last executing test programs: 36m10.716909204s ago: executing program 32 (id=95): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) 23m46.710146175s ago: executing program 33 (id=3636): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 23m37.656880826s ago: executing program 34 (id=3667): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1248}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB='p'], 0x120}}], 0x2, 0x8000) 21m48.483525237s ago: executing program 35 (id=4046): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffffeb, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xc4}}]}, 0xac}}, 0x20000000) 21m13.914716327s ago: executing program 36 (id=4152): capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000001080)={0x0, 0x3, 0x0, 0x2000000}) r0 = socket(0x1, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30002012}) 19m10.124882545s ago: executing program 37 (id=4603): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16m26.865781836s ago: executing program 38 (id=5062): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00', @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000003c0), &(0x7f00000001c0)=@udp, 0x2}, 0x20) 15m23.496330238s ago: executing program 39 (id=5271): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000180)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x2, 0x3, "fbd7a51dff1cb991842d8a7886b1407c60d1f72567f10b9d8e3c769754d8438a006e85f30c0c1e05862815b74ce3526e9916d4f62c"}}}}}}, 0x0) 15m0.590539674s ago: executing program 40 (id=5294): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000200)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c726f6469722c636f6465706167653d3836392c696f636861727365743d6d616363726f617469616e2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c636865636b3d7374726963742c756e695f786c6174653d302c756e695f786c6174653d312c726f6469722c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c005278923e69251b3442eda7312ba155dbe1303e677ebccf0695b7c8cf2f338e2f9a910259643ded3b3b71769929383aef4787f2d90691e97df2af2248608615df223113d320fded60cf9a2566f8fbfc429246f9e0e7a8fbdcc82e2d928a7cfa178e597e9fafc9ff2ee16fa42fc342193e730cc7a3c69bcd70042d1336c7347cd23428c24849589daafec6681c"], 0x25, 0x358, &(0x7f0000000480)="$eJzs3T9oXHUcAPDv9aW5JFhzg1B0Ot0EKU3EQaeEUqGYQSuH/xYPm/ondxZyeBCHXG5RipPiIujk1kHHzuIg4ubgagWpiovdCg0+ubt3/+/sBbxY8fMZwpfv7/d9v+97eeS9hOSXVxuxc+lkXL5162YsLeViYePcRtzORSFORBIdBzHRB4uT8wDAPe52msYfacfdZ3+00o08+wHgv6v9/H/9VD+RP0Lx1fvm0RIAMGczfv//7MTslbm1BQDM0djz/5Gh4ZEf8y/0fiegY3n+DQIA/7jnX3r5mc2tiIvF4lJE9f16qV6Kp/rjm5fjzajEdpyN1TiM6LwodN4WWh+fvrB1/myx5ZdClFoV9VJEtVEvdd4UNpN2fT7WYjUKWX3aq09a9Wvt+mJEHDTa60c1Vy+djJVs/R9XYjvWYzUeGKuPuLB1fr2YHaBU7dY3Ipqx1D2JVv9nYjW+fy2uRCUuRau23//+WrF4Lt0aqq9fy7fnAQAAAAAAAAAAAAAAAAAAAADAPJwp9hR6+9+k1Ub9vYujEwpD++OUOsPZ/kDNzv5Aab67O8/VZHR/oOH9eeqlhTjxr545AAAAAAAAAAAAAAAAAAAA3Dtqe4tRrlS2d2t77+4MBo2BzNvffvH1cnSHFrLSt5J+VWTJoeN0Jw4cOYneEmmvPE2G5mRBEtGdfFC+dr3X8eCcfO8sxspbQX5sKJf1VK5UTj3886eTqv5sBQftTBJjl2U4yGXrDwxV728lliLicFrV9GD9LnNupGk6rXz/k9FMthVD48htzBB8c/ONBx+vnX6infkqW+nRx1ZfuPHx57/tlCvR7FyZSmVxt3aYznDkyEWMDyUD908uu865CXfC5KDZzzR3a3vl5IffX3zow+9GJieT7590MPPO9LW+HM0sdoJcRKF7Ef6u1ZMTbv7JwSt3enfv0T9xpz/bKF/f/+nXWasGvkjYqAMAAAAAAAAAAAAAAAAAAI5F/49+RwbSNG1MrXryubk3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHqP///weC5lhmluBOI8aH8tu7tamLLx/rqQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/2VwAAAP//wGN9HA==") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000840)={[{@nolazytime}, {}, {@barrier_val}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}]}, 0xfc, 0x57c, &(0x7f0000000100)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 13m10.227761891s ago: executing program 41 (id=5675): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1d4e, 0x103) write$binfmt_elf32(r0, &(0x7f0000000f00)=ANY=[], 0x38) 12m54.788900524s ago: executing program 8 (id=5728): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r1, r0, 0x585, 0x0) vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) 12m52.541676963s ago: executing program 8 (id=5734): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 12m51.583563217s ago: executing program 8 (id=5737): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) mlock(&(0x7f0000007000/0x3000)=nil, 0x3000) mlock(&(0x7f0000007000/0x2000)=nil, 0x2000) 12m50.775362954s ago: executing program 8 (id=5740): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0xb, 0x460, &(0x7f0000001380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, &(0x7f0000000140)='usrjquota=') 12m48.741736898s ago: executing program 8 (id=5743): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000500), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20000000) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)='zX', 0x2}], 0x1}, 0x3) 12m48.001892751s ago: executing program 8 (id=5747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) 12m45.441690956s ago: executing program 42 (id=5747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) 8m19.604949225s ago: executing program 4 (id=6741): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 8m18.888417922s ago: executing program 4 (id=6744): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406619, 0x0) 8m16.899954723s ago: executing program 4 (id=6753): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x38, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40810) 8m15.209759894s ago: executing program 4 (id=6758): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) 8m13.612239524s ago: executing program 4 (id=6764): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2c0, 0x30, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{0x2ac, 0x1, [@m_skbedit={0x1f4, 0x19, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x7, 0x101}}]}, {0x18d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x84, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x2, 0x6, 0x7, 0x1ff}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x800, 0x7, 0x9, 0x1000}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x136, 0x0, 0x10000000, 0x0, 0xfffff000}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2c0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8m12.301239321s ago: executing program 4 (id=6769): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) 8m9.518574578s ago: executing program 43 (id=6769): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) 7m19.734271325s ago: executing program 6 (id=6956): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x8000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010104}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x404, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @local}}}, 0x108) 7m19.158534199s ago: executing program 6 (id=6958): mknod$loop(&(0x7f0000000200)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0\x00') 7m18.100899635s ago: executing program 6 (id=6965): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 7m17.223659994s ago: executing program 6 (id=6969): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 7m15.489753309s ago: executing program 6 (id=6977): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x18) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 7m14.65630657s ago: executing program 6 (id=6982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb0000000000000000000000006cfcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 7m11.619243833s ago: executing program 44 (id=6982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb0000000000000000000000006cfcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 4m7.157167271s ago: executing program 7 (id=7711): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100), 0x4) 4m6.519663274s ago: executing program 7 (id=7714): bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x80081) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000240)={0x1, 0xe7, 0xa, 0x1, 0x9}) 4m5.868631887s ago: executing program 7 (id=7716): r0 = fanotify_init(0x20, 0x400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x800, 0x20) fanotify_mark(r0, 0x71, 0x40000009, r1, 0x0) fanotify_mark(r0, 0x80, 0x40001020, 0xffffffffffffffff, 0x0) 4m5.34663164s ago: executing program 7 (id=7718): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800004, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x189, &(0x7f00000027c0)="$eJzs279u2lAUx/GfjflT6B9a+keqOnSquhQDlWi70UdB4CJUk6CQBRQpyXtkyZanyhOEIVumEOHYTnCYELYJfD8L5/jo6h6Gyz1CIAA7q6WvMmQoN0++FMrHFSPtlgAkZOa/3s58pRmAnZG5SbsDAOmY/pWGkq6ujzrK5IKx4FMQzOutoG7mn8wP01NTny2/bhT0IjpfnEvfgvVGccl6qRjWS94zK1L/rrK//0u90mu9UVlv9U4Vv94N139cw0QEAMD2M1SN5gsPTP3ru04tzLNeXlfRv6RzXt4I6/f5zzDPe3m1s+92Y3wXAFZhqnrxOI+e/0zk/Fv++Qfw/I3Gk/9t13UOEgqC7wcS3XQ9gU42oo21BFltRBsESwJLCW96ubSU8gcTgNjZh4OhPRpPfvQH7Z7Tc/aajWbzT+33r7rtDf724vgPYIs8XPppdwIAAAAAAAAAAAAAAFb1Xh/SbgEAAABAQmL7X5Eh6Uz8shgAAAAAAAAAAAAAAAAAgBjcBQAA//+4NBng") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c1000, 0x0) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 4m4.54037964s ago: executing program 7 (id=7721): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) 4m3.856516164s ago: executing program 7 (id=7724): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x7c5ae000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(0xffffffffffffffff, 0x0) 4m1.496104334s ago: executing program 45 (id=7724): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x7c5ae000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(0xffffffffffffffff, 0x0) 2m13.849770416s ago: executing program 5 (id=8172): r0 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x1, 0x2, 0x1d}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) creat(&(0x7f00000001c0)='./file0\x00', 0x8) creat(&(0x7f0000002440)='./file0\x00', 0x70) close_range(r0, 0xffffffffffffffff, 0x0) 2m12.201297143s ago: executing program 5 (id=8176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 2m11.232836321s ago: executing program 5 (id=8180): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000004ec0)=[{{&(0x7f0000003e80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80b1}}, {{&(0x7f0000004580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x50}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004000}}], 0x3, 0x0) 2m10.504933788s ago: executing program 5 (id=8182): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x0, 0x5e7, &(0x7f0000001a00)="$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") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='.\x00') 2m9.632827438s ago: executing program 5 (id=8185): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000019c0)={'#! ', './file1/../file0', [], 0xa, "b5a4be350e7611b133a163b4ab1b0400000000000000000000000000000080ca925f71fcd3da0ed66c23ef689b28ee5c370a4b0eae91c3f16ee47acd81e02bbef5d3e59a0c1408636e6fd52ba9d446590747008418fd7319b2d74459b026c32ff8293eb0f59fa7b69ee06054e4b756cd85e7cf4c3af63461d53f4c9c938bcba0af249f05e185a4e8275ff49723b94e129caded69015fb912ff9cb0cf7bae0c4e8dd11dab9a2704c69e02aa5abc5229c574e4a9f532a2da381fd22d31cac62152b18f94218226342229c100ea8864598b57f9a151c13712197987660444b31f76cdb07cbe9c6d9398bafa31ab6ef0efd9ec2793f5b908f9385add94bae3b792b066810cca101e16c8e78c00762a19696620dee95ffc752bdcf3e61c1246d8603b3b66aa27cdbebaf081e450070addca9a935c3bdb9da6e92dae41d2dabfe0b6083dac5757f973ba2bae282de6c4ec5364eded39df01c1ab246f"}, 0x16d) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96260b3274e900105400002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x240000000]}}) 2m9.086716253s ago: executing program 5 (id=8187): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000880)=[{}], 0x1, 0x9) 2m6.784793021s ago: executing program 46 (id=8187): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000880)=[{}], 0x1, 0x9) 7.704696232s ago: executing program 9 (id=8547): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r0, 0x28, 0x22, 0x0, 0x0) 6.809097599s ago: executing program 9 (id=8551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r0) 6.741776358s ago: executing program 0 (id=8552): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) 6.609189128s ago: executing program 1 (id=8553): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x4e23, @empty}}, 0x800, 0x0, 0x0, 0x0, 0xd0, 0x3ff, 0x40}, 0x9c) 5.670558706s ago: executing program 9 (id=8556): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1844, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220a00000078aa9612cde594"], 0x0}, 0x0) 5.644827136s ago: executing program 3 (id=8557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 5.641685909s ago: executing program 0 (id=8558): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) dup2(r1, r0) 5.509945327s ago: executing program 1 (id=8559): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 4.915700159s ago: executing program 2 (id=8560): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') 4.867864964s ago: executing program 0 (id=8561): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x409, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) 4.636437646s ago: executing program 3 (id=8562): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) 4.458404972s ago: executing program 1 (id=8563): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800003, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f00000021c0)=""/4116, 0x1014}], 0x1, 0x16, 0xfffffff9) 3.88539381s ago: executing program 0 (id=8564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x5e, &(0x7f0000000880)={&(0x7f0000000440)={0x30, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x1, 0x5d}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa7, 0x27}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 3.736263634s ago: executing program 2 (id=8565): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 3.414084085s ago: executing program 1 (id=8566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r1}, 0x18) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000440)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRESHEX=r0], 0x0) 3.315957501s ago: executing program 3 (id=8567): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x96, 0x100, @void}}}}}}}, 0x0) 2.92137937s ago: executing program 0 (id=8568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x2c060000) unshare(0x24020400) 2.689950835s ago: executing program 9 (id=8569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2.670687417s ago: executing program 2 (id=8570): ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x0, {0x8, 0xffffffff}, 0xd1, 0x9}}) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 2.443643791s ago: executing program 3 (id=8571): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1, 0x7}, &(0x7f0000000080)=0x8) 1.739113224s ago: executing program 9 (id=8572): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fallocate(r0, 0x1, 0x4, 0x2) 1.711273985s ago: executing program 0 (id=8573): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c0203010902"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) 1.586134124s ago: executing program 2 (id=8574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x2, 0x6, 0x528, 0xf0, 0x1d0, 0x2a0, 0xf0, 0x1d0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ipv6={@private1, @mcast2, [], [], 'macvlan1\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private0, 0x2a, 0x2b, 0x7f}}}, {{@ipv6={@private0, @mcast2, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xff], 'macsec0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x1, 0x1, 0x16}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x4}, {0x0, 0xfe, 0x6}, 0xf3dd, 0xd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff, 0xffffffff], 'netdevsim0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x3c, 0x4, 0x5, 0x2}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) 1.445410724s ago: executing program 3 (id=8575): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000280)=@canfd={{0x4, 0x1}, 0x8, 0x0, 0x0, 0x0, "7bc4d89adb311186c09f817b0b6802b9c34cb307af4abc27e26c17da245cda8479bcc33328304f6620ad40e4720c24880eb2f331a4648c304ca4c38fe07aebdf"}, 0x48}}, 0x48006) 816.765181ms ago: executing program 1 (id=8576): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1c5) getdents64(r0, &(0x7f0000000280)=""/76, 0x4c) lseek(r0, 0x4, 0x0) 809.816881ms ago: executing program 2 (id=8577): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = dup(r0) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000080)={0x1, 0xf8}, 0x2) 649.158062ms ago: executing program 3 (id=8578): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x2000000, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)=""/129, 0x81}], 0x1}, 0x40000112) 527.523756ms ago: executing program 9 (id=8579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff02000000000000000000000000000112"], 0xfdef) 160.024907ms ago: executing program 2 (id=8580): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 0s ago: executing program 1 (id=8581): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) kernel console output (not intermixed with test programs): 6] kvaser_usb 4-1:123.123: error -ENODEV: Cannot get usb endpoint(s) [ 2153.335214][T10296] usb 4-1: USB disconnect, device number 27 [ 2153.449990][T25203] loop9: detected capacity change from 0 to 256 [ 2153.495613][T25203] exfat: Deprecated parameter 'utf8' [ 2153.505817][T25203] exfat: Deprecated parameter 'namecase' [ 2153.517053][T25203] exfat: Deprecated parameter 'utf8' [ 2153.666645][T25203] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 2154.398083][T25211] program syz.3.7515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2155.136795][T25213] loop9: detected capacity change from 0 to 32768 [ 2155.166748][T25213] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.7516 (25213) [ 2155.195221][T25213] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2155.206956][T25213] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm [ 2155.219413][T25213] BTRFS info (device loop9): using free-space-tree [ 2155.537137][T25236] loop7: detected capacity change from 0 to 164 [ 2155.586204][T25213] BTRFS error (device loop9): balance: invalid convert metadata profile single [ 2155.747657][T20701] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2155.776363][T25236] rock: directory entry would overflow storage [ 2155.783762][T25236] rock: sig=0x4f50, size=4, remaining=3 [ 2155.790649][T25236] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 2161.673662][T25313] loop3: detected capacity change from 0 to 256 [ 2162.144332][T25318] tmpfs: Bad value for 'mpol' [ 2163.634648][T25336] xt_CT: No such helper "netbios-ns" [ 2164.650129][T25356] loop3: detected capacity change from 0 to 2048 [ 2164.693593][T25356] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 2164.735668][T25360] vxcan1: tx address claim with dlc 0 [ 2164.830662][T25356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2165.597994][T25372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7582'. [ 2169.145208][T25422] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7604'. [ 2169.707573][T25427] loop9: detected capacity change from 0 to 1024 [ 2170.425005][T20660] Bluetooth: hci2: link tx timeout [ 2170.430897][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.444154][T20660] Bluetooth: hci2: link tx timeout [ 2170.452920][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.463406][T20660] Bluetooth: hci2: link tx timeout [ 2170.468981][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.490017][T20660] Bluetooth: hci2: link tx timeout [ 2170.495541][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.531252][T20660] Bluetooth: hci2: link tx timeout [ 2170.536820][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.548310][T20660] Bluetooth: hci2: link tx timeout [ 2170.554924][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.564597][T20660] Bluetooth: hci2: link tx timeout [ 2170.573273][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.581501][T20660] Bluetooth: hci2: link tx timeout [ 2170.587733][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.610863][T20660] Bluetooth: hci2: link tx timeout [ 2170.616556][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.632790][T20660] Bluetooth: hci2: link tx timeout [ 2170.638257][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.648473][T20660] Bluetooth: hci2: link tx timeout [ 2170.654607][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.666354][T20660] Bluetooth: hci2: link tx timeout [ 2170.672581][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.681529][T20660] Bluetooth: hci2: link tx timeout [ 2170.687706][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.699846][T20660] Bluetooth: hci2: link tx timeout [ 2170.710822][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.724291][T20660] Bluetooth: hci2: link tx timeout [ 2170.730075][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.738482][T20660] Bluetooth: hci2: link tx timeout [ 2170.744084][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.773729][T20660] Bluetooth: hci2: link tx timeout [ 2170.782825][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.791303][T20660] Bluetooth: hci2: link tx timeout [ 2170.796691][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.807574][T20660] Bluetooth: hci2: link tx timeout [ 2170.821271][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.831304][T20660] Bluetooth: hci2: link tx timeout [ 2170.837127][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.851954][T20660] Bluetooth: hci2: link tx timeout [ 2170.857407][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.952851][T20660] Bluetooth: hci2: link tx timeout [ 2170.958291][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.980936][T20660] Bluetooth: hci2: link tx timeout [ 2170.986682][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2170.997852][T20660] Bluetooth: hci2: link tx timeout [ 2171.007732][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2171.024165][T20660] Bluetooth: hci2: link tx timeout [ 2171.033179][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2171.041910][T20660] Bluetooth: hci2: link tx timeout [ 2171.047541][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2171.062814][T20660] Bluetooth: hci2: link tx timeout [ 2171.068337][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2171.093521][T20660] Bluetooth: hci2: link tx timeout [ 2171.099525][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2171.107543][T20660] Bluetooth: hci2: link tx timeout [ 2171.113212][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2171.131710][T20660] Bluetooth: hci2: link tx timeout [ 2171.139114][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2171.154895][T20660] Bluetooth: hci2: link tx timeout [ 2171.162778][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2171.172775][T20660] Bluetooth: hci2: link tx timeout [ 2171.178158][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2171.191087][T20660] Bluetooth: hci2: link tx timeout [ 2171.198828][T20660] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2172.073473][T25450] loop7: detected capacity change from 0 to 1024 [ 2172.521384][T20660] Bluetooth: hci2: command 0x0406 tx timeout [ 2172.598259][T25456] loop9: detected capacity change from 0 to 2048 [ 2172.776187][T25459] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2176.424814][T25477] loop3: detected capacity change from 0 to 4096 [ 2176.527692][T25477] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 2178.403713][T25492] loop7: detected capacity change from 0 to 512 [ 2178.512317][T25492] EXT4-fs: Ignoring removed mblk_io_submit option [ 2178.580598][T25492] EXT4-fs (loop7): can't mount with both data=journal and dax [ 2179.024434][T25495] block nbd3: NBD_DISCONNECT [ 2179.484410][T20907] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2179.663985][T25492] loop7: detected capacity change from 0 to 4096 [ 2179.761921][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2179.773603][T25492] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 2179.797776][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2179.809088][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2179.866604][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2179.892163][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2180.150981][T25504] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7643'. [ 2180.189103][T25499] lo speed is unknown, defaulting to 1000 [ 2180.569715][T10296] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2180.806732][T10296] usb 4-1: Using ep0 maxpacket: 32 [ 2180.825917][T10296] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 2180.838341][T10296] usb 4-1: config 0 has no interface number 0 [ 2180.850520][T10296] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2180.866546][T10296] usb 4-1: config 0 interface 85 has no altsetting 0 [ 2180.968376][T10296] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2180.978686][T10296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.990632][T10296] usb 4-1: Product: syz [ 2180.995444][T10296] usb 4-1: Manufacturer: syz [ 2181.001156][T10296] usb 4-1: SerialNumber: syz [ 2181.030645][T10296] usb 4-1: config 0 descriptor?? [ 2181.742086][T25499] chnl_net:caif_netlink_parms(): no params data found [ 2181.907696][T10296] appletouch 4-1:0.85: Geyser mode initialized. [ 2181.922357][T10296] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input36 [ 2181.961220][T20660] Bluetooth: hci0: command tx timeout [ 2181.965973][ C1] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 2182.192088][T15726] usb 4-1: USB disconnect, device number 28 [ 2182.323272][T15726] appletouch 4-1:0.85: input: appletouch disconnected [ 2183.191533][T25530] netlink: 188 bytes leftover after parsing attributes in process `syz.9.7652'. [ 2183.209007][T25530] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7652'. [ 2183.393934][T25532] loop3: detected capacity change from 0 to 128 [ 2183.792449][T25535] loop7: detected capacity change from 0 to 128 [ 2183.894514][T25499] bridge0: port 1(bridge_slave_0) entered blocking state [ 2183.904389][T25499] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.923419][T25499] bridge_slave_0: entered allmulticast mode [ 2183.936345][T25499] bridge_slave_0: entered promiscuous mode [ 2184.042424][T20660] Bluetooth: hci0: command tx timeout [ 2184.110047][T25499] bridge0: port 2(bridge_slave_1) entered blocking state [ 2184.133792][T25499] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.142711][T25499] bridge_slave_1: entered allmulticast mode [ 2184.153468][T25499] bridge_slave_1: entered promiscuous mode [ 2184.165915][ T30] audit: type=1800 audit(1744028436.427:280): pid=25535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7654" name="file2" dev="loop7" ino=334 res=0 errno=0 [ 2184.188912][T25535] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 2184.201274][T25535] FAT-fs (loop7): Filesystem has been set read-only [ 2184.208499][T25535] syz.7.7654: attempt to access beyond end of device [ 2184.208499][T25535] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 2184.234172][T25535] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 2184.242602][T25535] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 2184.251260][T25535] syz.7.7654: attempt to access beyond end of device [ 2184.251260][T25535] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 2184.269545][T25535] syz.7.7654: attempt to access beyond end of device [ 2184.269545][T25535] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 2184.317487][T25535] syz.7.7654: attempt to access beyond end of device [ 2184.317487][T25535] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 2184.341327][T25535] syz.7.7654: attempt to access beyond end of device [ 2184.341327][T25535] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 2184.788083][T25499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2184.909468][T25499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2185.529128][T25499] team0: Port device team_slave_0 added [ 2185.600077][T25499] team0: Port device team_slave_1 added [ 2186.072847][T25499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2186.082324][T25499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2186.109770][ C0] vkms_vblank_simulate: vblank timer overrun [ 2186.116676][T25499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2186.128326][T20660] Bluetooth: hci0: command tx timeout [ 2186.233907][T25499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2186.243285][T25499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2186.279621][T25499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2186.825452][T25499] hsr_slave_0: entered promiscuous mode [ 2186.845461][T25499] hsr_slave_1: entered promiscuous mode [ 2186.855940][T25499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2186.864116][T25499] Cannot create hsr debugfs directory [ 2188.168948][ T30] audit: type=1326 audit(1744028440.497:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebf8d169 code=0x7ffc0000 [ 2188.205494][T20660] Bluetooth: hci0: command tx timeout [ 2188.270875][T25499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2188.285328][T25499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.361174][ T30] audit: type=1326 audit(1744028440.637:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebf8d169 code=0x7ffc0000 [ 2188.385130][ T30] audit: type=1326 audit(1744028440.667:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f16ebf8d169 code=0x7ffc0000 [ 2188.408965][ T30] audit: type=1326 audit(1744028440.667:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f16ebf8d1a3 code=0x7ffc0000 [ 2188.432086][ C0] vkms_vblank_simulate: vblank timer overrun [ 2188.447446][ T30] audit: type=1326 audit(1744028440.707:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f16ebf8bc1f code=0x7ffc0000 [ 2188.537269][ T30] audit: type=1326 audit(1744028440.887:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f16ebf8d1f7 code=0x7ffc0000 [ 2188.561211][ C0] vkms_vblank_simulate: vblank timer overrun [ 2188.575751][T25574] loop9: detected capacity change from 0 to 1024 [ 2188.592706][T25499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2188.603566][T25499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.665787][ T30] audit: type=1326 audit(1744028440.927:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16ebf8bad0 code=0x7ffc0000 [ 2188.695670][ T30] audit: type=1326 audit(1744028440.927:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16ebf8cd6b code=0x7ffc0000 [ 2188.719855][ T30] audit: type=1326 audit(1744028440.957:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f16ebf8bdca code=0x7ffc0000 [ 2188.903144][T25499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2188.914327][T25499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.033469][T25574] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2189.128096][T25499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2189.151652][T25499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.202912][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2189.203003][ T30] audit: type=1326 audit(1744028441.537:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16ebf8bad0 code=0x7ffc0000 [ 2189.234826][ T30] audit: type=1326 audit(1744028441.537:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f16ebf8beb7 code=0x7ffc0000 [ 2189.267615][ T30] audit: type=1326 audit(1744028441.547:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16ebf8bad0 code=0x7ffc0000 [ 2189.292748][ T30] audit: type=1326 audit(1744028441.547:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebf8d169 code=0x7ffc0000 [ 2189.320257][ T30] audit: type=1326 audit(1744028441.557:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25573 comm="syz.9.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16ebf8d169 code=0x7ffc0000 [ 2189.343456][ C0] vkms_vblank_simulate: vblank timer overrun [ 2189.712174][T20701] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2190.860897][T25591] loop7: detected capacity change from 0 to 32768 [ 2190.915910][T25499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2190.952113][T25499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2191.078434][T25499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2191.129965][T25499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2192.061494][T25601] loop9: detected capacity change from 0 to 1024 [ 2192.611838][T25499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2192.858751][T25499] 8021q: adding VLAN 0 to HW filter on device team0 [ 2193.052724][T20907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.060647][T20907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2193.209537][T20907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.217426][T20907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2194.330978][T22938] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2194.801576][T22938] usb 10-1: Using ep0 maxpacket: 16 [ 2194.844054][T22938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2194.858797][T22938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2194.869434][T22938] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2194.890991][T22938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.132477][T22938] usb 10-1: config 0 descriptor?? [ 2195.562658][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2195.573045][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2195.666794][T22938] corsair 0003:1B1C:1B02.0033: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.9-1/input0 [ 2195.813949][T22938] corsair 0003:1B1C:1B02.0033: Failed to get K90 initial state (error -71). [ 2195.861941][T22938] usb 10-1: USB disconnect, device number 17 [ 2196.130569][T25499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2196.682111][T25499] veth0_vlan: entered promiscuous mode [ 2196.870606][T25499] veth1_vlan: entered promiscuous mode [ 2197.415562][T25499] veth0_macvtap: entered promiscuous mode [ 2197.592573][T25640] lo speed is unknown, defaulting to 1000 [ 2197.605521][T25499] veth1_macvtap: entered promiscuous mode [ 2197.785472][T25645] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7697'. [ 2198.006693][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.019520][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.030903][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.048073][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.065925][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.079606][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.095215][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.106666][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.120578][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.131470][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.141960][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.160429][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.171382][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.183023][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.195196][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.206786][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.217433][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.228650][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.249659][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.267604][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.279995][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.294885][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.305590][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.319477][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.329837][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.341359][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.359111][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.371688][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.382200][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.393299][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.403833][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.414925][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.425297][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.436476][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.468280][T25499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2198.714249][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.730972][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.746130][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.760398][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.777042][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.794747][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.805597][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.817029][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.827841][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.838941][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.852090][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.864696][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.885031][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.896241][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.906498][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.917460][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.928616][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.940204][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.950672][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.961759][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.977987][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.991286][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.002423][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.014331][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.024945][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.035954][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.047343][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.058340][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.068683][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.091270][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.103525][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.115240][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.125856][T25499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.136903][T25499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.155325][T25499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2199.167566][T25652] tun0: tun_chr_ioctl cmd 2148553947 [ 2199.420304][T25499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2199.429860][T25499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2199.438995][T25499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2199.451631][T25499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.177669][T25675] input: syz1 as /devices/virtual/input/input37 [ 2201.238364][T25672] loop9: detected capacity change from 0 to 1024 [ 2201.826260][T12181] hfsplus: b-tree write err: -5, ino 4 [ 2202.764413][T25692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7712'. [ 2203.481723][T25701] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7715'. [ 2204.288444][T25709] loop7: detected capacity change from 0 to 64 [ 2204.839123][T23304] VFS: Lookup of '.¨' in minix loop7 would have caused loop [ 2204.894107][T23304] VFS: Lookup of '.¨' in minix loop7 would have caused loop [ 2205.500072][T21509] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2205.684689][T25721] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 2205.701363][T21509] usb 10-1: Using ep0 maxpacket: 8 [ 2205.804564][T21509] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2205.814397][T21509] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.903037][T21509] usb 10-1: config 0 descriptor?? [ 2206.195288][T21509] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2206.495394][ T4453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2206.504463][ T4453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.838506][ T4171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2206.847875][ T4171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.882516][T21509] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2206.893224][T21509] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 2206.926828][T21509] asix 10-1:0.0: probe with driver asix failed with error -71 [ 2206.990932][T21509] usb 10-1: USB disconnect, device number 18 [ 2209.087901][T25734] macvtap1: entered allmulticast mode [ 2209.094562][T25734] veth0_macvtap: entered allmulticast mode [ 2209.147841][T25732] tap0: tun_chr_ioctl cmd 1074025677 [ 2209.154564][T25732] tap0: linktype set to 769 [ 2209.200220][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2209.226430][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2209.242015][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2209.266400][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2209.281218][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2209.561470][T25736] lo speed is unknown, defaulting to 1000 [ 2210.823911][T25736] chnl_net:caif_netlink_parms(): no params data found [ 2211.107499][T25755] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 2211.399907][ T5796] Bluetooth: hci4: command tx timeout [ 2211.480794][T20826] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2211.528977][T25757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7737'. [ 2212.775872][T25770] loop3: detected capacity change from 0 to 2048 [ 2212.826285][T25770] EXT4-fs: Ignoring removed mblk_io_submit option [ 2212.935432][T25770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2212.953671][T25779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7743'. [ 2213.066304][T25770] EXT4-fs error (device loop3): ext4_read_inline_dir:1501: inode #12: block 5: comm syz.3.7741: path /410/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 2213.138334][T25736] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.149697][T25736] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.158097][T25736] bridge_slave_0: entered allmulticast mode [ 2213.173988][T25736] bridge_slave_0: entered promiscuous mode [ 2213.251144][T25770] EXT4-fs (loop3): Remounting filesystem read-only [ 2213.252506][T25736] bridge0: port 2(bridge_slave_1) entered blocking state [ 2213.269038][T25736] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.277662][T25736] bridge_slave_1: entered allmulticast mode [ 2213.288839][T25736] bridge_slave_1: entered promiscuous mode [ 2213.490060][ T5796] Bluetooth: hci4: command tx timeout [ 2213.598692][T25736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2213.670646][T25781] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7745'. [ 2213.680098][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2213.692824][T25781] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2213.747400][T25736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2214.166395][T25736] team0: Port device team_slave_0 added [ 2214.197271][T25784] loop9: detected capacity change from 0 to 1024 [ 2214.254968][T25736] team0: Port device team_slave_1 added [ 2214.297747][T25784] EXT4-fs: Ignoring removed bh option [ 2214.424609][T25784] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2214.610007][T25736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2214.617357][T25736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2214.656936][T25736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2214.698226][T25784] EXT4-fs error (device loop9): ext4_map_blocks:708: inode #3: block 1: comm syz.9.7746: lblock 1 mapped to illegal pblock 1 (length 1) [ 2214.722018][T25736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2214.732595][T25736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2214.773660][T25736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2214.898864][T25784] EXT4-fs (loop9): Remounting filesystem read-only [ 2214.906780][T25784] Quota error (device loop9): write_blk: dquota write failed [ 2214.918512][T25784] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2214.930687][T25784] EXT4-fs (loop9): 1 orphan inode deleted [ 2214.943448][T25784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2215.101185][T25784] EXT4-fs (loop9): shut down requested (1) [ 2215.220333][T25736] hsr_slave_0: entered promiscuous mode [ 2215.232589][T25736] hsr_slave_1: entered promiscuous mode [ 2215.242917][T25736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2215.258390][T25736] Cannot create hsr debugfs directory [ 2215.471634][T25795] netlink: 'syz.2.7750': attribute type 4 has an invalid length. [ 2215.483318][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7750'. [ 2215.583789][ T5796] Bluetooth: hci4: command tx timeout [ 2215.736222][T20701] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2216.014107][T25799] pim6reg: tun_chr_ioctl cmd 2147767520 [ 2216.884516][T25807] sctp: [Deprecated]: syz.0.7757 (pid 25807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2216.884516][T25807] Use struct sctp_sack_info instead [ 2217.056299][T25736] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.331185][T25736] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.597540][T25736] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.640345][ T5796] Bluetooth: hci4: command tx timeout [ 2217.884134][T25736] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.522298][T25736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2218.645309][T25736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2218.762653][T25736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2218.901163][T25736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2219.263384][T25827] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7765'. [ 2220.331552][T25736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2220.637109][T25736] 8021q: adding VLAN 0 to HW filter on device team0 [ 2220.744440][T12181] bridge0: port 1(bridge_slave_0) entered blocking state [ 2220.752331][T12181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2220.876302][T12181] bridge0: port 2(bridge_slave_1) entered blocking state [ 2220.884236][T12181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2221.371394][T25846] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7773'. [ 2221.446501][T25845] pim6reg: tun_chr_ioctl cmd 1074025677 [ 2221.453629][T25845] pim6reg: linktype set to 776 [ 2223.089136][T25862] IPv6: NLM_F_CREATE should be specified when creating new route [ 2223.476767][T25867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7783'. [ 2223.734902][T25736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2225.253847][ T30] audit: type=1326 audit(1744028477.597:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.276475][ C0] vkms_vblank_simulate: vblank timer overrun [ 2225.283827][ T30] audit: type=1326 audit(1744028477.637:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.551808][ T30] audit: type=1326 audit(1744028477.697:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.575234][ C0] vkms_vblank_simulate: vblank timer overrun [ 2225.585513][ T30] audit: type=1326 audit(1744028477.697:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.608240][ C0] vkms_vblank_simulate: vblank timer overrun [ 2225.621926][ T30] audit: type=1326 audit(1744028477.697:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.644610][ C0] vkms_vblank_simulate: vblank timer overrun [ 2225.651904][ T30] audit: type=1326 audit(1744028477.767:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.674999][ C0] vkms_vblank_simulate: vblank timer overrun [ 2225.682181][ T30] audit: type=1326 audit(1744028477.767:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.711115][ T30] audit: type=1326 audit(1744028477.777:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.737729][ T30] audit: type=1326 audit(1744028477.787:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.760641][ C0] vkms_vblank_simulate: vblank timer overrun [ 2225.768074][ T30] audit: type=1326 audit(1744028477.787:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25886 comm="syz.3.7791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2225.790920][ C0] vkms_vblank_simulate: vblank timer overrun [ 2226.432344][T25900] loop9: detected capacity change from 0 to 512 [ 2226.485203][T25900] EXT4-fs: Ignoring removed bh option [ 2226.562008][T25900] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2226.711542][T25900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 2226.782157][T25900] EXT4-fs error (device loop9): ext4_iget_extra_inode:4692: inode #15: comm syz.9.7797: corrupted in-inode xattr: e_value size too large [ 2226.848054][T25900] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.7797: couldn't read orphan inode 15 (err -117) [ 2226.979575][T25900] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2227.223713][T25736] veth0_vlan: entered promiscuous mode [ 2227.368794][T25736] veth1_vlan: entered promiscuous mode [ 2227.522218][T25909] input: syz1 as /devices/virtual/input/input39 [ 2227.807394][T20701] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2227.841732][T25736] veth0_macvtap: entered promiscuous mode [ 2227.902864][T25736] veth1_macvtap: entered promiscuous mode [ 2228.224738][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.235706][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.246204][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.268136][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.280797][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.295191][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.305582][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.316435][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.329950][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.340848][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.351125][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.375130][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.389523][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.403690][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.414283][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.425692][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.441277][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.453034][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.471466][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.487770][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.498317][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.512413][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.522750][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.533632][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.546973][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.558250][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.576459][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.593129][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.604300][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.615887][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.629640][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.641345][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.652290][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.666295][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.685105][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2228.702431][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.718939][T25736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2228.930752][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2228.947957][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.958423][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2228.972651][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2228.990912][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.007935][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.019102][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.033401][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.044216][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.055297][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.069070][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.087628][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.104157][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.115066][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.125291][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.139525][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.149844][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.164223][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.174594][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.185450][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.206585][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.219886][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.233248][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.244258][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.254493][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.268568][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.287025][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.303661][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.314082][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.326978][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.340467][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.351411][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.361747][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.375740][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.393917][T25736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.413905][T25736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.431885][T25736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2229.465913][T25736] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.478860][T25736] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.501068][T25736] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.516242][T25736] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2231.952629][T22938] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2232.159020][T22938] usb 4-1: Using ep0 maxpacket: 16 [ 2232.234792][T22938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2232.247489][T22938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2232.267502][T22938] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2232.280032][T22938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.486400][T22938] usb 4-1: config 0 descriptor?? [ 2232.983663][T22938] savu 0003:1E7D:2D5A.0034: unknown main item tag 0x0 [ 2232.991186][T22938] savu 0003:1E7D:2D5A.0034: unknown main item tag 0x0 [ 2232.998345][T22938] savu 0003:1E7D:2D5A.0034: unknown main item tag 0x0 [ 2233.006980][T22938] savu 0003:1E7D:2D5A.0034: unknown main item tag 0x0 [ 2233.018109][T22938] savu 0003:1E7D:2D5A.0034: unknown main item tag 0x0 [ 2233.165718][T22938] savu 0003:1E7D:2D5A.0034: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 2233.324407][T22938] usb 4-1: USB disconnect, device number 29 [ 2234.204698][T25971] netlink: 'syz.0.7823': attribute type 1 has an invalid length. [ 2234.213271][T25971] netlink: 'syz.0.7823': attribute type 2 has an invalid length. [ 2234.354039][T25971] netlink: 'syz.0.7823': attribute type 1 has an invalid length. [ 2234.364089][T25971] netlink: 'syz.0.7823': attribute type 2 has an invalid length. [ 2236.608517][T25989] loop9: detected capacity change from 0 to 2048 [ 2236.725135][T25989] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 2236.728165][T25997] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7831'. [ 2236.734800][T25989] UDF-fs: Scanning with blocksize 512 failed [ 2236.926228][T25989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2238.081842][T20907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2238.097454][T20907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2238.534822][ T4453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2238.544006][ T4453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2238.708529][T26013] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.7839'. [ 2238.718945][T26013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2239.063658][T26015] loop9: detected capacity change from 0 to 2048 [ 2239.168676][T26018] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 2239.186053][T26020] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2239.205083][T26018] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2239.221108][T26018] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2239.247291][ C0] vkms_vblank_simulate: vblank timer overrun [ 2239.255836][T26018] batman_adv: batadv0: Interface activated: ip6gretap1 [ 2239.467245][T26015] NILFS (loop9): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 2239.478761][T26015] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=13) [ 2239.590389][T26015] Remounting filesystem read-only [ 2239.596023][T26015] NILFS (loop9): error -5 truncating bmap (ino=13) [ 2240.106186][T20701] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 2240.381534][T26031] netlink: 452 bytes leftover after parsing attributes in process `syz.5.7725'. [ 2242.649671][ T3426] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 2242.813989][T26063] loop3: detected capacity change from 0 to 256 [ 2242.890055][T26063] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2242.914788][T26063] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 2243.235346][T26063] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 2243.363432][T26068] loop9: detected capacity change from 0 to 128 [ 2243.467191][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.473787][T26063] exFAT-fs (loop3): Filesystem has been set read-only [ 2243.484512][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 8, err : -5) [ 2243.493403][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2243.495921][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.527105][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 8, err : -5) [ 2243.541776][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.548047][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 9, err : -5) [ 2243.562811][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.570122][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 10, err : -5) [ 2243.581723][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.588582][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 11, err : -5) [ 2243.605746][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.612362][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 12, err : -5) [ 2243.635521][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.651345][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 13, err : -5) [ 2243.663790][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.673591][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 14, err : -5) [ 2243.684314][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.691266][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 15, err : -5) [ 2243.705925][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.712340][T26063] exFAT-fs (loop3): error, failed to bmap (inode : ffff888125603170 iblock : 16, err : -5) [ 2243.734776][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.747780][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.757403][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.763982][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.773698][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.781172][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.787625][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.796396][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.807953][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.815964][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.835807][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.849378][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.855682][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.862768][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.869033][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.878585][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.886724][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.894017][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.903660][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.910116][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.916389][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.934829][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.936518][ T30] audit: type=1800 audit(1744028496.287:308): pid=26068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.7860" name="file2" dev="loop9" ino=336 res=0 errno=0 [ 2243.948715][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.973095][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.979579][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.985843][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.992445][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2243.998724][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2244.008350][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2244.014851][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2244.021448][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2244.039054][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2244.053882][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2244.060610][T26063] exFAT-fs (loop3): error, broken FAT chain. [ 2244.149762][ T30] audit: type=1800 audit(1744028496.417:309): pid=26063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7859" name="file1" dev="loop3" ino=335 res=0 errno=0 [ 2246.081055][T21509] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2246.290014][T21509] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2246.299844][T21509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.370738][T21509] usb 4-1: config 0 descriptor?? [ 2246.413968][T21509] cp210x 4-1:0.0: cp210x converter detected [ 2246.933729][T21509] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2247.071255][T21509] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2247.174623][T22938] usb 4-1: USB disconnect, device number 30 [ 2247.236697][T22938] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2247.295417][T22938] cp210x 4-1:0.0: device disconnected [ 2247.456150][T26105] loop5: detected capacity change from 0 to 736 [ 2247.818698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 2247.833204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 2248.094412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 2248.114321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 2248.329759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 2250.217229][T26130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7888'. [ 2250.230852][T26130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7888'. [ 2251.971836][ T30] audit: type=1326 audit(1744028504.317:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26148 comm="syz.0.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311f78d169 code=0x7ffc0000 [ 2252.131881][ T30] audit: type=1326 audit(1744028504.377:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26148 comm="syz.0.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f311f78d169 code=0x7ffc0000 [ 2252.156460][ C0] vkms_vblank_simulate: vblank timer overrun [ 2252.174207][ T30] audit: type=1326 audit(1744028504.377:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26148 comm="syz.0.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311f78d169 code=0x7ffc0000 [ 2252.198370][ T30] audit: type=1326 audit(1744028504.397:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26148 comm="syz.0.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311f78d169 code=0x7ffc0000 [ 2252.227735][ T30] audit: type=1326 audit(1744028504.427:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26148 comm="syz.0.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f311f78d169 code=0x7ffc0000 [ 2252.256723][ T30] audit: type=1326 audit(1744028504.427:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26148 comm="syz.0.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311f78d169 code=0x7ffc0000 [ 2252.285334][ T30] audit: type=1326 audit(1744028504.457:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26148 comm="syz.0.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f311f78d169 code=0x7ffc0000 [ 2252.313574][ C0] vkms_vblank_simulate: vblank timer overrun [ 2252.328879][ T30] audit: type=1326 audit(1744028504.457:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26148 comm="syz.0.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311f78d169 code=0x7ffc0000 [ 2253.714533][T26164] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7904'. [ 2255.470800][T26182] loop5: detected capacity change from 0 to 256 [ 2255.618148][T26182] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 2255.671658][T26187] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2256.506522][T26192] syz.9.7917: attempt to access beyond end of device [ 2256.506522][T26192] loop19: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2256.532943][T26192] EXT4-fs (loop19): unable to read superblock [ 2256.948487][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2256.955557][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2258.651261][T26221] loop9: detected capacity change from 0 to 128 [ 2258.725067][T26221] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 2258.850966][T26221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2261.442690][T26251] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7944'. [ 2263.361149][T26271] loop9: detected capacity change from 0 to 2048 [ 2263.418904][T26271] udf: Unknown parameter '0xffffffffffffffff00000000000000000000̉aƒûÙ¸w›WÍ)Ò.Noêð›†)‰l_ýSœ€8*' [ 2264.024428][T26278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7957'. [ 2265.568086][T26294] xt_CT: No such helper "snmp" [ 2266.816056][T26314] program syz.0.7972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2267.315105][T26318] loop9: detected capacity change from 0 to 512 [ 2267.364581][T26318] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2267.412845][T26318] Quota error (device loop9): v2_read_file_info: Block with free entry 2 out of range (1, 0). [ 2267.425735][T26318] EXT4-fs warning (device loop9): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2267.567930][T26318] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 2267.624903][T26318] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #13: comm syz.9.7975: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 2267.726619][T26318] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.7975: couldn't read orphan inode 13 (err -117) [ 2267.818730][T26318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback. [ 2268.596806][T20701] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0b00-0000-000000000000. [ 2270.079908][T26351] loop9: detected capacity change from 0 to 256 [ 2270.156582][T26351] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 2270.220686][T26351] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 2270.234189][T26351] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 2270.254723][T26351] UDF-fs: Scanning with blocksize 512 failed [ 2270.306624][T26351] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 2270.396557][T26351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2271.521951][T26366] bond_slave_0: entered promiscuous mode [ 2271.528056][T26366] bond_slave_1: entered promiscuous mode [ 2271.534524][T26366] macvlan3: entered promiscuous mode [ 2271.540373][T26366] bond0: entered promiscuous mode [ 2271.548671][T26366] macvlan3: entered allmulticast mode [ 2271.554586][T26366] bond0: entered allmulticast mode [ 2271.560259][T26366] bond_slave_0: entered allmulticast mode [ 2271.566282][T26366] bond_slave_1: entered allmulticast mode [ 2271.587681][T26366] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2271.603477][T26366] bond0: left allmulticast mode [ 2271.608778][T26366] bond_slave_0: left allmulticast mode [ 2271.614899][T26366] bond_slave_1: left allmulticast mode [ 2271.621139][T26366] bond0: left promiscuous mode [ 2271.629577][T26366] bond_slave_0: left promiscuous mode [ 2271.635395][T26366] bond_slave_1: left promiscuous mode [ 2272.970918][T26372] loop5: detected capacity change from 0 to 32768 [ 2273.239632][T26372] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 2273.261433][T26372] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 2273.271338][T26372] bcachefs (loop5): Version upgrade required: [ 2273.271338][T26372] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 2273.271338][T26372] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 2273.271338][T26372] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 2273.343413][ C0] vkms_vblank_simulate: vblank timer overrun [ 2273.362771][T26372] bcachefs (loop5): dropping and reconstructing all alloc info [ 2273.458465][T26372] bcachefs (loop5): accounting_read... done [ 2273.467249][T26372] bcachefs (loop5): alloc_read... done [ 2273.473962][T26372] bcachefs (loop5): snapshots_read... done [ 2273.487055][T26372] bcachefs (loop5): done starting filesystem [ 2273.750064][T25736] bcachefs (loop5): shutting down [ 2273.790731][T26388] netlink: 'syz.2.7999': attribute type 11 has an invalid length. [ 2273.868079][T26389] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2273.947090][T25736] bcachefs (loop5): shutdown complete [ 2275.494029][ T8289] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2277.241507][T26415] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8013'. [ 2278.261094][T26422] loop3: detected capacity change from 0 to 512 [ 2278.369751][T26422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2278.624182][T26422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2278.645334][T26422] ext4 filesystem being mounted at /469/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2279.085942][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2281.442201][T26448] loop5: detected capacity change from 0 to 64 [ 2281.943577][T26452] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2282.892014][T26462] vcan0: tx drop: invalid da for name 0x0000000000008000 [ 2284.570275][ T30] audit: type=1326 audit(1744028536.917:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2284.599973][ T30] audit: type=1326 audit(1744028536.917:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2284.623423][ C0] vkms_vblank_simulate: vblank timer overrun [ 2284.804741][T26486] syz_tun: entered promiscuous mode [ 2284.850321][ T30] audit: type=1326 audit(1744028537.027:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2284.877117][ T30] audit: type=1326 audit(1744028537.107:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2284.910795][ T30] audit: type=1326 audit(1744028537.177:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2284.939806][ T30] audit: type=1326 audit(1744028537.177:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a8d8d169 code=0x7ffc0000 [ 2284.966972][ T30] audit: type=1326 audit(1744028537.177:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc3a8d84127 code=0x7ffc0000 [ 2285.000047][ T30] audit: type=1326 audit(1744028537.177:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc3a8d29359 code=0x7ffc0000 [ 2285.029899][ T30] audit: type=1326 audit(1744028537.177:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc3a8d84127 code=0x7ffc0000 [ 2285.056139][ T30] audit: type=1326 audit(1744028537.177:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26481 comm="syz.3.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc3a8d29359 code=0x7ffc0000 [ 2285.131131][T26486] syz_tun: left promiscuous mode [ 2286.312761][T26498] loop9: detected capacity change from 0 to 512 [ 2286.405127][T26498] EXT4-fs: Ignoring removed i_version option [ 2286.460068][T26498] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2286.609996][T26498] EXT4-fs (loop9): 1 truncate cleaned up [ 2286.618467][T26498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2287.355296][T26511] netlink: 'syz.3.8055': attribute type 10 has an invalid length. [ 2287.386472][T26511] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2287.428277][T20701] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2290.588407][T26544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8070'. [ 2291.313410][T26554] loop9: detected capacity change from 0 to 64 [ 2291.412480][T26556] netlink: 'syz.3.8074': attribute type 39 has an invalid length. [ 2291.457334][T26556] bridge0: port 1(bridge_slave_0) entered disabled state [ 2291.596111][T26556] bridge_slave_0 (unregistering): left allmulticast mode [ 2291.604301][T26556] bridge_slave_0 (unregistering): left promiscuous mode [ 2291.612761][T26556] bridge0: port 1(bridge_slave_0) entered disabled state [ 2293.191963][T26570] loop3: detected capacity change from 0 to 2048 [ 2293.258675][T26570] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2293.405625][T26579] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2293.581003][T26570] NILFS (loop3): failed to count free inodes: err=-34 [ 2293.594482][T26570] NILFS (loop3): failed to count free inodes: err=-34 [ 2293.765950][T26581] Illegal XDP return value 16128 on prog (id 493) dev lo, expect packet loss! [ 2293.966309][T26583] Failed to get privilege flags for destination (handle=0x2:0x0) [ 2294.844720][T20660] Bluetooth: hci2: command 0x0406 tx timeout [ 2295.352175][T26598] sctp: [Deprecated]: syz.9.8093 (pid 26598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2295.352175][T26598] Use struct sctp_sack_info instead [ 2296.427353][T26607] ptrace attach of "./syz-executor exec"[25736] was attempted by "./syz-executor exec"[26607] [ 2296.815980][T21509] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 2298.016809][T21509] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2298.028684][T21509] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 2298.040301][T21509] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2298.054398][T21509] usb 10-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2298.064733][T21509] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2298.473518][T21509] usb 10-1: config 0 descriptor?? [ 2298.482846][T26604] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2298.906184][T21509] usbhid 10-1:0.0: can't add hid device: -71 [ 2298.921884][T21509] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2298.993890][T21509] usb 10-1: USB disconnect, device number 19 [ 2300.067534][T26634] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 2300.073940][T26634] [U] J"—e:ÀÆ" [ 2300.545190][T26640] loop3: detected capacity change from 0 to 512 [ 2300.784303][T26640] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.8113: corrupted in-inode xattr: invalid ea_ino [ 2300.900429][T26640] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.8113: couldn't read orphan inode 15 (err -117) [ 2301.006249][T26640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2301.766701][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2303.893425][T26676] loop9: detected capacity change from 0 to 256 [ 2303.957514][T26676] exfat: Deprecated parameter 'utf8' [ 2303.964552][T26676] exfat: Deprecated parameter 'namecase' [ 2303.971022][T26676] exfat: Deprecated parameter 'namecase' [ 2304.067677][T26676] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 2305.858934][T26696] loop3: detected capacity change from 0 to 1024 [ 2306.444827][T26696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2307.482103][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2307.738669][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2309.352246][T26719] loop9: detected capacity change from 0 to 32768 [ 2312.452902][T26741] loop3: detected capacity change from 0 to 32768 [ 2312.707285][T26741] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 2312.730318][T26741] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 2312.745960][T26741] bcachefs (loop3): Version upgrade required: [ 2312.745960][T26741] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 2312.745960][T26741] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 2312.745960][T26741] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 2312.819561][ C0] vkms_vblank_simulate: vblank timer overrun [ 2312.850585][T26741] bcachefs (loop3): dropping and reconstructing all alloc info [ 2312.915013][T26741] bcachefs (loop3): accounting_read... done [ 2312.927532][T26741] bcachefs (loop3): alloc_read... done [ 2312.934720][T26741] bcachefs (loop3): snapshots_read... done [ 2312.949912][T26741] bcachefs (loop3): check_allocations... done [ 2313.113900][T26741] bcachefs (loop3): going read-write [ 2313.223115][T26754] loop9: detected capacity change from 0 to 512 [ 2313.365822][T26741] bcachefs (loop3): done starting filesystem [ 2313.547305][T26754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2313.570936][T26754] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2313.798290][T20656] bcachefs (loop3): shutting down [ 2313.805129][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2313.805215][ T30] audit: type=1326 audit(1744028566.147:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26753 comm="syz.9.8153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebf8d169 code=0x7ffc0000 [ 2313.813566][ T30] audit: type=1326 audit(1744028566.167:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26753 comm="syz.9.8153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f16ebf8d169 code=0x7ffc0000 [ 2313.838515][ C0] vkms_vblank_simulate: vblank timer overrun [ 2313.839958][T20656] bcachefs (loop3): going read-only [ 2313.840081][T20656] bcachefs (loop3): finished waiting for writes to stop [ 2313.962247][ T30] audit: type=1326 audit(1744028566.287:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26753 comm="syz.9.8153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebf8d169 code=0x7ffc0000 [ 2313.995646][ T30] audit: type=1800 audit(1744028566.297:337): pid=26764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8162" name="nullb0" dev="devtmpfs" ino=3464 res=0 errno=0 [ 2314.005086][T20656] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 2314.018272][ T30] audit: type=1326 audit(1744028566.307:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26753 comm="syz.9.8153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ebf8d169 code=0x7ffc0000 [ 2314.052308][ C0] vkms_vblank_simulate: vblank timer overrun [ 2314.160953][T20656] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 2314.316480][T20656] bcachefs (loop3): unclean shutdown complete, journal seq 12 [ 2314.410610][T20656] bcachefs (loop3): done going read-only, filesystem not clean [ 2314.532417][T20701] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2314.615457][T20656] bcachefs (loop3): shutdown complete [ 2317.517323][T26787] loop9: detected capacity change from 0 to 32768 [ 2317.762655][T26787] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 2317.944029][T20701] ocfs2: Unmounting device (7,9) on (node local) [ 2318.391099][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2318.398271][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2319.257015][T26812] loop5: detected capacity change from 0 to 1024 [ 2323.257084][T26832] lo speed is unknown, defaulting to 1000 [ 2323.264038][T26832] lo speed is unknown, defaulting to 1000 [ 2323.271469][T26832] lo speed is unknown, defaulting to 1000 [ 2323.338380][T26832] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2323.556605][T26832] lo speed is unknown, defaulting to 1000 [ 2323.566340][T26832] lo speed is unknown, defaulting to 1000 [ 2323.575789][T26832] lo speed is unknown, defaulting to 1000 [ 2323.594600][T26832] lo speed is unknown, defaulting to 1000 [ 2323.606711][T26832] lo speed is unknown, defaulting to 1000 [ 2323.615923][T26832] lo speed is unknown, defaulting to 1000 [ 2323.626326][T26832] lo speed is unknown, defaulting to 1000 [ 2323.636938][T26832] lo speed is unknown, defaulting to 1000 [ 2323.646557][T26832] lo speed is unknown, defaulting to 1000 [ 2323.656182][T26832] lo speed is unknown, defaulting to 1000 [ 2323.665751][T26832] lo speed is unknown, defaulting to 1000 [ 2323.675042][T26832] lo speed is unknown, defaulting to 1000 [ 2323.684550][T26832] lo speed is unknown, defaulting to 1000 [ 2323.702991][T26832] lo speed is unknown, defaulting to 1000 [ 2323.712518][T26832] lo speed is unknown, defaulting to 1000 [ 2323.722802][T26832] lo speed is unknown, defaulting to 1000 [ 2323.732369][T26832] lo speed is unknown, defaulting to 1000 [ 2323.742814][T26832] lo speed is unknown, defaulting to 1000 [ 2323.752758][T26832] lo speed is unknown, defaulting to 1000 [ 2323.762215][T26832] lo speed is unknown, defaulting to 1000 [ 2323.771589][T26832] lo speed is unknown, defaulting to 1000 [ 2323.781172][T26832] lo speed is unknown, defaulting to 1000 [ 2323.790583][T26832] lo speed is unknown, defaulting to 1000 [ 2323.806847][T26832] lo speed is unknown, defaulting to 1000 [ 2323.820036][T26832] lo speed is unknown, defaulting to 1000 [ 2323.829606][T26832] lo speed is unknown, defaulting to 1000 [ 2323.839806][T26832] lo speed is unknown, defaulting to 1000 [ 2323.849824][T26832] lo speed is unknown, defaulting to 1000 [ 2323.859072][T26832] lo speed is unknown, defaulting to 1000 [ 2323.869500][T26832] lo speed is unknown, defaulting to 1000 [ 2323.885810][T26832] lo speed is unknown, defaulting to 1000 [ 2323.905386][T26832] lo speed is unknown, defaulting to 1000 [ 2324.047535][T20660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2324.070736][T20660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2324.153243][T20660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2324.168268][T20660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2324.184157][T20660] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2324.283998][T26843] input: syz0 as /devices/virtual/input/input43 [ 2324.530199][T26837] lo speed is unknown, defaulting to 1000 [ 2324.543312][T26837] lo speed is unknown, defaulting to 1000 [ 2325.585289][T10296] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 2325.708131][T10296] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2325.837630][T26837] chnl_net:caif_netlink_parms(): no params data found [ 2326.283376][T20660] Bluetooth: hci4: command tx timeout [ 2326.383087][T26858] mkiss: ax0: crc mode is auto. [ 2327.824195][T26837] bridge0: port 1(bridge_slave_0) entered blocking state [ 2327.838405][T26837] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.847481][T26837] bridge_slave_0: entered allmulticast mode [ 2327.859037][T26837] bridge_slave_0: entered promiscuous mode [ 2328.032605][T26837] bridge0: port 2(bridge_slave_1) entered blocking state [ 2328.041698][T26837] bridge0: port 2(bridge_slave_1) entered disabled state [ 2328.054195][T26837] bridge_slave_1: entered allmulticast mode [ 2328.067388][T26837] bridge_slave_1: entered promiscuous mode [ 2328.366976][T20660] Bluetooth: hci4: command tx timeout [ 2328.685011][T26837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2329.712349][T26837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2329.782724][T26883] loop3: detected capacity change from 0 to 32768 [ 2330.183195][T26837] team0: Port device team_slave_0 added [ 2330.286151][T26837] team0: Port device team_slave_1 added [ 2330.460673][T20660] Bluetooth: hci4: command tx timeout [ 2330.627595][T26837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2330.635920][T26837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2330.676696][T26837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2330.708320][T26837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2330.715895][T26837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2330.746126][T26837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2331.756128][T26837] hsr_slave_0: entered promiscuous mode [ 2331.773833][T26837] hsr_slave_1: entered promiscuous mode [ 2331.802904][T26837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2331.811055][T26837] Cannot create hsr debugfs directory [ 2332.530183][T20660] Bluetooth: hci4: command tx timeout [ 2333.621069][T26908] loop9: detected capacity change from 0 to 256 [ 2333.637754][T26908] exfat: Deprecated parameter 'utf8' [ 2333.646517][T26908] exfat: Deprecated parameter 'utf8' [ 2333.654450][T26908] exfat: Deprecated parameter 'utf8' [ 2333.910058][T26908] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 2334.209598][T26837] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.560673][T26837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.595720][T26912] loop3: detected capacity change from 0 to 1024 [ 2334.803469][T26837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.942879][T26912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2335.015960][T26837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.804939][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2335.955115][T26837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2336.013610][T26837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2336.113620][T26837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2336.234085][T26837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2338.013969][T26837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2338.388107][T26837] 8021q: adding VLAN 0 to HW filter on device team0 [ 2338.575573][T20907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2338.583630][T20907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2338.763722][T20907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2338.772126][T20907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2339.096344][T26948] loop3: detected capacity change from 0 to 256 [ 2339.417093][ T30] audit: type=1800 audit(1744028591.767:339): pid=26948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8234" name="file2" dev="loop3" ino=353 res=0 errno=0 [ 2339.491649][T26899] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2342.153662][T26837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2342.894311][T26977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2343.181348][T26837] veth0_vlan: entered promiscuous mode [ 2343.338621][T26837] veth1_vlan: entered promiscuous mode [ 2343.922780][T26837] veth0_macvtap: entered promiscuous mode [ 2344.035852][T26837] veth1_macvtap: entered promiscuous mode [ 2344.208504][T26988] tipc: Started in network mode [ 2344.215274][T26988] tipc: Node identity 7, cluster identity 4711 [ 2344.222489][T26988] tipc: Node number set to 7 [ 2344.323555][T10296] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 2344.453287][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.464733][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.475391][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.494657][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.507360][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.520365][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.534659][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.545995][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.556919][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.577466][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.601169][ C0] vkms_vblank_simulate: vblank timer overrun [ 2344.618312][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.624474][T10296] usb 10-1: config index 0 descriptor too short (expected 34, got 27) [ 2344.630018][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.640867][T10296] usb 10-1: config 0 has an invalid interface number: 170 but max is 0 [ 2344.649729][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.649860][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.649981][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.650095][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.650207][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.650318][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.650462][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.650574][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.650686][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.650799][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.650903][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.651019][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.651133][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.651242][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.651352][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.651461][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.651564][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.651676][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.651796][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.651908][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.652022][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.652136][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.652253][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.652366][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.652480][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.652592][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.660129][T26837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2344.663942][T10296] usb 10-1: config 0 has no interface number 0 [ 2345.035967][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.042081][T10296] usb 10-1: config 0 interface 170 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2345.042288][T10296] usb 10-1: config 0 interface 170 has no altsetting 0 [ 2345.085500][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.103283][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.117270][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.127813][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.139292][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.149678][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.163187][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.174470][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.185588][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.203304][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.215928][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.227198][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.245751][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.257445][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.269367][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.280340][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.291296][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.307860][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.322848][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.326085][T10296] usb 10-1: config index 1 descriptor too short (expected 34, got 27) [ 2345.337113][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.337239][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.337337][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.337436][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.346066][T10296] usb 10-1: config 0 has an invalid interface number: 170 but max is 0 [ 2345.346225][T10296] usb 10-1: config 0 has no interface number 0 [ 2345.346517][T10296] usb 10-1: config 0 interface 170 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2345.358011][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.371565][T10296] usb 10-1: config 0 interface 170 has no altsetting 0 [ 2345.379574][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.396944][T10296] usb 10-1: config index 2 descriptor too short (expected 34, got 27) [ 2345.406477][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.406650][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.406775][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.406900][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.407038][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.407166][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.407293][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.407420][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.407551][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.407704][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.407856][T26837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2345.407988][T26837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2345.418252][T26837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2345.422036][T10296] usb 10-1: config 0 has an invalid interface number: 170 but max is 0 [ 2345.683744][T10296] usb 10-1: config 0 has no interface number 0 [ 2345.691080][T10296] usb 10-1: config 0 interface 170 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2345.705161][T10296] usb 10-1: config 0 interface 170 has no altsetting 0 [ 2346.106295][T10296] usb 10-1: config index 3 descriptor too short (expected 34, got 27) [ 2346.125489][T10296] usb 10-1: config 0 has an invalid interface number: 170 but max is 0 [ 2346.142231][T10296] usb 10-1: config 0 has no interface number 0 [ 2346.148830][T10296] usb 10-1: config 0 interface 170 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2346.164418][T10296] usb 10-1: config 0 interface 170 has no altsetting 0 [ 2346.250186][T26837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.262786][T26837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.272758][T26837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.283009][T26837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.398814][T10296] usb 10-1: config index 4 descriptor too short (expected 34, got 27) [ 2346.409583][T10296] usb 10-1: config 0 has an invalid interface number: 170 but max is 0 [ 2346.423894][T10296] usb 10-1: config 0 has no interface number 0 [ 2346.441095][T10296] usb 10-1: config 0 interface 170 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2346.462323][T10296] usb 10-1: config 0 interface 170 has no altsetting 0 [ 2346.470514][T10296] usb 10-1: New USB device found, idVendor=c387, idProduct=abd3, bcdDevice=60.bf [ 2346.480358][T10296] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2346.802885][T10296] usb 10-1: config 0 descriptor?? [ 2346.886120][T10296] rndis_host 10-1:0.170: skipping garbage [ 2346.895905][T10296] usb 10-1: bad CDC descriptors [ 2347.307431][T21509] usb 10-1: USB disconnect, device number 20 [ 2347.360113][T10296] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2347.577979][T10296] usb 4-1: Using ep0 maxpacket: 8 [ 2347.598812][T10296] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 2347.607934][T10296] usb 4-1: config 0 has no interface number 1 [ 2347.614645][T10296] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2347.629669][T10296] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2347.643342][T10296] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 2347.668139][T10296] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2347.681816][T10296] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2347.699054][T10296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2347.710820][T10296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2347.935117][T27012] netlink: 'syz.2.8260': attribute type 11 has an invalid length. [ 2347.980136][T10296] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2347.996383][T10296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.006853][T10296] usb 4-1: Product: syz [ 2348.012298][T10296] usb 4-1: Manufacturer: syz [ 2348.017517][T10296] usb 4-1: SerialNumber: syz [ 2348.151620][T10296] usb 4-1: config 0 descriptor?? [ 2348.160992][T27004] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2348.295983][T10296] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2348.324980][T10296] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2348.543181][T10296] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 2348.860579][T21509] usb 4-1: USB disconnect, device number 31 [ 2350.394255][T27033] sctp: [Deprecated]: syz.3.8267 (pid 27033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2350.394255][T27033] Use struct sctp_sack_info instead [ 2350.877519][T27038] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2350.888127][T27038] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 2357.749645][T20911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2357.758953][T20911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2358.118119][ T4171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2358.130780][ T4171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2359.143930][T27102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2362.126445][T27124] loop9: detected capacity change from 0 to 256 [ 2362.186662][T27124] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2363.411751][T27137] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8306'. [ 2363.679810][T27131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8303'. [ 2364.849546][T21509] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2365.088087][T27150] vlan2: entered allmulticast mode [ 2365.093846][T27150] veth0_virt_wifi: entered allmulticast mode [ 2365.206265][T21509] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2365.216744][T21509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.225744][T21509] usb 4-1: Product: syz [ 2365.230550][T21509] usb 4-1: Manufacturer: syz [ 2365.235536][T21509] usb 4-1: SerialNumber: syz [ 2365.247087][T21509] usb 4-1: config 0 descriptor?? [ 2365.961629][T21509] mos7840 4-1:0.0: required endpoints missing [ 2366.033470][T21509] usb 4-1: USB disconnect, device number 32 [ 2367.325770][T27168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8320'. [ 2367.338502][T27168] netlink: 'syz.3.8320': attribute type 20 has an invalid length. [ 2367.347315][T27168] netlink: 'syz.3.8320': attribute type 21 has an invalid length. [ 2368.107494][T27176] @ÿ: renamed from bond_slave_0 (while UP) [ 2370.153125][T10296] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2371.271597][T10296] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2371.289843][T10296] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2371.302825][T10296] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2371.321813][T10296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2371.486990][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2372.187270][T27191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2372.365636][T10296] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2372.630806][T10296] usb 4-1: USB disconnect, device number 33 [ 2372.925411][T27209] batadv_slave_1: entered promiscuous mode [ 2372.991649][T27206] batadv_slave_1: left promiscuous mode [ 2375.128271][T27221] loop1: detected capacity change from 0 to 32768 [ 2376.479990][T27236] loop3: detected capacity change from 0 to 256 [ 2376.640634][T27236] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2376.655430][T27236] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 2377.010072][T27236] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 2379.553756][T27255] loop3: detected capacity change from 0 to 64 [ 2379.653769][T27252] team0 (unregistering): Port device team_slave_0 removed [ 2379.723444][T27252] team0 (unregistering): Port device team_slave_1 removed [ 2379.845404][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2379.853064][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2379.879603][T27255] hfs: request for non-existent node 327680 in B*Tree [ 2379.887138][T27255] hfs: request for non-existent node 327680 in B*Tree [ 2380.031806][T27255] hfs: request for non-existent node 327680 in B*Tree [ 2380.040205][T27255] hfs: request for non-existent node 327680 in B*Tree [ 2380.067373][T27259] hfs: request for non-existent node 327680 in B*Tree [ 2380.075130][T27259] hfs: request for non-existent node 327680 in B*Tree [ 2380.556080][ T3498] hfs: request for non-existent node 327680 in B*Tree [ 2380.566973][ T3498] hfs: request for non-existent node 327680 in B*Tree [ 2380.717404][T27263] team_slave_0: entered promiscuous mode [ 2380.726138][T27263] team_slave_1: entered promiscuous mode [ 2380.753760][T27263] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2380.785693][T27263] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 2381.205555][T27265] loop1: detected capacity change from 0 to 1024 [ 2381.817717][T27271] program syz.9.8364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2382.491232][T27275] loop3: detected capacity change from 0 to 2048 [ 2382.627956][T27275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2382.869508][ T3426] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 2383.353242][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2384.746643][T27295] loop3: detected capacity change from 0 to 2048 [ 2384.774433][T27297] syzkaller1: entered promiscuous mode [ 2384.782673][T27297] syzkaller1: entered allmulticast mode [ 2385.010641][T27295] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2385.427452][T27301] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2385.495502][T27303] tipc: Started in network mode [ 2385.502696][T27303] tipc: Node identity ac1414aa, cluster identity 4711 [ 2385.513558][T27303] tipc: Enabled bearer , priority 10 [ 2385.760528][T27301] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 2385.776511][T27301] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 2385.980096][T27301] Remounting filesystem read-only [ 2386.443821][T20656] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 2386.688272][T10296] tipc: Node number set to 2886997162 [ 2391.444384][T27358] xt_bpf: check failed: parse error [ 2391.854792][T27359] loop3: detected capacity change from 0 to 2048 [ 2391.929028][T27359] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27742, location=27742 [ 2392.117064][T27359] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 2392.132729][T27359] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27998, location=27998 [ 2392.143530][T27359] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2392.153955][T27359] UDF-fs: Scanning with blocksize 512 failed [ 2392.232323][T27359] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27742, location=27742 [ 2392.352837][T27359] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 2392.364623][T27359] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27998, location=27998 [ 2392.368099][T27363] loop9: detected capacity change from 0 to 64 [ 2392.378506][T27359] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2392.391551][T27359] UDF-fs: Scanning with blocksize 1024 failed [ 2392.490709][T27359] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27742, location=27742 [ 2392.621805][T27359] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 2392.634445][T27359] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27998, location=27998 [ 2392.648836][T27359] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2392.658401][T27359] UDF-fs: Scanning with blocksize 2048 failed [ 2392.693169][T27359] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27742, location=27742 [ 2392.766743][T27359] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 2392.782758][T27359] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27998, location=27998 [ 2392.793558][T27359] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2392.801912][T27359] UDF-fs: Scanning with blocksize 4096 failed [ 2392.825493][T27359] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 2393.380840][T27372] lo speed is unknown, defaulting to 1000 [ 2393.391928][T27372] lo speed is unknown, defaulting to 1000 [ 2397.091609][T15726] IPVS: starting estimator thread 0... [ 2397.171170][T27410] can0: slcan on ttyS3. [ 2397.200300][T27411] IPVS: using max 240 ests per chain, 12000 per kthread [ 2397.384382][T27410] can0 (unregistered): slcan off ttyS3. [ 2399.871706][T27434] loop9: detected capacity change from 0 to 2048 [ 2400.063973][T27434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2402.814774][T27458] loop1: detected capacity change from 0 to 1024 [ 2403.177376][T27454] loop9: detected capacity change from 0 to 4096 [ 2403.446760][T27464] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2403.500071][T14764] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2403.650997][T27453] syz.9.8438: attempt to access beyond end of device [ 2403.650997][T27453] loop9: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 2403.676237][ T30] audit: type=1800 audit(1744028655.977:340): pid=27454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8438" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 2403.818479][ T30] audit: type=1800 audit(1744028656.167:341): pid=27454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8438" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 2406.911430][T27483] loop1: detected capacity change from 0 to 4096 [ 2407.130195][T27483] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 2407.451042][T27490] loop9: detected capacity change from 0 to 32768 [ 2407.610174][T27490] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 2407.917101][T27490] XFS (loop9): Ending clean mount [ 2407.934865][T27483] ntfs3(loop1): ino=19, mi_enum_attr [ 2407.941976][T27483] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 2407.964690][T27490] XFS (loop9): Quotacheck needed: Please wait. [ 2408.108343][T27490] XFS (loop9): Quotacheck: Done. [ 2408.295960][T20701] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 2408.343358][T27505] syzkaller1: entered promiscuous mode [ 2408.353030][T27505] syzkaller1: entered allmulticast mode [ 2409.386949][T27510] loop3: detected capacity change from 0 to 1024 [ 2409.476364][T27510] EXT4-fs: Ignoring removed orlov option [ 2409.483354][T27510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2409.795452][T27510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2410.274569][T10296] kernel read not supported for file /video7 (pid: 10296 comm: kworker/1:0) [ 2410.999857][T27524] Bluetooth: MGMT ver 1.23 [ 2411.106302][T20656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2412.734298][T10296] IPVS: starting estimator thread 0... [ 2412.861863][T27546] IPVS: using max 192 ests per chain, 9600 per kthread [ 2414.817545][T27600] loop9: detected capacity change from 0 to 128 [ 2416.088751][T27600] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 2416.706392][T27600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2417.566323][T27628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8478'. [ 2418.372821][T27636] batadv_slave_1: entered promiscuous mode [ 2418.497299][T27634] batadv_slave_1: left promiscuous mode [ 2419.111638][T27641] loop9: detected capacity change from 0 to 512 [ 2419.174083][T27641] EXT4-fs: Ignoring removed oldalloc option [ 2419.184796][T27641] ext4: Unknown parameter 'noacl' [ 2420.127330][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8489'. [ 2420.140538][T27651] IPVS: Error joining to the multicast group [ 2420.422244][T27655] loop9: detected capacity change from 0 to 16 [ 2420.544071][T27655] erofs (device loop9): mounted with root inode @ nid 36. [ 2420.626403][T27655] erofs (device loop9): readahead error at folio 12 @ nid 36 [ 2420.635176][T27655] erofs (device loop9): readahead error at folio 9 @ nid 36 [ 2420.644147][T27655] syz.9.8491: attempt to access beyond end of device [ 2420.644147][T27655] loop9: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 2420.680672][T27655] syz.9.8491: attempt to access beyond end of device [ 2420.680672][T27655] loop9: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 2422.365800][T27662] loop1: detected capacity change from 0 to 32768 [ 2422.948556][T27662] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 2424.303569][T27662] XFS (loop1): Ending clean mount [ 2424.488476][T27662] XFS (loop1): Quotacheck needed: Please wait. [ 2425.338484][T27684] loop9: detected capacity change from 0 to 512 [ 2425.566052][T27684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2425.814742][T27682] loop3: detected capacity change from 0 to 32768 [ 2425.913326][T27662] XFS (loop1): Quotacheck: Done. [ 2426.052278][T26837] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 2426.335727][T27682] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 2426.366799][T27682] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 2426.377300][T27682] bcachefs (loop3): Version upgrade required: [ 2426.377300][T27682] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 2426.377300][T27682] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 2426.377300][T27682] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 2426.466323][T27682] bcachefs (loop3): dropping and reconstructing all alloc info [ 2426.868527][T27682] bcachefs (loop3): accounting_read... done [ 2426.934463][T27682] bcachefs (loop3): alloc_read... done [ 2426.944138][T27682] bcachefs (loop3): snapshots_read... done [ 2426.957799][T27682] bcachefs (loop3): done starting filesystem [ 2427.376516][T20656] bcachefs (loop3): shutting down [ 2427.826784][T20656] bcachefs (loop3): shutdown complete [ 2427.867394][T20701] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2428.444900][T15726] kernel read not supported for file /video37 (pid: 15726 comm: kworker/0:3) [ 2429.194162][T27711] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 2432.365760][T27730] loop9: detected capacity change from 0 to 32768 [ 2433.003474][T27735] loop1: detected capacity change from 0 to 40427 [ 2433.061544][T27735] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3fffff [ 2433.119971][T27735] F2FS-fs (loop1): invalid crc value [ 2433.541670][T27735] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2433.818364][T26837] syz-executor: attempt to access beyond end of device [ 2433.818364][T26837] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2433.834599][T26837] CPU: 0 UID: 0 PID: 26837 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(undef) [ 2433.834796][T26837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2433.834893][T26837] Call Trace: [ 2433.834956][T26837] [ 2433.835016][T26837] dump_stack_lvl+0x216/0x2d0 [ 2433.835238][T26837] dump_stack+0x1e/0x24 [ 2433.835415][T26837] f2fs_handle_critical_error+0x9c6/0xc60 [ 2433.835658][T26837] f2fs_stop_checkpoint+0x60/0x70 [ 2433.835864][T26837] f2fs_write_end_io+0xd69/0x1e20 [ 2433.836115][T26837] ? f2fs_write_end_io+0x1401/0x1e20 [ 2433.836349][T26837] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 2433.836552][T26837] bio_endio+0xdd2/0xfa0 [ 2433.836763][T26837] submit_bio_noacct+0x223/0x2710 [ 2433.837032][T26837] submit_bio+0x58a/0x5b0 [ 2433.837240][T26837] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2433.837460][T26837] f2fs_submit_write_bio+0x9e/0x270 [ 2433.837644][T26837] __submit_merged_bio+0x175/0x6b0 [ 2433.837827][T26837] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2433.838041][T26837] f2fs_submit_merged_write_cond+0x406/0x510 [ 2433.838273][T26837] f2fs_write_data_pages+0x5103/0x58b0 [ 2433.838631][T26837] ? kmsan_get_metadata+0x13e/0x1c0 [ 2433.838823][T26837] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2433.839037][T26837] ? __update_load_avg_cfs_rq+0x11e/0x10e0 [ 2433.839259][T26837] ? kmsan_get_metadata+0x13e/0x1c0 [ 2433.839468][T26837] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 2433.839656][T26837] ? kmsan_get_metadata+0x13e/0x1c0 [ 2433.839870][T26837] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2433.840083][T26837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 2433.840296][T26837] do_writepages+0x427/0xc30 [ 2433.840511][T26837] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2433.840710][T26837] ? _raw_spin_unlock+0x30/0x50 [ 2433.840896][T26837] filemap_fdatawrite+0x1fe/0x250 [ 2433.841162][T26837] f2fs_sync_dirty_inodes+0x2d8/0xa30 [ 2433.841429][T26837] f2fs_write_checkpoint+0x1052/0x2c00 [ 2433.841806][T26837] kill_f2fs_super+0x3ac/0x8e0 [ 2433.841974][T26837] ? __pfx_kill_f2fs_super+0x10/0x10 [ 2433.842138][T26837] deactivate_locked_super+0xe0/0x3f0 [ 2433.842315][T26837] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2433.842515][T26837] deactivate_super+0x14f/0x160 [ 2433.842684][T26837] cleanup_mnt+0x6c2/0x740 [ 2433.842848][T26837] ? __pfx___cleanup_mnt+0x10/0x10 [ 2433.842997][T26837] __cleanup_mnt+0x22/0x30 [ 2433.843146][T26837] task_work_run+0x268/0x310 [ 2433.843341][T26837] syscall_exit_to_user_mode+0xbf/0x160 [ 2433.843539][T26837] do_syscall_64+0xda/0x1e0 [ 2433.843725][T26837] ? clear_bhb_loop+0x25/0x80 [ 2433.843900][T26837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2433.844077][T26837] RIP: 0033:0x7fe34e98e497 [ 2433.844197][T26837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2433.844354][T26837] RSP: 002b:00007fff70a4f3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2433.844506][T26837] RAX: 0000000000000000 RBX: 00007fe34ea0e08c RCX: 00007fe34e98e497 [ 2433.844617][T26837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff70a4f4a0 [ 2433.844717][T26837] RBP: 00007fff70a4f4a0 R08: 0000000000000000 R09: 0000000000000000 [ 2433.844820][T26837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff70a50530 [ 2433.844927][T26837] R13: 00007fe34ea0e08c R14: 0000000000252293 R15: 00007fff70a50570 [ 2433.845079][T26837] [ 2434.194929][ C0] vkms_vblank_simulate: vblank timer overrun [ 2434.220367][T26837] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2435.480451][T27594] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2436.074909][T27753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8525'. [ 2436.084871][T27753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8525'. [ 2436.114679][T27753] erspan0: entered promiscuous mode [ 2436.144904][T27753] gretap0: entered promiscuous mode [ 2436.156404][T27753] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 2437.776228][T27765] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 2437.793555][T27765] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 2440.385427][T27795] loop1: detected capacity change from 0 to 256 [ 2440.646348][T27795] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2440.887759][T27798] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 2441.266558][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2441.273934][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2443.427321][T27822] fuse: Bad value for 'fd' [ 2444.228444][T27831] netlink: 'syz.3.8557': attribute type 17 has an invalid length. [ 2444.241436][T27831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8557'. [ 2444.250969][T27831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8557'. [ 2444.550196][T15726] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2444.813132][T15726] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2444.827442][T15726] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2444.843725][T15726] usb 10-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 2444.856733][T15726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.994292][T15726] usb 10-1: config 0 descriptor?? [ 2445.493392][T27842] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2445.535559][T15726] hid_mf 0003:0079:1844.0036: unbalanced delimiter at end of report description [ 2445.616930][T15726] hid_mf 0003:0079:1844.0036: HID parse failed. [ 2445.625750][T15726] hid_mf 0003:0079:1844.0036: probe with driver hid_mf failed with error -22 [ 2445.761952][T15726] usb 10-1: USB disconnect, device number 21 [ 2446.773117][T10296] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2447.062078][T10296] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2447.072822][T10296] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2447.167645][T10296] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2447.180244][T10296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2447.196192][T10296] usb 2-1: SerialNumber: syz [ 2447.531536][T10296] usb 2-1: 0:2 : does not exist [ 2447.536819][T10296] usb 2-1: unit 120 not found! [ 2447.546964][T10296] usb 2-1: unit 102 not found! [ 2447.761308][T10296] usb 2-1: USB disconnect, device number 17 [ 2448.164488][T27868] SET target dimension over the limit! [ 2448.448634][T27851] Bluetooth: hci4: command 0x0406 tx timeout [ 2449.461922][ C1] ===================================================== [ 2449.469375][ C1] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x13aa/0x1f20 [ 2449.477685][ C1] bpf_prog_run_generic_xdp+0x13aa/0x1f20 [ 2449.483810][ C1] do_xdp_generic+0xc10/0x15a0 [ 2449.488837][ C1] __netif_receive_skb_core+0x2506/0x7510 [ 2449.494995][ C1] __netif_receive_skb+0xca/0xa00 [ 2449.500399][ C1] process_backlog+0x4ad/0xa50 [ 2449.505408][ C1] __napi_poll+0xe7/0x980 [ 2449.510090][ C1] net_rx_action+0xa5a/0x19b0 [ 2449.515025][ C1] handle_softirqs+0x1a0/0x7c0 [ 2449.520183][ C1] __do_softirq+0x14/0x1a [ 2449.524745][ C1] do_softirq+0x9a/0x100 [ 2449.529357][ C1] __local_bh_enable_ip+0x9f/0xb0 [ 2449.534632][ C1] tun_rx_batched+0x89f/0x980 [ 2449.539678][ C1] tun_get_user+0x54f3/0x6a50 [ 2449.544586][ C1] tun_chr_write_iter+0x3ac/0x5d0 [ 2449.549934][ C1] vfs_write+0xb34/0x1540 [ 2449.554496][ C1] ksys_write+0x240/0x4b0 [ 2449.559214][ C1] __x64_sys_write+0x93/0xe0 [ 2449.564100][ C1] x64_sys_call+0x34de/0x3c80 [ 2449.569042][ C1] do_syscall_64+0xcd/0x1e0 [ 2449.573937][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2449.580216][ C1] [ 2449.582674][ C1] Uninit was created at: [ 2449.587209][ C1] __kmalloc_node_track_caller_noprof+0x962/0x1260 [ 2449.594135][ C1] kmalloc_reserve+0x23e/0x4a0 [ 2449.599274][ C1] pskb_expand_head+0x21f/0x1c10 [ 2449.604471][ C1] do_xdp_generic+0x9e6/0x15a0 [ 2449.609702][ C1] __netif_receive_skb_core+0x2506/0x7510 [ 2449.615710][ C1] __netif_receive_skb+0xca/0xa00 [ 2449.621147][ C1] process_backlog+0x4ad/0xa50 [ 2449.626217][ C1] __napi_poll+0xe7/0x980 [ 2449.630967][ C1] net_rx_action+0xa5a/0x19b0 [ 2449.635947][ C1] handle_softirqs+0x1a0/0x7c0 [ 2449.641123][ C1] __do_softirq+0x14/0x1a [ 2449.645678][ C1] [ 2449.648152][ C1] CPU: 1 UID: 0 PID: 27881 Comm: syz.9.8579 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(undef) [ 2449.659040][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2449.669470][ C1] ===================================================== [ 2449.676550][ C1] Disabling lock debugging due to kernel taint [ 2449.682972][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 2449.689574][ C1] CPU: 1 UID: 0 PID: 27881 Comm: syz.9.8579 Tainted: G B 6.15.0-rc1-syzkaller #0 PREEMPT(undef) [ 2449.701817][ C1] Tainted: [B]=BAD_PAGE [ 2449.706110][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2449.716509][ C1] Call Trace: [ 2449.719933][ C1] [ 2449.722919][ C1] dump_stack_lvl+0x216/0x2d0 [ 2449.727890][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2449.734066][ C1] dump_stack+0x1e/0x24 [ 2449.738465][ C1] panic+0x4e5/0xcf0 [ 2449.742600][ C1] ? kmsan_internal_set_shadow_origin+0x60/0x100 [ 2449.749219][ C1] kmsan_report+0x2ca/0x2d0 [ 2449.753988][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2449.760059][ C1] ? __msan_warning+0x95/0x120 [ 2449.765037][ C1] ? bpf_prog_run_generic_xdp+0x13aa/0x1f20 [ 2449.771176][ C1] ? do_xdp_generic+0xc10/0x15a0 [ 2449.776314][ C1] ? __netif_receive_skb_core+0x2506/0x7510 [ 2449.782421][ C1] ? __netif_receive_skb+0xca/0xa00 [ 2449.787836][ C1] ? process_backlog+0x4ad/0xa50 [ 2449.793010][ C1] ? __napi_poll+0xe7/0x980 [ 2449.797717][ C1] ? net_rx_action+0xa5a/0x19b0 [ 2449.802794][ C1] ? handle_softirqs+0x1a0/0x7c0 [ 2449.807955][ C1] ? __do_softirq+0x14/0x1a [ 2449.812649][ C1] ? do_softirq+0x9a/0x100 [ 2449.817267][ C1] ? __local_bh_enable_ip+0x9f/0xb0 [ 2449.822684][ C1] ? tun_rx_batched+0x89f/0x980 [ 2449.827706][ C1] ? tun_get_user+0x54f3/0x6a50 [ 2449.832740][ C1] ? tun_chr_write_iter+0x3ac/0x5d0 [ 2449.838120][ C1] ? vfs_write+0xb34/0x1540 [ 2449.842848][ C1] ? ksys_write+0x240/0x4b0 [ 2449.847559][ C1] ? __x64_sys_write+0x93/0xe0 [ 2449.852531][ C1] ? x64_sys_call+0x34de/0x3c80 [ 2449.857632][ C1] ? do_syscall_64+0xcd/0x1e0 [ 2449.862510][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2449.868791][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2449.874234][ C1] ? __bpf_prog_run32+0xc2/0xf0 [ 2449.879269][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2449.885553][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2449.890977][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2449.897019][ C1] __msan_warning+0x95/0x120 [ 2449.901809][ C1] bpf_prog_run_generic_xdp+0x13aa/0x1f20 [ 2449.907817][ C1] do_xdp_generic+0xc10/0x15a0 [ 2449.912796][ C1] ? filter_irq_stacks+0x60/0x1b0 [ 2449.918109][ C1] __netif_receive_skb_core+0x2506/0x7510 [ 2449.924085][ C1] ? sched_clock_cpu+0x55/0x870 [ 2449.929128][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2449.934565][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2449.940008][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2449.945421][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2449.951443][ C1] ? __netif_receive_skb+0x95/0xa00 [ 2449.956890][ C1] ? filter_irq_stacks+0x60/0x1b0 [ 2449.962169][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2449.967601][ C1] __netif_receive_skb+0xca/0xa00 [ 2449.972827][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2449.978241][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2449.984298][ C1] ? __rcu_read_lock+0x46/0x70 [ 2449.989261][ C1] process_backlog+0x4ad/0xa50 [ 2449.994387][ C1] ? __pfx_process_backlog+0x10/0x10 [ 2449.999921][ C1] __napi_poll+0xe7/0x980 [ 2450.004536][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2450.009988][ C1] net_rx_action+0xa5a/0x19b0 [ 2450.014878][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2450.021165][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2450.026579][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2450.032606][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2450.038032][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2450.043356][ C1] handle_softirqs+0x1a0/0x7c0 [ 2450.048344][ C1] __do_softirq+0x14/0x1a [ 2450.052846][ C1] do_softirq+0x9a/0x100 [ 2450.057324][ C1] [ 2450.060412][ C1] [ 2450.063565][ C1] ? tun_rx_batched+0x37c/0x980 [ 2450.068599][ C1] __local_bh_enable_ip+0x9f/0xb0 [ 2450.073852][ C1] tun_rx_batched+0x89f/0x980 [ 2450.078743][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2450.084181][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2450.090233][ C1] tun_get_user+0x54f3/0x6a50 [ 2450.095101][ C1] ? stack_depot_save_flags+0x37/0x7e0 [ 2450.100781][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2450.106211][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2450.111618][ C1] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 2450.118225][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2450.123661][ C1] tun_chr_write_iter+0x3ac/0x5d0 [ 2450.128913][ C1] vfs_write+0xb34/0x1540 [ 2450.133472][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2450.139228][ C1] ksys_write+0x240/0x4b0 [ 2450.143822][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2450.149279][ C1] __x64_sys_write+0x93/0xe0 [ 2450.154096][ C1] x64_sys_call+0x34de/0x3c80 [ 2450.159019][ C1] do_syscall_64+0xcd/0x1e0 [ 2450.163732][ C1] ? clear_bhb_loop+0x25/0x80 [ 2450.168614][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2450.174724][ C1] RIP: 0033:0x7f16ebf8d169 [ 2450.179307][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2450.199312][ C1] RSP: 002b:00007f16ece13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2450.207951][ C1] RAX: ffffffffffffffda RBX: 00007f16ec1a5fa0 RCX: 00007f16ebf8d169 [ 2450.216098][ C1] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 2450.224252][ C1] RBP: 00007f16ec00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 2450.232386][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2450.240512][ C1] R13: 0000000000000000 R14: 00007f16ec1a5fa0 R15: 00007ffc4f78a5f8 [ 2450.248667][ C1] [ 2450.252193][ C1] Kernel Offset: disabled [ 2450.256612][ C1] Rebooting in 86400 seconds..