last executing test programs: 20.482517914s ago: executing program 2 (id=1472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x58, r1, 0x5, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY={0x1e}, @NL80211_ATTR_VHT_CAPABILITY={0x10}]}, 0x58}}, 0x0) 20.311205058s ago: executing program 2 (id=1474): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)='X', 0x1}], 0x1}], 0x1, 0x0) 19.852677075s ago: executing program 2 (id=1478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001540)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007000000d60600000ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff61e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015ed22c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df000000008000000001f2daa876d6451fcc7ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194}, 0x80) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet(0x2, 0x3, 0x5) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000002100)={0x0, @local, @local}, &(0x7f00000020c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, &(0x7f0000000400)={@private0, 0x5, r6}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18002b4c421453aec3e8b72004bc7a00f2d05120af2f7ce3a01d1f3bdc33f3f500"/42], &(0x7f0000000080)='GPL\x00', 0x1f, 0xad, &(0x7f0000000340)=""/173, 0x41100, 0x8, '\x00', r6, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xc, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0xedb}, 0x10, r7, r3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x8, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000002000000000000000000000085100000866e37193cbee03973b69de3"], &(0x7f0000000b40)='GPL\x00', 0x6, 0x3e, &(0x7f0000000b80)=""/62, 0x41000, 0x2, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x1, 0x8, 0x8}, 0x10, r7}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000040)=""/12, &(0x7f00000003c0), &(0x7f0000000440), 0x801, r8, 0x0, 0x21bf000000000000}, 0x38) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0), 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000040)=""/12, &(0x7f00000003c0), &(0x7f0000000440), 0x801, r10, 0x0, 0x21bf000000000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x8, &(0x7f0000002140)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="00000000000000006d4bc0fffcffffff18220000", @ANYRES8, @ANYBLOB="00000095000000000000c82ff075656b7a8f000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x3d, &(0x7f0000000140)=""/61, 0x40f00, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xa, 0xffffffff, 0xd1}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r8, r9, 0xffffffffffffffff, r10]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="a533f0ff04000000b3ea5c44566d16f1b83a0e2a001848000005000000000000000000e800183a000001000000000000000000000013721800f0ffffff18670000100000000000000002000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xe, 0xd1b, 0x3ff}, 0x10, r7}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {}]}, 0x10) r13 = fcntl$dupfd(r11, 0x0, r12) sendmsg$IPVS_CMD_SET_SERVICE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffff7f00000000000000"], &(0x7f0000000040)='GPL\x00', 0xfffffa7c, 0xe1, &(0x7f0000000080)=""/225, 0x41000, 0x4, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x10, 0x60}, 0x10, r7, r13}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000080)=@raw=[@map_fd, @generic={0xfd, 0xc, 0xa, 0x6, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0xa}, @ldst={0x3, 0x0, 0x3, 0xa, 0x5, 0x80, 0x1dcfe61b9fcbc0fb}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit, @map_fd={0x18, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000000)='GPL\x00', 0x2, 0x71, &(0x7f0000000180)=""/113, 0x0, 0x2, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x9}, 0x10, r7}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x95b, 0x0, 0x0, 0x0, 0x80000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x0, 0xf, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x80000000, 0xde, &(0x7f0000000140)=""/222, 0x0, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x10, 0x3, 0x9}, 0x10, r7, r0, 0x0, &(0x7f00000002c0)}, 0x80) 19.564076569s ago: executing program 2 (id=1480): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfe, 0x687, &(0x7f0000000fc0)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 19.378928004s ago: executing program 2 (id=1481): write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000002669081f39cab0"], 0xb0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) 17.975937776s ago: executing program 2 (id=1485): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x22, 0x0, 0x0) 11.024498195s ago: executing program 1 (id=1514): r0 = io_uring_setup(0x30d3, &(0x7f0000001200)) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_submit(r1, 0x2000012e, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0}]) close_range(r0, 0xffffffffffffffff, 0x0) 10.567083381s ago: executing program 1 (id=1516): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x28}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 10.073714791s ago: executing program 1 (id=1517): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc6e3}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) ioctl$sock_bt_hci(r4, 0x400448df, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000140)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x2}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@seclabel}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x1) read$FUSE(r5, &(0x7f0000004380)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c79, &(0x7f0000002300)=ANY=[@ANYBLOB='uid=', @ANYRESOCT]) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 7.771485016s ago: executing program 1 (id=1520): r0 = syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000005e40)='./file0\x00', 0x800501, &(0x7f0000000040)=ANY=[], 0x0, 0x5e1f, &(0x7f000000bcc0)="$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") statx(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) io_setup(0x101, &(0x7f0000000380)=0x0) memfd_create(&(0x7f0000000240)='-B\xd5NI\xc4\xb5 \xe5\v.j\xf4\x8di\x11\xef\x8bl\xc9\x1e\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xff\x03\x00\x00nh#\xcf)\x1e\xc8\xc0\"\x9cc\x10d\xee\xa9\xab\x06\x97kf\xc7\x820\x80T\r\xde\xc58M\xcd\xfb\xcc\x82n=\x7f=\x8b\x1d\xea\xef\xe3\x00\x00\x03\r\x00\x00\x10\x00@\x00\x00\x00\x00\x00\x00\x00\xcbM\x8a_\xbf\xb59Q\x05\x82E\x12p\xcf\x15@o\xac\x17P;\x11\x93\x97\xb6\xdc\xad\x00C\x87\xc1\xbb\xb2>\xa3 #\xd5T\xdd\x8cn<\xd0$$\x9bo\x03\xdb#(\x03\x00\x00\x00\xe3r%/\xca\xb4\xd1x\xd8\xb0uN\xcf\b%\x00\x00\x00\x00\x00\x00\x00\bUO\x9f(\xe4\xda\x1eLj:\x8av\xd4\xe1\xc2ze\x16\asP\xae&yF.\xe8\xf5\xa2\xdf\x86\xa0t\x05~~\x92U\x1e\x87\xdb\xdfg\x9enz\b\xfaw\xfb*[r\x0e\xcb`\xdf\xa1\x16{<)\x9d\x99h\x00\x10\x02\x00'/302, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r8, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x0, 0x7ab4}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x2304023, 0x0, 0x8, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x0, 0x0) io_submit(r3, 0x2, &(0x7f00000007c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x100}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x2) 7.188077053s ago: executing program 4 (id=1524): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0xc038480a, &(0x7f00000000c0)=0x3) 6.003812168s ago: executing program 3 (id=1530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2000400) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="2d74202b6e65745f639873202b72646d61202d6d65e3e03e0400000009136f7279202d637078738474200063707561636381202b696f20b6074f07bcae9b78fbdda345564249b23d3c037668a9162933f55825567d2a2c1af0a694a5723a357842439a50b627d7bbf8515dc5bec03897f84e3737fe5cb92bf058f5b2c1cdba96090a79f3141f17d07ab8881faec977c9b16f7c6eb95c747262b9901549e906ca9dadc0e399a56bbc824d35cce58a06f27fc1fb00347ed57ff24450460a5451de9ba9a3ebdab3"], 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0x40806685, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="64ebff002accbeb994a1a2796c9bc4f24f022cff4e55b5922b7d78935f9e50645a8b0e7f1e5319fbb58d61c061adc123805eda5dbc87c59b193ed1511610c819e1b56ec60a80900480", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000600e0000001050002000a000000"], 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) listen(r0, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x2, 0x70bd29, 0x25dfdbfe, {{'drbg_nopr_sha1\x00'}, '\x00', '\x00', 0x400, 0x400}, ["", "", "", ""]}, 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) getsockname$tipc(r11, &(0x7f0000000480), &(0x7f00000004c0)=0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000340), 0x4) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}], 0x3) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x60004050}, 0x0) 5.523968817s ago: executing program 0 (id=1533): syz_read_part_table(0x5d2, &(0x7f0000000bc0)="$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") mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00005a7000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000d47000/0x4000)=nil) mremap(&(0x7f00008c4000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000e2e000/0x1000)=nil) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) munlock(&(0x7f0000427000/0x3000)=nil, 0x3000) munmap(&(0x7f0000e3a000/0x1000)=nil, 0x1000) munlock(&(0x7f0000e3f000/0xe000)=nil, 0xe000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in=@empty}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xfffffffffffffc32) socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x2) 4.212161832s ago: executing program 3 (id=1534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2d}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x200000000000000}, 0x0) 3.998690289s ago: executing program 3 (id=1535): syz_usb_connect(0x3, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x44, 0xf8, 0x9b, 0x20, 0x5ac, 0x262, 0xa363, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x73, 0x7, 0x0, 0x3, 0xca, 0x2}}, {{0x9, 0x4, 0x29, 0x0, 0x1, 0x68, 0xf2, 0x28, 0x0, [], [{{0x9, 0x5, 0x6, 0xc, 0x0, 0x6}}]}}]}}]}}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) setuid(0xee01) setgroups(0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x2}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001940), 0x141202, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001980)={'vxcan0\x00', 0x0}) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r4) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x7fffffffffffffff) sendmsg$can_raw(r2, &(0x7f0000001a80)={&(0x7f00000019c0)={0x1d, r3}, 0x10, &(0x7f0000001a40)={&(0x7f0000001a00)=@can={{0x4, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "153ed27275e88f1c"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_emit_ethernet(0x63e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x608, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x4, "d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f9"}, {0x0, 0xa2, "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"}]}}}}}}, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xfffffff4, 0xc, 0x800000, 0x2a, 0x1b, "be882f95f3aee29a154c0f00"}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) process_vm_readv(r8, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000140)=""/198, 0xc6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/121, 0x79}], 0x9, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/255, 0xff}, {&(0x7f00000007c0)=""/194, 0xc2}], 0x3, 0x0) 3.662725127s ago: executing program 4 (id=1536): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="696e6c696e655f64656e7472792c70726a6a71756f74613d6b6d656d5f63616368655f66726565002c007f1e71da5d584732ec58f04571c7701e2f92ede557aa71829c2b69089ab7087a435393508098c7d0773ac845a75ea2998b9eb199944643ba23699ac281dbddb79e43e10089b535a5e94d4a678cf7b55d35ab0b680df4442e67a1426afc1530faf3f26b97296a3db5128a360ddf0b48f5c1f920c8953f613fc185d76c2f"], 0x1, 0x5505, &(0x7f0000002480)="$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") 3.638041718s ago: executing program 0 (id=1537): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1b) write$UHID_INPUT(r3, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) 3.439631964s ago: executing program 1 (id=1538): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x4, 0x0, 0x0, 0x0, 0xc7, 0x40}}}, @TCA_TBF_PTAB={0x404, 0x3, [0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7677]}]}}]}, 0x45c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010012000000000000000000000a20000000000a000000000000000000000000000900010073797a300000000058000000090a00000000000000000000000000df07000a400000000009"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x47, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x20202, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x68) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r11, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100005040000005f596da40000880900", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e23000004001200080015"], 0x48}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101000000090400001602020000052406000005240000000d244c010000000000000000e4032402000905810300000000000905820200000000000905030200000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="a6", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendto$inet(r1, &(0x7f0000000100)='h', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) socket$netlink(0x10, 0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3.256051319s ago: executing program 0 (id=1539): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8049, &(0x7f00000041c0)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@noinit_itable}, {@usrjquota, 0x22}, {@acl}, {@nomblk_io_submit}, {@minixdf}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.817902084s ago: executing program 0 (id=1540): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$P9_RREADDIR(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) 2.476910121s ago: executing program 0 (id=1541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$nfc_llcp(r0, 0x6, 0x14, 0x0, 0x2000e881) 2.264030169s ago: executing program 0 (id=1542): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x10}}, 0xac}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x19) bind(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x1a}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0x81) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x4, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) mbind(&(0x7f00009bc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000200)=0x6, 0x7, 0x3) 2.066775324s ago: executing program 4 (id=1543): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fe", 0x1, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$setperm(0x5, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000076000d0b000000000000000003009bc73470000008000a0000000000080001000100000024c69b4325d4ad366c6627b96e65258d64244720ee78f36bb231a522d3f186998ed61b4ac40d3124a58cd07cc1434c16701428dfc796934a75d5e4"], 0x28}}, 0x0) dup(r2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x451, &(0x7f0000000480)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='./file0/file0\x00') 1.330595263s ago: executing program 3 (id=1544): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff, 0xffff, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.103947052s ago: executing program 4 (id=1545): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007880)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private2}]}}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.103296722s ago: executing program 3 (id=1546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(r0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000002a00090000000000000000000400002c08001700", @ANYRES32], 0x20}, 0x1, 0x3000000}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./file1\x00', 0x810410, &(0x7f00000059c0)=ANY=[], 0x5, 0x1e2, &(0x7f00000006c0)="$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") preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000000740), 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0x810c9365, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0x9, &(0x7f0000002180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x23}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query]}, &(0x7f0000002200)='syzkaller\x00', 0x1, 0x0, &(0x7f0000002240), 0x40f00, 0x40, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$tun(r0, &(0x7f0000002080)=ANY=[@ANYBLOB="0000000ba7f0636f8b3916dd5740244d000000000000000000"], 0x19) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000022c0)={0x0, 0x9, 0x1, [0x7, 0x800, 0x6, 0x5, 0x6], [0x4, 0x7ff, 0x7, 0x7, 0x71, 0x8, 0x2, 0xfffffffffffff000, 0x4, 0xfffffffffffffff7, 0x8, 0x9, 0x0, 0xa67, 0xffffffff, 0xfffffffffffffffc, 0x7, 0x0, 0x8000000000000000, 0x5, 0x10000, 0x3, 0x1, 0x8, 0x3, 0x3f, 0x7f, 0x9, 0x9, 0x2, 0x11, 0x2, 0x10001, 0x200, 0xba9, 0x7f, 0x8b43, 0x79, 0x1, 0x6, 0x7, 0x100000000, 0x10001, 0x7fffffffffffffff, 0x4, 0x2903, 0x81, 0x6, 0x2, 0x5b, 0x1, 0x7, 0x2, 0x1f, 0x9b28, 0x9, 0xffffffffffffffff, 0x1, 0x10000, 0x1, 0xfffffffffffffff7, 0x100000001, 0x0, 0x3, 0x4a, 0x0, 0x401, 0x40, 0x0, 0xc1df, 0xfffffffffffffffa, 0x2, 0x40, 0x8000000000000001, 0x4ba0, 0x0, 0x9, 0x1, 0x7fffffffffffffff, 0x7fffffff, 0x0, 0xffffffffffff60f6, 0x8, 0x0, 0x0, 0x8, 0x773, 0x7fffffff, 0x6, 0x7, 0x10000, 0x4, 0xaeaa, 0xa9, 0xfffffffffffff468, 0x7, 0x2, 0x5, 0x2, 0xb, 0x0, 0x0, 0x69c, 0x5f9e, 0x3f, 0xfffe00000, 0x2, 0x4000000000000000, 0x1000, 0x5bf, 0x8001, 0x0, 0x2, 0x4, 0x9, 0x33686e0300000, 0xfd49, 0x2, 0x6, 0x8, 0xffffffffffffff00]}) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000100)="5b6f19987b", 0x7ffff000}], 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002700)={r5, 0xfffffffffffffffb, 0x0, [0x5, 0x800000000000000, 0x3, 0xffffffffffffff81, 0x5], [0x4, 0x1, 0xfff, 0x5, 0x1, 0x2, 0x3, 0x1, 0x3, 0xfffffffffffffffa, 0x5, 0x8000000000000000, 0x3f, 0x2, 0x7fffffffffffffff, 0x9, 0x2, 0xffffffff, 0x80000000, 0x0, 0x7, 0x0, 0x7, 0x5, 0x209, 0x1, 0x5, 0x4, 0x6, 0x3, 0x4, 0x8, 0x7, 0x1, 0x3ffc0000000000, 0xd6, 0x81, 0x8, 0x3, 0x40, 0xe2f, 0x5, 0x8, 0x6, 0x60, 0x0, 0xffff0, 0x1, 0x9, 0x985, 0x9, 0x100000000, 0x101, 0x7, 0x0, 0x8000000000000001, 0x7, 0x7, 0x80, 0xf9, 0x1, 0x2, 0x0, 0x9, 0x5, 0x1, 0x6, 0x1, 0x8000, 0xcbd, 0x0, 0x10000000000, 0x0, 0x1f, 0x1, 0x2, 0x9, 0x1ff, 0x53cb, 0x3515, 0x7, 0x8001, 0x401, 0x4, 0xdd, 0x2, 0x288c, 0x545, 0x86, 0x0, 0x3, 0x100, 0x900, 0x8000, 0x100000001, 0x7fffffff, 0x5, 0x7fffffff, 0x200, 0x3, 0x8, 0xc9, 0x100, 0x4ebf, 0x2, 0x3, 0x9, 0x2000, 0x8000000000000001, 0xfffffffffffffffb, 0x8, 0x101, 0xf0d, 0x357, 0x35, 0x6, 0x2, 0x5, 0x1f, 0x1]}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 809.741045ms ago: executing program 4 (id=1547): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000000)=""/106, 0xfe4e, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000200)=""/182, 0xb6, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f00000008c0)=""/174, 0xae, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000c40)={0x2, 0x0, {&(0x7f00000004c0)=""/40, 0x28, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) syz_io_uring_setup(0x7307, &(0x7f0000000340)={0x0, 0x56c8, 0x0, 0x3, 0x9b, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000440)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x50f, 0x24) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @dev, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@empty}, {@loopback}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x9, "96000000c45930"}]}]}}}}}}}, 0x0) 348.221243ms ago: executing program 4 (id=1548): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 88.144424ms ago: executing program 1 (id=1549): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 3 (id=1550): r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x5452, &(0x7f0000000100)={0x1, 0xfffffffffffffdbd, 0x0}) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): ready [ 293.548323][ T3370] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 293.741506][ T3370] usb 3-1: config 0 has no interface number 0 [ 293.995001][ T7616] kvm: pic: non byte read [ 294.378216][ T3370] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28 [ 294.400467][ T3370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.423485][ T3370] usb 3-1: Product: syz [ 294.437297][ T3370] usb 3-1: Manufacturer: syz [ 294.447505][ T3370] usb 3-1: SerialNumber: syz [ 294.486214][ T3370] usb 3-1: config 0 descriptor?? [ 294.550894][ T3370] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.223/input/input15 [ 294.757862][ T3013] bcm5974 3-1:0.223: could not read from device [ 294.829317][ T3013] bcm5974 3-1:0.223: could not read from device [ 294.832602][ T3370] usb 3-1: USB disconnect, device number 15 [ 295.536049][ T3013] bcm5974 3-1:0.223: could not read from device [ 295.568815][ T3013] bcm5974 3-1:0.223: could not read from device [ 295.659455][ T3650] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 295.766082][ T7642] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 295.937845][ T3650] usb 2-1: Using ep0 maxpacket: 8 [ 296.097776][ T3650] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 296.116222][ T3650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.150356][ T3650] usb 2-1: config 0 descriptor?? [ 296.241341][ T7654] kvm [7653]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 296.257273][ T7654] kvm [7653]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x250000f7ff [ 296.269063][ T7654] kvm [7653]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x250000ffff [ 296.284053][ T7661] loop0: detected capacity change from 0 to 64 [ 296.457517][ T3650] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 296.479912][ T7661] loop0: detected capacity change from 0 to 16 [ 296.995475][ T26] audit: type=1326 audit(1723527052.662:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.4.1053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f845422a9f9 code=0x0 [ 297.942418][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 297.985773][ T7682] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 298.047580][ T3650] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 298.083764][ T3650] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 298.125577][ T7686] 9pnet: Insufficient options for proto=fd [ 298.125643][ T3650] asix: probe of 2-1:0.0 failed with error -71 [ 298.154523][ T7691] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 298.211181][ T3650] usb 2-1: USB disconnect, device number 12 [ 298.369816][ T7691] team0: Port device netdevsim0 added [ 298.408249][ T7693] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 298.456614][ T7693] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 298.563725][ T7693] team0: Failed to send options change via netlink (err -105) [ 298.571746][ T7693] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 298.583728][ T7693] team0: Port device netdevsim0 removed [ 298.595790][ T7693] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 298.605589][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 298.720767][ T7709] loop1: detected capacity change from 0 to 256 [ 298.767145][ T7707] loop4: detected capacity change from 0 to 1024 [ 299.307305][ T7707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 299.489389][ T7707] System zones: 0-1, 3-12 [ 299.692807][ T7709] FAT-fs (loop1): Directory bread(block 64) failed [ 299.699277][ T7707] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 299.711319][ T7709] FAT-fs (loop1): Directory bread(block 65) failed [ 299.827826][ T7709] FAT-fs (loop1): Directory bread(block 66) failed [ 299.839065][ T7709] FAT-fs (loop1): Directory bread(block 67) failed [ 299.882238][ T7709] FAT-fs (loop1): Directory bread(block 68) failed [ 299.914114][ T7725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.917894][ T7709] FAT-fs (loop1): Directory bread(block 69) failed [ 299.967982][ T7709] FAT-fs (loop1): Directory bread(block 70) failed [ 299.974896][ T7709] FAT-fs (loop1): Directory bread(block 71) failed [ 300.000568][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 300.019935][ T7728] netlink: 'syz.3.1070': attribute type 15 has an invalid length. [ 300.028330][ T7709] FAT-fs (loop1): Directory bread(block 72) failed [ 300.059279][ T7709] FAT-fs (loop1): Directory bread(block 73) failed [ 300.069714][ T7728] netlink: 'syz.3.1070': attribute type 18 has an invalid length. [ 300.115440][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'. [ 300.164822][ T7731] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1072'. [ 300.379525][ T7736] loop2: detected capacity change from 0 to 2048 [ 300.474141][ T7736] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 300.521023][ T7736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.581757][ T7745] loop4: detected capacity change from 0 to 2048 [ 300.699392][ T7749] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.717610][ T7736] loop_set_status: loop2 () has still dirty pages (nrpages=3) [ 300.793277][ T7753] loop0: detected capacity change from 0 to 16 [ 300.884488][ T6860] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 300.898342][ T7753] /dev/loop0: Can't open blockdev [ 300.922471][ T6860] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 300.977339][ T7752] syz.4.1078 (7752) used greatest stack depth: 18848 bytes left [ 301.246392][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1084'. [ 301.274599][ T7767] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 301.449133][ T3793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.510438][ T7774] loop0: detected capacity change from 0 to 256 [ 301.638251][ T7777] loop3: detected capacity change from 0 to 512 [ 302.368349][ T7758] loop1: detected capacity change from 0 to 32768 [ 302.374608][ T3793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.386118][ T7774] /dev/loop0: Can't open blockdev [ 302.440112][ T7758] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1083 (7758) [ 302.459770][ T7777] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 302.467529][ T7777] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 302.467529][ T7777] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 302.467529][ T7777] [ 302.486197][ T7777] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.543455][ T7777] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 302.547188][ T3793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.552949][ T7777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842801c, mo2=0002] [ 302.571684][ T7777] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 302.581706][ T7777] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 302.590668][ T7777] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,nouser_xattr,jqfmt=vfsv0,barrier=0x000000000000d95b,debug,,errors=continue. Quota mode: none. [ 302.648626][ T7758] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 302.660228][ T7776] EXT4-fs warning (device loop3): dx_probe:892: inode #2: comm syz.3.1087: dx entry: limit 65535 != root limit 120 [ 302.673179][ T7776] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1087: Corrupt directory, running e2fsck is recommended [ 302.690667][ T7776] EXT4-fs warning (device loop3): dx_probe:892: inode #2: comm syz.3.1087: dx entry: limit 65535 != root limit 120 [ 302.703487][ T7776] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1087: Corrupt directory, running e2fsck is recommended [ 302.717858][ T7776] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.1087: path /8/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 302.763191][ T7758] BTRFS info (device loop1): force zlib compression, level 3 [ 302.798661][ T7758] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 302.814808][ T3793] bond0: (slave netdevsim0): Releasing backup interface [ 302.835082][ T7758] BTRFS info (device loop1): use zstd compression, level 3 [ 302.914425][ T7758] BTRFS info (device loop1): enabling ssd optimizations [ 302.936478][ T7758] BTRFS info (device loop1): using free space tree [ 302.967995][ T3793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.968370][ T7758] BTRFS info (device loop1): has skinny extents [ 303.179653][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 303.234815][ T7790] device dummy0 entered promiscuous mode [ 303.351153][ T26] audit: type=1800 audit(1723527059.022:230): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1083" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 303.581963][ T26] audit: type=1804 audit(1723527059.252:231): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1083" name="/newroot/15/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 303.637987][ T7822] loop3: detected capacity change from 0 to 1024 [ 303.803352][ T7822] EXT4-fs (loop3): Unrecognized mount option "smackfstransmute=/dev/snd/seq" or missing value [ 304.415900][ T7831] loop3: detected capacity change from 0 to 128 [ 305.078736][ T7831] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 305.097561][ T3619] Bluetooth: hci0: command 0x0409 tx timeout [ 305.172785][ T7830] IPv6: NLM_F_REPLACE set, but no existing node found! [ 306.079146][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 306.295133][ T7838] loop3: detected capacity change from 0 to 32768 [ 306.301998][ T7854] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 306.401702][ T7838] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1101 (7838) [ 306.481941][ T7838] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 306.501718][ T7838] BTRFS info (device loop3): setting nodatacow, compression disabled [ 306.538003][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.542327][ T7838] BTRFS info (device loop3): enabling auto defrag [ 306.569303][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.587548][ T7838] BTRFS info (device loop3): max_inline at 0 [ 306.598047][ T7792] device bridge_slave_0 entered promiscuous mode [ 306.605967][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 306.614118][ T7838] BTRFS info (device loop3): using free space tree [ 306.652686][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.670759][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.672756][ T7838] BTRFS info (device loop3): has skinny extents [ 306.738012][ T7792] device bridge_slave_1 entered promiscuous mode [ 306.985454][ T7857] loop0: detected capacity change from 0 to 40427 [ 307.033950][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.048053][ T7901] IPVS: length: 4096 != 8 [ 307.057940][ T7854] usb 5-1: unable to read config index 0 descriptor/all [ 307.065751][ T7854] usb 5-1: can't read configurations, error -71 [ 307.158720][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.187884][ T3622] Bluetooth: hci0: command 0x041b tx timeout [ 307.487574][ T7909] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1110'. [ 307.801289][ T7914] loop0: detected capacity change from 0 to 4096 [ 308.042955][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.050692][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.105468][ T7910] device bridge0 entered promiscuous mode [ 308.176026][ T7792] team0: Port device team_slave_0 added [ 308.289131][ T7792] team0: Port device team_slave_1 added [ 308.534784][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.563367][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.646044][ T7930] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 308.657795][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.661873][ T7945] loop4: detected capacity change from 0 to 128 [ 308.725156][ T7942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.768595][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.776062][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.828940][ T7950] loop3: detected capacity change from 0 to 512 [ 308.864103][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.888915][ T3793] device hsr_slave_0 left promiscuous mode [ 308.897891][ T3793] device hsr_slave_1 left promiscuous mode [ 308.904928][ T3793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.921824][ T3793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.932948][ T3793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.978054][ T3793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.002583][ T3793] device bridge_slave_1 left promiscuous mode [ 309.006814][ T7852] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 309.009177][ T3793] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.029335][ T7950] EXT4-fs (loop3): Ignoring removed bh option [ 309.051880][ T3793] device bridge_slave_0 left promiscuous mode [ 309.073391][ T3793] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.250232][ T7950] EXT4-fs error (device loop3): __ext4_iget:4861: inode #12: block 2: comm syz.3.1120: invalid block [ 309.785905][ T7950] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1120: couldn't read orphan inode 12 (err -117) [ 309.805812][ T7854] Bluetooth: hci0: command 0x040f tx timeout [ 309.819200][ T3793] device veth1_macvtap left promiscuous mode [ 309.825371][ T3793] device veth0_macvtap left promiscuous mode [ 309.828193][ T7950] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 309.873737][ T3793] device veth1_vlan left promiscuous mode [ 309.880986][ T26] audit: type=1800 audit(1723527065.552:232): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1120" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 309.914579][ T3793] device veth0_vlan left promiscuous mode [ 310.058782][ T7852] usb 2-1: Using ep0 maxpacket: 32 [ 310.167924][ T7950] syz.3.1120 (7950) used greatest stack depth: 18328 bytes left [ 310.210371][ T7852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.317325][ T3584] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 310.422934][ T13] hid-generic 0000:20000100:0000.000E: unknown main item tag 0x0 [ 310.432259][ T7852] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 310.457116][ T7852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.485148][ T7852] usb 2-1: Product: syz [ 310.496465][ T13] hid-generic 0000:20000100:0000.000E: hidraw0: HID v200003.c0 Device [syz0] on syz0 [ 310.512655][ T7852] usb 2-1: Manufacturer: syz [ 310.521141][ T7852] usb 2-1: SerialNumber: syz [ 310.539139][ T7852] usb 2-1: config 0 descriptor?? [ 310.608505][ T7852] pvrusb2: Hardware description: Terratec Grabster AV400 [ 310.616112][ T7852] pvrusb2: ********** [ 310.626166][ T7852] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 310.643516][ T7852] pvrusb2: Important functionality might not be entirely working. [ 310.656062][ T7852] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 310.676271][ T7852] pvrusb2: ********** [ 310.819077][ T2149] pvrusb2: Invalid write control endpoint [ 310.966075][ T7967] loop3: detected capacity change from 0 to 32768 [ 310.981563][ T3793] team0 (unregistering): Port device team_slave_1 removed [ 311.020824][ T2149] pvrusb2: Invalid write control endpoint [ 311.042320][ T3793] team0 (unregistering): Port device team_slave_0 removed [ 311.051506][ T2149] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 311.074046][ T2149] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 311.088036][ T3793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.117428][ T2149] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 311.131745][ T3793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.140658][ T2149] pvrusb2: Device being rendered inoperable [ 311.160820][ T2149] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 311.178300][ T2149] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 311.287179][ T2149] pvrusb2: Attached sub-driver cx25840 [ 311.329526][ T2149] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 311.355165][ T2149] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 311.404047][ T7973] loop0: detected capacity change from 0 to 4096 [ 311.516810][ T7970] loop4: detected capacity change from 0 to 40427 [ 311.542483][ T3793] bond0 (unregistering): Released all slaves [ 311.598956][ T7970] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 311.611443][ T7970] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 311.665692][ T7970] F2FS-fs (loop4): Found nat_bits in checkpoint [ 311.729229][ T7852] usb 2-1: USB disconnect, device number 13 [ 311.827191][ T7854] Bluetooth: hci0: command 0x0419 tx timeout [ 311.879162][ T7792] device hsr_slave_0 entered promiscuous mode [ 311.910524][ T7792] device hsr_slave_1 entered promiscuous mode [ 311.937451][ T7970] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 311.944638][ T7970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 311.974667][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.007604][ T7792] Cannot create hsr debugfs directory [ 312.154768][ T7991] attempt to access beyond end of device [ 312.154768][ T7991] loop4: rw=2049, want=45104, limit=40427 [ 313.514259][ T7977] loop0: detected capacity change from 0 to 32768 [ 313.598227][ T7977] XFS: attr2 mount option is deprecated. [ 313.604017][ T7977] XFS: ikeep mount option is deprecated. [ 313.647940][ T7977] XFS: noikeep mount option is deprecated. [ 313.707593][ T7977] /dev/loop0: Can't open blockdev [ 313.763051][ T8015] loop3: detected capacity change from 0 to 512 [ 313.783223][ T8017] netlink: 'syz.4.1130': attribute type 2 has an invalid length. [ 313.884222][ T8015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 313.971544][ T8015] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 313.988355][ T8015] EXT4-fs (loop3): 1 truncate cleaned up [ 313.994603][ T8015] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 317.030279][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.044244][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.381868][ T7792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.407639][ T6245] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.550403][ T7792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.600363][ T7792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.665779][ T7792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.771509][ T8043] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 319.032492][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.113326][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.130135][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.180966][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.236777][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.287203][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.338113][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.345477][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.518802][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.537789][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.568436][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.623894][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.631108][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.663297][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.698749][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.738942][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.760642][ T8065] loop3: detected capacity change from 0 to 1024 [ 319.772414][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.798977][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.819096][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.838714][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.859885][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.902338][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.987985][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.049992][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.068517][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.114646][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.314503][ T1074] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 320.414096][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.422898][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.463311][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.540751][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.558773][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.619529][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.637859][ T1074] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 320.659863][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.679321][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.700982][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.739229][ T7792] device veth0_vlan entered promiscuous mode [ 320.767697][ T1074] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 320.797211][ T7792] device veth1_vlan entered promiscuous mode [ 320.873313][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 320.897688][ T1074] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 320.963463][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.975727][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 321.001241][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.014149][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.027652][ T1074] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 321.028942][ T7792] device veth0_macvtap entered promiscuous mode [ 321.062839][ T7792] device veth1_macvtap entered promiscuous mode [ 321.099607][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.115245][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.146121][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.203478][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.256859][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.299506][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.347598][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.417943][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.479764][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.538354][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.593482][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.612420][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.674925][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.592698][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.665024][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.770280][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.858678][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.914766][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.977079][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.037096][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.153724][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.228212][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.311327][ T7792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.417882][ T7792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.426717][ T7792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.501708][ T8129] loop4: detected capacity change from 0 to 128 [ 323.551478][ T7792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.622438][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.834872][ T1074] usb 5-1: unable to read config index 3 descriptor/all [ 323.861239][ T1074] usb 5-1: can't read configurations, error -71 [ 323.934963][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.654075][ T3614] Bluetooth: hci1: command 0x0406 tx timeout [ 325.132147][ T8144] kAFS: unparsable volume name [ 326.517568][ T8147] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 2 (only 8 groups) [ 328.596147][ T3783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.817513][ T3783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.885570][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.889272][ T8172] loop1: detected capacity change from 0 to 64 [ 328.900693][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 328.908869][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.951855][ T8172] hfs: type requires a 4 character value [ 329.007563][ T8172] hfs: unable to parse mount options [ 329.080132][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 329.195339][ T8181] vivid-006: disconnect [ 329.202325][ T8177] vivid-006: reconnect [ 329.310807][ T8188] ptrace attach of "./syz-executor exec"[7792] was attempted by ""[8188] [ 335.027483][ T6245] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 335.397864][ T6245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.408325][ T23] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 335.515847][ T8227] loop2: detected capacity change from 0 to 512 [ 335.578508][ T8227] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 335.579543][ T6245] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 335.624681][ T6245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.655211][ T6245] usb 4-1: Product: syz [ 335.685664][ T6245] usb 4-1: Manufacturer: syz [ 335.691034][ T6245] usb 4-1: SerialNumber: syz [ 335.703265][ T6245] usb 4-1: config 0 descriptor?? [ 335.714502][ T8216] loop1: detected capacity change from 0 to 32768 [ 335.729725][ T8227] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1175: invalid indirect mapped block 512 (level 0) [ 335.751196][ T8227] EXT4-fs (loop2): Remounting filesystem read-only [ 335.765999][ T6245] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 335.773942][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.790460][ T23] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 335.801970][ T8227] EXT4-fs (loop2): 1 orphan inode deleted [ 335.807959][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.816139][ T8227] EXT4-fs (loop2): 1 truncate cleaned up [ 335.825183][ T23] usb 5-1: config 0 descriptor?? [ 335.831424][ T8227] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x0000000000000032,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 335.858928][ T3783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.902526][ T23] usb 5-1: bad CDC descriptors [ 335.909274][ T23] usb 5-1: bad CDC descriptors [ 336.003865][ T1303] usb 4-1: USB disconnect, device number 12 [ 336.014414][ T7792] EXT4-fs error (device loop2): ext4_map_blocks:601: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 336.043537][ T7792] EXT4-fs (loop2): Remounting filesystem read-only [ 336.050551][ T7792] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 336.104884][ T13] usb 5-1: USB disconnect, device number 24 [ 336.165486][ T3783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.299640][ T26] audit: type=1326 audit(1723527091.972:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.1.1178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbda280d9f9 code=0x0 [ 336.332436][ T3783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.430589][ T3783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.443607][ T8243] loop1: detected capacity change from 0 to 2048 [ 336.450624][ T8217] chnl_net:caif_netlink_parms(): no params data found [ 336.506356][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.513696][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.522465][ T8217] device bridge_slave_0 entered promiscuous mode [ 336.531744][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.552847][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.562792][ T8217] device bridge_slave_1 entered promiscuous mode [ 336.593789][ T8243] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.879404][ T8217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.889314][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1179'. [ 336.967170][ T8217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.991131][ T8259] loop4: detected capacity change from 0 to 16 [ 337.009840][ T26] audit: type=1326 audit(1723527092.682:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.3.1179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57b4c0f9f9 code=0x0 [ 337.032400][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.082924][ T8259] erofs: (device loop4): mounted with root inode @ nid 36. [ 337.172650][ T8217] team0: Port device team_slave_0 added [ 337.237193][ T8217] team0: Port device team_slave_1 added [ 337.265685][ T3783] tipc: Left network mode [ 337.267804][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 337.678939][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.686723][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.689892][ T8274] loop3: detected capacity change from 0 to 128 [ 337.713578][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.744851][ T8243] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 337.749302][ T8217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.779025][ T8243] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1628 with error 28 [ 337.801426][ T8243] EXT4-fs (loop1): This should not happen!! Data will be lost [ 337.801426][ T8243] [ 337.813411][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.821749][ T8274] ufs: You didn't specify the type of your ufs filesystem [ 337.821749][ T8274] [ 337.821749][ T8274] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 337.821749][ T8274] [ 337.821749][ T8274] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 337.835700][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.854145][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.878725][ T8243] EXT4-fs (loop1): Total free blocks count 0 [ 337.901802][ T8217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.914715][ T8243] EXT4-fs (loop1): Free/Dirty block details [ 337.928291][ T8243] EXT4-fs (loop1): free_blocks=2415919104 [ 337.956751][ T8243] EXT4-fs (loop1): dirty_blocks=1664 [ 337.962724][ T8243] EXT4-fs (loop1): Block reservation details [ 337.969867][ T8243] EXT4-fs (loop1): i_reserved_data_blocks=102 [ 338.012094][ T8274] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 338.039475][ T8217] device hsr_slave_0 entered promiscuous mode [ 338.055342][ T8217] device hsr_slave_1 entered promiscuous mode [ 338.072983][ T8217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.088951][ T8217] Cannot create hsr debugfs directory [ 338.256515][ T1243] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 32 with error 28 [ 338.308720][ T1243] EXT4-fs (loop1): This should not happen!! Data will be lost [ 338.308720][ T1243] [ 338.426617][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 338.542108][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 338.748157][ T8305] input: syz1 as /devices/virtual/input/input16 [ 339.010166][ T8262] chnl_net:caif_netlink_parms(): no params data found [ 339.343155][ T3370] Bluetooth: hci5: command 0x041b tx timeout [ 339.491883][ T3783] device hsr_slave_0 left promiscuous mode [ 339.513819][ T8326] loop4: detected capacity change from 0 to 4096 [ 339.528327][ T3783] device hsr_slave_1 left promiscuous mode [ 339.568142][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.601712][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.639659][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.667646][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.700522][ T3783] device bridge_slave_1 left promiscuous mode [ 339.728077][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.763653][ T3783] device bridge_slave_0 left promiscuous mode [ 339.783016][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.833362][ T3783] device veth1_macvtap left promiscuous mode [ 339.854666][ T3783] device veth0_macvtap left promiscuous mode [ 339.891616][ T3783] device veth1_vlan left promiscuous mode [ 339.927744][ T3783] device veth0_vlan left promiscuous mode [ 340.369127][ T3783] team0 (unregistering): Port device team_slave_1 removed [ 340.394470][ T3783] team0 (unregistering): Port device team_slave_0 removed [ 340.412057][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.431484][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.552218][ T3783] bond0 (unregistering): Released all slaves [ 341.109070][ T1074] Bluetooth: hci0: command 0x0409 tx timeout [ 341.417765][ T6249] Bluetooth: hci5: command 0x040f tx timeout [ 341.510171][ T8349] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1198'. [ 341.530014][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.537200][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.597571][ T8262] device bridge_slave_0 entered promiscuous mode [ 341.620157][ T8262] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.656672][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.687142][ T8262] device bridge_slave_1 entered promiscuous mode [ 341.904905][ T8262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.937792][ T8217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.004476][ T8262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.056432][ T8217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.088048][ T8370] loop3: detected capacity change from 0 to 1024 [ 342.152775][ T8217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.274391][ T8217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.332199][ T8262] team0: Port device team_slave_0 added [ 342.382994][ T8370] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 342.413187][ T8262] team0: Port device team_slave_1 added [ 342.457997][ T8370] System zones: 0-1, 3-12 [ 342.499108][ T8370] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 342.801542][ T8394] loop1: detected capacity change from 0 to 1764 [ 342.813941][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.821707][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.838085][ T26] audit: type=1804 audit(1723527098.502:235): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1203" name="/newroot/41/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 342.848729][ T8262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.885985][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.894183][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.995398][ T8262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.177764][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 343.217453][ T6250] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 343.227946][ T8399] device syzkaller0 entered promiscuous mode [ 343.300003][ T8262] device hsr_slave_0 entered promiscuous mode [ 343.319013][ T8262] device hsr_slave_1 entered promiscuous mode [ 343.326087][ T8262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.335965][ T8262] Cannot create hsr debugfs directory [ 343.457572][ T6250] usb 5-1: Using ep0 maxpacket: 8 [ 343.491414][ T8217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.500572][ T6245] Bluetooth: hci5: command 0x0419 tx timeout [ 343.582559][ T6250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.624160][ T8217] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.647621][ T6250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.707621][ T6250] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 343.751210][ T6250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.799094][ T6250] usb 5-1: config 0 descriptor?? [ 343.850426][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.878267][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.915125][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.935357][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.961936][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.969118][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.005983][ T8431] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 344.008251][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.058489][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.066922][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.074080][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.107995][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.117124][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.135038][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.153889][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.172587][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.202346][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.243983][ T8262] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.319856][ T6250] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 344.336571][ T8217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.356664][ T6250] elo 0003:04E7:0009.000F: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 344.375107][ T8217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.419910][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.434157][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.463407][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.490325][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.502705][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.514173][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.545357][ T8262] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.587935][ T6249] usb 5-1: USB disconnect, device number 25 [ 344.599052][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.654815][ T8262] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.776784][ T8262] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.926261][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.934599][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.977112][ T8217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.031289][ T8262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.054267][ T8262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.064566][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.078544][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.114516][ T8262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.178848][ T8262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.213796][ T8217] device veth0_vlan entered promiscuous mode [ 345.257967][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 345.329865][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.339227][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.363990][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.382597][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.429317][ T8217] device veth1_vlan entered promiscuous mode [ 345.450613][ T8454] loop4: detected capacity change from 0 to 4096 [ 345.525468][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.538672][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.558951][ T8458] loop1: detected capacity change from 0 to 4096 [ 345.567725][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.576502][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.602766][ T8217] device veth0_macvtap entered promiscuous mode [ 345.628625][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.649364][ T8217] device veth1_macvtap entered promiscuous mode [ 345.784992][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.822204][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.871644][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.906525][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.924576][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.936192][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.946094][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.957483][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.973263][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.989088][ T8262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.003459][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.013790][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.035993][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.054951][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.104609][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.137133][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.141170][ T8460] loop4: detected capacity change from 0 to 1024 [ 346.163204][ T8462] loop1: detected capacity change from 0 to 1024 [ 346.170723][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.171676][ T8452] loop3: detected capacity change from 0 to 32768 [ 346.182629][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.201232][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.227051][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.241856][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.263995][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.285984][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.336208][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.388054][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.398611][ T8217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.421015][ T8217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.469567][ T8217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.494885][ T8217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.558603][ T8262] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.611501][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.625596][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.678173][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.685608][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.733860][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.771951][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.801569][ T8471] loop3: detected capacity change from 0 to 190 [ 346.844897][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.852281][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.916927][ T8471] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 346.949411][ T8471] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 347.012049][ T8471] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 347.166227][ T8481] CUSE: unknown device info "" [ 347.186694][ T8481] CUSE: zero length info key specified [ 347.198094][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.209212][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.230819][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.251427][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.330624][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.370646][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.393633][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.415757][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.458789][ T6245] Bluetooth: hci0: command 0x0419 tx timeout [ 347.509392][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.509490][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.597894][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.618627][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.658258][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.675433][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.707072][ T8496] loop3: detected capacity change from 0 to 128 [ 347.721502][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.765100][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.775502][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.823914][ T8496] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 347.870660][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.893832][ T8496] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 348.031802][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.040056][ T8496] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.1240: Block bitmap for bg 0 marked uninitialized [ 348.084152][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.098769][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.223352][ T8262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.397672][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.398391][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.426636][ T8513] loop3: detected capacity change from 0 to 1764 [ 348.437265][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.438361][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.439459][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.440095][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.444523][ T8262] device veth0_vlan entered promiscuous mode [ 348.472634][ T8262] device veth1_vlan entered promiscuous mode [ 348.578125][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 348.579097][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 348.579755][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.580371][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.634284][ T8262] device veth0_macvtap entered promiscuous mode [ 348.643441][ T8262] device veth1_macvtap entered promiscuous mode [ 348.805248][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.927502][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.951964][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.963069][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.973646][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.998415][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.021096][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.051490][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.088051][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.113940][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.127670][ T8530] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1249'. [ 349.145155][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.189735][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.206452][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.266300][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.350800][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.362861][ T8512] loop1: detected capacity change from 0 to 32768 [ 349.392831][ T8522] loop4: detected capacity change from 0 to 2048 [ 349.414512][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.443045][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.457575][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.472317][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.485365][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.502743][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.517648][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.523078][ T8533] loop0: detected capacity change from 0 to 8192 [ 349.540562][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.552500][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.564048][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.580776][ T8522] UDF-fs: bad mount option "gid=L>`" or missing value [ 349.610207][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.633849][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.647588][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.670288][ T8262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.680695][ T8262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.692694][ T8262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.702806][ T8262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.745135][ T8512] XFS (loop1): Mounting V5 Filesystem [ 350.176168][ T3783] device hsr_slave_0 left promiscuous mode [ 350.198115][ T8512] XFS (loop1): Ending clean mount [ 350.204348][ T3783] device hsr_slave_1 left promiscuous mode [ 350.214338][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.230092][ T8512] XFS (loop1): Quotacheck needed: Please wait. [ 350.239545][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.291203][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.320244][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.371956][ T3783] device bridge_slave_1 left promiscuous mode [ 350.420383][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.454719][ T3783] device bridge_slave_0 left promiscuous mode [ 350.481706][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.493902][ T8512] XFS (loop1): Quotacheck: Done. [ 350.565917][ T3783] device veth1_macvtap left promiscuous mode [ 350.588734][ T3783] device veth0_macvtap left promiscuous mode [ 350.595213][ T3783] device veth1_vlan left promiscuous mode [ 350.607841][ T3783] device veth0_vlan left promiscuous mode [ 350.703105][ T7233] XFS (loop1): Unmounting Filesystem [ 351.606156][ T3783] team0 (unregistering): Port device team_slave_1 removed [ 351.641411][ T3783] team0 (unregistering): Port device team_slave_0 removed [ 351.681962][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.705668][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.946405][ T3783] bond0 (unregistering): Released all slaves [ 352.139445][ T8564] loop1: detected capacity change from 0 to 64 [ 352.281007][ T3793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.321324][ T26] audit: type=1800 audit(1723527107.992:236): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1256" name="file0" dev="loop1" ino=21 res=0 errno=0 [ 352.407950][ T3793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.435081][ T3763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.458042][ T8571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.492245][ T3763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.606006][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.645502][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.827690][ T8591] netlink: 'syz.4.1264': attribute type 15 has an invalid length. [ 352.874162][ T8591] netlink: 'syz.4.1264': attribute type 7 has an invalid length. [ 352.904002][ T8592] fuse: Unknown parameter '0x0000000000000008' [ 352.919519][ T8590] loop1: detected capacity change from 0 to 512 [ 353.081043][ T8601] loop2: detected capacity change from 0 to 1024 [ 353.091034][ T8590] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.136696][ T8590] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 353.311313][ T8601] loop2: detected capacity change from 0 to 256 [ 353.426956][ T8601] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 353.436355][ T8590] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 353.487947][ T8590] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 353.517003][ T8620] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 353.543174][ T8590] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.1266: Failed to acquire dquot type 0 [ 353.719321][ T8621] loop0: detected capacity change from 0 to 128 [ 353.788763][ T8623] loop4: detected capacity change from 0 to 64 [ 354.382210][ T8638] loop3: detected capacity change from 0 to 256 [ 356.829207][ T8648] loop0: detected capacity change from 0 to 512 [ 356.874518][ T8636] loop4: detected capacity change from 0 to 4096 [ 356.939098][ T8648] overlayfs: overlapping lowerdir path [ 357.160544][ T6250] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 357.417517][ T6250] usb 3-1: Using ep0 maxpacket: 16 [ 357.539234][ T6250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.583971][ T6250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.620627][ T6250] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 357.636033][ T6250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.693782][ T6250] usb 3-1: config 0 descriptor?? [ 357.775099][ T8672] loop3: detected capacity change from 0 to 128 [ 357.785999][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1295'. [ 357.901531][ T8672] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 357.966893][ T8672] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 358.199345][ T6250] betop 0003:11C2:2208.0010: unknown main item tag 0x0 [ 358.212714][ T6250] betop 0003:11C2:2208.0010: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.2-1/input0 [ 358.225510][ T6250] betop 0003:11C2:2208.0010: no inputs found [ 358.619742][ T6250] usb 3-1: USB disconnect, device number 16 [ 358.873007][ T8694] program syz.3.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.984492][ T8694] loop3: detected capacity change from 0 to 512 [ 359.081600][ T8694] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 359.175867][ T8694] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,auto_da_alloc=0x0000000000000000,grpquota,inode_readahead_blks=0x0000000000000000,errors=continue,,errors=continue. Quota mode: writeback. [ 359.250886][ T8705] loop0: detected capacity change from 0 to 47 [ 361.062261][ T26] audit: type=1326 audit(1723527116.732:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f845422a9f9 code=0x0 [ 361.112416][ T8732] loop3: detected capacity change from 0 to 512 [ 361.197465][ T8734] loop1: detected capacity change from 0 to 4096 [ 361.214786][ T26] audit: type=1326 audit(1723527116.882:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845422a9f9 code=0x7ffc0000 [ 361.346386][ T8732] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 361.427683][ T8732] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038 (0x7fffffff) [ 361.481146][ T26] audit: type=1326 audit(1723527116.882:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845422a9f9 code=0x7ffc0000 [ 361.505999][ T8740] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 361.572393][ T26] audit: type=1326 audit(1723527116.912:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f845422a9f9 code=0x7ffc0000 [ 361.611112][ T8739] cifs: Unknown parameter 'mode' [ 361.684334][ T26] audit: type=1326 audit(1723527116.912:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845422a9f9 code=0x7ffc0000 [ 361.719257][ T8742] EXT4-fs error (device loop3): ext4_empty_dir:3108: inode #12: block 31: comm syz.3.1320: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 361.837076][ T26] audit: type=1326 audit(1723527116.912:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845422a9f9 code=0x7ffc0000 [ 361.898067][ T8742] EXT4-fs (loop3): Remounting filesystem read-only [ 361.930414][ T8742] EXT4-fs warning (device loop3): ext4_empty_dir:3110: inode #12: comm syz.3.1320: directory missing '..' [ 361.956375][ T8745] loop0: detected capacity change from 0 to 2048 [ 361.964551][ T26] audit: type=1326 audit(1723527116.912:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f845422a9f9 code=0x7ffc0000 [ 362.060244][ T26] audit: type=1326 audit(1723527116.912:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845422a9f9 code=0x7ffc0000 [ 362.101340][ T8748] loop4: detected capacity change from 0 to 1024 [ 362.202392][ T26] audit: type=1326 audit(1723527116.912:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845422a9f9 code=0x7ffc0000 [ 362.286635][ T8748] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 362.317635][ T26] audit: type=1326 audit(1723527116.912:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f845422a9f9 code=0x7ffc0000 [ 362.913301][ T5980] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 362.991376][ T5980] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 363.363463][ T8774] loop2: detected capacity change from 0 to 32768 [ 363.433876][ T8774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1334 (8774) [ 363.490071][ T8774] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 363.520309][ T8774] BTRFS info (device loop2): using free space tree [ 363.570843][ T3783] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.597852][ T8774] BTRFS info (device loop2): has skinny extents [ 363.691192][ T3783] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.812805][ T3783] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.917652][ T8774] BTRFS info (device loop2): enabling ssd optimizations [ 364.040338][ T3783] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.094559][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'. [ 364.997500][ T4848] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 365.233597][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1349'. [ 365.382471][ T8813] chnl_net:caif_netlink_parms(): no params data found [ 365.397743][ T4848] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 365.407097][ T4848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.453585][ T4848] usb 2-1: config 0 descriptor?? [ 365.571799][ T8853] program syz.3.1355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.599832][ T8856] loop0: detected capacity change from 0 to 1024 [ 365.672225][ T8856] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 365.698955][ T8856] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 365.720673][ T8856] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 365.741866][ T4848] kaweth 2-1:0.0: Firmware present in device. [ 365.788546][ T8856] journal_init_common: Cannot get buffer for journal superblock [ 365.805186][ T8856] EXT4-fs (loop0): Could not load journal inode [ 365.849400][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.858952][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.873730][ T8813] device bridge_slave_0 entered promiscuous mode [ 365.921737][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.941134][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.958114][ T4848] kaweth 2-1:0.0: Statistics collection: 0 [ 365.959228][ T8813] device bridge_slave_1 entered promiscuous mode [ 365.964074][ T4848] kaweth 2-1:0.0: Multicast filter limit: 0 [ 365.964099][ T4848] kaweth 2-1:0.0: MTU: 0 [ 365.964115][ T4848] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 366.273223][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.300989][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.378677][ T6250] Bluetooth: hci0: command 0x0405 tx timeout [ 366.433949][ T8813] team0: Port device team_slave_0 added [ 366.491926][ T8813] team0: Port device team_slave_1 added [ 366.537662][ T6250] Bluetooth: hci1: command 0x0409 tx timeout [ 366.567696][ T3783] device hsr_slave_0 left promiscuous mode [ 366.582133][ T3783] device hsr_slave_1 left promiscuous mode [ 366.589391][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.597185][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.598104][ T4848] kaweth 2-1:0.0: Error setting receive filter [ 366.612346][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.635542][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.635574][ T4848] kaweth: probe of 2-1:0.0 failed with error -5 [ 366.660330][ T3783] device bridge_slave_1 left promiscuous mode [ 366.668360][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.691784][ T3783] device bridge_slave_0 left promiscuous mode [ 366.702951][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.703992][ T4848] usb 2-1: USB disconnect, device number 14 [ 366.740108][ T3783] device dummy0 left promiscuous mode [ 366.772578][ T3783] device veth1_macvtap left promiscuous mode [ 366.807552][ T3783] device veth0_macvtap left promiscuous mode [ 366.833366][ T3783] device veth1_vlan left promiscuous mode [ 366.847578][ T3783] device veth0_vlan left promiscuous mode [ 366.855123][ T8890] loop3: detected capacity change from 0 to 256 [ 366.950899][ T8890] FAT-fs (loop3): Directory bread(block 64) failed [ 366.960061][ T8890] FAT-fs (loop3): Directory bread(block 65) failed [ 366.966908][ T8890] FAT-fs (loop3): Directory bread(block 66) failed [ 366.975347][ T8890] FAT-fs (loop3): Directory bread(block 67) failed [ 366.984056][ T8890] FAT-fs (loop3): Directory bread(block 68) failed [ 366.991506][ T8890] FAT-fs (loop3): Directory bread(block 69) failed [ 366.998675][ T8890] FAT-fs (loop3): Directory bread(block 70) failed [ 367.005682][ T8890] FAT-fs (loop3): Directory bread(block 71) failed [ 367.012988][ T8890] FAT-fs (loop3): Directory bread(block 72) failed [ 367.020787][ T8890] FAT-fs (loop3): Directory bread(block 73) failed [ 367.279118][ T8896] loop1: detected capacity change from 0 to 64 [ 367.388100][ T3783] team0 (unregistering): Port device team_slave_1 removed [ 367.445273][ T3783] team0 (unregistering): Port device team_slave_0 removed [ 367.486433][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.513220][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.761149][ T8894] loop3: detected capacity change from 0 to 32768 [ 367.784173][ T3783] bond0 (unregistering): Released all slaves [ 367.830033][ T8894] XFS (loop3): Mounting V5 Filesystem [ 367.928017][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.935038][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.967490][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.021017][ T8894] XFS (loop3): Ending clean mount [ 368.100315][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.115698][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.125415][ T8894] XFS (loop3): Quotacheck needed: Please wait. [ 368.198507][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.262635][ T8894] XFS (loop3): Quotacheck: Done. [ 368.399896][ T7375] XFS (loop3): Unmounting Filesystem [ 368.435197][ T8924] loop1: detected capacity change from 0 to 164 [ 368.523833][ T8813] device hsr_slave_0 entered promiscuous mode [ 368.533240][ T8813] device hsr_slave_1 entered promiscuous mode [ 368.611232][ T8813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.630745][ T8813] Cannot create hsr debugfs directory [ 368.660113][ T6250] Bluetooth: hci1: command 0x041b tx timeout [ 368.896398][ T8935] loop1: detected capacity change from 0 to 512 [ 369.024596][ T8935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 369.103578][ T8935] EXT4-fs (loop1): 1 truncate cleaned up [ 369.197454][ T8935] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 369.408399][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 369.408415][ T26] audit: type=1800 audit(1723527125.082:296): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1377" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 369.437594][ T6250] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 369.574816][ T8955] ptrace attach of "./syz-executor exec"[8217] was attempted by "./syz-executor exec"[8955] [ 369.827761][ T6250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.854196][ T6250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.883515][ T8813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.912116][ T6250] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 369.945665][ T8813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.947247][ T6250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.978803][ T8813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.013088][ T6250] usb 4-1: config 0 descriptor?? [ 370.025092][ T8813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.326271][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.400794][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.409703][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.443552][ T8813] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.486196][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.500948][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.530687][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.537854][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.545506][ T6250] hid-led 0003:1D34:000A.0011: unknown main item tag 0x0 [ 370.545543][ T6250] hid-led 0003:1D34:000A.0011: unbalanced delimiter at end of report description [ 370.626365][ T6250] hid-led: probe of 0003:1D34:000A.0011 failed with error -22 [ 370.638685][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.648727][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.684745][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.699754][ T6250] Bluetooth: hci1: command 0x040f tx timeout [ 370.726638][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.734106][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.750285][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.768675][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.789275][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.809671][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.853212][ T4196] usb 4-1: USB disconnect, device number 13 [ 370.916778][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.941097][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.975365][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.988075][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.997013][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.181668][ T8813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.214601][ T8813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.246265][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.260481][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.408570][ T9000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.777036][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.797122][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.811421][ T8813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.897644][ T4849] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 372.058349][ T4848] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 372.157632][ T4849] usb 2-1: Using ep0 maxpacket: 8 [ 372.258417][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.277214][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.287838][ T4849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.307423][ T4849] usb 2-1: config 0 has no interfaces? [ 372.323320][ T4849] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 372.342379][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.358610][ T4849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.360352][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.389025][ T4849] usb 2-1: config 0 descriptor?? [ 372.419443][ T8813] device veth0_vlan entered promiscuous mode [ 372.455697][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.466934][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.478430][ T4848] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 372.494498][ T8813] device veth1_vlan entered promiscuous mode [ 372.509545][ T4848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.533496][ T4848] usb 4-1: config 0 descriptor?? [ 372.547206][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.563744][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.582538][ T8813] device veth0_macvtap entered promiscuous mode [ 372.605079][ T8813] device veth1_macvtap entered promiscuous mode [ 372.635167][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.652076][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.663795][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.681084][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.695209][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.713349][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.725208][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.741356][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.758546][ T4926] usb 2-1: USB disconnect, device number 15 [ 372.775968][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.807608][ T4848] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 372.815560][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.820926][ T4848] hackrf 4-1:0.0: Could not detect board [ 372.826331][ T6250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.832574][ T4848] hackrf: probe of 4-1:0.0 failed with error -71 [ 372.845874][ T6250] Bluetooth: hci1: command 0x0419 tx timeout [ 372.850796][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.872197][ T4848] usb 4-1: USB disconnect, device number 14 [ 372.878657][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.911365][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.924641][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.935791][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.947392][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.959008][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.969928][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.982916][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.991524][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1393'. [ 373.011450][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 373.031379][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.079450][ T8813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.110544][ T8813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.120427][ T8813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.134547][ T8813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.141014][ T9036] loop0: detected capacity change from 0 to 512 [ 373.289933][ T3763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.313333][ T3763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.396004][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.426122][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.451940][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 373.486698][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.515843][ T9038] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1395'. [ 373.649015][ T9045] loop3: detected capacity change from 0 to 512 [ 373.752814][ T9045] EXT4-fs (loop3): Ignoring removed nobh option [ 373.767848][ T9045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 373.830021][ T9045] EXT4-fs (loop3): 1 truncate cleaned up [ 373.836029][ T9045] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,nogrpid,acl,,errors=continue. Quota mode: none. [ 374.136698][ T9046] loop4: detected capacity change from 0 to 32768 [ 374.196062][ T9056] loop3: detected capacity change from 0 to 512 [ 374.305961][ T9056] EXT4-fs (loop3): Unrecognized mount option "appraise" or missing value [ 374.326111][ T9040] loop1: detected capacity change from 0 to 40427 [ 374.342085][ T9046] XFS (loop4): Mounting V5 Filesystem [ 374.418361][ T9040] F2FS-fs (loop1): invalid crc value [ 374.456322][ T9056] syz.3.1400 (9056): attempted to duplicate a private mapping with mremap. This is not supported. [ 374.505704][ T9046] XFS (loop4): Ending clean mount [ 374.520211][ T9046] XFS (loop4): Quotacheck needed: Please wait. [ 374.601084][ T9040] F2FS-fs (loop1): Found nat_bits in checkpoint [ 374.642527][ T6247] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 374.688617][ T9046] XFS (loop4): Quotacheck: Done. [ 374.791001][ T9040] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 374.806491][ T8813] XFS (loop4): Unmounting Filesystem [ 374.826282][ T9040] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 374.897505][ T6247] usb 3-1: Using ep0 maxpacket: 32 [ 374.943842][ T9040] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 375.017784][ T6247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.033848][ T6247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.061515][ T6247] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 375.072469][ T6247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.083329][ T6247] usb 3-1: config 0 descriptor?? [ 375.133555][ T6247] hub 3-1:0.0: USB hub found [ 375.361159][ T9060] ptrace attach of "./syz-executor exec"[8262] was attempted by "./syz-executor exec"[9060] [ 375.774248][ T9092] loop4: detected capacity change from 0 to 2048 [ 375.885669][ T9092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.089178][ T9095] /dev/loop0: Can't open blockdev [ 376.191253][ T9097] loop1: detected capacity change from 0 to 256 [ 376.204730][ T9099] loop0: detected capacity change from 0 to 1024 [ 376.228845][ T6245] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 376.727570][ T6245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.750464][ T6245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.832430][ T6245] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 376.865942][ T6245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.934406][ T6245] usb 5-1: config 0 descriptor?? [ 377.327722][ T6247] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 377.437695][ T6247] usbhid 3-1:0.0: can't add hid device: -71 [ 377.443741][ T6247] usbhid: probe of 3-1:0.0 failed with error -71 [ 377.504009][ T6245] hid-rmi 0003:06CB:81A7.0012: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 377.532693][ T9123] loop2: detected capacity change from 0 to 4096 [ 377.538593][ T6247] usb 3-1: USB disconnect, device number 17 [ 377.649160][ T9123] ntfs3: loop2: Failed to load $MFT. [ 377.774783][ T4848] usb 5-1: USB disconnect, device number 26 [ 377.962101][ T9138] loop3: detected capacity change from 0 to 512 [ 378.055498][ T9138] EXT4-fs (loop3): Invalid journal IO priority (must be 0-7) [ 378.107607][ T6245] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 378.248482][ T9146] loop3: detected capacity change from 0 to 2048 [ 378.286012][ T9149] loop1: detected capacity change from 0 to 128 [ 378.413119][ T9150] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.433417][ T9149] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 378.468822][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.475457][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.487776][ T6245] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 378.489541][ T9149] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038 (0x7fffffff) [ 378.507218][ T6245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.510337][ T6245] usb 3-1: config 0 descriptor?? [ 378.803293][ T6245] kaweth 3-1:0.0: Firmware present in device. [ 378.867964][ T9156] loop4: detected capacity change from 0 to 32768 [ 378.946109][ T9156] XFS (loop4): Mounting V5 Filesystem [ 378.951936][ T4848] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 379.017945][ T6245] kaweth 3-1:0.0: Statistics collection: 0 [ 379.027486][ T6245] kaweth 3-1:0.0: Multicast filter limit: 0 [ 379.027516][ T9156] XFS (loop4): Ending clean mount [ 379.033568][ T6245] kaweth 3-1:0.0: MTU: 0 [ 379.043705][ T6245] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 379.050624][ T9156] XFS (loop4): Quotacheck needed: Please wait. [ 379.077900][ T3622] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 379.110883][ T9156] XFS (loop4): Quotacheck: Done. [ 379.217461][ T4848] usb 4-1: Using ep0 maxpacket: 8 [ 379.217531][ T8813] XFS (loop4): Unmounting Filesystem [ 379.360398][ T4848] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 379.368839][ T3622] usb 2-1: Using ep0 maxpacket: 32 [ 379.374318][ T4848] usb 4-1: config 0 has no interface number 0 [ 379.381566][ T4848] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 379.391016][ T4848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.401723][ T4848] usb 4-1: config 0 descriptor?? [ 379.487648][ T3622] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 379.499832][ T3622] usb 2-1: config 0 has no interface number 1 [ 379.603215][ T9172] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 379.622314][ T4848] viperboard 4-1:0.143: version 0.00 found at bus 004 address 015 [ 379.670988][ T9160] ALSA: seq fatal error: cannot create timer (-22) [ 379.677651][ T6245] kaweth 3-1:0.0: Error setting receive filter [ 379.680691][ T4848] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 379.693101][ T3622] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 379.695550][ T6245] kaweth: probe of 3-1:0.0 failed with error -5 [ 379.709570][ T3622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.718255][ T4848] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 379.744307][ T3622] usb 2-1: Product: syz [ 379.754856][ T9160] ALSA: seq fatal error: cannot create timer (-22) [ 379.763053][ T3622] usb 2-1: Manufacturer: syz [ 379.773998][ T3622] usb 2-1: SerialNumber: syz [ 379.781636][ T6245] usb 3-1: USB disconnect, device number 18 [ 379.789020][ T3622] usb 2-1: config 0 descriptor?? [ 379.816200][ T4848] usb 4-1: USB disconnect, device number 15 [ 379.942665][ T9175] overlayfs: missing 'lowerdir' [ 379.969635][ T9175] device syzkaller1 entered promiscuous mode [ 380.047895][ T3622] snd-usb-6fire 2-1:0.111: unable to receive device firmware state. [ 380.056363][ T3622] snd-usb-6fire: probe of 2-1:0.111 failed with error -71 [ 380.069873][ T3622] usb 2-1: USB disconnect, device number 16 [ 380.077664][ T6253] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 380.462805][ T3622] Bluetooth: hci1: command 0x0411 tx timeout [ 381.446906][ T9192] loop1: detected capacity change from 0 to 128 [ 381.476371][ T6253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 381.488273][ T6253] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 381.499630][ T6253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.509734][ T9194] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1447'. [ 381.512173][ T6253] usb 5-1: config 0 descriptor?? [ 382.079379][ T4926] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 382.081095][ T6253] ath6kl: Failed to submit usb control message: -71 [ 382.087904][ T4926] Bluetooth: hci3: Injecting HCI hardware error event [ 382.088565][ T3582] Bluetooth: hci3: hardware error 0x00 [ 382.224298][ T9203] binder: Unknown parameter 'fsmagic' [ 382.364578][ T6253] ath6kl: unable to send the bmi data to the device: -71 [ 382.372358][ T6253] ath6kl: Unable to send get target info: -71 [ 384.337323][ T6253] ath6kl: Failed to init ath6kl core: -71 [ 386.654445][ T9224] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 386.781993][ T6253] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 386.825703][ T6253] usb 5-1: USB disconnect, device number 27 [ 387.032228][ T9234] loop2: detected capacity change from 0 to 4096 [ 387.157544][ T3622] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 387.235321][ T9237] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.301346][ T9220] loop0: detected capacity change from 0 to 32768 [ 387.347179][ T9240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 387.505230][ T9240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.447716][ T3622] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=42.f5 [ 388.479118][ T3622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.487913][ T9220] /dev/loop0: Can't open blockdev [ 388.605783][ T3622] usb 2-1: Product: syz [ 388.631826][ T3622] usb 2-1: Manufacturer: syz [ 388.636656][ T3622] usb 2-1: SerialNumber: syz [ 388.673153][ T3622] usb 2-1: config 0 descriptor?? [ 388.725517][ T9236] loop4: detected capacity change from 0 to 32768 [ 388.734521][ T3622] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 388.745850][ T3622] earthmate ttyUSB0: required endpoint is missing [ 388.783906][ T9236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1450 (9236) [ 388.888199][ T9236] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 388.913675][ T9236] BTRFS info (device loop4): setting nodatacow, compression disabled [ 388.967015][ T9236] BTRFS info (device loop4): enabling auto defrag [ 388.999195][ T3370] usb 2-1: USB disconnect, device number 17 [ 389.005737][ T9236] BTRFS info (device loop4): max_inline at 0 [ 389.018251][ T3370] cypress_m8 2-1:0.0: device disconnected [ 389.036032][ T9236] BTRFS info (device loop4): using free space tree [ 389.087082][ T9236] BTRFS info (device loop4): has skinny extents [ 389.445431][ T9253] loop0: detected capacity change from 0 to 32768 [ 389.558408][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 389.637488][ T9253] /dev/loop0: Can't open blockdev [ 389.964930][ T4848] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 390.389221][ T4848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.410595][ T4848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.495359][ T9313] loop0: detected capacity change from 0 to 4096 [ 390.555076][ T4848] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 390.565718][ T9315] loop4: detected capacity change from 0 to 2048 [ 390.572674][ T4848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 390.583750][ T9317] loop2: detected capacity change from 0 to 1024 [ 390.602155][ T4848] usb 4-1: SerialNumber: syz [ 390.645240][ T9315] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 390.720681][ T9318] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.773591][ T9315] attempt to access beyond end of device [ 390.773591][ T9315] loop4: rw=524288, want=33554432, limit=2048 [ 390.825272][ T9319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 390.838362][ T9319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.851323][ T9319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 390.864437][ T9319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.976862][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 391.180499][ T4848] usb 4-1: 0:2 : does not exist [ 391.191319][ T4848] usb 4-1: unit 5 not found! [ 391.250387][ T4848] usb 4-1: USB disconnect, device number 16 [ 391.296213][ T1243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.308098][ T9312] loop1: detected capacity change from 0 to 32768 [ 391.387851][ T9329] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 392.205282][ T9176] udevd[9176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.255448][ T1243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.279178][ T9312] XFS (loop1): Mounting V5 Filesystem [ 392.367950][ T3616] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 392.370600][ T1243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.462965][ T9312] XFS (loop1): Ending clean mount [ 392.496874][ T9312] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 [ 392.499775][ T1243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.515285][ T9312] XFS (loop1): Unmount and run xfs_repair [ 392.543878][ T9312] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 392.565087][ T9312] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 392.604540][ T9312] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 392.662283][ T9312] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 392.673381][ T9312] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 392.682944][ T9312] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 392.693280][ T9312] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 392.704688][ T9312] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 392.714985][ T9312] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 392.738491][ T9312] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74 [ 392.855528][ T9312] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 392.914205][ T9353] loop3: detected capacity change from 0 to 64 [ 392.915739][ T3616] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 14 [ 392.930165][ T3616] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 392.941716][ T3616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.953088][ T3616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.963191][ T3616] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 393.067217][ T9355] tipc: Failed to remove unknown binding: 66,1,1/0:294705761/294705763 [ 393.077038][ T9355] tipc: Failed to remove unknown binding: 66,1,1/0:294705761/294705763 [ 393.108663][ T3616] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 393.142434][ T3616] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 393.212512][ T9353] hfs: unable to locate alternate MDB [ 393.327552][ T9353] hfs: continuing without an alternate MDB [ 393.385770][ T3616] usb 5-1: Manufacturer: syz [ 393.658889][ T3616] usb 5-1: config 0 descriptor?? [ 393.741731][ T9312] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 393.837804][ T7233] XFS (loop1): Unmounting Filesystem [ 394.044416][ T9345] chnl_net:caif_netlink_parms(): no params data found [ 394.055096][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'. [ 394.179530][ T3616] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 394.205936][ T9373] tmpfs: Bad value for 'mpol' [ 394.213803][ T3616] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 394.250566][ T3616] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 394.350268][ T26] audit: type=1326 audit(1723527150.022:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.0.1491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08738b9f9 code=0x0 [ 394.413732][ T9381] loop3: detected capacity change from 0 to 128 [ 394.477776][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.504918][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.586344][ T9345] device bridge_slave_0 entered promiscuous mode [ 394.609268][ T9381] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 394.671772][ T9381] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038 (0x7fffffff) [ 394.698031][ T3616] Bluetooth: hci0: command 0x0409 tx timeout [ 394.746743][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.757679][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.779163][ T9345] device bridge_slave_1 entered promiscuous mode [ 394.961894][ T9345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.053222][ T3616] usb 5-1: USB disconnect, device number 28 [ 395.064403][ T9345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.113696][ T9393] autofs4:pid:9393:autofs_fill_super: called with bogus options [ 395.196036][ T9345] team0: Port device team_slave_0 added [ 395.242323][ T9401] loop1: detected capacity change from 0 to 256 [ 395.250762][ T9345] team0: Port device team_slave_1 added [ 395.281615][ T9401] exfat: Deprecated parameter 'utf8' [ 395.302338][ T9404] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 395.334600][ T9401] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 395.387156][ T9345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.405947][ T9345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.494403][ T9345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.601947][ T26] audit: type=1326 audit(1723527151.272:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.0.1502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08738b9f9 code=0x0 [ 395.670048][ T9345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.676969][ T9419] loop4: detected capacity change from 0 to 512 [ 395.677302][ T9345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.717767][ T9345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.759281][ T9419] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 395.824022][ T9419] EXT4-fs (loop4): 1 truncate cleaned up [ 395.861280][ T9420] loop0: detected capacity change from 0 to 2048 [ 395.867555][ T9419] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.895086][ T9345] device hsr_slave_0 entered promiscuous mode [ 395.903347][ T9345] device hsr_slave_1 entered promiscuous mode [ 395.910932][ T9345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.919854][ T9345] Cannot create hsr debugfs directory [ 396.172573][ T1243] device hsr_slave_0 left promiscuous mode [ 396.198447][ T1243] device hsr_slave_1 left promiscuous mode [ 396.206825][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.248368][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.270376][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.285460][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.301098][ T1243] device bridge_slave_1 left promiscuous mode [ 396.310886][ T9437] loop1: detected capacity change from 0 to 512 [ 396.312544][ T1243] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.332985][ T1243] device bridge_slave_0 left promiscuous mode [ 396.349233][ T1243] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.367693][ T1243] device veth1_macvtap left promiscuous mode [ 396.373882][ T1243] device veth0_macvtap left promiscuous mode [ 396.385564][ T9437] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 396.433635][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1507'. [ 396.443360][ T1243] device veth1_vlan left promiscuous mode [ 396.462119][ T1243] device veth0_vlan left promiscuous mode [ 396.470346][ T9437] EXT4-fs (loop1): Unrecognized mount option "uid>00000000000000000000" or missing value [ 396.752299][ T26] audit: type=1326 audit(1723527152.422:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.4.1507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83bf6d99f9 code=0x0 [ 396.777641][ T9304] Bluetooth: hci0: command 0x041b tx timeout [ 398.756544][ T9444] 9pnet: p9_fd_create_unix (9444): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 398.876992][ T6247] Bluetooth: hci0: command 0x040f tx timeout [ 399.127183][ T9455] sctp: failed to load transform for md5: -4 [ 399.200763][ T9450] sctp: failed to load transform for md5: -4 [ 399.216834][ T9452] sctp: failed to load transform for md5: -2 [ 400.078613][ T1243] team0 (unregistering): Port device team_slave_1 removed [ 400.120426][ T1243] team0 (unregistering): Port device team_slave_0 removed [ 400.144049][ T1243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.182741][ T1243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.362603][ T1243] bond0 (unregistering): Released all slaves [ 400.419459][ T9483] loop3: detected capacity change from 0 to 2048 [ 401.568348][ T6257] Bluetooth: hci0: command 0x0419 tx timeout [ 401.867660][ T9485] binder: Unknown parameter 'fsmagic' [ 402.459684][ T9483] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 402.478528][ T9483] ext4 filesystem being mounted at /123/bus supports timestamps until 2038 (0x7fffffff) [ 402.569434][ T9483] fs-verity: sha512 using implementation "sha512-avx2" [ 402.585114][ T9496] loop4: detected capacity change from 0 to 512 [ 402.702896][ T9496] FAT-fs (loop4): Unrecognized mount option " ԀkF [ 402.702896][ T9496] ]<>q'It::m FLnΩ Q].)7v4vLfULj8J7:Z3 ˩x!8ANKVUXbNgQ[OqY~^ 8" or missing value [ 403.136931][ T9510] loop3: detected capacity change from 0 to 512 [ 403.228404][ T9510] EXT4-fs (loop3): Test dummy encryption mode enabled [ 403.326622][ T9510] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.1523: inline data xattr refers to an external xattr inode [ 403.337979][ T9495] loop1: detected capacity change from 0 to 32768 [ 403.348713][ T3622] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 403.361720][ T9510] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1523: couldn't read orphan inode 12 (err -117) [ 403.398647][ T9495] jfs: Unrecognized mount option "jfs" or missing value [ 403.407313][ T9510] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,inode_readahead_blks=0x0000000000200000,sb=0x0000000000000001,barrier=0x0000000000000004,usrjquota=,usrjquota=,nojournal_checksum,test_dummy_encryption,,errors=continue. Quota mode: none. [ 403.752121][ T3622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.768065][ T9345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.783555][ T3622] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.813702][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 403.835344][ T3622] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.866276][ T3622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.898532][ T3622] usb 5-1: config 0 descriptor?? [ 404.113926][ T9345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.160656][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'. [ 404.727263][ T9540] loop0: detected capacity change from 0 to 2048 [ 405.077921][ T9534] dlm: no local IP address has been set [ 405.084514][ T9534] dlm: cannot start dlm midcomms -107 [ 405.883087][ T9345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.898420][ T9345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.137546][ T6256] Bluetooth: hci4: command 0x0406 tx timeout [ 406.278825][ T26] audit: type=1326 audit(1723527161.872:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9490 comm="syz.1.1520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbda280d9f9 code=0x0 [ 406.360069][ T9345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.416461][ T9345] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.447294][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.487601][ T3622] usbhid 5-1:0.0: can't add hid device: -71 [ 406.497632][ T6256] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 406.507072][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.513355][ T3622] usbhid: probe of 5-1:0.0 failed with error -71 [ 406.533782][ T3622] usb 5-1: USB disconnect, device number 29 [ 406.568157][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.588450][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.618890][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.626074][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.657934][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.666844][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.747493][ T6256] usb 4-1: Using ep0 maxpacket: 32 [ 406.773333][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.780783][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.867786][ T6256] usb 4-1: config 0 has an invalid interface number: 115 but max is 1 [ 406.920870][ T9555] loop0: detected capacity change from 0 to 512 [ 406.925282][ T6256] usb 4-1: config 0 has an invalid interface number: 41 but max is 1 [ 406.944245][ T6256] usb 4-1: config 0 has no interface number 0 [ 406.951039][ T6256] usb 4-1: config 0 has no interface number 1 [ 406.957173][ T6256] usb 4-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 406.979538][ T6256] usb 4-1: config 0 interface 115 has no altsetting 0 [ 406.996042][ T9555] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 407.014845][ T9345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 407.062989][ T9555] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 407.077430][ T9345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.077904][ T9555] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=ignore,acl,noload,noinit_itable,usrjquota="acl,nomblk_io_submit,minixdf,,errors=continue. Quota mode: writeback. [ 407.122183][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.130935][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.140665][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.159221][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.165560][ T9555] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 407.176141][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.195402][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.203979][ T6256] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63 [ 407.215065][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.223617][ T6256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.232996][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.246496][ T6256] usb 4-1: Product: syz [ 407.250923][ T6256] usb 4-1: Manufacturer: syz [ 407.255581][ T6256] usb 4-1: SerialNumber: syz [ 407.261799][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.282449][ T6256] usb 4-1: config 0 descriptor?? [ 407.288930][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.298147][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.313867][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.340774][ T6256] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.115/input/input19 [ 407.358516][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 407.567180][ T9553] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 407.581455][ T26] audit: type=1326 audit(1723527163.252:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08738b9f9 code=0x7ffc0000 [ 407.669704][ T26] audit: type=1326 audit(1723527163.252:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08738b9f9 code=0x7ffc0000 [ 407.773348][ T26] audit: type=1326 audit(1723527163.282:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe08738b9f9 code=0x7ffc0000 [ 407.794510][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.794792][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.803328][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.871532][ T9548] loop4: detected capacity change from 0 to 40427 [ 407.910027][ T26] audit: type=1326 audit(1723527163.282:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08738b9f9 code=0x7ffc0000 [ 407.922480][ T9345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.965293][ T9548] F2FS-fs (loop4): journaled quota format not specified [ 408.044975][ T26] audit: type=1326 audit(1723527163.282:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9564 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08738b9f9 code=0x7ffc0000 [ 408.107745][ T4926] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 408.221887][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.247522][ T3013] bcm5974 4-1:0.115: could not read from device [ 408.278249][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.309465][ T9591] loop4: detected capacity change from 0 to 512 [ 408.344705][ T6256] usb 4-1: USB disconnect, device number 17 [ 408.392438][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.407761][ T4926] usb 2-1: Using ep0 maxpacket: 32 [ 408.413642][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.435437][ T9591] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.451183][ T9345] device veth0_vlan entered promiscuous mode [ 408.478089][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.504301][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.557536][ T4926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.572515][ T4926] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 408.601396][ T9591] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 408.625222][ T9345] device veth1_vlan entered promiscuous mode [ 408.650384][ T9591] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1543: invalid indirect mapped block 2683928664 (level 1) [ 408.687618][ T4926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.697231][ T4926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 408.720487][ T4926] usb 2-1: SerialNumber: syz [ 408.726780][ T9591] EXT4-fs (loop4): Remounting filesystem read-only [ 408.734631][ T9591] EXT4-fs (loop4): 1 truncate cleaned up [ 408.820550][ T9591] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 408.844376][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.853241][ T4926] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 408.862994][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 408.868308][ T9589] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 408.901726][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.917701][ T4926] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 408.924177][ T4926] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 408.934862][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.011951][ T9345] device veth0_macvtap entered promiscuous mode [ 409.100703][ T9345] device veth1_macvtap entered promiscuous mode [ 409.243571][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.258553][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.301240][ T9608] loop3: detected capacity change from 0 to 16 [ 409.308752][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.393936][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.411779][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.427196][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.445226][ T9345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.456559][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.478469][ T9608] erofs: (device loop3): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 409.492320][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.505349][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.573680][ T4926] usb 2-1: USB disconnect, device number 18 [ 409.575987][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.594495][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.605351][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.623740][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.635844][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.652540][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.673835][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.696810][ T9345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.751648][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.776034][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.844782][ T9345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.879241][ T9345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.901130][ T9345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.913530][ T9345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.167664][ T6256] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 410.219335][ T9629] [ 410.221718][ T9629] ===================================================== [ 410.228679][ T9629] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 410.231993][ T9345] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 410.236152][ T9629] 5.15.164-syzkaller #0 Not tainted [ 410.246988][ T3763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.249080][ T9629] ----------------------------------------------------- [ 410.249090][ T9629] syz.3.1550/9629 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 410.249115][ T9629] ffff888066cf1210 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16a/0x490 [ 410.267219][ T3763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.271599][ T9629] [ 410.271599][ T9629] and this task is already holding: [ 410.271607][ T9629] ffff88806317e028 (&client->buffer_lock){..-.}-{2:2}, at: evdev_pass_values+0xe7/0xb60 [ 410.271669][ T9629] which would create a new lock dependency: [ 410.271676][ T9629] (&client->buffer_lock){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 410.271723][ T9629] [ 410.271723][ T9629] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 410.271731][ T9629] (&client->buffer_lock){..-.}-{2:2} [ 410.271752][ T9629] [ 410.271752][ T9629] ... which became SOFTIRQ-irq-safe at: [ 410.271760][ T9629] lock_acquire+0x1db/0x4f0 [ 410.271780][ T9629] _raw_spin_lock+0x2a/0x40 [ 410.271801][ T9629] evdev_pass_values+0xe7/0xb60 [ 410.271821][ T9629] evdev_events+0x198/0x2c0 [ 410.271841][ T9629] input_pass_values+0x873/0x1200 [ 410.271859][ T9629] input_handle_event+0xd3d/0x1600 [ 410.271877][ T9629] input_event+0x9d/0xd0 [ 410.376081][ T9629] hidinput_hid_event+0x1135/0x18e0 [ 410.381401][ T9629] hid_process_event+0x433/0x580 [ 410.386465][ T9629] hid_report_raw_event+0xe9e/0x1640 [ 410.391874][ T9629] hid_input_report+0x419/0x4d0 [ 410.396971][ T9629] hid_irq_in+0x45c/0x690 [ 410.401416][ T9629] __usb_hcd_giveback_urb+0x371/0x530 [ 410.406905][ T9629] dummy_timer+0x8ad/0x3200 [ 410.411707][ T9629] call_timer_fn+0x16d/0x560 [ 410.416423][ T9629] __run_timers+0x67c/0x890 [ 410.421053][ T9629] run_timer_softirq+0x63/0xf0 [ 410.425935][ T9629] handle_softirqs+0x3a7/0x930 [ 410.430901][ T9629] __irq_exit_rcu+0x157/0x240 [ 410.435784][ T9629] irq_exit_rcu+0x5/0x20 [ 410.440406][ T9629] sysvec_apic_timer_interrupt+0x91/0xb0 [ 410.446165][ T9629] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 410.452276][ T9629] stack_trace_consume_entry+0x4f/0x270 [ 410.457938][ T9629] arch_stack_walk+0x101/0x140 [ 410.462819][ T9629] stack_trace_save+0x113/0x1c0 [ 410.467781][ T9629] ____kasan_kmalloc+0xba/0xf0 [ 410.472655][ T9629] __kmalloc+0x168/0x300 [ 410.477130][ T9629] tomoyo_encode+0x26b/0x530 [ 410.481844][ T9629] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 410.487586][ T9629] tomoyo_path_perm+0x273/0x6b0 [ 410.492557][ T9629] security_inode_getattr+0xcf/0x120 [ 410.497961][ T9629] vfs_getattr+0x26/0x360 [ 410.502417][ T9629] vfs_statx+0x18f/0x3b0 [ 410.506776][ T9629] __x64_sys_newfstatat+0x12c/0x1b0 [ 410.512094][ T9629] do_syscall_64+0x3b/0xb0 [ 410.516625][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.522636][ T9629] [ 410.522636][ T9629] to a SOFTIRQ-irq-unsafe lock: [ 410.529666][ T9629] (tasklist_lock){.+.+}-{2:2} [ 410.529704][ T9629] [ 410.529704][ T9629] ... which became SOFTIRQ-irq-unsafe at: [ 410.542460][ T9629] ... [ 410.542473][ T9629] lock_acquire+0x1db/0x4f0 [ 410.547616][ T6256] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.549684][ T9629] _raw_read_lock+0x32/0x40 [ 410.564632][ T9629] do_wait+0x2a7/0xaf0 [ 410.568818][ T9629] kernel_wait+0xe5/0x230 [ 410.573269][ T9629] call_usermodehelper_exec_work+0xb5/0x220 [ 410.576966][ T6256] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 410.579286][ T9629] process_one_work+0x8a1/0x10c0 [ 410.579317][ T9629] worker_thread+0xaca/0x1280 [ 410.579335][ T9629] kthread+0x3f6/0x4f0 [ 410.579352][ T9629] ret_from_fork+0x1f/0x30 [ 410.579372][ T9629] [ 410.579372][ T9629] other info that might help us debug this: [ 410.579372][ T9629] [ 410.579379][ T9629] Chain exists of: [ 410.579379][ T9629] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 410.579379][ T9629] [ 410.579417][ T9629] Possible interrupt unsafe locking scenario: [ 410.579417][ T9629] [ 410.579424][ T9629] CPU0 CPU1 [ 410.579429][ T9629] ---- ---- [ 410.579434][ T9629] lock(tasklist_lock); [ 410.579448][ T9629] local_irq_disable(); [ 410.579454][ T9629] lock(&client->buffer_lock); [ 410.579468][ T9629] lock(&new->fa_lock); [ 410.579483][ T9629] [ 410.579487][ T9629] lock(&client->buffer_lock); [ 410.579501][ T9629] [ 410.579501][ T9629] *** DEADLOCK *** [ 410.579501][ T9629] [ 410.579505][ T9629] 7 locks held by syz.3.1550/9629: [ 410.579518][ T9629] #0: ffff88801f5a0110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x26d/0x7c0 [ 410.579574][ T9629] #1: ffff8881471e6230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_inject_event+0xc0/0x300 [ 410.579629][ T9629] #2: ffffffff8c91fb20 [ 410.623645][ T6256] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 410.631155][ T9629] (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 410.631212][ T9629] #3: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 410.631260][ T9629] #4: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 410.631313][ T9629] #5: ffff88806317e028 (&client->buffer_lock){..-.}-{2:2}, at: evdev_pass_values+0xe7/0xb60 [ 410.631366][ T9629] #6: ffffffff8c91fb20 [ 410.686996][ T6256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.695447][ T9629] (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 410.695505][ T9629] [ 410.695505][ T9629] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 410.695515][ T9629] -> (&client->buffer_lock){..-.}-{2:2} { [ 410.695549][ T9629] IN-SOFTIRQ-W at: [ 410.695560][ T9629] lock_acquire+0x1db/0x4f0 [ 410.750161][ T6256] usb 5-1: config 0 descriptor?? [ 410.752060][ T9629] _raw_spin_lock+0x2a/0x40 [ 410.752090][ T9629] evdev_pass_values+0xe7/0xb60 [ 410.836309][ T9629] evdev_events+0x198/0x2c0 [ 410.842767][ T9629] input_pass_values+0x873/0x1200 [ 410.849560][ T9629] input_handle_event+0xd3d/0x1600 [ 410.856964][ T9629] input_event+0x9d/0xd0 [ 410.863011][ T9629] hidinput_hid_event+0x1135/0x18e0 [ 410.870174][ T9629] hid_process_event+0x433/0x580 [ 410.876902][ T9629] hid_report_raw_event+0xe9e/0x1640 [ 410.883884][ T9629] hid_input_report+0x419/0x4d0 [ 410.890518][ T9629] hid_irq_in+0x45c/0x690 [ 410.896618][ T9629] __usb_hcd_giveback_urb+0x371/0x530 [ 410.903909][ T9629] dummy_timer+0x8ad/0x3200 [ 410.910112][ T9629] call_timer_fn+0x16d/0x560 [ 410.916497][ T9629] __run_timers+0x67c/0x890 [ 410.922785][ T9629] run_timer_softirq+0x63/0xf0 [ 410.929239][ T9629] handle_softirqs+0x3a7/0x930 [ 410.935706][ T9629] __irq_exit_rcu+0x157/0x240 [ 410.942271][ T9629] irq_exit_rcu+0x5/0x20 [ 410.948924][ T9629] sysvec_apic_timer_interrupt+0x91/0xb0 [ 410.956554][ T9629] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 410.964452][ T9629] stack_trace_consume_entry+0x4f/0x270 [ 410.972694][ T9629] arch_stack_walk+0x101/0x140 [ 410.979145][ T9629] stack_trace_save+0x113/0x1c0 [ 410.985683][ T9629] ____kasan_kmalloc+0xba/0xf0 [ 410.992135][ T9629] __kmalloc+0x168/0x300 [ 410.998061][ T9629] tomoyo_encode+0x26b/0x530 [ 411.004369][ T9629] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 411.011698][ T9629] tomoyo_path_perm+0x273/0x6b0 [ 411.018369][ T9629] security_inode_getattr+0xcf/0x120 [ 411.025359][ T9629] vfs_getattr+0x26/0x360 [ 411.031387][ T9629] vfs_statx+0x18f/0x3b0 [ 411.037401][ T9629] __x64_sys_newfstatat+0x12c/0x1b0 [ 411.044509][ T9629] do_syscall_64+0x3b/0xb0 [ 411.050746][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.058455][ T9629] INITIAL USE at: [ 411.062386][ T9629] lock_acquire+0x1db/0x4f0 [ 411.068699][ T9629] _raw_spin_lock+0x2a/0x40 [ 411.074945][ T9629] evdev_pass_values+0xe7/0xb60 [ 411.081397][ T9629] evdev_events+0x198/0x2c0 [ 411.087607][ T9629] input_pass_values+0x873/0x1200 [ 411.094425][ T9629] input_handle_event+0xd3d/0x1600 [ 411.101140][ T9629] input_event+0x9d/0xd0 [ 411.107155][ T9629] hidinput_hid_event+0x1135/0x18e0 [ 411.114229][ T9629] hid_process_event+0x433/0x580 [ 411.120798][ T9629] hid_report_raw_event+0xe9e/0x1640 [ 411.127986][ T9629] hid_input_report+0x419/0x4d0 [ 411.134440][ T9629] hid_irq_in+0x45c/0x690 [ 411.140370][ T9629] __usb_hcd_giveback_urb+0x371/0x530 [ 411.147613][ T9629] dummy_timer+0x8ad/0x3200 [ 411.153898][ T9629] call_timer_fn+0x16d/0x560 [ 411.160294][ T9629] __run_timers+0x67c/0x890 [ 411.166665][ T9629] run_timer_softirq+0x63/0xf0 [ 411.173130][ T9629] handle_softirqs+0x3a7/0x930 [ 411.179660][ T9629] __irq_exit_rcu+0x157/0x240 [ 411.186037][ T9629] irq_exit_rcu+0x5/0x20 [ 411.191930][ T9629] sysvec_apic_timer_interrupt+0x91/0xb0 [ 411.199396][ T9629] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 411.207405][ T9629] stack_trace_consume_entry+0x4f/0x270 [ 411.214709][ T9629] arch_stack_walk+0x101/0x140 [ 411.221076][ T9629] stack_trace_save+0x113/0x1c0 [ 411.227511][ T9629] ____kasan_kmalloc+0xba/0xf0 [ 411.233867][ T9629] __kmalloc+0x168/0x300 [ 411.240088][ T9629] tomoyo_encode+0x26b/0x530 [ 411.246550][ T9629] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 411.254038][ T9629] tomoyo_path_perm+0x273/0x6b0 [ 411.260702][ T9629] security_inode_getattr+0xcf/0x120 [ 411.267850][ T9629] vfs_getattr+0x26/0x360 [ 411.273760][ T9629] vfs_statx+0x18f/0x3b0 [ 411.279592][ T9629] __x64_sys_newfstatat+0x12c/0x1b0 [ 411.286382][ T9629] do_syscall_64+0x3b/0xb0 [ 411.292365][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.299922][ T9629] } [ 411.302584][ T9629] ... key at: [] evdev_open.__key.23+0x0/0x20 [ 411.311024][ T9629] [ 411.311024][ T9629] the dependencies between the lock to be acquired [ 411.311036][ T9629] and SOFTIRQ-irq-unsafe lock: [ 411.324777][ T9629] -> (tasklist_lock){.+.+}-{2:2} { [ 411.330222][ T9629] HARDIRQ-ON-R at: [ 411.334478][ T9629] lock_acquire+0x1db/0x4f0 [ 411.341045][ T9629] _raw_read_lock+0x32/0x40 [ 411.347679][ T9629] do_wait+0x2a7/0xaf0 [ 411.353754][ T9629] kernel_wait+0xe5/0x230 [ 411.360206][ T9629] call_usermodehelper_exec_work+0xb5/0x220 [ 411.368108][ T9629] process_one_work+0x8a1/0x10c0 [ 411.375177][ T9629] worker_thread+0xaca/0x1280 [ 411.381862][ T9629] kthread+0x3f6/0x4f0 [ 411.388108][ T9629] ret_from_fork+0x1f/0x30 [ 411.394532][ T9629] SOFTIRQ-ON-R at: [ 411.398711][ T9629] lock_acquire+0x1db/0x4f0 [ 411.405379][ T9629] _raw_read_lock+0x32/0x40 [ 411.411929][ T9629] do_wait+0x2a7/0xaf0 [ 411.418024][ T9629] kernel_wait+0xe5/0x230 [ 411.424480][ T9629] call_usermodehelper_exec_work+0xb5/0x220 [ 411.432608][ T9629] process_one_work+0x8a1/0x10c0 [ 411.440000][ T9629] worker_thread+0xaca/0x1280 [ 411.446700][ T9629] kthread+0x3f6/0x4f0 [ 411.453097][ T9629] ret_from_fork+0x1f/0x30 [ 411.459613][ T9629] INITIAL USE at: [ 411.463698][ T9629] lock_acquire+0x1db/0x4f0 [ 411.471463][ T9629] _raw_write_lock_irq+0xcf/0x110 [ 411.478896][ T9629] copy_process+0x22be/0x3ef0 [ 411.485597][ T9629] kernel_clone+0x210/0x960 [ 411.492198][ T9629] kernel_thread+0x168/0x1e0 [ 411.498889][ T9629] rest_init+0x21/0x330 [ 411.505025][ T9629] start_kernel+0x48c/0x540 [ 411.511552][ T9629] secondary_startup_64_no_verify+0xb1/0xbb [ 411.519417][ T9629] INITIAL READ USE at: [ 411.524097][ T9629] lock_acquire+0x1db/0x4f0 [ 411.531534][ T9629] _raw_read_lock+0x32/0x40 [ 411.538551][ T9629] do_wait+0x2a7/0xaf0 [ 411.545184][ T9629] kernel_wait+0xe5/0x230 [ 411.552277][ T9629] call_usermodehelper_exec_work+0xb5/0x220 [ 411.560540][ T9629] process_one_work+0x8a1/0x10c0 [ 411.568043][ T9629] worker_thread+0xaca/0x1280 [ 411.575192][ T9629] kthread+0x3f6/0x4f0 [ 411.581627][ T9629] ret_from_fork+0x1f/0x30 [ 411.588529][ T9629] } [ 411.591291][ T9629] ... key at: [] tasklist_lock+0x18/0x40 [ 411.599370][ T9629] ... acquired at: [ 411.603372][ T9629] lock_acquire+0x1db/0x4f0 [ 411.608188][ T9629] _raw_read_lock+0x32/0x40 [ 411.613074][ T9629] send_sigurg+0xc8/0x380 [ 411.617885][ T9629] sk_send_sigurg+0x6a/0xb0 [ 411.622609][ T9629] tcp_urg+0x2b8/0xb40 [ 411.626859][ T9629] tcp_rcv_established+0xe33/0x1e20 [ 411.632376][ T9629] tcp_v6_do_rcv+0x4f2/0x10f0 [ 411.637840][ T9629] __release_sock+0x198/0x4b0 [ 411.642747][ T9629] release_sock+0x5d/0x1c0 [ 411.647520][ T9629] tcp_sendmsg+0x36/0x40 [ 411.652175][ T9629] __sys_sendto+0x564/0x720 [ 411.656974][ T9629] __x64_sys_sendto+0xda/0xf0 [ 411.662296][ T9629] do_syscall_64+0x3b/0xb0 [ 411.668349][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.674897][ T9629] [ 411.677341][ T9629] -> (&f->f_owner.lock){....}-{2:2} { [ 411.683272][ T9629] INITIAL USE at: [ 411.687829][ T9629] lock_acquire+0x1db/0x4f0 [ 411.694758][ T9629] _raw_write_lock_irq+0xcf/0x110 [ 411.701621][ T9629] f_modown+0x38/0x340 [ 411.707461][ T9629] f_setown+0x127/0x1d0 [ 411.713593][ T9629] do_fcntl+0x1b7/0x1600 [ 411.719641][ T9629] __se_sys_fcntl+0xd8/0x1b0 [ 411.726165][ T9629] do_syscall_64+0x3b/0xb0 [ 411.733822][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.741887][ T9629] INITIAL READ USE at: [ 411.746841][ T9629] lock_acquire+0x1db/0x4f0 [ 411.753541][ T9629] _raw_read_lock_irq+0xd6/0x120 [ 411.760672][ T9629] do_fcntl+0x160/0x1600 [ 411.767466][ T9629] __se_sys_fcntl+0xd8/0x1b0 [ 411.774397][ T9629] do_syscall_64+0x3b/0xb0 [ 411.781098][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.789384][ T9629] } [ 411.791972][ T9629] ... key at: [] __alloc_file.__key+0x0/0x10 [ 411.800130][ T9629] ... acquired at: [ 411.804238][ T9629] lock_acquire+0x1db/0x4f0 [ 411.809035][ T9629] _raw_read_lock_irqsave+0xd9/0x120 [ 411.814576][ T9629] send_sigio+0x2f/0x330 [ 411.819184][ T9629] kill_fasync+0x20c/0x490 [ 411.823905][ T9629] sock_wake_async+0x145/0x170 [ 411.829299][ T9629] sk_wake_async+0x15d/0x250 [ 411.834077][ T9629] tcp_rcv_state_process+0x235f/0x4520 [ 411.839804][ T9629] tcp_v6_do_rcv+0x867/0x10f0 [ 411.844890][ T9629] __release_sock+0x198/0x4b0 [ 411.850227][ T9629] release_sock+0x5d/0x1c0 [ 411.854835][ T9629] tcp_sendmsg+0x36/0x40 [ 411.859510][ T9629] __sys_sendto+0x564/0x720 [ 411.864422][ T9629] __x64_sys_sendto+0xda/0xf0 [ 411.869421][ T9629] do_syscall_64+0x3b/0xb0 [ 411.874033][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.880361][ T9629] [ 411.882687][ T9629] -> (&new->fa_lock){....}-{2:2} { [ 411.887813][ T9629] INITIAL USE at: [ 411.891727][ T9629] lock_acquire+0x1db/0x4f0 [ 411.898007][ T9629] _raw_write_lock_irq+0xcf/0x110 [ 411.904983][ T9629] fasync_remove_entry+0xfb/0x1d0 [ 411.911598][ T9629] sock_fasync+0x86/0xf0 [ 411.917735][ T9629] __fput+0x766/0x8e0 [ 411.923576][ T9629] task_work_run+0x129/0x1a0 [ 411.930031][ T9629] exit_to_user_mode_loop+0x106/0x130 [ 411.937258][ T9629] exit_to_user_mode_prepare+0xb1/0x140 [ 411.944521][ T9629] syscall_exit_to_user_mode+0x5d/0x240 [ 411.951773][ T9629] do_syscall_64+0x47/0xb0 [ 411.957776][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.965366][ T9629] INITIAL READ USE at: [ 411.969934][ T9629] lock_acquire+0x1db/0x4f0 [ 411.976646][ T9629] _raw_read_lock_irqsave+0xd9/0x120 [ 411.983936][ T9629] kill_fasync+0x16a/0x490 [ 411.990360][ T9629] sock_wake_async+0x145/0x170 [ 411.997631][ T9629] sk_wake_async+0x15d/0x250 [ 412.004497][ T9629] tcp_rcv_state_process+0x235f/0x4520 [ 412.012162][ T9629] tcp_v6_do_rcv+0x867/0x10f0 [ 412.019174][ T9629] __release_sock+0x198/0x4b0 [ 412.026227][ T9629] release_sock+0x5d/0x1c0 [ 412.032755][ T9629] tcp_sendmsg+0x36/0x40 [ 412.039144][ T9629] __sys_sendto+0x564/0x720 [ 412.045691][ T9629] __x64_sys_sendto+0xda/0xf0 [ 412.052559][ T9629] do_syscall_64+0x3b/0xb0 [ 412.058990][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 412.067377][ T9629] } [ 412.069886][ T9629] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 412.078590][ T9629] ... acquired at: [ 412.082495][ T9629] lock_acquire+0x1db/0x4f0 [ 412.087342][ T9629] _raw_read_lock_irqsave+0xd9/0x120 [ 412.093183][ T9629] kill_fasync+0x16a/0x490 [ 412.097801][ T9629] evdev_pass_values+0x5ad/0xb60 [ 412.102964][ T9629] evdev_events+0x198/0x2c0 [ 412.107972][ T9629] input_pass_values+0x873/0x1200 [ 412.113209][ T9629] input_handle_event+0xc9b/0x1600 [ 412.118522][ T9629] input_inject_event+0x1fc/0x300 [ 412.123746][ T9629] evdev_write+0x668/0x7c0 [ 412.128345][ T9629] vfs_write+0x30c/0xe50 [ 412.132776][ T9629] ksys_write+0x1a2/0x2c0 [ 412.137309][ T9629] do_syscall_64+0x3b/0xb0 [ 412.141971][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 412.148077][ T9629] [ 412.150507][ T9629] [ 412.150507][ T9629] stack backtrace: [ 412.156545][ T9629] CPU: 0 PID: 9629 Comm: syz.3.1550 Not tainted 5.15.164-syzkaller #0 [ 412.164717][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 412.175364][ T9629] Call Trace: [ 412.179018][ T9629] [ 412.182094][ T9629] dump_stack_lvl+0x1e3/0x2d0 [ 412.187064][ T9629] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 412.192916][ T9629] ? panic+0x860/0x860 [ 412.196997][ T9629] ? print_shortest_lock_dependencies+0xee/0x150 [ 412.203551][ T9629] validate_chain+0x4d01/0x5930 [ 412.208546][ T9629] ? reacquire_held_locks+0x660/0x660 [ 412.214017][ T9629] ? try_to_wake_up+0x807/0x1300 [ 412.219099][ T9629] ? __lock_acquire+0x1ff0/0x1ff0 [ 412.224273][ T9629] ? register_lock_class+0x100/0x9a0 [ 412.229664][ T9629] ? is_dynamic_key+0x1f0/0x1f0 [ 412.234634][ T9629] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 412.240790][ T9629] ? mark_lock+0x98/0x340 [ 412.245294][ T9629] __lock_acquire+0x1295/0x1ff0 [ 412.250591][ T9629] lock_acquire+0x1db/0x4f0 [ 412.255154][ T9629] ? kill_fasync+0x16a/0x490 [ 412.260236][ T9629] ? read_lock_is_recursive+0x10/0x10 [ 412.265647][ T9629] ? read_lock_is_recursive+0x10/0x10 [ 412.271173][ T9629] ? read_lock_is_recursive+0x10/0x10 [ 412.276767][ T9629] _raw_read_lock_irqsave+0xd9/0x120 [ 412.282168][ T9629] ? kill_fasync+0x16a/0x490 [ 412.286765][ T9629] ? _raw_read_lock+0x40/0x40 [ 412.291465][ T9629] kill_fasync+0x16a/0x490 [ 412.296105][ T9629] evdev_pass_values+0x5ad/0xb60 [ 412.301106][ T9629] ? evdev_pass_values+0x531/0xb60 [ 412.306463][ T9629] evdev_events+0x198/0x2c0 [ 412.311063][ T9629] ? evdev_event+0x170/0x170 [ 412.315713][ T9629] input_pass_values+0x873/0x1200 [ 412.320968][ T9629] input_handle_event+0xc9b/0x1600 [ 412.326191][ T9629] input_inject_event+0x1fc/0x300 [ 412.331548][ T9629] evdev_write+0x668/0x7c0 [ 412.336083][ T9629] ? evdev_read+0xe00/0xe00 [ 412.340654][ T9629] ? end_current_label_crit_section+0x147/0x170 [ 412.347109][ T9629] ? common_file_perm+0x17d/0x1d0 [ 412.352409][ T9629] ? fsnotify_perm+0x64/0x590 [ 412.357738][ T9629] ? security_file_permission+0x75/0xa0 [ 412.363866][ T9629] ? evdev_read+0xe00/0xe00 [ 412.368816][ T9629] vfs_write+0x30c/0xe50 [ 412.373090][ T9629] ? file_end_write+0x250/0x250 [ 412.378248][ T9629] ? __fget_files+0x413/0x480 [ 412.382986][ T9629] ? __fdget_pos+0x1e9/0x380 [ 412.387681][ T9629] ? ksys_write+0x77/0x2c0 [ 412.392102][ T9629] ksys_write+0x1a2/0x2c0 [ 412.396797][ T9629] ? print_irqtrace_events+0x210/0x210 [ 412.402271][ T9629] ? __ia32_sys_read+0x80/0x80 [ 412.407154][ T9629] ? syscall_enter_from_user_mode+0x2e/0x240 [ 412.413294][ T9629] ? lockdep_hardirqs_on+0x94/0x130 [ 412.418543][ T9629] ? syscall_enter_from_user_mode+0x2e/0x240 [ 412.425432][ T9629] do_syscall_64+0x3b/0xb0 [ 412.429865][ T9629] ? clear_bhb_loop+0x15/0x70 [ 412.434677][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 412.440696][ T9629] RIP: 0033:0x7f57b4c0f9f9 [ 412.445147][ T9629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.464839][ T9629] RSP: 002b:00007f57b308c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.473285][ T9629] RAX: ffffffffffffffda RBX: 00007f57b4dabf80 RCX: 00007f57b4c0f9f9 [ 412.481256][ T9629] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000004 [ 412.489328][ T9629] RBP: 00007f57b4c7d8ee R08: 0000000000000000 R09: 0000000000000000 [ 412.497491][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.505485][ T9629] R13: 0000000000000000 R14: 00007f57b4dabf80 R15: 00007ffd64c11648 [ 412.513463][ T9629] [ 412.523941][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.573136][ T4926] usb 5-1: USB disconnect, device number 30 [ 412.597688][ T3763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.605633][ T3763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.613542][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready