last executing test programs: 52.465014997s ago: executing program 4 (id=2356): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150a, 0x1201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) 50.330722048s ago: executing program 4 (id=2360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"d582"}}}}}}, 0x0) 50.020080323s ago: executing program 4 (id=2363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}]}, 0x50}}, 0x0) 13.064443289s ago: executing program 2 (id=2457): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="b68704f53e9a0436bc", 0x9}], 0x1) 10.778363922s ago: executing program 1 (id=2463): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x24000881) 10.583964075s ago: executing program 1 (id=2464): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000084080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.348314328s ago: executing program 1 (id=2465): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) poll(&(0x7f0000000100)=[{r1}, {r1}], 0x2, 0x3fb) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 9.934785343s ago: executing program 2 (id=2466): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1860000003000000000000006f000000186600000e00000000000000010000005d9b0100fcffffffa46879d48aef29e6f00ea65899e969e5321518c964e66eb37391b1c9d3e644771a6f402fb6ade5e2127d5d46cd845a44880fc365daa224e30831f90b12b514c7b21fad73c218e507ec181fe35f57c0cb33c7247e60f09ea394c560fe60489cf192833b0af0ec238d0fe90bd241f16a67413e354100000000"], &(0x7f0000000080)='syzkaller\x00', 0xffffffb2, 0x5a, &(0x7f00000000c0)=""/90, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0xfffffffffffffe14, 0x10, &(0x7f0000000d00)={0x2, 0x9, 0x7, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x8b, 0xf7, &(0x7f00000002c0)="6056332e9767ce4a6290275324149e65671f484fef63520d47689a5d222f22fa62ffdeab4190dc174d93b4847cfc1ffb57e053600821d5fd22278d12b726c143114bfb2b53b39dcec70813e910b4b7068219326228beabc55459a5b0037833d79e1044ca26199d38dca008fc19032ee5b4c010b4e316f0f7dc0a8383176ade62b8ae1335ef94c8e2eaea85", &(0x7f0000000380)=""/247, 0x0, 0x0, 0xe5, 0xcd, &(0x7f0000000480)="72536fad3fd260d3da45e761b97bbd97c235762bbf9751752c64a3eaf025e96a7c7b40ffcca35f22ea107610d9b15fecba1b1023b94e99f046f28301aeadc4693ab64772a5cb882a220c09d1543338abc530d098d28395648c5ceebf30907e6e058d530a87d2a6fb271debcde58e42230114d78ed0a0eef9bc2cf780fe7c1ecaab4349f127e67dc54ab7ec627d311a1aa0fd670eef39635fcea9ff97d42ef16bb9b60c3c03bee47ce30387df0383f2e5e038d511de52df97cf92a6d89b95dcf5e9b6f854501ae22a9baa681404968f19da738dcac20bba4a43246ec1b832e7f6521c6033b9", &(0x7f0000000580)="52a9ecbb5a3380609567ff67e068707ed461b17a0d733bc276d146ee1e69b9a9495fbdf1f78e7f8f4356fa347a07916d6e434044039f47e8d8e00e1275c3099244d31eec48cd4e94fc87151cc07a0e12461ce5e101a6aca643be5de045856b45df4318b5cbbb96091ba3ec62563c426a713e3c02ba8ebc0413500fe1584ff169945952758e6b3d600ea7fa8dc2d72c4bdab056a2242d2c4cde733232c7d5c6c1024a186cf070cb645b9887011d2d9ed08f449eb88768e5e59c0375c6836c462aba6c600e888e8dae9a37176f35", 0x0, 0x0, 0xfff}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x9, 0x8, 0x6, 0x2e0, 0xffffffffffffffff, 0x80a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000c00)='ext4_es_remove_extent\x00', r8}, 0x10) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r9}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x2, 0x0, r10}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r11}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r11, &(0x7f0000000c80)="7fe38cb47ea7fff7e79681e7da2bb502c12c7db87af49d4e1f92d956ab4f38a8a6037d4d9f9a1dce005851ab5bec0bab9af73ed1c6c3434027705926e6101df6b7646f90fd3478cb208ac14e90c5a5110aabd3b626ea09d628f86b429a934f0e35e09b4f009a602ad3a822b91b81fb333b197a2bc0229f0e1947a928feb077", &(0x7f0000000c40)=""/16, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f0000000700)="085af3fd0cca2c43c43319897ca43ef7c90112885d5385f36ce8baf564202eea6d3e866e", &(0x7f0000000740)=""/116, &(0x7f00000007c0)="6af3e73ee851ec4e01cd0ebb3ba135938927f4f32096401772fd7539c6ef5f45984e0207796d6050e2d7235ab63e3b08ab53da2b0b09a145e25088cdc5608611bdae1a72dc0dc12a88dffcfdb16584f364209f449178f1a9d594f53695416f25a948650329635af40f5d", &(0x7f0000000840)="095d8b512b35b70f1daf599ff57e77267f39897ccf79a9c51dcd3744429a77d6b9dc4ea6c63022fa175c51c12f54841ae667ef96ec8060c60db3864cc719b5d9061ba30b2dcca557c0dd9915f3ecc013aa156c9c474a19d0d386a82c909f07fc933cee429f42dba3961d3bbc5f89c7519c67353a4a013546505100dbf1792b95d8870d244170f96989afb5638fb9776e26f0d3f6a92fc780fc936cd55a9c91d0", 0x5, r1}, 0x38) 9.756715058s ago: executing program 3 (id=2467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 9.725146297s ago: executing program 0 (id=2468): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='force,nls=macgreek,barrier,part=0x0000000000000004,umask=00000000000000000000006,umask=00000000000000000000011,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c4c222716f9e8836aca8645205e92"], 0x2, 0x6da, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36fb95b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc5a8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x234) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000009, 0x10012, r0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 9.446172334s ago: executing program 0 (id=2470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='./file2/file0\x00') truncate(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000480)='./bus\x00', 0x80000, &(0x7f0000000880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,blksize=0x0000000000001c00,dont_hash,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d746d706673002c7375626a5f747970653d615f69d8498af9682c646f6e745f6d6561737572652c66756e633d4d4f44554c455f434845434b2c6673757569643d65006530666661632d326531312d663938392d643530002d65333331613235642c00"], 0x0, 0x0, &(0x7f0000001080)="be236ca1d890f11e15a9faffffffffffffffe372bbb777701f9cb354189a66b6efff6fbc9119e200a09e878a0b4c73f95bb31836086ee2f968c2284ce900961749c19bd315a25a12b638950b1e639bcc083ebe3485ab9e5486f9454596bfb334da43051bf2ff269055e21e4422396434b6e21797004184c67ccc89bceb8ab0b96c8c912538720b4ff7f8001e7564618ee5ce745f5e217025813d1bd276937514457f9c0c2bb32d62dbf0bfe01b1224d70fe86406f0643838bbe808d263d91bd970ce09867992bd120006ac6767439dbd85f82b669980027fc0186e075316511a602b921b54ed") 8.655869903s ago: executing program 2 (id=2471): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) 8.299458071s ago: executing program 5 (id=2472): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast1, 0x5}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000600)={[{@data_writeback}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodelalloc}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00', r6}, 0x10) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb049968b0a77337115cb5e534ae803e71246f423229019cd0a4c30767456f86dba221625a099049e4b3b794f467613cbf14916367d1769f7308b573ebb93d67ab2fbf196aea78464cb1578dbd1c3629eaf09736f6bc1cc12a1f26db97783"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) fcntl$setlease(r0, 0x400, 0x1) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)) 7.412308464s ago: executing program 1 (id=2473): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x2, 0x1e6, &(0x7f0000000700)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) memfd_create(&(0x7f0000000a40)='\xf3e\t\xa9\xff\vty\x01s\xd1\xe4RM\xc0x8\xc6\xc7\xc0\x01\x04\xebbO\xbd<\x1f\x81\x94\xd38bB0o=\x90\xcf|\vP\xbe\b\xc9\xb5\\(\x1aj6H98\xdf\xe5\xd7\\\xa5p\xcb\x8aB\xce\xb33&d\x16\x13\x11', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r4, &(0x7f0000000580)=[{0x0}], 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) 7.232450882s ago: executing program 3 (id=2474): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x214, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x40384708, 0x20000000) 7.231833848s ago: executing program 2 (id=2475): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f0000000380)={[{@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f0000005600)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) fallocate(r0, 0x0, 0x0, 0x7000) write$usbip_server(r0, 0x0, 0x7000) 7.210432471s ago: executing program 0 (id=2476): socket$inet6(0xa, 0x1, 0x6) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001140)={0x1, &(0x7f0000000100)=[{0xfffe}]}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00e00b0000000000000000d521ab5af806a611"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000000)=""/4098, &(0x7f0000001080)=0x1002) r2 = getpgrp(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x27, 0x24, 0xffffffffffffffff, @prog_fd}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000001040)={0x8, 'bond_slave_1\x00', {'veth0\x00'}, 0x8001}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000), 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200), 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0x24}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usbip_server_init(0x5) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x1f, 0x0, 0x0, 0x0, 0x6}, 0x20) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x2001) bind$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x4e23, @broadcast}, 0x10) 6.119862381s ago: executing program 1 (id=2477): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="b68704f53e9a0436bc", 0x9}], 0x1) 5.089785873s ago: executing program 5 (id=2478): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x80086601, 0x0) 4.519309758s ago: executing program 3 (id=2479): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) map_shadow_stack(&(0x7f0000d7e000/0x1000)=nil, 0x1000, 0x0) 4.07186759s ago: executing program 4 (id=2366): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2d8}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 3.875406088s ago: executing program 3 (id=2480): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000480)={{0x0, 0x1}, 0x0, 0x0, 0xfffffffe, {0x1}}) 3.821862861s ago: executing program 5 (id=2481): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600b409000008002700030000e0"], 0x3c}}, 0x0) 2.29635788s ago: executing program 2 (id=2482): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000080)=0x1, 0x4) 1.738650055s ago: executing program 3 (id=2483): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a40), &(0x7f0000000b00)=0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b) getdents64(r4, 0xfffffffffffffffe, 0x29) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000000}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r5}}, 0x18) syz_io_uring_setup(0x0, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) 1.728397229s ago: executing program 0 (id=2484): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000240)) 1.668363022s ago: executing program 1 (id=2485): r0 = io_uring_setup(0x79bf, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200"}, 0x60) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='decompose,part=0x0000000010000003,decompose,barrier,force,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=macromanian,\x00'], 0x44, 0x700, &(0x7f00000013c0)="$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") statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSIGACCEPT(r2, 0x5607, 0xf) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x4}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = socket(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r6 = socket(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/191, 0xbf}], 0x1, 0x14a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={0x0, &(0x7f0000000c00)=""/220, 0x2a, 0xdc, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f0000000040), 0x3, 0x51e, &(0x7f0000000680)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000c40)='./file2\x00', 0x0, 0x100) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb1000011", 0x14, 0x0, &(0x7f0000000140), 0x14) getsockopt$nfc_llcp(0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.63718834s ago: executing program 4 (id=2486): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) 1.55263422s ago: executing program 2 (id=2487): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 1.471985719s ago: executing program 5 (id=2488): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000880), &(0x7f00000009c0)=""/7, 0x2}, 0x20) 1.444129468s ago: executing program 0 (id=2489): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f100000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="2de161cec6a2abe0333ca063a5fb0de3067784322a7e1944ce10c17bd3d94b8db1744c083cfe45621a8818a8e096ad08923553d19a9da191e5d70ad22491ee90ef95211ed2583af011dea11308e8e7d25eca5ef5599f490b00bffed20c9cdc848c3283db83718c148b16933d234c6e3689cf0ba697de27dbde228bc1eae03460f574642f7432c5018bdeb5c0ef01cee00bc2a063283232c614d6373b", 0x9c}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000e00000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0101ac1414bb00000000140000000000000000000000010000005872000000000000"], 0xd8}}], 0x1, 0xc1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@local}, &(0x7f0000000280)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000300)='5', 0x1}], 0x1) 1.265497981s ago: executing program 4 (id=2490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) ioperm(0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0) 1.156482075s ago: executing program 5 (id=2491): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x1c8f, &(0x7f0000000140)) close_range(r1, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/77, 0x4d}], 0x1, 0x0, 0x0) 141.761873ms ago: executing program 3 (id=2492): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) map_shadow_stack(&(0x7f0000d7e000/0x1000)=nil, 0x1000, 0x0) 129.730641ms ago: executing program 5 (id=2493): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000040)={[{@gquota}, {@uquota}]}, 0x1, 0x980a, &(0x7f00000130c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) 0s ago: executing program 0 (id=2494): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040400000000"], 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x78, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x54a}, {0x8, 0x0, 0x8081}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x786c}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x810) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) r7 = fcntl$dupfd(r4, 0x0, r5) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) r8 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000000c0)={0x0, r8}) r9 = io_uring_setup(0x2026, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0), 0x0) kernel console output (not intermixed with test programs): 9938][T12254] loop5: detected capacity change from 0 to 512 [ 682.835988][T12254] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 683.010697][ T9295] hsr_slave_0: left promiscuous mode [ 683.017072][ T9295] hsr_slave_1: left promiscuous mode [ 683.025953][ T9295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.033806][ T9295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.063824][ T9295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.074129][ T9295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.106307][T12254] EXT4-fs (loop5): 1 truncate cleaned up [ 683.116377][T12254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.201134][ T9295] veth1_macvtap: left promiscuous mode [ 683.221625][ T9295] veth0_macvtap: left promiscuous mode [ 683.229081][ T9295] veth1_vlan: left promiscuous mode [ 683.473284][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1984'. [ 683.490534][ T9295] veth0_vlan: left promiscuous mode [ 683.941661][ T5122] Bluetooth: hci1: command tx timeout [ 684.472917][ T9535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.588236][T12277] loop5: detected capacity change from 0 to 512 [ 684.627075][T12277] EXT4-fs error (device loop5): __ext4_fill_super:5435: inode #2: comm syz.5.1992: casefold flag without casefold feature [ 684.656095][T12280] loop2: detected capacity change from 0 to 1024 [ 684.687912][T12277] EXT4-fs (loop5): get root inode failed [ 684.711552][T12277] EXT4-fs (loop5): mount failed [ 685.337786][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.346584][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.497918][T12282] loop4: detected capacity change from 0 to 32768 [ 685.537780][T12282] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1994 (12282) [ 685.562587][T12284] loop2: detected capacity change from 0 to 32768 [ 685.584203][T12284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1995 (12284) [ 685.602884][T12282] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 685.618141][T12284] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 685.633318][T12282] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 685.645483][T12282] BTRFS info (device loop4): using free-space-tree [ 685.652671][T12284] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 685.668485][T12284] BTRFS info (device loop2): using free-space-tree [ 685.849104][T12282] BTRFS info (device loop4): rebuilding free space tree [ 685.957442][T11491] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 685.968367][ T5122] Bluetooth: hci1: command tx timeout [ 686.004761][ T9295] team0 (unregistering): Port device team_slave_1 removed [ 686.180751][T11754] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 686.181613][ T9295] team0 (unregistering): Port device team_slave_0 removed [ 686.752717][T12325] loop4: detected capacity change from 0 to 8 [ 686.781301][T12325] loop4: detected capacity change from 0 to 8 [ 687.117321][T12329] loop4: detected capacity change from 0 to 64 [ 687.313865][ T9298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.333702][ T9298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.244009][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.259112][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.304196][T12161] bridge_slave_0: entered allmulticast mode [ 690.337184][T12349] loop5: detected capacity change from 0 to 512 [ 690.353031][T12161] bridge_slave_0: entered promiscuous mode [ 690.413504][T12349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 690.450268][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.477519][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.500620][T12349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.519204][T12365] loop1: detected capacity change from 0 to 64 [ 690.541060][T12161] bridge_slave_1: entered allmulticast mode [ 690.580076][T12349] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.601021][T12161] bridge_slave_1: entered promiscuous mode [ 690.713811][T12363] loop4: detected capacity change from 0 to 8192 [ 690.973582][T12369] loop2: detected capacity change from 0 to 2048 [ 691.039824][T12369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 691.318565][ T29] audit: type=1800 audit(1721659247.282:426): pid=12369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2012" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 691.673491][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.878544][T12363] loop4: detected capacity change from 0 to 1024 [ 691.943008][ T9535] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.960460][T12363] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 692.002368][T12363] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 692.010244][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.071777][T12363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11c, mo2=0002] [ 692.082815][T12363] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 692.502443][T12363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 692.840500][T12161] team0: Port device team_slave_0 added [ 692.904966][T11754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.019391][T12161] team0: Port device team_slave_1 added [ 693.249278][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.290411][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.319490][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.338638][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.347394][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.631576][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.277853][T12161] hsr_slave_0: entered promiscuous mode [ 694.403766][T12161] hsr_slave_1: entered promiscuous mode [ 694.733190][T12415] loop5: detected capacity change from 0 to 256 [ 695.893433][T12415] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 696.385854][T12425] loop4: detected capacity change from 0 to 1024 [ 696.688459][T12425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.757717][T12434] loop1: detected capacity change from 0 to 256 [ 698.252367][T12434] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 698.380001][ T29] audit: type=1326 audit(1721659254.482:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.1.2035" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8977b75f19 code=0x0 [ 698.499741][T12425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.011745][T12456] loop1: detected capacity change from 0 to 2048 [ 701.064515][T12456] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.312422][ T29] audit: type=1800 audit(1721659257.312:428): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2043" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 701.914545][T12459] netlink: 'syz.4.2044': attribute type 20 has an invalid length. [ 701.992161][T12465] syz.1.2047[12465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 701.992295][T12465] syz.1.2047[12465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 702.133339][T12161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 703.933536][T12475] loop2: detected capacity change from 0 to 2048 [ 704.005954][ T5122] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 704.527882][T12476] loop2: p1 < > p4 [ 704.535903][T12161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 704.547910][T12476] loop2: p4 size 8388608 extends beyond EOD, truncated [ 704.607268][T12475] loop2: p1 < > p4 [ 704.612708][T12475] loop2: p4 size 8388608 extends beyond EOD, truncated [ 704.694960][T12161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 704.776095][T12161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 705.137207][T12489] loop2: detected capacity change from 0 to 512 [ 705.202709][T12489] EXT4-fs (loop2): invalid journal inode [ 705.542914][T12500] loop4: detected capacity change from 0 to 8 [ 705.597026][T12501] loop2: detected capacity change from 0 to 512 [ 705.638613][T12501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 705.656882][T12503] loop3: detected capacity change from 0 to 512 [ 705.716273][T12503] EXT4-fs: Ignoring removed bh option [ 705.730137][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.743232][T12492] openvswitch: netlink: Message has 8 unknown bytes. [ 705.753699][T12499] loop1: detected capacity change from 0 to 2048 [ 705.773246][T12503] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 705.801919][T12499] NILFS (loop1): invalid segment: Sequence number mismatch [ 705.846239][T12499] NILFS (loop1): trying rollback from an earlier position [ 705.904596][ T5122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 705.913667][T12499] NILFS (loop1): recovery complete [ 705.918844][T12161] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.926200][ T5122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 705.936132][ T5122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 705.949608][ T5122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 705.958087][ T5122] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 705.965844][ T5122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 705.990168][T12507] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 706.016300][T12501] EXT4-fs (loop2): 1 truncate cleaned up [ 706.041332][ T5122] Bluetooth: hci0: command tx timeout [ 706.084639][T12501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.112373][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.119568][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.440630][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 706.447263][T12515] loop4: detected capacity change from 0 to 256 [ 706.483558][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.490693][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.577204][T12515] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 706.677177][T12521] syz.1.2065[12521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.677316][T12521] syz.1.2065[12521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 708.042499][ T5122] Bluetooth: hci6: command tx timeout [ 708.105061][T11491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.230064][ T9295] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.418669][T12161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.782555][ T9295] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.940405][T12545] loop2: detected capacity change from 0 to 256 [ 709.020718][ T9295] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.596933][ T9295] bond0: (slave netdevsim0): Releasing backup interface [ 709.830316][ T9295] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.016644][T12557] loop1: detected capacity change from 0 to 256 [ 710.193800][ T9539] Bluetooth: hci6: command tx timeout [ 710.202042][ T5122] Bluetooth: hci0: command 0x0406 tx timeout [ 710.939879][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.950014][T12557] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 711.032269][ T29] audit: type=1326 audit(1721659267.182:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.2074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8977b75f19 code=0x0 [ 711.646102][T12504] chnl_net:caif_netlink_parms(): no params data found [ 711.766912][ T9295] bridge_slave_1: left allmulticast mode [ 711.785120][ T9295] bridge_slave_1: left promiscuous mode [ 711.790903][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.848408][T12575] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 711.864648][T12575] cramfs: wrong magic [ 711.869688][ T9295] bridge_slave_0: left allmulticast mode [ 711.930223][T12578] loop4: detected capacity change from 0 to 128 [ 711.985141][T12578] syz.4.2083: attempt to access beyond end of device [ 711.985141][T12578] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 712.011873][ T9295] bridge_slave_0: left promiscuous mode [ 712.017692][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.069733][T12578] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 712.124614][T12578] syz.4.2083: attempt to access beyond end of device [ 712.124614][T12578] loop4: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 712.188032][T12578] Buffer I/O error on dev loop4, logical block 8833403, async page read [ 712.301308][ T4492] Bluetooth: hci6: command tx timeout [ 712.447605][T12578] syz.4.2083: attempt to access beyond end of device [ 712.447605][T12578] loop4: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 712.901779][T12578] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 712.953032][T12578] syz.4.2083: attempt to access beyond end of device [ 712.953032][T12578] loop4: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 713.051487][T12578] Buffer I/O error on dev loop4, logical block 8073606, async page read [ 713.072162][T12578] syz.4.2083: attempt to access beyond end of device [ 713.072162][T12578] loop4: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 713.108819][T12578] Buffer I/O error on dev loop4, logical block 3245771, async page read [ 713.141358][T12578] syz.4.2083: attempt to access beyond end of device [ 713.141358][T12578] loop4: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 713.155087][T12578] Buffer I/O error on dev loop4, logical block 8834171, async page read [ 713.163723][T12578] syz.4.2083: attempt to access beyond end of device [ 713.163723][T12578] loop4: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 713.179800][T12578] Buffer I/O error on dev loop4, logical block 13466417, async page read [ 713.188362][T12578] syz.4.2083: attempt to access beyond end of device [ 713.188362][T12578] loop4: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 713.202155][T12578] Buffer I/O error on dev loop4, logical block 8073606, async page read [ 713.214189][T12578] syz.4.2083: attempt to access beyond end of device [ 713.214189][T12578] loop4: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 713.250180][T12578] Buffer I/O error on dev loop4, logical block 3245774, async page read [ 713.268216][T12578] syz.4.2083: attempt to access beyond end of device [ 713.268216][T12578] loop4: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 713.297692][T12578] Buffer I/O error on dev loop4, logical block 8834939, async page read [ 713.517671][T12598] fuse: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 713.691028][T12598] loop2: detected capacity change from 0 to 256 [ 713.706668][T12602] loop1: detected capacity change from 0 to 256 [ 713.953951][T12602] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 714.218284][T12606] loop2: detected capacity change from 0 to 1024 [ 714.361658][ T4492] Bluetooth: hci6: command tx timeout [ 714.529103][T12606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.230097][ T9295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.289967][ T9295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.338077][ T9295] bond0 (unregistering): Released all slaves [ 715.644811][T12161] veth0_vlan: entered promiscuous mode [ 715.688633][T12161] veth1_vlan: entered promiscuous mode [ 715.747474][T12604] loop3: detected capacity change from 0 to 40427 [ 715.838417][T12604] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 715.891433][T12604] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 715.990929][T12604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 716.011705][T12504] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.018868][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.083756][T12504] bridge_slave_0: entered allmulticast mode [ 716.115285][T12504] bridge_slave_0: entered promiscuous mode [ 716.203251][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.244538][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.270565][T12504] bridge_slave_1: entered allmulticast mode [ 716.286776][T12604] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 716.299201][T12604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 716.312428][T12504] bridge_slave_1: entered promiscuous mode [ 716.555987][T11535] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 716.867792][ T9295] hsr_slave_0: left promiscuous mode [ 716.937870][ T9295] hsr_slave_1: left promiscuous mode [ 716.953084][ T9295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.966589][ T9295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.002508][T12615] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 717.021915][T12615] cramfs: wrong magic [ 717.040431][ T9295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.061552][ T9295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.136514][ T9295] veth1_macvtap: left promiscuous mode [ 717.147327][ T9295] veth0_macvtap: left promiscuous mode [ 717.171527][ T9295] veth1_vlan: left promiscuous mode [ 717.176897][ T9295] veth0_vlan: left promiscuous mode [ 717.181860][ T8] libceph: connect (1)[c::]:6789 error -101 [ 717.188306][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 717.236101][T12624] loop1: detected capacity change from 0 to 256 [ 717.257790][ T4492] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 717.259531][ T29] audit: type=1326 audit(1721659273.402:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12618 comm="syz.2.2096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c18575f19 code=0x0 [ 717.483848][ T8] libceph: connect (1)[c::]:6789 error -101 [ 717.520284][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 717.951999][T12619] ceph: No mds server is up or the cluster is laggy [ 718.920430][T12648] fuse: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 719.042376][T12648] loop3: detected capacity change from 0 to 256 [ 719.859612][ T9295] team0 (unregistering): Port device team_slave_1 removed [ 719.917869][T12650] loop3: detected capacity change from 0 to 1024 [ 719.978254][T12650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.162155][ T9295] team0 (unregistering): Port device team_slave_0 removed [ 720.234467][T12645] loop2: detected capacity change from 0 to 40427 [ 720.277082][T12645] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 720.307997][T12645] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 720.415771][T12645] F2FS-fs (loop2): Found nat_bits in checkpoint [ 720.635985][T12645] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 720.650623][T12645] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 720.891905][T11491] bio_check_eod: 1 callbacks suppressed [ 720.891923][T11491] syz-executor: attempt to access beyond end of device [ 720.891923][T11491] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 720.922681][T11491] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 721.198130][T12654] loop1: detected capacity change from 0 to 32768 [ 722.382452][T12669] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 722.389098][T12669] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 722.401734][T12669] vhci_hcd vhci_hcd.0: Device attached [ 722.436776][ T9539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 722.448189][ T9539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 722.457095][ T9539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 722.465606][ T9539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 722.486918][ T9539] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 722.511140][ T9539] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 722.769607][ T5167] usb 14-1: SetAddress Request (2) to port 0 [ 722.807546][ T5167] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 722.905077][T12504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.958719][T12161] veth0_macvtap: entered promiscuous mode [ 722.994277][T12674] vhci_hcd: connection reset by peer [ 723.014679][T12687] loop1: detected capacity change from 0 to 512 [ 723.034498][ T5299] vhci_hcd: stop threads [ 723.038774][ T5299] vhci_hcd: release socket [ 723.057297][T12504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.081283][ T5299] vhci_hcd: disconnect device [ 723.107064][T12687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 723.163481][T12687] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2113: invalid indirect mapped block 83886080 (level 1) [ 723.205797][T12687] EXT4-fs (loop1): 1 orphan inode deleted [ 723.243175][T12687] EXT4-fs (loop1): 1 truncate cleaned up [ 723.260069][T12687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.301076][T12693] loop3: detected capacity change from 0 to 512 [ 723.329456][T12693] EXT4-fs: Ignoring removed nobh option [ 723.342642][T12687] EXT4-fs error (device loop1): ext4_empty_dir:3103: inode #2: block 13: comm syz.1.2113: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 723.351222][T12504] team0: Port device team_slave_0 added [ 723.383545][T12693] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 723.394518][T12693] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 723.433497][T12687] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #2: comm syz.1.2113: directory missing '..' [ 723.473400][T12693] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.2115: casefold flag without casefold feature [ 723.520569][T12693] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2115: couldn't read orphan inode 13 (err -117) [ 723.526870][T12161] veth1_macvtap: entered promiscuous mode [ 723.550388][T12693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.594327][T12504] team0: Port device team_slave_1 added [ 723.676265][T12693] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 723.693341][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.747749][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.764238][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.793492][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.807409][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.820135][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.830031][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.840583][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.867642][T12161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.889277][T11855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.892833][T11535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.135603][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.186742][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.202990][T12705] input: syz0 as /devices/virtual/input/input23 [ 724.247336][T12699] loop1: detected capacity change from 0 to 8 [ 724.247400][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.284364][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.331232][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.371463][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.411374][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.430558][T12699] openvswitch: netlink: Message has 8 unknown bytes. [ 724.433578][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.480025][T12161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.519964][T12504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.559274][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.607306][ T4492] Bluetooth: hci4: command tx timeout [ 724.630289][T12504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.650597][T12504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.657816][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.687337][T12504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.752924][T12161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.787077][T12161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.825139][T12161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.890093][T12161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.450017][T12504] hsr_slave_0: entered promiscuous mode [ 725.480048][T12504] hsr_slave_1: entered promiscuous mode [ 725.500132][T12504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.517317][T12504] Cannot create hsr debugfs directory [ 726.053728][T12735] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 726.060292][T12735] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 726.117415][T12735] vhci_hcd vhci_hcd.0: Device attached [ 726.205731][ T9295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.234177][ T9295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.375059][T12742] vhci_hcd: connection closed [ 726.381012][ T9310] vhci_hcd: stop threads [ 726.421473][ T9310] vhci_hcd: release socket [ 726.429431][ T9310] vhci_hcd: disconnect device [ 726.435286][T12677] chnl_net:caif_netlink_parms(): no params data found [ 726.442646][ T5169] usb 12-1: SetAddress Request (2) to port 0 [ 726.448703][ T5169] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 726.494853][ T4142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.525056][ T4142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.559076][ T5169] usb 12-1: enqueue for inactive port 0 [ 726.681908][ T4492] Bluetooth: hci4: command tx timeout [ 727.157259][T12755] loop3: detected capacity change from 0 to 512 [ 727.202727][T12755] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 727.278801][T12755] EXT4-fs (loop3): 1 orphan inode deleted [ 727.296946][T12677] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.311299][T12755] EXT4-fs (loop3): 1 truncate cleaned up [ 727.338376][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.340903][T12755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.357754][T12677] bridge_slave_0: entered allmulticast mode [ 727.366046][T12677] bridge_slave_0: entered promiscuous mode [ 727.471437][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.498239][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.500036][T11535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.521664][T12677] bridge_slave_1: entered allmulticast mode [ 727.551778][T12677] bridge_slave_1: entered promiscuous mode [ 727.614899][ T5169] usb usb12-port1: attempt power cycle [ 727.747373][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.798048][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.883027][ T5167] usb 14-1: device descriptor read/8, error -110 [ 728.203173][T12677] team0: Port device team_slave_0 added [ 728.282632][ T5169] usb usb12-port1: unable to enumerate USB device [ 728.308027][T12677] team0: Port device team_slave_1 added [ 728.332042][ T5167] usb usb14-port1: attempt power cycle [ 728.477653][T12677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.516394][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.612741][T12677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.648630][T12783] loop2: detected capacity change from 0 to 4096 [ 728.669927][T12783] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 728.701606][T12677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.711228][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.761461][ T4492] Bluetooth: hci4: command tx timeout [ 728.794996][T12787] loop1: detected capacity change from 0 to 512 [ 728.806703][T12677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.846548][T12783] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 728.850777][T12787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 728.959856][T12787] EXT4-fs (loop1): 1 orphan inode deleted [ 728.998850][T12787] EXT4-fs (loop1): 1 truncate cleaned up [ 729.032812][ T5167] usb usb14-port1: unable to enumerate USB device [ 729.045309][T12787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.096635][T12795] loop3: detected capacity change from 0 to 256 [ 729.187372][T12677] hsr_slave_0: entered promiscuous mode [ 729.231820][T12802] loop0: detected capacity change from 0 to 1764 [ 729.310747][T11855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.366402][T12677] hsr_slave_1: entered promiscuous mode [ 729.417178][T12677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.445733][T12677] Cannot create hsr debugfs directory [ 729.527058][T12504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 729.597612][ T29] audit: type=1804 audit(1721659285.742:431): pid=12805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2150" name="/newroot/59/bus/bus" dev="loop3" ino=1048856 res=1 errno=0 [ 729.626024][T12805] Invalid ELF header magic: != ELF [ 730.046599][T12504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 730.076320][ T29] audit: type=1800 audit(1721659285.742:432): pid=12805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2150" name="bus" dev="loop3" ino=1048856 res=0 errno=0 [ 730.381983][T12809] loop1: detected capacity change from 0 to 128 [ 730.484835][T12809] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 730.524918][T12504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 730.578480][T12504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 730.615574][T12809] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 730.841828][ T4492] Bluetooth: hci4: command tx timeout [ 730.889823][T11855] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 731.273325][T12828] loop1: detected capacity change from 0 to 4096 [ 731.303248][T12828] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 731.345146][T12677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.475051][T12828] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 731.712970][T12677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.992777][T12677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.061922][T12504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.274463][T12677] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.356108][T12504] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.465565][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.472903][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.568873][T12849] fuse: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 732.689255][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.696485][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.996394][T12833] loop2: detected capacity change from 0 to 32768 [ 733.001867][T12849] loop0: detected capacity change from 0 to 256 [ 733.168342][T12833] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 733.389248][T12833] XFS (loop2): Ending clean mount [ 733.446048][T12677] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 733.489778][T12833] XFS (loop2): Quotacheck needed: Please wait. [ 733.512956][T12677] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 733.513782][T12870] loop0: detected capacity change from 0 to 1024 [ 733.602017][T12677] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 733.655182][T12833] XFS (loop2): Quotacheck: Done. [ 733.678823][T12677] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 733.697775][T12870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 733.982729][T11491] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 734.062433][T12504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.419637][T12677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.565787][T12677] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.643649][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.650845][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.791039][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.798225][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.847871][T12895] loop3: detected capacity change from 0 to 512 [ 734.933506][T12895] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 735.062515][T12895] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 735.121478][T12895] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2183: Failed to acquire dquot type 1 [ 735.338810][T12895] EXT4-fs (loop3): 1 truncate cleaned up [ 735.386504][T12895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.471429][T12895] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.731273][ T29] audit: type=1804 audit(1721659291.862:433): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2183" name="/newroot/69/bus/file1" dev="overlay" ino=15 res=1 errno=0 [ 735.771049][T12504] veth0_vlan: entered promiscuous mode [ 735.853983][T12504] veth1_vlan: entered promiscuous mode [ 735.959483][T12504] veth0_macvtap: entered promiscuous mode [ 735.976669][ T29] audit: type=1804 audit(1721659292.022:434): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2183" name="/newroot/69/bus/file1" dev="overlay" ino=15 res=1 errno=0 [ 735.981434][T12907] loop2: detected capacity change from 0 to 512 [ 736.026501][T12504] veth1_macvtap: entered promiscuous mode [ 736.042588][T12907] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 736.100122][T12907] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2184: invalid indirect mapped block 83886080 (level 1) [ 736.130917][T12907] EXT4-fs (loop2): 1 orphan inode deleted [ 736.138853][T12907] EXT4-fs (loop2): 1 truncate cleaned up [ 736.160146][T12907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.362702][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.406497][T12907] EXT4-fs error (device loop2): ext4_empty_dir:3103: inode #2: block 13: comm syz.2.2184: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 736.429870][T12907] EXT4-fs warning (device loop2): ext4_empty_dir:3105: inode #2: comm syz.2.2184: directory missing '..' [ 736.465165][T11535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.476424][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.575851][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.648539][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.692363][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.725695][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.764751][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.788589][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.850793][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.869356][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.963906][T12504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.025446][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.069779][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.122406][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.161214][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.171062][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.242590][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.292441][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.351023][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.383700][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.402933][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.415805][T12504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.428614][T11491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.505948][T12504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.548908][T12504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.577913][T12504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.603635][T12504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.648608][T12933] loop0: detected capacity change from 0 to 256 [ 737.715260][T12677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.870440][T12939] loop1: detected capacity change from 0 to 128 [ 737.955066][T12939] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 737.981387][ T9310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.989212][ T9310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.081697][T12939] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.131319][ T5299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.143302][ T5299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.466197][T12965] loop2: detected capacity change from 0 to 2048 [ 740.558490][ T4492] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 740.568818][ T4492] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 741.866108][T12964] loop2: p1 < > p4 [ 741.878806][T12964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 741.905066][T11855] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 742.010471][T12965] loop2: p1 < > p4 [ 742.018471][T12965] loop2: p4 size 8388608 extends beyond EOD, truncated [ 742.446795][T12677] veth0_vlan: entered promiscuous mode [ 742.494547][T12677] veth1_vlan: entered promiscuous mode [ 742.616533][T12983] loop3: detected capacity change from 0 to 256 [ 742.751615][T12677] veth0_macvtap: entered promiscuous mode [ 742.775133][T12677] veth1_macvtap: entered promiscuous mode [ 742.839564][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 742.890310][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.920810][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.932191][T12972] loop5: detected capacity change from 0 to 256 [ 742.933035][T12972] vfat: Unknown parameter 'shOrtname' [ 742.950950][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.977395][T12994] binder: 12991:12994 ioctl c0306201 0 returned -14 [ 742.991317][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.031219][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.050686][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.060930][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.074807][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.101736][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.119667][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.132221][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.151115][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.181521][T12677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.228496][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.268326][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.304195][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.335239][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.368884][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.418455][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.526648][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.591466][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.611324][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.634836][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.851324][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.931344][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.024511][T12677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.329254][T12677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.373909][T13020] loop1: detected capacity change from 0 to 256 [ 744.382953][T12677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.392442][T12677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.406108][T12677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.630235][ T5299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.681119][ T5299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.806810][ T4142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.843363][ T4142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.904992][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2224'. [ 744.994794][ T4492] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 746.283698][ T4492] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 746.292897][ T4492] Bluetooth: hci6: Injecting HCI hardware error event [ 746.304494][ T4492] Bluetooth: hci6: hardware error 0x00 [ 746.321730][T13045] binder: 13044:13045 ioctl c0306201 0 returned -14 [ 746.429784][T13037] loop1: detected capacity change from 0 to 256 [ 746.566612][T13013] loop5: detected capacity change from 0 to 32768 [ 746.745049][T13013] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 746.767685][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.774319][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.889512][T13013] XFS (loop5): Ending clean mount [ 746.925661][T13013] XFS (loop5): Quotacheck needed: Please wait. [ 747.081590][T13013] XFS (loop5): Quotacheck: Done. [ 747.150275][T13079] syz.2.2238: attempt to access beyond end of device [ 747.150275][T13079] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 747.174721][T13079] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 747.234976][T12504] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 747.243823][T13083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2240'. [ 747.244982][T13083] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2240'. [ 747.592818][T13083] loop1: detected capacity change from 0 to 512 [ 747.600846][T13089] netlink: 'syz.2.2242': attribute type 4 has an invalid length. [ 747.630429][T13083] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 747.647618][T13083] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 747.687437][T13089] netlink: 'syz.2.2242': attribute type 17 has an invalid length. [ 747.712863][T13083] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 747.782264][T13083] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2240: iget: bad extended attribute block 19 [ 747.816319][T13083] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2240: couldn't read orphan inode 15 (err -117) [ 747.928805][T13083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.102396][T13102] binder: 13099:13102 ioctl c0306201 0 returned -14 [ 748.207086][ T5117] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 748.351831][ T5169] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 748.473823][T13106] loop2: detected capacity change from 0 to 256 [ 748.581286][ T5169] usb 2-1: Using ep0 maxpacket: 32 [ 748.588865][ T5169] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.627678][ T5169] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.648125][ T5169] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 748.684841][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.695692][ T4492] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 748.739528][ T5169] hub 2-1:4.0: USB hub found [ 748.833238][T13111] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2249'. [ 748.862618][ T4492] Bluetooth: hci3: command 0x0406 tx timeout [ 748.893291][T13111] netem: invalid attributes len -24 [ 748.898565][T13111] netem: change failed [ 748.970114][ T5169] hub 2-1:4.0: 31 ports detected [ 748.977711][ T5169] usb 2-1: selecting invalid altsetting 1 [ 748.997752][ T5169] hub 2-1:4.0: Using single TT (err -22) [ 749.003999][ T9539] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 749.016081][ T9539] Bluetooth: hci2: Injecting HCI hardware error event [ 749.026702][ T9539] Bluetooth: hci2: hardware error 0x00 [ 749.063536][ T5169] hub 2-1:4.0: insufficient power available to use all downstream ports [ 749.151998][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2241'. [ 749.180142][ T5169] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 749.187473][ T5169] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 749.226136][T13120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 749.235139][ T5169] usb 2-1: USB disconnect, device number 14 [ 749.305157][T13122] loop0: detected capacity change from 0 to 2048 [ 749.411800][ T5486] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 749.643979][T13127] syz.5.2255: attempt to access beyond end of device [ 749.643979][T13127] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 749.715368][T13127] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 749.782728][ T5486] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 749.817329][ T5486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.871739][ T5486] usb 5-1: Product: syz [ 749.875948][ T5486] usb 5-1: Manufacturer: syz [ 749.883698][ T2473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.919496][ T5486] usb 5-1: SerialNumber: syz [ 749.949877][ T5486] usb 5-1: config 0 descriptor?? [ 750.210789][T11855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.335145][ T2473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.575244][T13134] loop5: detected capacity change from 0 to 2048 [ 750.610160][T13117] fuse: Unknown parameter 'fd0x0000000000000004' [ 750.815858][T13134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.838910][ T5486] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 750.873567][ T2473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.961820][ T4492] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 750.995270][ T4492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.004421][ T4492] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.013620][ T4492] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.031426][ T4492] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 751.041580][ T4492] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 751.172315][T13145] loop1: detected capacity change from 0 to 256 [ 751.246610][T13124] loop2: detected capacity change from 0 to 32768 [ 751.257352][ T9539] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 751.279328][T13134] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 751.322816][T13134] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 751.370368][T13145] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 751.409444][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 751.422377][T13134] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 751.435560][T13134] EXT4-fs (loop5): This should not happen!! Data will be lost [ 751.435560][T13134] [ 751.446481][T13134] EXT4-fs (loop5): Total free blocks count 0 [ 751.452681][T13134] EXT4-fs (loop5): Free/Dirty block details [ 751.459131][T13134] EXT4-fs (loop5): free_blocks=2415919104 [ 751.470228][T13134] EXT4-fs (loop5): dirty_blocks=64 [ 751.517701][T13134] EXT4-fs (loop5): Block reservation details [ 751.532739][T13124] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 751.591421][T13134] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 751.705583][T13134] EXT4-fs: Ignoring removed orlov option [ 752.000734][T13124] XFS (loop2): Ending clean mount [ 752.040890][T13124] XFS (loop2): Quotacheck needed: Please wait. [ 752.056787][ T2473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.258742][T13124] XFS (loop2): Quotacheck: Done. [ 752.281417][ T9539] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 752.294694][ T9539] Bluetooth: hci0: Injecting HCI hardware error event [ 752.303928][ T9539] Bluetooth: hci0: hardware error 0x00 [ 752.311921][T13172] loop5: detected capacity change from 0 to 64 [ 752.329984][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 752.408767][T13172] MINIX-fs: bad superblock or unable to read bitmaps [ 752.562682][T11491] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 753.241481][ T5122] Bluetooth: hci3: command tx timeout [ 753.379038][ T5486] usb 5-1: USB disconnect, device number 10 [ 753.392575][T13180] loop1: detected capacity change from 0 to 256 [ 753.439448][ T2473] bridge_slave_1: left allmulticast mode [ 753.467486][ T2473] bridge_slave_1: left promiscuous mode [ 753.502190][T13180] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 753.523665][ T2473] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.584797][ T2473] bridge_slave_0: left allmulticast mode [ 753.590492][ T2473] bridge_slave_0: left promiscuous mode [ 753.641687][ T2473] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.785635][T13180] loop1: detected capacity change from 256 to 0 [ 753.862489][T13180] syz.1.2271: attempt to access beyond end of device [ 753.862489][T13180] loop1: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 753.941250][T13180] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 753.991866][T13180] syz.1.2271: attempt to access beyond end of device [ 753.991866][T13180] loop1: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 754.073331][T13180] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 754.091334][T13180] syz.1.2271: attempt to access beyond end of device [ 754.091334][T13180] loop1: rw=2049, sector=161, nr_sectors = 1 limit=0 [ 754.134367][T13180] Buffer I/O error on dev loop1, logical block 161, lost sync page write [ 754.290571][T11855] syz-executor: attempt to access beyond end of device [ 754.290571][T11855] loop1: rw=0, sector=161, nr_sectors = 1 limit=0 [ 754.311609][T11855] syz-executor: attempt to access beyond end of device [ 754.311609][T11855] loop1: rw=0, sector=161, nr_sectors = 1 limit=0 [ 754.360677][T11855] syz-executor: attempt to access beyond end of device [ 754.360677][T11855] loop1: rw=2049, sector=160, nr_sectors = 1 limit=0 [ 754.409899][T11855] Buffer I/O error on dev loop1, logical block 160, lost sync page write [ 754.444959][ T9539] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 754.461949][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 754.691314][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 754.704709][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.727064][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.794062][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 754.850768][ T8] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 754.868881][ T8] usb 5-1: Product: syz [ 754.877882][ T8] usb 5-1: Manufacturer: syz [ 754.932576][ T8] hub 5-1:4.0: USB hub found [ 755.103104][ T8] hub 5-1:4.0: 2 ports detected [ 755.323243][ T9539] Bluetooth: hci3: command tx timeout [ 755.413410][T13199] loop5: detected capacity change from 0 to 128 [ 755.691307][ T29] audit: type=1326 audit(1721659311.832:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.5.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128a175f19 code=0x0 [ 755.937667][T13210] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2282'. [ 756.038369][ T2473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.074542][ T2473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.101941][ T2473] bond0 (unregistering): Released all slaves [ 756.463511][ T8] hub 5-1:4.0: activate --> -90 [ 756.532438][T11855] syz-executor: attempt to access beyond end of device [ 756.532438][T11855] loop1: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 756.627113][T11855] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 756.794715][T13221] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 756.857342][T13218] tipc: Enabling of bearer rejected, failed to enable media [ 756.888212][ T922] usb 5-1: USB disconnect, device number 11 [ 756.915432][T13205] loop2: detected capacity change from 0 to 32768 [ 757.141815][T13205] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 757.270684][T13144] chnl_net:caif_netlink_parms(): no params data found [ 757.367425][T13236] loop0: detected capacity change from 0 to 512 [ 757.412186][T13236] EXT4-fs: Ignoring removed mblk_io_submit option [ 757.413255][ T9539] Bluetooth: hci3: command tx timeout [ 757.485899][T13236] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.2289: corrupted in-inode xattr: invalid ea_ino [ 757.503596][ T2473] hsr_slave_0: left promiscuous mode [ 757.513066][T13236] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2289: couldn't read orphan inode 12 (err -117) [ 757.543973][T13205] XFS (loop2): Ending clean mount [ 757.566587][ T2473] hsr_slave_1: left promiscuous mode [ 757.568195][T13236] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.595147][T13205] XFS (loop2): Quotacheck needed: Please wait. [ 757.646235][ T2473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.665868][ T2473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.739378][T13236] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.2289: Directory hole found for htree leaf block 0 [ 757.770672][ T2473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.810187][ T2473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.812105][T13205] XFS (loop2): Quotacheck: Done. [ 757.972991][T12161] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 757.978066][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 757.997656][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.005865][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.026888][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.044904][ T5122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 758.049041][ T2473] veth1_macvtap: left promiscuous mode [ 758.058799][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 758.138477][ T2473] veth0_macvtap: left promiscuous mode [ 758.172756][ T2473] veth1_vlan: left promiscuous mode [ 758.194496][ T2473] veth0_vlan: left promiscuous mode [ 758.238136][T11491] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 758.240498][T13249] loop0: detected capacity change from 0 to 8 [ 758.348375][T13249] SQUASHFS error: lzo decompression failed, data probably corrupt [ 758.411668][T13249] SQUASHFS error: Failed to read block 0x91: -5 [ 758.469683][T13249] SQUASHFS error: Unable to read metadata cache entry [8f] [ 758.476998][T13249] SQUASHFS error: Unable to read inode 0x11f [ 758.488642][T13249] cgroup: Bad value for 'name' [ 758.494115][ T9539] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 758.499658][T13249] loop0: detected capacity change from 0 to 128 [ 758.541994][T13249] vfat: Unknown parameter 'cachefiles_rename' [ 758.595380][T13249] loop0: detected capacity change from 0 to 8 [ 758.631408][T13249] Page size > filesystem block size (0). This is currently not supported! [ 758.684905][T13249] loop0: detected capacity change from 0 to 128 [ 758.821921][T13249] loop0: detected capacity change from 128 to 11 [ 759.473870][T13270] loop5: detected capacity change from 0 to 2048 [ 759.501692][ T9539] Bluetooth: hci3: command tx timeout [ 759.529349][T13273] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 759.893002][T13260] loop0: detected capacity change from 0 to 32768 [ 759.909211][T13260] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2296 (13260) [ 759.924640][ T5486] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 759.954294][T13260] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 759.980947][T13260] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 759.996619][T13260] BTRFS info (device loop0): using free-space-tree [ 760.141403][ T5486] usb 6-1: Using ep0 maxpacket: 32 [ 760.149714][ T9539] Bluetooth: hci2: command tx timeout [ 760.199585][ T5486] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.327943][ T5486] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.411691][ T5486] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 760.421899][ T5486] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 760.430414][ T5486] usb 6-1: Product: syz [ 760.435016][ T5486] usb 6-1: Manufacturer: syz [ 760.571646][ T5486] hub 6-1:4.0: USB hub found [ 760.726864][ T5486] hub 6-1:4.0: 2 ports detected [ 761.108329][ T2473] team0 (unregistering): Port device team_slave_1 removed [ 761.269280][T12161] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 761.312877][ T2473] team0 (unregistering): Port device team_slave_0 removed [ 762.172635][ T5486] hub 6-1:4.0: activate --> -90 [ 762.205540][ T9539] Bluetooth: hci2: command tx timeout [ 762.937417][ T5179] usb 6-1: USB disconnect, device number 16 [ 763.793398][T13323] loop0: detected capacity change from 0 to 256 [ 763.836084][T13323] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 764.282479][ T9539] Bluetooth: hci2: command tx timeout [ 764.487635][T13144] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.507050][T13144] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.526950][T13144] bridge_slave_0: entered allmulticast mode [ 764.558397][T13144] bridge_slave_0: entered promiscuous mode [ 764.601408][T13144] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.608600][T13144] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.651558][T13144] bridge_slave_1: entered allmulticast mode [ 764.663141][T13144] bridge_slave_1: entered promiscuous mode [ 764.700751][T13340] loop0: detected capacity change from 0 to 128 [ 764.737798][T13340] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 764.768565][T13342] loop5: detected capacity change from 0 to 1024 [ 764.843378][T13340] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.026762][T13144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.755488][T13144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.767505][T12161] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 765.931002][T12504] hfsplus: bad catalog entry type [ 766.056104][T12504] hfsplus: bad catalog entry type [ 766.148715][ T9304] hfsplus: b-tree write err: -5, ino 4 [ 766.154882][T13358] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 766.239678][T13144] team0: Port device team_slave_0 added [ 766.277981][T13144] team0: Port device team_slave_1 added [ 766.361322][ T9539] Bluetooth: hci2: command tx timeout [ 766.630323][T13144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.682431][T13144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.686126][T13373] loop0: detected capacity change from 0 to 256 [ 766.758836][T13144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.802120][T13144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.809098][T13144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.857744][T13144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.945725][T13373] FAT-fs (loop0): Directory bread(block 64) failed [ 766.981333][T13373] FAT-fs (loop0): Directory bread(block 65) failed [ 766.988145][T13373] FAT-fs (loop0): Directory bread(block 66) failed [ 767.032426][ T2473] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.037405][T13373] FAT-fs (loop0): Directory bread(block 67) failed [ 767.081391][T13373] FAT-fs (loop0): Directory bread(block 68) failed [ 767.108974][T13373] FAT-fs (loop0): Directory bread(block 69) failed [ 767.151698][T13373] FAT-fs (loop0): Directory bread(block 70) failed [ 767.158276][T13373] FAT-fs (loop0): Directory bread(block 71) failed [ 767.186144][T13373] FAT-fs (loop0): Directory bread(block 72) failed [ 767.201277][T13373] FAT-fs (loop0): Directory bread(block 73) failed [ 767.227575][T13381] random: crng reseeded on system resumption [ 767.558474][ T2473] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.767197][T13144] hsr_slave_0: entered promiscuous mode [ 767.812551][T13144] hsr_slave_1: entered promiscuous mode [ 767.829346][T13144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 767.847592][T13144] Cannot create hsr debugfs directory [ 767.856376][T13393] loop0: detected capacity change from 0 to 256 [ 767.879955][ T4492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 767.893160][ T4492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 767.901807][ T4492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 767.910027][ T4492] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 767.918767][ T4492] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 767.928384][ T4492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 768.014821][ T2473] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.112269][ T5169] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 768.169380][ T2473] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.223378][T13397] cgroup: noprefix used incorrectly [ 768.294868][T13242] chnl_net:caif_netlink_parms(): no params data found [ 768.325989][ T5169] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 768.349772][ T5169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.401513][ T5169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.425445][ T5169] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 768.440762][ T5169] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 768.450088][ T5169] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 768.526876][ T5169] usb 5-1: Manufacturer: syz [ 768.544908][ T5169] usb 5-1: config 0 descriptor?? [ 768.867279][T13404] loop2: detected capacity change from 0 to 8 [ 768.885692][T13404] SQUASHFS error: lzo decompression failed, data probably corrupt [ 768.901350][T13404] SQUASHFS error: Failed to read block 0x91: -5 [ 768.921593][T13404] SQUASHFS error: Unable to read metadata cache entry [8f] [ 768.928796][T13404] SQUASHFS error: Unable to read inode 0x11f [ 768.971747][T13404] cgroup: Bad value for 'name' [ 768.986445][T13404] loop2: detected capacity change from 0 to 128 [ 768.994205][T13404] vfat: Unknown parameter 'cachefiles_rename' [ 769.008636][T13404] loop2: detected capacity change from 0 to 8 [ 769.027572][T13404] Page size > filesystem block size (0). This is currently not supported! [ 769.068372][T13404] loop2: detected capacity change from 0 to 128 [ 769.089066][ T5169] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 769.136390][ T5169] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 769.164037][ T5169] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 769.201693][T13404] loop2: detected capacity change from 128 to 11 [ 769.329649][ T9539] Bluetooth: hci5: command 0x0406 tx timeout [ 769.406510][ T2473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.494054][ T5169] usb 5-1: USB disconnect, device number 12 [ 769.566508][T13412] loop2: detected capacity change from 0 to 64 [ 769.660345][T13242] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.685373][T13242] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.704975][T13242] bridge_slave_0: entered allmulticast mode [ 769.733100][T13242] bridge_slave_0: entered promiscuous mode [ 769.835301][ T2473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.876911][T13242] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.894715][T13242] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.907911][T13242] bridge_slave_1: entered allmulticast mode [ 769.915872][T13242] bridge_slave_1: entered promiscuous mode [ 770.029977][ T2473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.042098][ T5122] Bluetooth: hci6: command tx timeout [ 770.049291][ T5169] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 770.219180][T13242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.243851][ T5169] usb 1-1: Using ep0 maxpacket: 32 [ 770.262352][ T5169] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 770.264149][T13242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.291673][ T5169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.296780][T13428] random: crng reseeded on system resumption [ 770.309016][ T5169] usb 1-1: Product: syz [ 770.315136][ T5169] usb 1-1: Manufacturer: syz [ 770.319753][ T5169] usb 1-1: SerialNumber: syz [ 770.342845][ T5169] usb 1-1: config 0 descriptor?? [ 770.344664][ T2473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.356038][ T5169] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 771.111564][ T5122] Bluetooth: hci1: command tx timeout [ 771.395315][ T5179] usb 1-1: USB disconnect, device number 11 [ 771.649965][T13242] team0: Port device team_slave_0 added [ 771.718767][T13242] team0: Port device team_slave_1 added [ 771.799322][T13385] chnl_net:caif_netlink_parms(): no params data found [ 772.008577][T13442] 9p: Unknown access argument 18446744073709551615: -34 [ 772.133402][ T5122] Bluetooth: hci6: command tx timeout [ 772.222031][T13242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.248181][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.304879][T13446] loop0: detected capacity change from 0 to 64 [ 772.353198][T13242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.463812][T13242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.491254][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.567989][T13242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.755074][T13452] delete_channel: no stack [ 772.831602][T13385] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.838789][T13385] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.902750][T13385] bridge_slave_0: entered allmulticast mode [ 772.921419][T13385] bridge_slave_0: entered promiscuous mode [ 772.951121][T13385] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.958813][T13385] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.985041][T13385] bridge_slave_1: entered allmulticast mode [ 773.007329][T13385] bridge_slave_1: entered promiscuous mode [ 773.046508][ T2473] bridge_slave_1: left allmulticast mode [ 773.061411][ T2473] bridge_slave_1: left promiscuous mode [ 773.077584][ T2473] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.143119][ T2473] bridge_slave_0: left allmulticast mode [ 773.152067][ T2473] bridge_slave_0: left promiscuous mode [ 773.184000][ T2473] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.307625][ T2473] bridge_slave_1: left allmulticast mode [ 773.430898][ T2473] bridge_slave_1: left promiscuous mode [ 773.515307][ T2473] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.682937][ T2473] bridge_slave_0: left allmulticast mode [ 773.777358][ T2473] bridge_slave_0: left promiscuous mode [ 773.965462][ T2473] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.032357][ T5179] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 774.201286][ T5122] Bluetooth: hci6: command tx timeout [ 774.234333][ T5179] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 774.263716][ T5179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.291328][ T5179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.307886][ T9539] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 774.322131][ T9539] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 774.329388][ T5179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 774.330881][ T9539] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 774.346181][ T5179] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 774.369939][ T5179] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 774.373465][ T9539] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 774.406784][ T9539] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 774.408470][ T5179] usb 1-1: Manufacturer: syz [ 774.422382][ T9539] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 774.462184][ T5179] usb 1-1: config 0 descriptor?? [ 774.902740][ T5179] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 774.938112][ T5179] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 774.966065][ T5179] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 775.209698][ T5169] usb 1-1: USB disconnect, device number 12 [ 775.926625][T13483] loop0: detected capacity change from 0 to 128 [ 776.022991][T13483] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 776.081594][T13483] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 776.281372][ T9539] Bluetooth: hci6: command tx timeout [ 776.364890][T12161] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 776.492997][T13489] delete_channel: no stack [ 776.521380][ T9539] Bluetooth: hci7: command tx timeout [ 776.710704][ T2473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.791817][ T2473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.843034][ T2473] bond0 (unregistering): Released all slaves [ 776.870524][T13492] loop0: detected capacity change from 0 to 32768 [ 776.894150][T13492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2373 (13492) [ 776.916381][T13492] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 776.926794][T13492] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 776.935649][T13492] BTRFS info (device loop0): using free-space-tree [ 776.971367][ T5179] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 777.191465][ T5179] usb 3-1: Using ep0 maxpacket: 16 [ 777.215060][ T5179] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b3.67 [ 777.241233][ T5179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.281276][ T5179] usb 3-1: Product: syz [ 777.291386][ T5179] usb 3-1: Manufacturer: syz [ 777.328323][ T5179] usb 3-1: SerialNumber: syz [ 777.349576][ T5179] usb 3-1: config 0 descriptor?? [ 777.392021][ T5179] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 777.484535][ T2473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.509806][ T2473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.531838][ T2473] bond0 (unregistering): Released all slaves [ 777.548745][ T29] audit: type=1326 audit(1721659333.692:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7fc00000 [ 777.594956][ T47] usb 3-1: USB disconnect, device number 11 [ 777.686501][ T29] audit: type=1326 audit(1721659333.822:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2bc7975f19 code=0x7fc00000 [ 777.715025][ T29] audit: type=1326 audit(1721659333.822:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7fc00000 [ 777.737751][ T29] audit: type=1326 audit(1721659333.822:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7fc00000 [ 777.774258][ T29] audit: type=1326 audit(1721659333.822:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7fc00000 [ 777.810355][ T29] audit: type=1326 audit(1721659333.822:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7fc00000 [ 777.833115][ T29] audit: type=1326 audit(1721659333.822:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7fc00000 [ 777.855864][ T29] audit: type=1326 audit(1721659333.822:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7fc00000 [ 777.866888][T12161] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 777.878322][ T29] audit: type=1326 audit(1721659333.822:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7fc00000 [ 778.275469][T13385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.436641][T13242] hsr_slave_0: entered promiscuous mode [ 778.467173][T13242] hsr_slave_1: entered promiscuous mode [ 778.477443][T13242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.485429][T13242] Cannot create hsr debugfs directory [ 778.500465][T13519] loop2: detected capacity change from 0 to 1024 [ 778.532298][T13385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.563561][T13144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 778.564066][T13520] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 778.573748][T13519] EXT4-fs (loop2): inodes count not valid: 32 vs 12 [ 778.602359][ T9539] Bluetooth: hci7: command tx timeout [ 778.992646][T13519] loop2: detected capacity change from 0 to 8192 [ 779.025922][T13519] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 779.062429][T13144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 779.196854][T13385] team0: Port device team_slave_0 added [ 779.254738][T13144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 779.326578][T13385] team0: Port device team_slave_1 added [ 779.381031][T13144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 779.668197][T13385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.691134][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.770087][T13385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.813126][T13385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.844466][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.921253][T13385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.003341][T13534] delete_channel: no stack [ 780.081273][ T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 780.291245][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 780.307661][ T47] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 780.327879][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.352451][ T47] usb 3-1: Product: syz [ 780.356652][ T47] usb 3-1: Manufacturer: syz [ 780.381284][ T47] usb 3-1: SerialNumber: syz [ 780.389038][ T47] usb 3-1: config 0 descriptor?? [ 780.395106][T13539] overlayfs: conflicting options: nfs_export=on,index=off [ 780.404850][ T47] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 780.408421][T13385] hsr_slave_0: entered promiscuous mode [ 780.431481][T13385] hsr_slave_1: entered promiscuous mode [ 780.440614][T13385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.470837][T13385] Cannot create hsr debugfs directory [ 780.542197][ T2473] hsr_slave_0: left promiscuous mode [ 780.553068][ T2473] hsr_slave_1: left promiscuous mode [ 780.572780][ T2473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.580906][ T2473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.592544][ T2473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.599993][ T2473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.623180][ T2473] hsr_slave_0: left promiscuous mode [ 780.629872][ T2473] hsr_slave_1: left promiscuous mode [ 780.638233][ T2473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.646005][ T2473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.679660][ T2473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.681448][ T9539] Bluetooth: hci7: command tx timeout [ 780.696484][ T2473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.719092][ T5167] kernel read not supported for file /newroot/74/file0 (pid: 5167 comm: kworker/0:8) [ 780.910207][ T2473] veth1_macvtap: left promiscuous mode [ 780.929237][ T2473] veth0_macvtap: left promiscuous mode [ 780.973243][ T2473] veth1_vlan: left promiscuous mode [ 780.978683][ T2473] veth0_vlan: left promiscuous mode [ 781.002870][ T2473] veth1_macvtap: left promiscuous mode [ 781.009417][ T2473] veth0_macvtap: left promiscuous mode [ 781.019353][ T2473] veth1_vlan: left promiscuous mode [ 781.025273][ T2473] veth0_vlan: left promiscuous mode [ 781.977514][ T47] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 782.181610][ T47] usb 3-1: USB disconnect, device number 12 [ 782.767106][ T9539] Bluetooth: hci7: command tx timeout [ 782.817976][T13555] loop2: detected capacity change from 0 to 1024 [ 782.846841][T13555] EXT4-fs (loop2): inodes count not valid: 32 vs 12 [ 783.160800][T13555] loop2: detected capacity change from 0 to 8192 [ 783.181611][T13555] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 783.446709][ T2473] team0 (unregistering): Port device team_slave_1 removed [ 783.610591][ T2473] team0 (unregistering): Port device team_slave_0 removed [ 785.490408][ T2473] team0 (unregistering): Port device team_slave_1 removed [ 785.584396][ T2473] team0 (unregistering): Port device team_slave_0 removed [ 786.741592][T13561] delete_channel: no stack [ 787.221090][T13472] chnl_net:caif_netlink_parms(): no params data found [ 787.271622][ T5167] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 787.472049][ T5167] usb 1-1: Using ep0 maxpacket: 16 [ 787.489987][ T5167] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 787.511497][ T5167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.540259][ T5167] usb 1-1: Product: syz [ 787.546284][ T5167] usb 1-1: Manufacturer: syz [ 787.561568][ T5167] usb 1-1: SerialNumber: syz [ 787.601780][ T5167] r8152-cfgselector 1-1: Unknown version 0x0000 [ 787.608085][ T5167] r8152-cfgselector 1-1: config 0 descriptor?? [ 787.758533][T13144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.780443][T13472] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.791746][T13472] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.799040][T13472] bridge_slave_0: entered allmulticast mode [ 787.832394][T13472] bridge_slave_0: entered promiscuous mode [ 787.854005][T13472] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.874192][T13472] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.991520][T13472] bridge_slave_1: entered allmulticast mode [ 788.029007][T13472] bridge_slave_1: entered promiscuous mode [ 788.205397][T13472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.065745][T13472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.175713][T13582] loop2: detected capacity change from 0 to 2048 [ 789.213599][T13583] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 789.310272][T13472] team0: Port device team_slave_0 added [ 789.359614][T13144] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.390662][T13242] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 789.465314][T13472] team0: Port device team_slave_1 added [ 789.532435][T13242] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 789.575318][ T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 789.607474][T13472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.614854][T13472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.653868][T13472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.685834][T13242] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 789.708588][T13242] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 789.765845][T13472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.780000][T13472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.817427][T13472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.820166][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 789.851833][ T47] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.876324][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.883546][ T5486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.892053][ T47] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.905381][ T47] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 789.915288][ T47] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 789.930897][ T47] usb 3-1: Product: syz [ 789.937921][ T47] usb 3-1: Manufacturer: syz [ 789.976000][ T47] hub 3-1:4.0: USB hub found [ 790.143947][ T5167] r8152-cfgselector 1-1: Unknown version 0x0000 [ 790.150435][ T5167] r8152-cfgselector 1-1: bad CDC descriptors [ 790.159820][ T5167] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 790.188552][ T47] hub 3-1:4.0: 2 ports detected [ 790.253228][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.260577][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.289656][T13472] hsr_slave_0: entered promiscuous mode [ 790.320917][T13472] hsr_slave_1: entered promiscuous mode [ 790.343825][T13472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.356921][T13472] Cannot create hsr debugfs directory [ 790.518533][ T2473] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.765892][ T2473] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.956981][ T2473] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.147857][ T2473] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.421677][T13385] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 791.438087][ T47] hub 3-1:4.0: activate --> -90 [ 791.465601][T13385] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 791.529397][T13385] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 791.562631][T13385] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 791.691761][ C1] eth0: bad gso: type: 1, size: 1408 [ 791.863177][ T5179] usb 3-1: USB disconnect, device number 13 [ 791.869238][ T47] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 792.060898][T13242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.465276][T13144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.520118][ T2473] bridge_slave_1: left allmulticast mode [ 792.558748][ T2473] bridge_slave_1: left promiscuous mode [ 792.576618][ T2473] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.651873][ T2473] bridge_slave_0: left allmulticast mode [ 792.664848][T13602] loop0: detected capacity change from 0 to 65536 [ 792.671774][ T2473] bridge_slave_0: left promiscuous mode [ 792.694030][ T2473] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.723882][T13606] ptrace attach of "./syz-executor exec"[11491] was attempted by "@ ÿÿÿÿÿÿÿÿ@ ÿÿÿÿ þ€ þ€ » macvlan0 ip6gre0 ¨  ` ÿ h CT  syz0 ¨  ` HMARK  ¨ Ð ( þÿÿÿ"[13606] [ 792.779035][T13602] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 792.799632][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.974511][T13602] XFS (loop0): Ending clean mount [ 792.981936][T13602] XFS (loop0): Quotacheck needed: Please wait. [ 793.137823][T13602] XFS (loop0): Quotacheck: Done. [ 793.312908][T13616] loop2: detected capacity change from 0 to 8 [ 793.364316][T12161] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 793.521997][T13617] SQUASHFS error: Failed to read block 0x63a: -5 [ 793.528936][T13617] SQUASHFS error: Unable to read metadata cache entry [638] [ 793.559199][T13617] SQUASHFS error: Unable to read directory block [26067d:0] [ 794.296687][ T2473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.326208][ T2473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.339218][ T2473] bond0 (unregistering): Released all slaves [ 794.403467][T13242] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.633695][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.640947][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.688442][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.695702][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.725409][T13623] loop0: detected capacity change from 0 to 256 [ 794.766937][T13623] exfat: Deprecated parameter 'utf8' [ 794.778625][T13623] exfat: Deprecated parameter 'utf8' [ 794.802132][T13623] exfat: Deprecated parameter 'utf8' [ 794.825554][T13623] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 796.469589][ T2473] hsr_slave_0: left promiscuous mode [ 796.509334][ T2473] hsr_slave_1: left promiscuous mode [ 796.527267][ T2473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.541548][ T2473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.572429][ T2473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.586726][ T2473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.667397][ T2473] veth1_macvtap: left promiscuous mode [ 796.678717][ T2473] veth0_macvtap: left promiscuous mode [ 796.692899][ T2473] veth1_vlan: left promiscuous mode [ 796.710931][ T2473] veth0_vlan: left promiscuous mode [ 797.054224][T13641] loop2: detected capacity change from 0 to 128 [ 797.101641][T13641] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 797.137565][T13641] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 797.277703][T11491] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 797.656870][T13648] syz.2.2420[13648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.657050][T13648] syz.2.2420[13648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.673851][T13648] syz.2.2420[13648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.689651][T13648] syz.2.2420[13648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.864114][T13652] loop0: detected capacity change from 0 to 1024 [ 797.978936][T13652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.061969][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.340175][ T2473] team0 (unregistering): Port device team_slave_1 removed [ 799.505651][T13679] loop0: detected capacity change from 0 to 16 [ 799.520252][T13679] erofs: (device loop0): mounted with root inode @ nid 36. [ 799.604148][T13679] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 799.615555][T13679] syz.0.2430: attempt to access beyond end of device [ 799.615555][T13679] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 799.681539][T13679] syz.0.2430: attempt to access beyond end of device [ 799.681539][T13679] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 799.974361][ T2473] team0 (unregistering): Port device team_slave_0 removed [ 800.043775][ T9539] Bluetooth: hci1: command 0x0406 tx timeout [ 800.801339][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 801.003677][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 801.031282][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.059229][ T8] usb 1-1: config 0 descriptor?? [ 801.320061][ T8] ath6kl: Failed to submit usb control message: -71 [ 801.326870][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 801.337054][ T8] ath6kl: Unable to send get target info: -71 [ 801.357510][ T8] ath6kl: Failed to init ath6kl core: -71 [ 801.375656][ T8] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 801.388768][ T8] usb 1-1: USB disconnect, device number 14 [ 801.562802][T13144] veth0_vlan: entered promiscuous mode [ 801.606642][T13385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.869662][T13144] veth1_vlan: entered promiscuous mode [ 801.916154][T13385] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.020066][T13472] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 802.117521][T13472] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 802.159981][T13472] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 802.169401][T13696] loop0: detected capacity change from 0 to 1024 [ 802.195791][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.203112][ T5486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.240274][T13472] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 802.320311][T13696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.400872][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.408141][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.738108][T13144] veth0_macvtap: entered promiscuous mode [ 803.196146][T13144] veth1_macvtap: entered promiscuous mode [ 803.220121][T13242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.288546][T13385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.523405][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.544778][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.571629][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.600053][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.671279][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.681313][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.696327][T13706] loop2: detected capacity change from 0 to 4096 [ 803.716832][T13708] loop0: detected capacity change from 0 to 256 [ 803.717093][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.735191][T13706] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 803.753549][T13144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.828387][T13706] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 803.866407][T13708] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 803.938322][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.955098][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.965670][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.985335][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.008335][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.019987][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.034973][T13144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.117351][T13242] veth0_vlan: entered promiscuous mode [ 804.173606][T13144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.211464][T13144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.220216][T13144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.254706][T13144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.392160][T13242] veth1_vlan: entered promiscuous mode [ 804.419759][T13716] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 804.445559][T13385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.656511][T13472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.782578][ T5299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.790432][ T5299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.890626][T13472] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.959419][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.966656][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.011611][T13242] veth0_macvtap: entered promiscuous mode [ 805.047492][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.054749][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.085089][ T5299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.096567][T13242] veth1_macvtap: entered promiscuous mode [ 805.112048][ T5299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.264503][T13472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 805.366823][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.403006][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.444428][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.471312][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.483727][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.507475][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.523498][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.552877][T13738] loop0: detected capacity change from 0 to 16 [ 805.577987][T13738] erofs: (device loop0): mounted with root inode @ nid 36. [ 805.648829][T13738] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 805.659574][T13738] syz.0.2445: attempt to access beyond end of device [ 805.659574][T13738] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 805.728587][T13738] syz.0.2445: attempt to access beyond end of device [ 805.728587][T13738] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 805.808178][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.830969][T13242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.972200][T13735] netlink: 'syz.3.2257': attribute type 4 has an invalid length. [ 806.530720][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.602170][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.621765][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.641242][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.651096][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.711462][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.731326][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.751239][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.774223][T13242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.811514][T13741] netlink: 'syz.3.2257': attribute type 17 has an invalid length. [ 806.890442][T13724] loop2: detected capacity change from 0 to 32768 [ 806.902343][T13242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.937714][T13242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.964608][T13242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.987891][T13724] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 807.001686][T13242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.090073][T13385] veth0_vlan: entered promiscuous mode [ 807.101675][ T5122] Bluetooth: hci3: unexpected cc 0x1407 length: 100 > 9 [ 807.220446][T13758] loop0: detected capacity change from 0 to 256 [ 807.238899][T13758] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 807.266734][T13724] XFS (loop2): Ending clean mount [ 807.309698][T13472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.433904][T13385] veth1_vlan: entered promiscuous mode [ 807.527666][T11491] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 807.608383][ T9310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.643012][ T9310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.697884][T13385] veth0_macvtap: entered promiscuous mode [ 807.749522][T13385] veth1_macvtap: entered promiscuous mode [ 807.935354][ T9310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.974660][T13767] loop0: detected capacity change from 0 to 8 [ 807.987294][ T9310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.008352][T13767] Filesystem uses "unknown" compression. This is not supported [ 808.013892][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.062547][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.074620][T13767] loop0: detected capacity change from 0 to 512 [ 808.091233][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.111211][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.128906][T13767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.142317][T13767] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 808.150752][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.231867][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.238200][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.249073][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.267589][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.301586][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.325807][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.351278][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.388599][T13385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.423545][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.438759][T13778] loop3: detected capacity change from 0 to 512 [ 808.463853][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.476296][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.485238][T13778] ext2: Unknown parameter 'fsmagic' [ 808.491881][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.541822][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.581360][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.641744][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.688094][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.776340][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.855736][T13780] loop2: detected capacity change from 0 to 4096 [ 808.861355][T13385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.871847][T13780] ntfs3: loop2: Primary boot: invalid record size -46. [ 808.881276][T13385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.891546][T13780] ntfs3: loop2: try to read out of volume at offset 0x1ffe00 [ 809.066085][T13385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.539755][T13385] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.564328][T13385] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.589731][T13385] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.609097][T13385] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.538311][T13791] loop0: detected capacity change from 0 to 1024 [ 810.637705][T13472] veth0_vlan: entered promiscuous mode [ 810.905423][T13791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.006393][T13472] veth1_vlan: entered promiscuous mode [ 811.161880][ T5122] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 811.176022][ T5122] Bluetooth: hci3: Injecting HCI hardware error event [ 811.186761][ T9539] Bluetooth: hci3: hardware error 0x00 [ 811.309586][ T9301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.341392][ T9301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.378818][T13804] loop3: detected capacity change from 0 to 256 [ 811.469513][T13804] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 811.514891][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.580261][ T9310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.594463][T13472] veth0_macvtap: entered promiscuous mode [ 811.631693][ T9310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.644868][T13472] veth1_macvtap: entered promiscuous mode [ 811.809494][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.860780][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.911282][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.947235][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.987025][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.046620][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.090917][ C1] eth0: bad gso: type: 1, size: 1408 [ 812.097238][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.141371][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.177384][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.233257][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.277079][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.329357][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.386778][T13472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.459025][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2337'. [ 812.492593][T13812] netlink: 'syz.5.2337': attribute type 12 has an invalid length. [ 812.528113][T13812] netlink: 'syz.5.2337': attribute type 14 has an invalid length. [ 812.560873][T13818] loop3: detected capacity change from 0 to 512 [ 812.633953][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 812.666245][T13818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.712405][T13818] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.726013][T13812] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.736086][T13812] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.744856][T13812] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.753654][T13812] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.803132][ T29] audit: type=1326 audit(1721659368.942:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7ffc0000 [ 812.807842][T13812] vxlan0: entered promiscuous mode [ 812.887172][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.905411][ T29] audit: type=1326 audit(1721659368.942:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7ffc0000 [ 812.924080][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.964802][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.981293][ T29] audit: type=1326 audit(1721659368.992:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f2bc7975f19 code=0x7ffc0000 [ 813.026724][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.045056][T13829] loop0: detected capacity change from 0 to 1024 [ 813.052633][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.070967][ T29] audit: type=1326 audit(1721659368.992:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13824 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc7975f19 code=0x7ffc0000 [ 813.078489][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.138787][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.155285][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.167427][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.179565][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.189761][T13472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.200519][T13472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.228185][ T9304] hfsplus: b-tree write err: -5, ino 4 [ 813.230037][T13472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.335817][ T9539] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 813.391275][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0df800: rx timeout, send abort [ 813.445301][T13144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.900737][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0df800: abort rx timeout. Force session deactivation [ 814.034308][T13472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.043127][T13472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.059637][T13472] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.069000][T13472] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.472685][T13846] overlayfs: failed to get inode (-116) [ 814.479519][T13846] overlayfs: failed to get inode (-116) [ 814.485324][T13846] overlayfs: failed to get inode (-116) [ 814.491018][T13846] overlayfs: failed to get inode (-116) [ 815.403937][T13848] loop5: detected capacity change from 0 to 512 [ 815.494894][T13848] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 815.538813][T13848] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 815.573695][T13848] EXT4-fs (loop5): group descriptors corrupted! [ 815.589532][ T5299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.656690][T13857] loop1: detected capacity change from 0 to 16 [ 815.666692][T13857] erofs: (device loop1): mounted with root inode @ nid 36. [ 815.745397][T13857] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 815.755823][T13857] syz.1.2473: attempt to access beyond end of device [ 815.755823][T13857] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 815.828676][T13857] syz.1.2473: attempt to access beyond end of device [ 815.828676][T13857] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 815.957388][ T5299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.850354][ T9310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.987697][ T9310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.652173][T13860] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 817.658849][T13860] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 817.686447][T13868] loop5: detected capacity change from 0 to 512 [ 817.723470][T13860] vhci_hcd vhci_hcd.0: Device attached [ 817.754753][T13869] vhci_hcd: connection closed [ 818.049724][ T9295] vhci_hcd: stop threads [ 818.129134][ T9295] vhci_hcd: release socket [ 818.191309][ T5164] usb 10-1: SetAddress Request (2) to port 0 [ 818.474287][T13868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.487080][ T9295] vhci_hcd: disconnect device [ 818.501584][ T5164] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 818.526742][T13868] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.553906][ T5164] usb 10-1: enqueue for inactive port 0 [ 818.610258][ T29] audit: type=1326 audit(1721659374.742:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.3.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe975f19 code=0x7ffc0000 [ 818.823853][ T29] audit: type=1326 audit(1721659374.742:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.3.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe975f19 code=0x7ffc0000 [ 818.903498][T13385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.024830][ T29] audit: type=1326 audit(1721659374.792:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.3.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f74fe975f19 code=0x7ffc0000 [ 819.211561][ T5164] usb usb10-port1: attempt power cycle [ 819.531586][ T29] audit: type=1326 audit(1721659374.792:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13875 comm="syz.3.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fe975f19 code=0x7ffc0000 [ 820.907382][ T5164] usb usb10-port1: unable to enumerate USB device [ 821.090880][T13888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2481'. [ 821.147287][T13891] loop1: detected capacity change from 0 to 1024 [ 821.368765][T13901] loop0: detected capacity change from 0 to 512 [ 821.445555][T13901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.499334][T13901] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 821.521675][ T5169] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 822.667413][T13909] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 822.675782][T13909] BUG: unable to handle page fault for address: ffff88806a638000 [ 822.683503][T13909] #PF: supervisor instruction fetch in kernel mode [ 822.690003][T13909] #PF: error_code(0x0011) - permissions violation [ 822.696418][T13909] PGD 14e01067 P4D 14e01067 PUD 7b386063 PMD 800000006a6001e3 [ 822.704010][T13909] Oops: Oops: 0011 [#1] PREEMPT SMP KASAN NOPTI [ 822.710256][T13909] CPU: 0 UID: 0 PID: 13909 Comm: syz.4.2490 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 822.720680][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 822.730833][T13909] RIP: 0010:0xffff88806a638000 [ 822.731215][ T5169] usb 3-1: Using ep0 maxpacket: 8 [ 822.735591][T13909] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <01> 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 [ 822.735616][T13909] RSP: 0018:ffffc900020df8f8 EFLAGS: 00010286 [ 822.735641][T13909] RAX: 1ffff110048e1e06 RBX: ffff88802470f030 RCX: dffffc0000000000 [ 822.735663][T13909] RDX: ffff88802a75df00 RSI: 0000000000000002 RDI: ffff88802470f020 [ 822.735683][T13909] RBP: ffffc900020dfa30 R08: ffff88802bd4d0c7 R09: 1ffff110057a9a18 [ 822.735705][T13909] R10: dffffc0000000000 R11: ffff88806a638000 R12: ffff88802a75df00 [ 822.735726][T13909] R13: ffff88802470f020 R14: ffff88802bd4d150 R15: ffff88802bd4d0b8 [ 822.735751][T13909] FS: 00007f8c3b80a6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 822.735776][T13909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.735795][T13909] CR2: ffff88806a638000 CR3: 000000002b0d0000 CR4: 0000000000350ef0 [ 822.735818][T13909] Call Trace: [ 822.735829][T13909] [ 822.735841][T13909] ? __die_body+0x88/0xe0 [ 822.735887][T13909] ? page_fault_oops+0x8e4/0xcc0 [ 822.735921][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.735961][T13909] ? __lock_acquire+0x137a/0x2040 [ 822.736006][T13909] ? __pfx_page_fault_oops+0x10/0x10 [ 822.736043][T13909] ? __entry_text_end+0x1020c5/0x1020c9 [ 822.736072][T13909] ? is_prefetch+0x4f6/0x780 [ 822.736110][T13909] ? __pfx_is_prefetch+0x10/0x10 [ 822.736158][T13909] ? __bad_area_nosemaphore+0x118/0x770 [ 822.736200][T13909] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 822.736236][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.736266][T13909] ? spurious_kernel_fault+0x53d/0x5d0 [ 822.736307][T13909] ? exc_page_fault+0x5c8/0x8c0 [ 822.736344][T13909] ? asm_exc_page_fault+0x26/0x30 [ 822.736381][T13909] ? uprobe_mmap+0xbb2/0x11a0 [ 822.736423][T13909] ? __pfx_uprobe_mmap+0x10/0x10 [ 822.736459][T13909] mmap_region+0x1891/0x2090 [ 822.736499][T13909] ? mark_lock+0x9a/0x350 [ 822.736553][T13909] ? __pfx_mmap_region+0x10/0x10 [ 822.736591][T13909] ? mm_get_unmapped_area+0xa5/0xd0 [ 822.736631][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.736664][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.736693][T13909] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 822.736720][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.736750][T13909] ? cap_mmap_addr+0x163/0x2c0 [ 822.736781][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.736811][T13909] ? __get_unmapped_area+0x2f0/0x360 [ 822.736852][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.736886][T13909] do_mmap+0x8ad/0xfa0 [ 822.736924][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.736963][T13909] ? __pfx_do_mmap+0x10/0x10 [ 822.737002][T13909] ? __pfx_down_write_killable+0x10/0x10 [ 822.737037][T13909] ? __pfx_ima_file_mmap+0x10/0x10 [ 822.737066][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.737096][T13909] ? security_mmap_file+0x178/0x1a0 [ 822.737141][T13909] vm_mmap_pgoff+0x1dd/0x3d0 [ 822.737193][T13909] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 822.737233][T13909] ? __fget_files+0x29/0x470 [ 822.737274][T13909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.737304][T13909] ? __fget_files+0x3f6/0x470 [ 822.737348][T13909] ksys_mmap_pgoff+0x4f1/0x720 [ 822.737390][T13909] ? __x64_sys_mmap+0x7f/0x140 [ 822.737433][T13909] do_syscall_64+0xf3/0x230 [ 822.737473][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.737515][T13909] RIP: 0033:0x7f8c3a975f19 [ 822.737537][T13909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.737560][T13909] RSP: 002b:00007f8c3b80a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 822.737589][T13909] RAX: ffffffffffffffda RBX: 00007f8c3ab05f60 RCX: 00007f8c3a975f19 [ 822.737610][T13909] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000000020000000 [ 822.737629][T13909] RBP: 00007f8c3a9e4e68 R08: 0000000000000003 R09: 0000000000000000 [ 822.737648][T13909] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 822.737666][T13909] R13: 000000000000000b R14: 00007f8c3ab05f60 R15: 00007ffd1a491ae8 [ 822.737697][T13909] [ 822.737707][T13909] Modules linked in: [ 822.737723][T13909] CR2: ffff88806a638000 [ 822.737738][T13909] ---[ end trace 0000000000000000 ]--- [ 822.737751][T13909] RIP: 0010:0xffff88806a638000 [ 822.737772][T13909] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <01> 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 [ 822.737796][T13909] RSP: 0018:ffffc900020df8f8 EFLAGS: 00010286 [ 822.737819][T13909] RAX: 1ffff110048e1e06 RBX: ffff88802470f030 RCX: dffffc0000000000 [ 822.737841][T13909] RDX: ffff88802a75df00 RSI: 0000000000000002 RDI: ffff88802470f020 [ 822.737869][T13909] RBP: ffffc900020dfa30 R08: ffff88802bd4d0c7 R09: 1ffff110057a9a18 [ 822.737890][T13909] R10: dffffc0000000000 R11: ffff88806a638000 R12: ffff88802a75df00 [ 822.737912][T13909] R13: ffff88802470f020 R14: ffff88802bd4d150 R15: ffff88802bd4d0b8 [ 822.737936][T13909] FS: 00007f8c3b80a6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 822.737962][T13909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.737982][T13909] CR2: ffff88806a638000 CR3: 000000002b0d0000 CR4: 0000000000350ef0 [ 822.738007][T13909] Kernel panic - not syncing: Fatal exception [ 822.738394][T13909] Kernel Offset: disabled