ 1015.043874][T16441] XFS (loop2): Quotacheck: Done. [ 1015.091100][T16019] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1015.254617][T16488] syz.0.2910: attempt to access beyond end of device [ 1015.254617][T16488] loop0: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1015.353462][T16488] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1015.375736][T16490] syz.0.2910: attempt to access beyond end of device [ 1015.375736][T16490] loop0: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1015.457286][T16490] erofs: (device loop0): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1016.782916][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1016.782936][ T29] audit: type=1326 audit(1016.736:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.4.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1016.826811][ T29] audit: type=1326 audit(1016.736:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.4.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1016.902699][T16509] syz.4.2920[16509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1016.902797][T16509] syz.4.2920[16509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1016.928180][T16509] syz.4.2920[16509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1016.968450][ T29] audit: type=1326 audit(1016.736:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.4.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1017.056769][T16511] loop2: detected capacity change from 0 to 128 [ 1017.080542][ T29] audit: type=1326 audit(1016.746:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.4.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1017.281120][T16484] loop1: detected capacity change from 0 to 65536 [ 1017.341985][T16511] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1017.353441][ T29] audit: type=1326 audit(1017.296:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261897dff9 code=0x7ffc0000 [ 1017.376723][ T29] audit: type=1326 audit(1017.296:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f261897dff9 code=0x7ffc0000 [ 1017.399608][ T29] audit: type=1326 audit(1017.296:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261897dff9 code=0x7ffc0000 [ 1017.422555][ T29] audit: type=1326 audit(1017.296:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261897dff9 code=0x7ffc0000 [ 1017.444946][ T29] audit: type=1326 audit(1017.326:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f261897dff9 code=0x7ffc0000 [ 1017.467256][ T29] audit: type=1326 audit(1017.326:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261897dff9 code=0x7ffc0000 [ 1017.485461][T16511] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1017.562180][T16019] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1017.566006][T16484] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1017.716867][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 1017.727022][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2928'. [ 1017.805993][T16484] XFS (loop1): Ending clean mount [ 1017.898978][T15594] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1017.933133][T16543] loop3: detected capacity change from 0 to 2048 [ 1017.943578][T14684] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1018.031046][T16543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.133306][T14684] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1018.198141][T14684] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1018.245843][T14684] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1018.285403][T14684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.323021][T16534] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1019.369657][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2925'. [ 1019.382017][T16568] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1019.437681][T16551] loop0: detected capacity change from 0 to 32768 [ 1019.568241][T16551] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1019.663670][T16551] XFS (loop0): Ending clean mount [ 1019.723768][T14684] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1019.740283][T14684] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input38 [ 1019.823249][T14684] usb 5-1: USB disconnect, device number 23 [ 1019.829342][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1019.829554][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.901225][T11274] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1021.260731][T16602] loop3: detected capacity change from 0 to 512 [ 1021.344620][T16602] EXT4-fs error (device loop3): __ext4_fill_super:5458: inode #2: comm syz.3.2949: casefold flag without casefold feature [ 1021.364094][T16602] EXT4-fs (loop3): get root inode failed [ 1021.375488][T16602] EXT4-fs (loop3): mount failed [ 1021.616026][T16609] loop4: detected capacity change from 0 to 512 [ 1021.716847][T16610] loop2: detected capacity change from 0 to 1024 [ 1021.733036][T16610] EXT4-fs: Invalid want_extra_isize 2 [ 1021.781096][T16609] EXT4-fs (loop4): 1 truncate cleaned up [ 1021.789193][T16609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.814675][T16616] loop1: detected capacity change from 0 to 1024 [ 1022.461251][T16616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.817436][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.063663][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 1023.076497][T15592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.087450][T16640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2960'. [ 1024.275552][T16654] loop0: detected capacity change from 0 to 512 [ 1024.350118][T16654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1024.425263][T16661] Bluetooth: MGMT ver 1.23 [ 1025.171238][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2970'. [ 1025.195102][T16670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2970'. [ 1025.381481][T11274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1025.541122][T16677] loop1: detected capacity change from 0 to 2048 [ 1025.898762][T16677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1026.233778][T16677] UDF-fs: error (device loop1): udf_read_inode: (ino 1329) failed !bh [ 1026.439622][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1026.439640][ T29] audit: type=1326 audit(1026.396:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1026.588090][ T29] audit: type=1326 audit(1026.446:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1026.621225][T16691] loop1: detected capacity change from 0 to 256 [ 1026.630916][ T29] audit: type=1326 audit(1026.446:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1026.658173][ T29] audit: type=1326 audit(1026.446:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1026.680511][ T29] audit: type=1326 audit(1026.446:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1026.702833][ T29] audit: type=1326 audit(1026.446:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1026.725491][ T29] audit: type=1326 audit(1026.446:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1026.778966][T16691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1026.854491][T16691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1026.864330][T16691] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1026.951984][T16691] UDF-fs: Scanning with blocksize 512 failed [ 1026.969723][T16691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1026.981852][T16700] loop3: detected capacity change from 0 to 1024 [ 1026.986746][T16691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.074778][T16701] fuse: Unknown parameter 'user_i00000000000000000000' [ 1027.622941][T16700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.627568][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1028.646635][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1028.771709][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.051248][T16731] loop3: detected capacity change from 0 to 2048 [ 1030.513197][T16731] Process accounting resumed [ 1030.962285][ T29] audit: type=1326 audit(1030.886:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1031.274693][ T29] audit: type=1326 audit(1030.896:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1031.469562][ T29] audit: type=1326 audit(1030.896:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1031.508997][ T29] audit: type=1326 audit(1030.896:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1031.669573][ T29] audit: type=1326 audit(1030.896:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1031.748040][ T29] audit: type=1326 audit(1030.896:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1031.828000][ T29] audit: type=1326 audit(1030.896:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1031.928106][ T29] audit: type=1326 audit(1030.896:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1032.010299][ T29] audit: type=1326 audit(1030.896:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1032.113106][T16756] 9pnet_fd: Insufficient options for proto=fd [ 1032.137973][ T29] audit: type=1326 audit(1030.896:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1032.208116][ T29] audit: type=1326 audit(1030.896:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1032.249319][ T29] audit: type=1326 audit(1030.896:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1032.254956][T16760] loop0: detected capacity change from 0 to 512 [ 1032.869561][T16767] overlay: Unknown parameter '/' [ 1032.960951][T16769] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1033.533899][T16760] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1033.703304][T16760] EXT4-fs (loop0): 1 truncate cleaned up [ 1033.710220][T16760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.748174][T16773] syz.4.3004[16773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1033.748287][T16773] syz.4.3004[16773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1033.806586][T16773] syz.4.3004[16773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1033.871147][T16778] loop1: detected capacity change from 0 to 512 [ 1033.910454][T16780] fuse: Invalid rootmode [ 1034.250811][T16778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.356945][T16788] 9pnet_fd: Insufficient options for proto=fd [ 1034.453547][T11274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.742903][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.087594][T10029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.365565][ T4627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.383673][ T4627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.412474][ T4627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.420659][ T4627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.429634][ T4627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1036.439205][ T4627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.467092][T16815] fuse: Invalid rootmode [ 1036.657604][T10029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.747409][T16806] loop1: detected capacity change from 0 to 32768 [ 1036.767629][T16806] XFS: attr2 mount option is deprecated. [ 1036.803897][T16806] XFS: ikeep mount option is deprecated. [ 1036.811989][T16817] loop4: detected capacity change from 0 to 512 [ 1036.813986][T16806] XFS: noikeep mount option is deprecated. [ 1036.870054][T16817] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 3: comm syz.4.3023: lblock 0 mapped to illegal pblock 3 (length 1) [ 1036.897086][T10029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.903901][T16817] EXT4-fs (loop4): Remounting filesystem read-only [ 1036.915945][T16806] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1036.935164][T16817] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.3023: error -117 reading directory block [ 1036.980282][T16817] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1036.995572][T16817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.071631][T10029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.118127][T15592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.188779][T16831] loop4: detected capacity change from 0 to 512 [ 1037.215893][T16806] XFS (loop1): Ending clean mount [ 1037.238965][T16831] EXT4-fs (loop4): Invalid default hash set in the superblock [ 1037.288328][T16806] XFS (loop1): Quotacheck needed: Please wait. [ 1038.536647][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1038.536670][ T29] audit: type=1326 audit(1038.176:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1039.112295][T11062] Bluetooth: hci0: command tx timeout [ 1039.422288][ T29] audit: type=1326 audit(1038.176:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1039.578076][ T29] audit: type=1326 audit(1038.316:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1039.734313][T16806] XFS (loop1): Quotacheck: Done. [ 1039.852794][ T29] audit: type=1326 audit(1038.316:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1039.875179][ T29] audit: type=1326 audit(1038.316:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1039.897457][ T29] audit: type=1326 audit(1038.416:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1039.919986][ T29] audit: type=1326 audit(1038.416:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1039.942503][ T29] audit: type=1326 audit(1038.416:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1039.964598][ T29] audit: type=1326 audit(1038.566:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1039.986701][ T29] audit: type=1326 audit(1038.566:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.3.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1040.048837][ T4627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1040.604355][T10029] bridge_slave_1: left allmulticast mode [ 1040.610822][T10029] bridge_slave_1: left promiscuous mode [ 1040.616571][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.628600][ T4627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1040.667139][T11061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1040.676249][T11061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1040.685973][T11061] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1040.694478][T11061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1040.704474][T15594] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1040.895404][T10029] bridge_slave_0: left allmulticast mode [ 1040.903477][T10029] bridge_slave_0: left promiscuous mode [ 1040.909343][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.099980][T16856] syz.3.3032[16856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1041.100081][T16856] syz.3.3032[16856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1041.126634][T16856] syz.3.3032[16856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1041.139844][T11061] Bluetooth: hci0: command tx timeout [ 1041.304774][T16860] loop3: detected capacity change from 0 to 512 [ 1041.360420][T16860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.805799][T16858] loop1: detected capacity change from 0 to 32768 [ 1041.886746][ T5294] XFS (loop1): Metadata CRC error detected at xfs_sb_read_verify+0x303/0x440, xfs_sb_quiet block 0x0 [ 1041.905190][ T5294] XFS (loop1): Unmount and run xfs_repair [ 1041.911040][ T5294] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1041.932113][ T5294] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 1041.971676][ T5294] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1041.985472][ T5294] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1041.994494][ T5294] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40 ....... ......$@ [ 1042.010819][ T5294] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42 ......$A......$B [ 1042.019986][ T5294] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 1042.028983][ T5294] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 1042.038025][ T5294] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 1042.428687][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.443052][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.473530][T10029] bond0 (unregistering): Released all slaves [ 1042.488373][T16811] chnl_net:caif_netlink_parms(): no params data found [ 1042.539550][T16872] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.548689][T16872] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.557428][T16872] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.566217][T16872] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.695553][T16875] loop4: detected capacity change from 0 to 512 [ 1042.808105][T11061] Bluetooth: hci4: command tx timeout [ 1042.911153][T16875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.027188][T16881] loop1: detected capacity change from 0 to 2048 [ 1043.123896][T16881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.208478][T11061] Bluetooth: hci0: command tx timeout [ 1043.280869][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.291102][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.293356][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.307100][T16811] bridge_slave_0: entered allmulticast mode [ 1043.321747][T16811] bridge_slave_0: entered promiscuous mode [ 1043.374863][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.523763][T16898] loop3: detected capacity change from 0 to 164 [ 1043.711053][T15592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.724938][T16898] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1043.753076][T16811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.761285][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.769882][T16898] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1043.788215][T16811] bridge_slave_1: entered allmulticast mode [ 1043.826087][T16811] bridge_slave_1: entered promiscuous mode [ 1044.562364][T16811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.630423][T16811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.807985][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1044.808007][ T29] audit: type=1326 audit(1044.756:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1044.878499][T10029] hsr_slave_0: left promiscuous mode [ 1044.885442][T10029] hsr_slave_1: left promiscuous mode [ 1044.898654][T11061] Bluetooth: hci4: command tx timeout [ 1044.914250][ T29] audit: type=1326 audit(1044.756:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1044.966660][ T29] audit: type=1326 audit(1044.816:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1044.989683][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.997157][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.063670][ T29] audit: type=1326 audit(1044.816:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1045.086121][ T29] audit: type=1326 audit(1044.816:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1045.108414][ T29] audit: type=1326 audit(1044.856:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1045.131272][ T29] audit: type=1326 audit(1044.856:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1045.154366][ T29] audit: type=1326 audit(1044.906:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1045.171290][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.176591][ T29] audit: type=1326 audit(1044.906:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1045.205920][ T29] audit: type=1326 audit(1044.966:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31a37dff9 code=0x7ffc0000 [ 1045.228503][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.285184][T10029] veth1_macvtap: left promiscuous mode [ 1045.291156][T11061] Bluetooth: hci0: command tx timeout [ 1045.298743][T16922] loop4: detected capacity change from 0 to 512 [ 1045.302416][T10029] veth0_macvtap: left promiscuous mode [ 1045.328437][T10029] veth1_vlan: left promiscuous mode [ 1045.338160][T10029] veth0_vlan: left promiscuous mode [ 1045.447578][T16922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.872205][T16920] loop3: detected capacity change from 0 to 32768 [ 1045.971995][T16920] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1046.099302][T16920] XFS (loop3): Ending clean mount [ 1046.106759][T16920] XFS (loop3): Quotacheck needed: Please wait. [ 1046.258368][T16920] XFS (loop3): Quotacheck: Done. [ 1046.560111][T14875] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1046.900792][T10029] team0 (unregistering): Port device team_slave_1 removed [ 1047.004691][T11061] Bluetooth: hci4: command tx timeout [ 1047.055478][T15592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.086372][T10029] team0 (unregistering): Port device team_slave_0 removed [ 1047.398067][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1047.579088][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1047.600591][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.612321][ T8] usb 4-1: config 0 has no interfaces? [ 1047.619896][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1047.629412][ T8] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1047.647777][ T8] usb 4-1: Product: syz [ 1047.652323][ T8] usb 4-1: Manufacturer: syz [ 1047.677347][ T8] usb 4-1: config 0 descriptor?? [ 1048.145060][T16811] team0: Port device team_slave_0 added [ 1048.167521][T16811] team0: Port device team_slave_1 added [ 1048.359027][T16811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.366044][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.467160][T16811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.491477][T16956] loop1: detected capacity change from 0 to 512 [ 1049.048063][T11061] Bluetooth: hci4: command tx timeout [ 1049.080083][T16956] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 1049.351966][T16964] loop1: detected capacity change from 0 to 512 [ 1049.368540][T16964] EXT4-fs: Ignoring removed i_version option [ 1049.567398][T16964] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.3053: corrupted in-inode xattr: invalid ea_ino [ 1049.585988][T16964] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.3053: couldn't read orphan inode 12 (err -117) [ 1049.632022][T16964] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.711373][T16964] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1049.818164][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 1049.818189][ T29] audit: type=1326 audit(1049.756:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16955 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1049.892964][ T29] audit: type=1326 audit(1049.756:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16955 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1049.981430][ T29] audit: type=1326 audit(1049.756:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16955 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1051.505959][T16988] loop4: detected capacity change from 0 to 512 [ 1051.555755][T16988] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 1053.827552][ T29] audit: type=1326 audit(1053.756:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17000 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1053.855045][ T29] audit: type=1326 audit(1053.756:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17000 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1054.073262][ T29] audit: type=1326 audit(1053.756:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17000 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1054.217278][ T29] audit: type=1326 audit(1053.756:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17000 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1054.352291][ T29] audit: type=1326 audit(1053.766:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17000 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1054.384256][ T29] audit: type=1326 audit(1053.766:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17000 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1054.484946][ T29] audit: type=1326 audit(1053.766:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17000 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1054.652697][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.661294][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.276109][T16811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.283278][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.310091][T16811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.341204][ T2640] usb 4-1: USB disconnect, device number 22 [ 1055.558540][T17014] loop4: detected capacity change from 0 to 512 [ 1055.568697][T17013] 9pnet_fd: Insufficient options for proto=fd [ 1055.588276][T17014] EXT4-fs error (device loop4): __ext4_fill_super:5458: inode #2: comm syz.4.3068: casefold flag without casefold feature [ 1055.630813][T17014] EXT4-fs (loop4): get root inode failed [ 1055.636611][T17014] EXT4-fs (loop4): mount failed [ 1055.727289][T16811] hsr_slave_0: entered promiscuous mode [ 1055.988535][T16811] hsr_slave_1: entered promiscuous mode [ 1056.018065][T16811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.039758][T16811] Cannot create hsr debugfs directory [ 1056.072302][T16842] chnl_net:caif_netlink_parms(): no params data found [ 1056.217013][T16842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.225826][T16842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.234770][T16842] bridge_slave_0: entered allmulticast mode [ 1056.243432][T16842] bridge_slave_0: entered promiscuous mode [ 1056.274961][T16842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.293273][T16842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.309366][T16842] bridge_slave_1: entered allmulticast mode [ 1056.327669][T16842] bridge_slave_1: entered promiscuous mode [ 1056.721921][T10029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.754933][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1056.754955][ T29] audit: type=1326 audit(1056.676:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.4.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1056.804522][ T29] audit: type=1326 audit(1056.676:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.4.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1056.834504][ T29] audit: type=1326 audit(1056.676:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.4.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1056.856827][ T29] audit: type=1326 audit(1056.676:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.4.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1056.882391][ T29] audit: type=1326 audit(1056.676:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.4.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1056.931106][ T29] audit: type=1326 audit(1056.786:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.4.3070" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b3ed7dff9 code=0x0 [ 1057.046603][ T29] audit: type=1326 audit(1056.936:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.4.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1057.081879][ T29] audit: type=1326 audit(1056.936:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.4.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3ed7dff9 code=0x7ffc0000 [ 1057.164064][T10029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.354349][T16842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.452132][T16842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.769308][T17055] fuse: Bad value for 'fd' [ 1058.353607][T10029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.533026][T16842] team0: Port device team_slave_0 added [ 1058.584665][T10029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.679928][T16842] team0: Port device team_slave_1 added [ 1058.734477][T16842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.748295][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1058.757093][T16842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.785171][T16842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.798943][T16842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.805933][T16842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.833960][T16842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.928099][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1058.939046][T10029] bridge_slave_1: left allmulticast mode [ 1058.944832][T10029] bridge_slave_1: left promiscuous mode [ 1058.952906][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.960607][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.974816][T10029] bridge_slave_0: left allmulticast mode [ 1058.977629][ T8] usb 5-1: config 0 has no interfaces? [ 1058.984518][T10029] bridge_slave_0: left promiscuous mode [ 1058.992419][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.004453][ T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1059.013987][ T8] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1059.022498][ T8] usb 5-1: Product: syz [ 1059.026755][ T8] usb 5-1: Manufacturer: syz [ 1059.042367][ T8] usb 5-1: config 0 descriptor?? [ 1059.100862][T17058] loop3: detected capacity change from 0 to 32768 [ 1059.117304][T17058] XFS: ikeep mount option is deprecated. [ 1059.167326][T17058] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1059.268030][T17058] XFS (loop3): Ending clean mount [ 1059.291631][T17058] XFS (loop3): Quotacheck needed: Please wait. [ 1059.400838][T17058] XFS (loop3): Quotacheck: Done. [ 1059.461037][ T29] audit: type=1326 audit(1059.416:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.1.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1059.501775][T17076] loop1: detected capacity change from 0 to 128 [ 1059.536414][T17076] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1059.548212][ T29] audit: type=1326 audit(1059.416:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.1.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1059.576838][T17076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1059.645145][T14875] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1060.075935][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.103697][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.123726][T10029] bond0 (unregistering): Released all slaves [ 1060.391695][T16842] hsr_slave_0: entered promiscuous mode [ 1060.409447][T16842] hsr_slave_1: entered promiscuous mode [ 1060.415714][T16842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.438122][T16842] Cannot create hsr debugfs directory [ 1062.447981][T17098] loop1: detected capacity change from 0 to 128 [ 1062.577536][T17098] syz.1.3085: attempt to access beyond end of device [ 1062.577536][T17098] loop1: rw=0, sector=121, nr_sectors = 8 limit=128 [ 1062.624657][ T5456] kworker/u8:8: attempt to access beyond end of device [ 1062.624657][ T5456] loop1: rw=1, sector=129, nr_sectors = 912 limit=128 [ 1062.740814][T17100] loop3: detected capacity change from 0 to 512 [ 1062.795721][T17100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.101574][T17107] fuse: Bad value for 'fd' [ 1066.502421][ T5293] usb 5-1: USB disconnect, device number 24 [ 1066.503223][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.594170][T16811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1066.661314][T16811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1066.677775][T16811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1066.838643][T10029] hsr_slave_0: left promiscuous mode [ 1066.875216][T10029] hsr_slave_1: left promiscuous mode [ 1066.883350][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.916345][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.969177][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.982825][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.183952][T10029] veth1_macvtap: left promiscuous mode [ 1067.237215][T10029] veth0_macvtap: left promiscuous mode [ 1067.272200][T10029] veth1_vlan: left promiscuous mode [ 1067.292596][T10029] veth0_vlan: left promiscuous mode [ 1067.655375][T17148] loop4: detected capacity change from 0 to 512 [ 1067.725009][T17148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.775825][T17137] loop3: detected capacity change from 0 to 32768 [ 1067.876172][T17137] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1068.052070][T17137] XFS (loop3): Starting recovery (logdev: internal) [ 1068.108980][T17137] XFS (loop3): Ending recovery (logdev: internal) [ 1068.223933][T17137] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1068.753779][T10029] team0 (unregistering): Port device team_slave_1 removed [ 1068.862214][T10029] team0 (unregistering): Port device team_slave_0 removed [ 1068.872072][T17167] loop1: detected capacity change from 0 to 2048 [ 1068.912651][T17167] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 2016: 0xe1 != 0x1b [ 1068.930852][T17167] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1068.972462][T17167] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 1069.132873][T17169] loop1: detected capacity change from 0 to 512 [ 1069.140646][T17169] EXT4-fs (loop1): Invalid default hash set in the superblock [ 1069.640013][T15592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.671176][T17173] loop3: detected capacity change from 0 to 512 [ 1069.737498][T17173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.920519][T17180] input: syz1 as /devices/virtual/input/input39 [ 1071.102270][T17185] loop4: detected capacity change from 0 to 1024 [ 1071.136191][T17185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.466204][T16811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1071.792185][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.197251][T17191] loop1: detected capacity change from 0 to 16 [ 1072.265512][T15592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.320341][T17191] erofs: (device loop1): mounted with root inode @ nid 36. [ 1072.864830][T17204] syz.1.3109: attempt to access beyond end of device [ 1072.864830][T17204] loop1: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1073.153727][T17204] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1073.163532][T17191] syz.1.3109: attempt to access beyond end of device [ 1073.163532][T17191] loop1: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1073.189783][T17191] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1073.243380][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3111'. [ 1073.855501][T16811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.959504][T17224] fuse: Unknown parameter '0x0000000000000006' [ 1074.472301][T16811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.584766][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.591979][ T5456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.719624][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.726807][ T5456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.867646][T17231] loop3: detected capacity change from 0 to 512 [ 1074.991847][T16811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1075.066517][T17231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.978477][T16842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1076.123394][T16842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1076.227538][T16842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1076.259251][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.360089][T16842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1076.529804][T17257] loop3: detected capacity change from 0 to 1024 [ 1076.589369][T17257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.732825][T16811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.890732][T16842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.387248][ T5249] Bluetooth: hci3: command 0x0406 tx timeout [ 1077.393775][ T5249] Bluetooth: hci2: command 0x0406 tx timeout [ 1077.463849][T16811] veth0_vlan: entered promiscuous mode [ 1077.560785][T16842] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.631083][T16811] veth1_vlan: entered promiscuous mode [ 1077.643966][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.666125][T17232] loop1: detected capacity change from 0 to 65536 [ 1077.673531][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.680706][T10033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.717545][T16811] veth0_macvtap: entered promiscuous mode [ 1077.726572][T17233] loop4: detected capacity change from 0 to 32768 [ 1077.726721][T16811] veth1_macvtap: entered promiscuous mode [ 1077.734055][T17233] XFS: ikeep mount option is deprecated. [ 1077.775239][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.782419][T10033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.789003][T17232] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop1": -EINTR [ 1077.790858][T17233] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop4": -EINTR [ 1078.942384][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.076087][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.112073][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.128844][T17288] loop3: detected capacity change from 0 to 2048 [ 1079.167659][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.177784][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.208179][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.230930][T16811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.261200][T17288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.290785][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.364881][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.374947][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.385702][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.395637][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.406329][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.417732][T16811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.432818][T17298] fuse: Unknown parameter 'user_id00000000000000000000' [ 1079.474730][T16811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.504794][T16811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.522801][T16811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.541956][T16811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.557452][T17299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3123'. [ 1079.754849][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3126'. [ 1079.767760][T17305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3126'. [ 1080.638561][T17293] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1080.699996][ T9921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.789501][ T9921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.933559][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.966652][T16842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.007099][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.033706][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.246406][T16842] veth0_vlan: entered promiscuous mode [ 1081.320144][T17330] fuse: Unknown parameter '0x0000000000000006' [ 1081.527158][T16842] veth1_vlan: entered promiscuous mode [ 1082.110409][T16842] veth0_macvtap: entered promiscuous mode [ 1082.132347][T16842] veth1_macvtap: entered promiscuous mode [ 1082.178448][T16842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.207929][T16842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.228033][T16842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.238659][T16842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.249091][T16842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.419430][T17337] overlay: Unknown parameter '/' [ 1082.435267][T16842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.504854][T17338] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1082.542589][T16842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.703969][T16842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.787919][T16842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.850971][T17341] loop4: detected capacity change from 0 to 1024 [ 1082.872630][T16842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.945504][T16842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.955930][T16842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.966902][T16842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.977446][T16842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.978545][T17341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.988154][T16842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.128612][T16842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.192462][T16842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.233645][T16842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.326042][T16842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.298733][T16842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.307508][T16842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.328885][T16842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.804547][T17351] loop0: detected capacity change from 0 to 2048 [ 1084.998260][T17351] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1085.020641][T17351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1085.041727][T17351] UDF-fs: unknown compression code (0) [ 1085.092455][T17359] loop1: detected capacity change from 0 to 1024 [ 1085.174861][T17359] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1085.243782][T17359] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3134: Invalid block bitmap block 0 in block_group 0 [ 1085.321617][T17359] __quota_error: 80 callbacks suppressed [ 1085.321640][T17359] Quota error (device loop1): write_blk: dquota write failed [ 1085.335805][T17359] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1085.364370][T15592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.408563][T17359] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.3134: Failed to acquire dquot type 0 [ 1085.448358][ T1834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.456297][ T1834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.486892][T17359] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.3134: Freeing blocks not in datazone - block = 0, count = 4096 [ 1085.504180][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.512218][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.519265][T17364] fuse: Unknown parameter 'user_id00000000000000000000' [ 1085.624310][T17359] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3134: Invalid inode bitmap blk 0 in block_group 0 [ 1085.668304][T13548] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 1085.704092][T17359] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 1085.717642][T13548] EXT4-fs error (device loop1): ext4_release_dquot:6902: comm kworker/u8:4: Failed to release dquot type 0 [ 1085.742972][T17359] EXT4-fs (loop1): 1 orphan inode deleted [ 1085.778141][T17359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.903201][T17370] loop0: detected capacity change from 0 to 2048 [ 1085.943129][T17373] loop3: detected capacity change from 0 to 764 [ 1086.005893][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.024185][T17370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.170949][T17378] loop1: detected capacity change from 0 to 128 [ 1086.315659][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.433492][T17378] syz.1.3141: attempt to access beyond end of device [ 1086.433492][T17378] loop1: rw=34817, sector=121, nr_sectors = 8 limit=128 [ 1086.552760][ T1834] kworker/u8:6: attempt to access beyond end of device [ 1086.552760][ T1834] loop1: rw=1, sector=385, nr_sectors = 656 limit=128 [ 1086.632493][T17382] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1086.695657][T17382] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1524 with error 28 [ 1086.742147][T17382] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1086.742147][T17382] [ 1086.779057][T17382] EXT4-fs (loop0): Total free blocks count 0 [ 1086.824507][T17382] EXT4-fs (loop0): Free/Dirty block details [ 1086.868173][T17382] EXT4-fs (loop0): free_blocks=2415919104 [ 1086.901530][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.923787][T17382] EXT4-fs (loop0): dirty_blocks=1536 [ 1086.969169][T17382] EXT4-fs (loop0): Block reservation details [ 1086.977639][T17382] EXT4-fs (loop0): i_reserved_data_blocks=96 [ 1087.503199][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.833256][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.876612][T16811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.961597][T11061] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1087.972361][T11061] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1087.981134][T11061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1087.989619][T11061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1087.997369][T11061] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1088.013227][T11061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1089.132399][T17408] loop1: detected capacity change from 0 to 164 [ 1089.289517][T17408] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1089.555075][ T52] bridge_slave_1: left allmulticast mode [ 1089.703478][ T52] bridge_slave_1: left promiscuous mode [ 1089.906392][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.120108][T11061] Bluetooth: hci4: command tx timeout [ 1090.278853][ T52] bridge_slave_0: left allmulticast mode [ 1090.284645][ T52] bridge_slave_0: left promiscuous mode [ 1090.346406][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.575732][T17434] fuse: Unknown parameter 'user_id00000000000000000000' [ 1091.245159][T17440] loop3: detected capacity change from 0 to 512 [ 1091.340868][T17440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.397551][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.490836][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.549617][ T52] bond0 (unregistering): Released all slaves [ 1092.164758][T17395] chnl_net:caif_netlink_parms(): no params data found [ 1092.183681][T11061] Bluetooth: hci4: command tx timeout [ 1092.365049][T17438] loop1: detected capacity change from 0 to 32768 [ 1092.426736][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.460027][T17438] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1092.700389][T17438] XFS (loop1): Ending clean mount [ 1092.776005][T17438] XFS (loop1): Quotacheck needed: Please wait. [ 1092.942893][T17438] XFS (loop1): Quotacheck: Done. [ 1093.686102][T15594] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1094.247995][T11061] Bluetooth: hci4: command tx timeout [ 1095.144111][ T52] hsr_slave_0: left promiscuous mode [ 1095.271960][ T52] hsr_slave_1: left promiscuous mode [ 1095.305561][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.345379][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.362969][T17495] loop1: detected capacity change from 0 to 512 [ 1095.426165][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.472693][T17495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.478052][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.621942][ T52] veth1_macvtap: left promiscuous mode [ 1095.646598][ T52] veth0_macvtap: left promiscuous mode [ 1095.672687][ T52] veth1_vlan: left promiscuous mode [ 1095.698559][ T52] veth0_vlan: left promiscuous mode [ 1096.328179][T11061] Bluetooth: hci4: command tx timeout [ 1096.492989][T11062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1096.716878][T11062] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1096.727055][T11062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1096.738003][T11062] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1096.886767][T11062] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1096.894867][T11062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1097.775676][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.929439][ T29] audit: type=1326 audit(1097.886:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1097.978027][ T29] audit: type=1326 audit(1097.886:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1098.048130][ T29] audit: type=1326 audit(1097.886:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1098.060495][T17509] loop1: detected capacity change from 0 to 512 [ 1098.108016][ T29] audit: type=1326 audit(1097.886:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1098.148705][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1098.187965][ T29] audit: type=1326 audit(1097.886:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1098.228086][ T29] audit: type=1326 audit(1097.886:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1098.263520][T17509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.316281][ T29] audit: type=1326 audit(1097.886:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1098.392613][ T29] audit: type=1326 audit(1097.886:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1098.440840][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1098.490912][ T29] audit: type=1326 audit(1097.886:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1098.518148][ T29] audit: type=1326 audit(1097.906:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ffb7dff9 code=0x7ffc0000 [ 1098.971252][T11062] Bluetooth: hci5: command tx timeout [ 1099.538508][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.463440][T17395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.478185][T17395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.485486][T17395] bridge_slave_0: entered allmulticast mode [ 1100.512833][T17395] bridge_slave_0: entered promiscuous mode [ 1100.701489][T17395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.721010][T17395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.735642][T17395] bridge_slave_1: entered allmulticast mode [ 1100.746053][T17395] bridge_slave_1: entered promiscuous mode [ 1100.981902][T17395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.087056][T17395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.176967][T11062] Bluetooth: hci5: command tx timeout [ 1102.124486][T17395] team0: Port device team_slave_0 added [ 1102.215038][T17395] team0: Port device team_slave_1 added [ 1102.682533][T17395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.692109][T17395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.724048][T17395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.795182][T17395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.810622][T17395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.843628][T17395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.016072][T17395] hsr_slave_0: entered promiscuous mode [ 1103.039626][T17395] hsr_slave_1: entered promiscuous mode [ 1103.218794][T11062] Bluetooth: hci5: command tx timeout [ 1103.437693][T17504] chnl_net:caif_netlink_parms(): no params data found [ 1104.819291][T17504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.826445][T17504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.865553][T17504] bridge_slave_0: entered allmulticast mode [ 1104.879189][T17504] bridge_slave_0: entered promiscuous mode [ 1104.907614][T17504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.955280][T17504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.008338][T17504] bridge_slave_1: entered allmulticast mode [ 1105.015486][T17504] bridge_slave_1: entered promiscuous mode [ 1105.147969][T11061] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1105.158228][T11061] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1105.167334][T11061] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1105.177605][T11061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1105.187832][T11061] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1105.196722][T11061] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1105.228887][T17572] loop3: detected capacity change from 0 to 16 [ 1105.255015][T17572] erofs: (device loop3): mounted with root inode @ nid 36. [ 1105.289609][T11062] Bluetooth: hci5: command tx timeout [ 1105.332390][T17504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.346837][T17574] syz.3.3175: attempt to access beyond end of device [ 1105.346837][T17574] loop3: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1105.347190][T17504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.478045][T17574] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1105.490027][T17576] syz.3.3175: attempt to access beyond end of device [ 1105.490027][T17576] loop3: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1105.503974][T17576] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1105.655643][T17504] team0: Port device team_slave_0 added [ 1105.671522][T17504] team0: Port device team_slave_1 added [ 1106.014107][T17580] loop3: detected capacity change from 0 to 512 [ 1106.081898][T17580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.141100][T17504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.163622][T17504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.190502][T17504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.206498][T17578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3176'. [ 1106.241968][T17504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.252951][T17504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.281715][T17504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.481865][T17504] hsr_slave_0: entered promiscuous mode [ 1106.491899][T17504] hsr_slave_1: entered promiscuous mode [ 1106.500971][T17504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1106.508870][T17504] Cannot create hsr debugfs directory [ 1106.554834][T17395] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1106.564616][T17395] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1106.574770][T17395] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1106.584562][T17395] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1107.288508][T11062] Bluetooth: hci3: command tx timeout [ 1107.888560][T17570] chnl_net:caif_netlink_parms(): no params data found [ 1108.254431][T17395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.419916][T17395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.606335][T17615] fuse: Unknown parameter '0x0000000000000006' [ 1108.979161][T17504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.272140][T17570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.314140][T17570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.324624][T17570] bridge_slave_0: entered allmulticast mode [ 1109.331901][T17570] bridge_slave_0: entered promiscuous mode [ 1109.343368][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.350581][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.368382][T11062] Bluetooth: hci3: command tx timeout [ 1109.453602][T17504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.518426][T17570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.545031][T17570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.578248][T17570] bridge_slave_1: entered allmulticast mode [ 1109.630711][T17570] bridge_slave_1: entered promiscuous mode [ 1110.529971][ T9921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.537115][ T9921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.695162][T17504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.865429][T17570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.933340][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.010448][T17504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.088204][T17637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3184'. [ 1111.107659][T17570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.155722][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 1111.200016][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.334735][T17639] bridge_slave_0 (unregistering): left allmulticast mode [ 1111.357790][T17639] bridge_slave_0 (unregistering): left promiscuous mode [ 1111.398148][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.449142][T11062] Bluetooth: hci3: command tx timeout [ 1111.610730][T17570] team0: Port device team_slave_0 added [ 1111.644517][T17570] team0: Port device team_slave_1 added [ 1111.845374][T17570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.867791][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.940809][T17570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.006902][T17570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.025480][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.068901][T17570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.134005][T17663] loop3: detected capacity change from 0 to 512 [ 1112.205869][T17663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1112.249156][T17570] hsr_slave_0: entered promiscuous mode [ 1112.249215][T17663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.285305][T17570] hsr_slave_1: entered promiscuous mode [ 1112.311985][T17570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1112.336542][T17570] Cannot create hsr debugfs directory [ 1112.441786][T17504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1112.461420][T17504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1112.492283][T17504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1112.548980][T17504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1112.772302][T17395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.953585][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.007619][T17395] veth0_vlan: entered promiscuous mode [ 1113.164842][T17570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.255292][T17504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.345110][T17570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.411570][T17695] overlayfs: failed to resolve './file0': -2 [ 1113.429147][T17395] veth1_vlan: entered promiscuous mode [ 1113.512635][T17570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.528742][T11062] Bluetooth: hci3: command tx timeout [ 1113.814892][T17570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.413948][T17504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.630792][T17395] veth0_macvtap: entered promiscuous mode [ 1114.667670][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.674847][T10033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.739524][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.746689][T10033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.773166][T17707] loop1: detected capacity change from 0 to 2048 [ 1114.786553][T17395] veth1_macvtap: entered promiscuous mode [ 1114.834120][T17711] loop3: detected capacity change from 0 to 1024 [ 1114.870055][T17707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.937214][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.972572][T17711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.015662][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.040023][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.061513][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.093517][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.125219][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.148958][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.166481][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.188530][T17395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.245198][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.258849][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.282549][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.307930][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.324768][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.349559][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.368272][T17395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.396213][T17395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.429312][T17395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.432178][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.518686][T17395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.527453][T17395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.540854][T17395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.549678][T17395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.685109][T17725] loop3: detected capacity change from 0 to 16 [ 1115.745474][T17725] erofs: (device loop3): mounted with root inode @ nid 36. [ 1115.922592][T17570] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1115.943546][T17570] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1115.968339][ T8240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.002532][ T8240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.030190][T17727] syz.3.3192: attempt to access beyond end of device [ 1116.030190][T17727] loop3: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1116.066435][T17570] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1116.114108][T17727] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1116.126457][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.143482][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.170050][T17729] syz.3.3192: attempt to access beyond end of device [ 1116.170050][T17729] loop3: rw=0, sector=24, nr_sectors = 8 limit=16 [ 1116.222504][T17729] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 43 of nid 36 [ 1116.443094][T17570] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1116.535956][ T8240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.578060][ T8240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.821638][T17504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.878992][T17570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.202346][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.282187][T17570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.591949][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.599233][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.622989][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.630264][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.313204][T13548] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.592050][T11061] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1118.606198][T11061] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1118.649264][T11061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1118.678883][T11061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1118.686589][T11061] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1118.694785][T11061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1118.764702][T13548] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.821623][T17739] loop3: detected capacity change from 0 to 32768 [ 1118.976638][T17739] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1119.059881][T17739] XFS (loop3): Ending clean mount [ 1119.090617][T13548] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.197812][T17504] veth0_vlan: entered promiscuous mode [ 1119.207674][T17504] veth1_vlan: entered promiscuous mode [ 1119.282811][T13548] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.318878][T14875] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1119.330814][T17746] loop1: detected capacity change from 0 to 32768 [ 1119.400233][T17570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.430831][T17504] veth0_macvtap: entered promiscuous mode [ 1119.468488][T17746] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1119.510198][T17504] veth1_macvtap: entered promiscuous mode [ 1119.569930][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.617437][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.629448][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.651712][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.673908][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.714085][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.726569][T17746] XFS (loop1): Ending clean mount [ 1119.733795][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.748533][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.762980][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.773868][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.799153][T17504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.849493][T17748] chnl_net:caif_netlink_parms(): no params data found [ 1119.902203][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.920981][T15594] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1119.937314][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.965481][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.008070][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.020089][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.031055][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.041585][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.054137][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.064418][T17504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.075281][T17504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.105756][T17504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.190805][T17504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.200796][T17504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.212200][T17504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.221471][T17504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.304372][T17781] loop3: detected capacity change from 0 to 1024 [ 1120.410497][T17570] veth0_vlan: entered promiscuous mode [ 1120.419496][T17781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.424302][T17570] veth1_vlan: entered promiscuous mode [ 1120.588748][T13548] bridge_slave_1: left allmulticast mode [ 1120.598051][T13548] bridge_slave_1: left promiscuous mode [ 1120.615156][T13548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.646099][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.656160][T13548] bridge_slave_0: left allmulticast mode [ 1120.672230][T13548] bridge_slave_0: left promiscuous mode [ 1120.680012][T13548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.808318][T11062] Bluetooth: hci4: command tx timeout [ 1121.453936][T13548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.465700][T13548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.477101][T13548] bond0 (unregistering): Released all slaves [ 1121.533406][T17748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.549996][T17748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.578823][T17748] bridge_slave_0: entered allmulticast mode [ 1121.585978][T17748] bridge_slave_0: entered promiscuous mode [ 1121.600370][T17748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.609047][T17748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.616272][T17748] bridge_slave_1: entered allmulticast mode [ 1121.625528][T17748] bridge_slave_1: entered promiscuous mode [ 1121.907674][T17748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.313345][T17748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.723607][T17570] veth0_macvtap: entered promiscuous mode [ 1122.898202][T11062] Bluetooth: hci4: command tx timeout [ 1122.921617][T10029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.957101][T10029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.990495][T17748] team0: Port device team_slave_0 added [ 1123.072130][T17748] team0: Port device team_slave_1 added [ 1123.126487][T17570] veth1_macvtap: entered promiscuous mode [ 1123.202060][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.212632][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.222415][T17748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.235702][T17748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.317749][T17748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.354945][T13548] hsr_slave_0: left promiscuous mode [ 1123.371749][T13548] hsr_slave_1: left promiscuous mode [ 1123.396757][T13548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.417943][T13548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.438879][T13548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.465762][T13548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.520180][T13548] veth1_macvtap: left promiscuous mode [ 1123.525769][T13548] veth0_macvtap: left promiscuous mode [ 1123.548672][T13548] veth1_vlan: left promiscuous mode [ 1123.564275][T13548] veth0_vlan: left promiscuous mode [ 1123.585248][T17819] loop3: detected capacity change from 0 to 40427 [ 1123.609252][T17819] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1123.635633][T17819] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1123.660316][T17819] F2FS-fs (loop3): invalid crc value [ 1123.672648][T17819] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1123.789489][T17819] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1123.807102][T17819] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1124.715870][T17848] loop3: detected capacity change from 0 to 1024 [ 1124.770001][T17848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.897593][T14875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.939151][T13548] team0 (unregistering): Port device team_slave_1 removed [ 1124.978615][T11062] Bluetooth: hci4: command tx timeout [ 1125.076117][T13548] team0 (unregistering): Port device team_slave_0 removed [ 1125.671834][T17748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.679606][T17748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.708811][T17748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.741730][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3208'. [ 1125.883061][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.903993][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.028065][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.047727][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.057826][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.085793][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.120648][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.178274][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.198512][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.508754][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.810092][T17570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.050500][T11062] Bluetooth: hci4: command tx timeout [ 1127.194411][T17748] hsr_slave_0: entered promiscuous mode [ 1127.203646][T17748] hsr_slave_1: entered promiscuous mode [ 1127.461959][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.472958][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.483325][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.494105][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.504409][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.515161][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.525057][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.535631][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.545523][T17570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1127.556013][T17570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.569229][T17570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.579531][T17570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.588426][T17570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.597154][T17570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.605939][T17570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.627132][T17875] loop3: detected capacity change from 0 to 128 [ 1127.669090][T17875] vfat: Bad value for 'gid' [ 1127.673656][T17875] vfat: Bad value for 'gid' [ 1128.465490][T17873] loop1: detected capacity change from 0 to 40427 [ 1128.491566][T17873] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1128.524132][T17873] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1128.541394][T17873] F2FS-fs (loop1): invalid crc value [ 1128.568338][T17873] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1128.658215][T17873] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1128.665381][T17873] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1129.464318][T17895] loop1: detected capacity change from 0 to 1024 [ 1129.527339][T17895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.648169][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.383746][T17900] loop1: detected capacity change from 0 to 32768 [ 1130.518450][T17900] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1130.629417][T17900] XFS (loop1): Ending clean mount [ 1130.773219][T15594] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1132.174112][T17916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3223'. [ 1132.430286][ T1834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.462982][ T1834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.602395][T13548] bridge_slave_1: left allmulticast mode [ 1132.616531][T13548] bridge_slave_1: left promiscuous mode [ 1132.623018][T13548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.663626][T13548] bridge_slave_0: left allmulticast mode [ 1132.673114][T13548] bridge_slave_0: left promiscuous mode [ 1132.688770][T13548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.106996][T11061] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1133.117583][T11061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1133.127449][T11061] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1133.139894][T11061] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1133.172159][T11061] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1133.179738][T11061] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1133.276467][T17918] loop1: detected capacity change from 0 to 32768 [ 1133.511487][T17918] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1133.602506][T17918] XFS (loop1): Ending clean mount [ 1133.973929][T17918] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 [ 1134.175296][T17918] XFS (loop1): Unmount and run xfs_repair [ 1134.205390][T17918] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1134.225179][T17918] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1134.255052][T17918] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1134.284403][T17918] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1134.337181][T17918] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1134.363779][T17918] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1134.375352][T17918] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1134.386959][T17918] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1134.405441][T17955] loop4: detected capacity change from 0 to 1024 [ 1134.412361][T17918] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1134.422652][T17918] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74 [ 1134.458884][T13548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.471850][T17918] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1134.488953][T17955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.502007][T13548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.509876][T17918] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1134.523364][T13548] bond0 (unregistering): Released all slaves [ 1134.562953][T15594] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1134.704990][T17504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.760177][ T8240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.768505][ T8240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.288301][T11062] Bluetooth: hci0: command tx timeout [ 1135.513259][T13548] hsr_slave_0: left promiscuous mode [ 1135.519753][T13548] hsr_slave_1: left promiscuous mode [ 1135.525896][T13548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.540169][T13548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.747651][T17975] fuse: Unknown parameter 'fd0x0000000000000006' [ 1135.844058][T13548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.952635][T13548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.216319][T13548] veth1_macvtap: left promiscuous mode [ 1136.240573][T13548] veth0_macvtap: left promiscuous mode [ 1136.258743][T13548] veth1_vlan: left promiscuous mode [ 1136.277387][T13548] veth0_vlan: left promiscuous mode [ 1136.492341][T17986] loop4: detected capacity change from 0 to 1024 [ 1136.542868][T17986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.727103][T17504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.831858][T17994] loop4: detected capacity change from 0 to 1024 [ 1136.896682][T17994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.368045][T11062] Bluetooth: hci0: command tx timeout [ 1137.929325][T17504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.038527][T18002] loop1: detected capacity change from 0 to 1024 [ 1138.127363][T18002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.159353][T13548] team0 (unregistering): Port device team_slave_1 removed [ 1138.204981][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 1138.205002][ T29] audit: type=1804 audit(1138.156:1443): pid=18002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3242" name="/newroot/142/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1138.243844][ T29] audit: type=1800 audit(1138.186:1444): pid=18002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3242" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1138.270441][T13548] team0 (unregistering): Port device team_slave_0 removed [ 1138.302827][ T29] audit: type=1804 audit(1138.256:1445): pid=18009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3242" name="/newroot/142/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1138.325641][ T29] audit: type=1800 audit(1138.256:1446): pid=18009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3242" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1139.017666][T17978] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3235'. [ 1139.274141][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.418418][T17937] chnl_net:caif_netlink_parms(): no params data found [ 1139.448588][T11062] Bluetooth: hci0: command tx timeout [ 1139.492085][T18024] syz.0.3248[18024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1139.492184][T18024] syz.0.3248[18024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1139.505086][T18024] syz.0.3248[18024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1139.715239][T17748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1139.803863][T17748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1139.847703][T17748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1139.881587][T17748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1140.003457][T17937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.029933][T17937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.048651][T17937] bridge_slave_0: entered allmulticast mode [ 1140.056771][T17937] bridge_slave_0: entered promiscuous mode [ 1140.092414][T17937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.110222][T17937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.117501][T17937] bridge_slave_1: entered allmulticast mode [ 1140.133712][T17937] bridge_slave_1: entered promiscuous mode [ 1140.237535][T17937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.290313][T17937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.491560][T17937] team0: Port device team_slave_0 added [ 1140.520526][T17937] team0: Port device team_slave_1 added [ 1140.531514][T18045] loop1: detected capacity change from 0 to 512 [ 1140.556351][T18030] loop4: detected capacity change from 0 to 32768 [ 1140.563614][T18047] loop0: detected capacity change from 0 to 1024 [ 1140.617312][T17937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.617835][T18047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.625111][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.688134][T18030] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1140.692746][T18045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.707167][T17937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.727198][T17937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.737636][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.024936][T17937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.038045][T11062] Bluetooth: hci0: command tx timeout [ 1142.079677][T18030] XFS (loop4): Ending clean mount [ 1142.290851][T18030] XFS (loop4): Quotacheck needed: Please wait. [ 1143.022814][T15594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.042894][T17937] hsr_slave_0: entered promiscuous mode [ 1143.069845][T17570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.082996][T17937] hsr_slave_1: entered promiscuous mode [ 1143.108802][T17937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.116458][T17937] Cannot create hsr debugfs directory [ 1143.148059][T18030] XFS (loop4): Quotacheck: Done. [ 1143.239934][T17504] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1143.430711][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 1143.736576][T17748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.783144][ T29] audit: type=1326 audit(1143.726:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1143.860778][ T29] audit: type=1326 audit(1143.736:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1143.932163][ T29] audit: type=1326 audit(1143.756:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1144.003363][ T29] audit: type=1326 audit(1143.766:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1144.047268][T17937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.051666][ T29] audit: type=1326 audit(1143.766:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1144.124566][ T29] audit: type=1326 audit(1143.766:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1144.127135][T18095] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3261'. [ 1144.173098][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3261'. [ 1144.194862][ T29] audit: type=1326 audit(1143.766:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1144.204698][T18097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.236218][ T29] audit: type=1326 audit(1143.766:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1144.294406][ T29] audit: type=1326 audit(1143.766:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1144.295407][T18097] bridge_slave_0 (unregistering): left allmulticast mode [ 1144.325557][ T29] audit: type=1326 audit(1143.766:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba5d7dff9 code=0x7ffc0000 [ 1144.355329][T18097] bridge_slave_0 (unregistering): left promiscuous mode [ 1144.363912][T18097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.473809][T17937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.508702][T17748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.546229][T10029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.553466][T10029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.610918][T17937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.698488][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.705703][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.847664][T17937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.543334][T18116] loop0: detected capacity change from 0 to 1024 [ 1145.550904][T17748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1145.615917][T18116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1145.640076][T17748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1146.979799][ T9921] bridge_slave_1: left allmulticast mode [ 1146.985513][ T9921] bridge_slave_1: left promiscuous mode [ 1147.019369][ T9921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.209456][ T9921] bridge_slave_0: left allmulticast mode [ 1147.215195][ T9921] bridge_slave_0: left promiscuous mode [ 1147.258123][ T9921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.580329][T17570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.690378][T18128] ================================================================== [ 1148.698526][T18128] BUG: KASAN: slab-use-after-free in bpf_trace_run2+0xfa/0x540 [ 1148.706206][T18128] Read of size 8 at addr ffff888024b34118 by task syz.1.3264/18128 [ 1148.714130][T18128] [ 1148.716498][T18128] CPU: 0 UID: 0 PID: 18128 Comm: syz.1.3264 Not tainted 6.12.0-rc3-next-20241015-syzkaller #0 [ 1148.726777][T18128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1148.736865][T18128] Call Trace: [ 1148.740178][T18128] [ 1148.743126][T18128] dump_stack_lvl+0x241/0x360 [ 1148.747846][T18128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1148.753120][T18128] ? __pfx__printk+0x10/0x10 [ 1148.757798][T18128] ? _printk+0xd5/0x120 [ 1148.762024][T18128] ? __virt_addr_valid+0x183/0x530 [ 1148.767183][T18128] ? __virt_addr_valid+0x183/0x530 [ 1148.772347][T18128] print_report+0x169/0x550 [ 1148.776908][T18128] ? __virt_addr_valid+0x183/0x530 [ 1148.782076][T18128] ? __virt_addr_valid+0x183/0x530 [ 1148.787249][T18128] ? __virt_addr_valid+0x45f/0x530 [ 1148.792415][T18128] ? __phys_addr+0xba/0x170 [ 1148.796975][T18128] ? bpf_trace_run2+0xfa/0x540 [ 1148.801821][T18128] kasan_report+0x143/0x180 [ 1148.803518][T18133] loop0: detected capacity change from 0 to 128 [ 1148.806353][T18128] ? bpf_trace_run2+0xfa/0x540 [ 1148.806391][T18128] bpf_trace_run2+0xfa/0x540 [ 1148.806421][T18128] ? arch_do_signal_or_restart+0x51f/0x860 [ 1148.827866][T18128] ? __pfx_lock_release+0x10/0x10 [ 1148.832934][T18128] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1148.838185][T18128] ? __might_fault+0xc6/0x120 [ 1148.842909][T18128] ? trace_sys_enter+0x9d/0x150 [ 1148.844500][T18133] EXT4-fs: Ignoring removed oldalloc option [ 1148.847781][T18128] __bpf_trace_sys_enter+0x38/0x60 [ 1148.858820][T18128] trace_sys_enter+0xd9/0x150 [ 1148.863544][T18128] syscall_trace_enter+0xf8/0x150 [ 1148.868617][T18128] do_syscall_64+0xcc/0x230 [ 1148.873170][T18128] ? clear_bhb_loop+0x35/0x90 [ 1148.877891][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.883837][T18128] RIP: 0033:0x7fa1ffb19959 [ 1148.885591][T18133] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1148.888281][T18128] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1148.888306][T18128] RSP: 002b:00007fa20096ab40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 1148.888333][T18128] RAX: ffffffffffffffda RBX: 00007fa1ffd35f88 RCX: 00007fa1ffb19959 [ 1148.888352][T18128] RDX: 00007fa20096ab40 RSI: 00007fa20096ac70 RDI: 0000000000000011 [ 1148.888370][T18128] RBP: 00007fa1ffd35f80 R08: 0000000000000000 R09: 0000000000000000 [ 1148.888386][T18128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1ffd35f8c [ 1148.888403][T18128] R13: 0000000000000000 R14: 00007ffd2fb71f80 R15: 00007ffd2fb72068 [ 1148.888436][T18128] [ 1148.888446][T18128] [ 1148.888452][T18128] Allocated by task 18128: [ 1148.888472][T18128] kasan_save_track+0x3f/0x80 [ 1148.982827][T18128] __kasan_kmalloc+0x98/0xb0 [ 1148.987447][T18128] __kmalloc_cache_noprof+0x243/0x390 [ 1148.992852][T18128] bpf_raw_tp_link_attach+0x2a0/0x6e0 [ 1148.998262][T18128] bpf_raw_tracepoint_open+0x177/0x1f0 [ 1149.003755][T18128] __sys_bpf+0x3c0/0x810 [ 1149.008018][T18128] __x64_sys_bpf+0x7c/0x90 [ 1149.012450][T18128] do_syscall_64+0xf3/0x230 [ 1149.016973][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.022899][T18128] [ 1149.025256][T18128] Freed by task 17570: [ 1149.029342][T18128] kasan_save_track+0x3f/0x80 [ 1149.034056][T18128] kasan_save_free_info+0x40/0x50 [ 1149.039109][T18128] __kasan_slab_free+0x59/0x70 [ 1149.043913][T18128] kfree+0x1a0/0x460 [ 1149.047837][T18128] rcu_core+0xaaa/0x17a0 [ 1149.052121][T18128] handle_softirqs+0x2c5/0x980 [ 1149.056934][T18128] __irq_exit_rcu+0xf4/0x1c0 [ 1149.061560][T18128] irq_exit_rcu+0x9/0x30 [ 1149.065832][T18128] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1149.071500][T18128] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1149.077513][T18128] [ 1149.079862][T18128] Last potentially related work creation: [ 1149.085593][T18128] kasan_save_stack+0x3f/0x60 [ 1149.090320][T18128] __kasan_record_aux_stack+0xac/0xc0 [ 1149.095805][T18128] call_rcu+0x167/0xa70 [ 1149.100001][T18128] bpf_link_release+0x78/0x90 [ 1149.104724][T18128] __fput+0x23c/0xa50 [ 1149.108741][T18128] task_work_run+0x24f/0x310 [ 1149.113362][T18128] get_signal+0x15e8/0x1740 [ 1149.117899][T18128] arch_do_signal_or_restart+0x96/0x860 [ 1149.123482][T18128] syscall_exit_to_user_mode+0xc9/0x370 [ 1149.129067][T18128] do_syscall_64+0x100/0x230 [ 1149.133689][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.139627][T18128] [ 1149.141974][T18128] The buggy address belongs to the object at ffff888024b34100 [ 1149.141974][T18128] which belongs to the cache kmalloc-128 of size 128 [ 1149.156071][T18128] The buggy address is located 24 bytes inside of [ 1149.156071][T18128] freed 128-byte region [ffff888024b34100, ffff888024b34180) [ 1149.169822][T18128] [ 1149.172181][T18128] The buggy address belongs to the physical page: [ 1149.178629][T18128] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24b34 [ 1149.187433][T18128] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1149.194602][T18128] page_type: f5(slab) [ 1149.198666][T18128] raw: 00fff00000000000 ffff88801ac41a00 ffffea0000b44880 dead000000000004 [ 1149.207289][T18128] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1149.215906][T18128] page dumped because: kasan: bad access detected [ 1149.222363][T18128] page_owner tracks the page as allocated [ 1149.228106][T18128] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 62, tgid 62 (kworker/u8:4), ts 78017446093, free_ts 77989222761 [ 1149.247086][T18128] post_alloc_hook+0x1f3/0x230 [ 1149.251893][T18128] get_page_from_freelist+0x3123/0x3270 [ 1149.257482][T18128] __alloc_pages_noprof+0x292/0x710 [ 1149.262721][T18128] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1149.268228][T18128] alloc_slab_page+0x6a/0x120 [ 1149.272942][T18128] allocate_slab+0x5a/0x2f0 [ 1149.277482][T18128] ___slab_alloc+0xcd1/0x14b0 [ 1149.282206][T18128] __slab_alloc+0x58/0xa0 [ 1149.286571][T18128] __kmalloc_cache_noprof+0x27b/0x390 [ 1149.292002][T18128] __hw_addr_add_ex+0x1a8/0x610 [ 1149.296901][T18128] dev_mc_add+0xa3/0x110 [ 1149.301188][T18128] igmp6_group_added+0x1a4/0x710 [ 1149.306163][T18128] __ipv6_dev_mc_inc+0x8bf/0xaa0 [ 1149.311134][T18128] addrconf_dad_work+0x448/0x16f0 [ 1149.316197][T18128] process_scheduled_works+0xa63/0x1850 [ 1149.321793][T18128] worker_thread+0x870/0xd30 [ 1149.326431][T18128] page last free pid 5250 tgid 5250 stack trace: [ 1149.332799][T18128] free_unref_page+0xcfb/0xf20 [ 1149.337624][T18128] __put_partials+0xeb/0x130 [ 1149.342251][T18128] put_cpu_partial+0x17c/0x250 [ 1149.347053][T18128] __slab_free+0x2ea/0x3d0 [ 1149.351524][T18128] qlist_free_all+0x9a/0x140 [ 1149.356589][T18128] kasan_quarantine_reduce+0x14f/0x170 [ 1149.362096][T18128] __kasan_slab_alloc+0x23/0x80 [ 1149.366988][T18128] kmem_cache_alloc_lru_noprof+0x1dd/0x390 [ 1149.372840][T18128] shmem_alloc_inode+0x28/0x40 [ 1149.377734][T18128] alloc_inode+0x65/0x1a0 [ 1149.382111][T18128] new_inode+0x22/0x1d0 [ 1149.386314][T18128] shmem_get_inode+0x34a/0xd70 [ 1149.391121][T18128] shmem_mknod+0x5f/0x1e0 [ 1149.395478][T18128] path_openat+0x1c03/0x3590 [ 1149.400124][T18128] do_filp_open+0x235/0x490 [ 1149.404663][T18128] do_sys_openat2+0x13e/0x1d0 [ 1149.409385][T18128] [ 1149.411767][T18128] Memory state around the buggy address: [ 1149.417413][T18128] ffff888024b34000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.425498][T18128] ffff888024b34080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1149.433673][T18128] >ffff888024b34100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.441771][T18128] ^ [ 1149.446644][T18128] ffff888024b34180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1149.454730][T18128] ffff888024b34200: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 1149.462821][T18128] ================================================================== [ 1149.473624][T18128] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1149.480877][T18128] CPU: 0 UID: 0 PID: 18128 Comm: syz.1.3264 Not tainted 6.12.0-rc3-next-20241015-syzkaller #0 [ 1149.491147][T18128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1149.501216][T18128] Call Trace: [ 1149.504499][T18128] [ 1149.507463][T18128] dump_stack_lvl+0x241/0x360 [ 1149.512152][T18128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1149.517353][T18128] ? __pfx__printk+0x10/0x10 [ 1149.521953][T18128] ? vscnprintf+0x5d/0x90 [ 1149.526288][T18128] panic+0x349/0x880 [ 1149.530192][T18128] ? check_panic_on_warn+0x21/0xb0 [ 1149.535308][T18128] ? __pfx_panic+0x10/0x10 [ 1149.539760][T18128] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 1149.545665][T18128] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1149.551575][T18128] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1149.557916][T18128] ? print_report+0x502/0x550 [ 1149.562609][T18128] check_panic_on_warn+0x86/0xb0 [ 1149.567553][T18128] ? bpf_trace_run2+0xfa/0x540 [ 1149.572329][T18128] end_report+0x77/0x160 [ 1149.576584][T18128] kasan_report+0x154/0x180 [ 1149.581104][T18128] ? bpf_trace_run2+0xfa/0x540 [ 1149.585883][T18128] bpf_trace_run2+0xfa/0x540 [ 1149.590490][T18128] ? arch_do_signal_or_restart+0x51f/0x860 [ 1149.596311][T18128] ? __pfx_lock_release+0x10/0x10 [ 1149.601343][T18128] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1149.606552][T18128] ? __might_fault+0xc6/0x120 [ 1149.611240][T18128] ? trace_sys_enter+0x9d/0x150 [ 1149.616094][T18128] __bpf_trace_sys_enter+0x38/0x60 [ 1149.621212][T18128] trace_sys_enter+0xd9/0x150 [ 1149.625920][T18128] syscall_trace_enter+0xf8/0x150 [ 1149.630962][T18128] do_syscall_64+0xcc/0x230 [ 1149.635490][T18128] ? clear_bhb_loop+0x35/0x90 [ 1149.640193][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.646088][T18128] RIP: 0033:0x7fa1ffb19959 [ 1149.650514][T18128] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1149.670129][T18128] RSP: 002b:00007fa20096ab40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 1149.678591][T18128] RAX: ffffffffffffffda RBX: 00007fa1ffd35f88 RCX: 00007fa1ffb19959 [ 1149.686587][T18128] RDX: 00007fa20096ab40 RSI: 00007fa20096ac70 RDI: 0000000000000011 [ 1149.694579][T18128] RBP: 00007fa1ffd35f80 R08: 0000000000000000 R09: 0000000000000000 [ 1149.702559][T18128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1ffd35f8c [ 1149.710536][T18128] R13: 0000000000000000 R14: 00007ffd2fb71f80 R15: 00007ffd2fb72068 [ 1149.718622][T18128] [ 1149.721783][T18128] Kernel Offset: disabled [ 1149.726122][T18128] Rebooting in 86400 seconds..