last executing test programs: 2.367343297s ago: executing program 0 (id=1458): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="05000000800c0000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000030400001a0000000000feff7400", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 2.30039301s ago: executing program 2 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000100039040000000000000000000003e4", @ANYBLOB="00000000000000004000128008000100736974003400028006000e0040ea000008000300ac1414bb08000c"], 0x60}}, 0x0) 2.259276839s ago: executing program 2 (id=1460): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="3751f02b82f7", 0x6}], 0x1) 2.212307076s ago: executing program 0 (id=1461): r0 = socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) 2.172026571s ago: executing program 4 (id=1462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x4}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x4, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0xa}]}}}}}}, 0x46) 2.167593788s ago: executing program 2 (id=1463): shutdown(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 2.159769766s ago: executing program 0 (id=1464): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2.092270177s ago: executing program 3 (id=1465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x4}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.092077839s ago: executing program 0 (id=1466): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, 0x0, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0xfffffffffffffffe}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.038624346s ago: executing program 4 (id=1467): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000300e3ffff7f0000003f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000004005e802c005e802000010000000000000000000000000000000000000000000000000000000000080009000000000004005e801c005e800800050000000000080005000000000008000900000000000c005e800800090000000000"], 0x84}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500001400000000002f90780000000000000000042008060000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200002800000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='veth1\x00', 0x10) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000000)={0x0, 0x1, '\x00X('}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000f14010000000000000000000800010000000000005b014f9f530ed5b3ba790600000000000000"], 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000140)={'wg1\x00', {0x2, 0x0, @empty}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r8, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000080)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.914596206s ago: executing program 2 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r3, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) 1.795295677s ago: executing program 1 (id=1469): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x9) connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486"], 0xfdef) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x6217, &(0x7f0000002b00)="$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") syz_open_dev$evdev(&(0x7f0000000280), 0xffffffffffffffff, 0x101000) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000640)=""/106, 0x6a}], 0x1, 0xfb, 0x0) 1.759490304s ago: executing program 4 (id=1470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000100039040000000000000000000003e4", @ANYBLOB="00000000000000004000128008000100736974003400028006000e0040ea000008000300ac1414bb08000c"], 0x60}}, 0x0) 1.711203829s ago: executing program 3 (id=1471): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="650033008000000008021100000108021100000150505050505000"/40], 0x84}}, 0x0) r6 = fsmount(r1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'bond0\x00', &(0x7f0000000400)=@ethtool_rxfh_indir={0x39, 0x1, [0x0]}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r7 = openat$cgroup(r6, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r8, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, 0x0, 0x40010) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_clone3(&(0x7f0000000540)={0x100006180, &(0x7f00000000c0), &(0x7f0000000280)=0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) sched_setscheduler(r11, 0x6, &(0x7f00000005c0)) 1.670788704s ago: executing program 4 (id=1472): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000002c0)='u', 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1.088515551s ago: executing program 0 (id=1473): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="05000000800c0000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000030400001a0000000000feff7400", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 951.087805ms ago: executing program 1 (id=1474): r0 = socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) 914.740479ms ago: executing program 0 (id=1475): syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 778.298376ms ago: executing program 4 (id=1476): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="3751f02b82f7", 0x6}], 0x1) 754.468962ms ago: executing program 3 (id=1477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x4}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x4, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0xa}]}}}}}}, 0x46) 725.488466ms ago: executing program 1 (id=1478): shutdown(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 719.369478ms ago: executing program 4 (id=1479): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x0, @mcast1}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x100, 0x101, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0xa}, 0xffffff64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff400c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) r3 = syz_open_dev$vim2m(&(0x7f0000000640), 0xfffffffffefffffe, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x7, @vbi={0x3, 0x3, 0x4, 0x6727201, [0x9, 0x5], [0x1, 0x100], 0x1}}}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002507739f99c037611e0668cd5456e371b9b18b2d515ed69be664167e9e9e2d8081be8051dbfc249a3893e319e5b1f1fad53b606cf2896bd0f42543c79af38ccc06dbbe987ef5261d0a9588c6dd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 519.312829ms ago: executing program 3 (id=1480): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000300e3ffff7f0000003f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000004005e802c005e802000010000000000000000000000000000000000000000000000000000000000080009000000000004005e801c005e800800050000000000080005000000000008000900000000000c005e800800090000000000"], 0x84}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500001400000000002f90780000000000000000042008060000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200002800000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='veth1\x00', 0x10) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000000)={0x0, 0x1, '\x00X('}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000f14010000000000000000000800010000000000005b014f9f530ed5b3ba790600000000000000"], 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000140)={'wg1\x00', {0x2, 0x0, @empty}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9d3fded31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000bb60bc1f1635caf0ca9eabf804adc94e0a73923976299c7ac285542e5de1dd14183f1bb171eabe19fe98f551e1b635300d8e38f07eda29341535e532a6d64ed36fac9c77827bf85ac369eac8879e515b58a03438561c5e78157649c6d45e7e621b79d724e277f1ee49e5b63e81180626a73510be26082a097de42b016336707866d422a93e01c1cbe0cefd4a89dc24b0d7f549908b8620ffd7d900a0a96a381fdd763b39f0bc0af5faf593c5d39fdf43430e4b7c23b5cf691792248cfb9ec9f882dd19a9f6e9426b4f88fe14487942bb34e585083f7b98900682e2683922a94e2f0baecc00f74071d025220bcdbc7f5575ce72981e918681b5a0b1ee9af749885fd8cefb9e182b326eaebad4616647fe1c8c16e42e123c9651f634e962219f"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r8, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000080)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 482.136416ms ago: executing program 1 (id=1481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x4}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 407.46221ms ago: executing program 2 (id=1482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000100039040000000000000000000003e4", @ANYRES32, @ANYBLOB="00000000000000004000128008000100736974003400028006000e0040ea000008000300ac1414bb08000c"], 0x60}}, 0x0) 266.841008ms ago: executing program 3 (id=1483): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, 0x0, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0xfffffffffffffffe}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 265.616965ms ago: executing program 2 (id=1484): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x9) connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486"], 0xfdef) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x6217, &(0x7f0000002b00)="$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") syz_open_dev$evdev(&(0x7f0000000280), 0xffffffffffffffff, 0x101000) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000640)=""/106, 0x6a}], 0x1, 0xfb, 0x0) 223.555812ms ago: executing program 1 (id=1485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r4, 0x4, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 80.026016ms ago: executing program 1 (id=1486): unshare(0x60600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080a0068e419007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000003b000000b70500000800000085000000080008009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3}, 0x90) 0s ago: executing program 3 (id=1487): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431", 0xb}], 0x1) kernel console output (not intermixed with test programs): [ 207.907707][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.918830][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.922273][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.926886][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.930255][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.932279][T10205] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.858: bg 0: block 40: padding at end of block bitmap is not set [ 207.933203][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.941366][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.952672][T10205] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 207.952697][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.961420][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.961854][T10205] EXT4-fs (loop0): 1 truncate cleaned up [ 207.964318][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.970699][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.970789][T10205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.973339][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.973359][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.990876][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.007652][ T9803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.010533][ T9803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.014000][ T9803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.016682][ T9803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.093091][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.111256][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.177225][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.186658][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.807166][ T8082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.815912][T10216] loop1: detected capacity change from 0 to 512 [ 208.857070][T10216] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 208.859812][T10216] EXT4-fs (loop1): orphan cleanup on readonly fs [ 208.866240][T10216] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 208.916284][T10222] loop4: detected capacity change from 0 to 1024 [ 208.923921][T10216] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 208.929446][T10216] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.861: bg 0: block 40: padding at end of block bitmap is not set [ 208.955092][T10216] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 209.051826][T10216] EXT4-fs (loop1): 1 truncate cleaned up [ 209.053945][T10216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.065367][T10222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.112552][ T7837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.125955][ T6303] Bluetooth: hci5: command 0x0406 tx timeout [ 210.127844][ T6303] Bluetooth: hci0: command 0x0406 tx timeout [ 210.483157][ T7921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.494353][T10231] loop0: detected capacity change from 0 to 32768 [ 210.508042][T10231] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.867 (10231) [ 210.553157][T10231] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 210.582927][T10251] loop3: detected capacity change from 0 to 4096 [ 210.585437][T10231] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 210.588190][T10251] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 210.590948][T10231] BTRFS info (device loop0): using free-space-tree [ 210.741065][ T8082] BTRFS info (device loop0): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 210.808856][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 211.661395][ T6311] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 211.788163][T10309] loop3: detected capacity change from 0 to 512 [ 211.838982][T10309] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 211.844598][T10309] EXT4-fs (loop3): orphan cleanup on readonly fs [ 211.846659][T10309] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 211.854296][T10309] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 211.856961][T10309] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.885: bg 0: block 40: padding at end of block bitmap is not set [ 211.940529][T10309] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 211.957380][T10309] EXT4-fs (loop3): 1 truncate cleaned up [ 212.011957][T10309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.599581][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 212.606002][T10326] loop4: detected capacity change from 0 to 1024 [ 212.764115][T10326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.446610][ T7837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.488220][ T9803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.650383][T10333] loop0: detected capacity change from 0 to 32768 [ 213.679327][T10333] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.892 (10333) [ 213.720091][T10333] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 213.737165][T10333] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 213.745849][T10333] BTRFS info (device loop0): using free-space-tree [ 213.853172][ T8082] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 214.843838][T10381] loop1: detected capacity change from 0 to 1024 [ 214.955941][T10381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.994583][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 214.999708][ T6311] Bluetooth: hci1: link tx timeout [ 215.001383][ T6311] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.631673][ T7921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.986024][T10424] loop2: detected capacity change from 0 to 128 [ 216.005150][T10424] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.087082][T10429] loop0: detected capacity change from 0 to 1024 [ 216.101245][ T9104] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.109401][T10429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.142908][ T8082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.146539][T10409] loop1: detected capacity change from 0 to 32768 [ 216.153449][T10409] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.908 (10409) [ 216.161273][T10409] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 216.165010][T10409] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 216.167712][T10409] BTRFS info (device loop1): using free-space-tree [ 216.206771][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 216.260671][ T7921] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 216.405933][T10461] loop2: detected capacity change from 0 to 512 [ 216.412904][T10461] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 216.418246][T10461] EXT4-fs (loop2): orphan cleanup on readonly fs [ 216.422611][T10461] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 216.427482][T10461] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 216.436374][T10461] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.924: bg 0: block 40: padding at end of block bitmap is not set [ 216.442605][T10461] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 216.445730][T10461] EXT4-fs (loop2): 1 truncate cleaned up [ 216.447877][T10461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.074899][ T6311] Bluetooth: hci1: command 0x0406 tx timeout [ 217.288974][T10470] loop3: detected capacity change from 0 to 128 [ 217.346592][T10470] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.359457][ T52] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 217.404658][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.410986][ T9803] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.416490][T10476] loop0: detected capacity change from 0 to 512 [ 217.430001][T10476] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 217.432328][T10476] EXT4-fs (loop0): orphan cleanup on readonly fs [ 217.441374][T10476] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 217.462772][T10476] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 217.486906][T10476] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.929: bg 0: block 40: padding at end of block bitmap is not set [ 217.502931][T10476] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 217.527150][T10476] EXT4-fs (loop0): 1 truncate cleaned up [ 217.542247][T10476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.583108][T10483] loop3: detected capacity change from 0 to 4096 [ 218.125651][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 218.308706][T10500] loop4: detected capacity change from 0 to 32768 [ 218.341612][ T8082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.345377][T10500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.938 (10500) [ 218.367802][T10513] loop3: detected capacity change from 0 to 32768 [ 218.370093][T10513] XFS: attr2 mount option is deprecated. [ 218.371598][T10513] XFS: noikeep mount option is deprecated. [ 218.376049][T10500] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.378763][T10500] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 218.381409][T10500] BTRFS info (device loop4): using free-space-tree [ 218.406055][T10513] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 218.425538][T10529] loop0: detected capacity change from 0 to 128 [ 218.446350][T10498] loop2: detected capacity change from 0 to 32768 [ 218.458866][T10498] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.936 (10498) [ 218.487933][T10529] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.491912][T10513] XFS (loop3): Ending clean mount [ 218.500311][T10498] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 218.503288][T10498] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 218.506726][T10513] XFS (loop3): Quotacheck needed: Please wait. [ 218.515031][T10498] BTRFS info (device loop2): using free-space-tree [ 218.545413][T10513] XFS (loop3): Quotacheck: Done. [ 218.547136][T10500] fs-verity (loop4, inode 258): Unknown hash algorithm number: 0 [ 218.641045][ T8082] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.678812][ T7837] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.059806][ T52] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 219.210018][ T9104] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 219.268269][ T9803] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 219.572236][T10592] loop4: detected capacity change from 0 to 128 [ 219.603220][T10592] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.820744][ T7837] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.156357][T10598] loop0: detected capacity change from 0 to 32768 [ 220.179998][T10598] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.958 (10598) [ 220.194630][T10598] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.202570][T10598] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 220.205137][T10598] BTRFS info (device loop0): using free-space-tree [ 220.408523][T10614] loop4: detected capacity change from 0 to 32768 [ 220.410929][T10614] XFS: attr2 mount option is deprecated. [ 220.412612][T10614] XFS: noikeep mount option is deprecated. [ 220.462884][T10633] loop1: detected capacity change from 0 to 1024 [ 220.470134][T10614] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 220.499005][T10633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.522979][T10614] XFS (loop4): Ending clean mount [ 220.527084][T10614] XFS (loop4): Quotacheck needed: Please wait. [ 220.547553][T10596] loop2: detected capacity change from 0 to 32768 [ 220.558805][ T7921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.559493][T10596] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.952 (10596) [ 220.575107][T10596] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.577951][T10596] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 220.583019][T10596] BTRFS info (device loop2): using free-space-tree [ 220.603764][T10614] XFS (loop4): Quotacheck: Done. [ 220.621268][T10598] fs-verity (loop0, inode 258): Unknown hash algorithm number: 0 [ 220.808879][ T8082] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.468560][ T7837] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 221.481149][ T9104] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.585564][T10680] loop0: detected capacity change from 0 to 1024 [ 221.608439][T10680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.720034][ T8082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.765649][ T52] Bluetooth: hci6: link tx timeout [ 221.767315][ T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.953236][T10695] loop4: detected capacity change from 0 to 32768 [ 221.955435][T10695] XFS: attr2 mount option is deprecated. [ 221.957323][T10695] XFS: noikeep mount option is deprecated. [ 222.026023][T10695] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 222.054632][T10695] XFS (loop4): Ending clean mount [ 222.057212][T10695] XFS (loop4): Quotacheck needed: Please wait. [ 222.097080][T10723] loop1: detected capacity change from 0 to 1024 [ 222.103636][T10695] XFS (loop4): Quotacheck: Done. [ 222.272515][T10723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.662665][ T7921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.832010][ T7837] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 222.853193][T10742] loop3: detected capacity change from 0 to 512 [ 222.996673][T10742] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 222.999106][T10742] EXT4-fs (loop3): orphan cleanup on readonly fs [ 223.038878][T10742] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 223.071005][T10742] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 223.147362][T10742] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.996: bg 0: block 40: padding at end of block bitmap is not set [ 223.165755][T10742] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 223.189892][T10742] EXT4-fs (loop3): 1 truncate cleaned up [ 223.191967][T10742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.280436][T10734] loop0: detected capacity change from 0 to 32768 [ 223.443276][T10734] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 223.446089][T10752] loop2: detected capacity change from 0 to 32768 [ 223.449047][T10752] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.999 (10752) [ 223.889341][ T6311] Bluetooth: hci6: command 0x0406 tx timeout [ 224.104396][T10752] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 224.112414][ T9803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.116498][T10734] XFS (loop0): Ending clean mount [ 224.139899][T10752] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 224.142542][T10752] BTRFS info (device loop2): using free-space-tree [ 224.227201][T10766] loop4: detected capacity change from 0 to 4096 [ 224.232577][T10766] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 224.320864][ T9104] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 224.407949][T10789] loop1: detected capacity change from 0 to 1024 [ 224.431096][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 224.435533][ T8] XFS (loop0): Unmount and run xfs_repair [ 224.439429][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 224.441430][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 224.443785][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 224.456194][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 224.462514][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 224.464995][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 224.467446][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.480705][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.483119][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.500937][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 224.504626][ T11] XFS (loop0): page discard on page 00000000e7a60c15, inode 0x1806, pos 2048. [ 224.512433][T10796] vlan2: entered promiscuous mode [ 224.525370][T10789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.547106][ T27] loop0: writeback error on inode 6150, offset 0, sector 12252 [ 224.552408][ T27] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 224.559556][ T27] XFS (loop0): Unmount and run xfs_repair [ 224.561069][ T27] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 224.563059][ T27] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 224.565446][ T27] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 224.586297][ T27] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 224.588825][ T27] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 224.591537][ T27] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 224.593963][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.596320][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.598888][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.603051][ T2119] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 224.606288][ T2119] XFS (loop0): page discard on page 00000000fd533b68, inode 0x1806, pos 4096. [ 224.609098][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 224.633713][ T8] XFS (loop0): Unmount and run xfs_repair [ 224.635346][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 224.637384][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 224.643983][ T7921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.674566][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 224.677123][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 224.699341][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 224.701788][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 224.704482][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.706840][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.709790][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.711621][T10812] netlink: 'syz.4.1014': attribute type 4 has an invalid length. [ 224.712242][ T2119] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 224.720043][ T2119] XFS (loop0): page discard on page 00000000e3be52ff, inode 0x1806, pos 8192. [ 224.734827][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 224.737867][ T8] XFS (loop0): Unmount and run xfs_repair [ 224.757398][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 224.759853][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 224.769966][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 224.777456][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 224.780664][T10812] netlink: 'syz.4.1014': attribute type 4 has an invalid length. [ 224.791271][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 224.805315][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 224.812043][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.816804][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.829368][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.834322][ T2119] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 224.857893][ T2119] XFS (loop0): page discard on page 000000003b5fe795, inode 0x1806, pos 16384. [ 224.980413][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 224.983480][ T8] XFS (loop0): Unmount and run xfs_repair [ 224.985019][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 224.986933][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.019299][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.022762][T10809] loop2: detected capacity change from 0 to 32768 [ 225.034779][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 225.037184][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 225.057693][T10809] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1013 (10809) [ 225.077887][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 225.090960][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.112122][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.114644][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.122219][ T2119] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 225.125594][ T2119] XFS (loop0): page discard on page 00000000665da67f, inode 0x1806, pos 32768. [ 225.164856][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 225.167847][ T8] XFS (loop0): Unmount and run xfs_repair [ 225.198068][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 225.211295][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.213708][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.242241][T10820] loop4: detected capacity change from 0 to 4096 [ 225.251681][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 225.254159][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 225.256766][T10820] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 225.263910][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 225.269607][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.283835][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.286465][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.296603][ T2119] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 225.307738][T10809] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 225.317614][T10809] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 225.320694][ T2119] XFS (loop0): page discard on page 000000002f007a2e, inode 0x1806, pos 65536. [ 225.324885][ T27] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 225.325122][T10809] BTRFS info (device loop2): using free-space-tree [ 225.332509][ T27] XFS (loop0): Unmount and run xfs_repair [ 225.340539][ T27] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 225.352921][ T27] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.369367][ T27] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.375137][ T27] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 225.379020][ T27] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 225.384008][ T27] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 225.386433][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.392788][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.395421][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.398111][ T2119] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 225.404035][ T2119] XFS (loop0): page discard on page 0000000059012428, inode 0x1806, pos 131072. [ 225.406938][ T27] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 225.414913][ T27] XFS (loop0): Unmount and run xfs_repair [ 225.416576][ T27] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 225.418612][ T27] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.422891][ T27] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.425434][ T27] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 225.427927][ T27] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 225.434887][ T27] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 225.437630][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.442086][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.444791][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.447245][ T2119] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 225.450574][ T2119] XFS (loop0): page discard on page 0000000049c5c6ad, inode 0x1806, pos 262144. [ 225.454264][ T27] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 225.457601][ T27] XFS (loop0): Unmount and run xfs_repair [ 225.459353][ T27] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 225.461313][ T27] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.463709][ T27] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.466144][ T27] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 225.468526][ T27] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 225.471162][ T27] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 225.473601][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.479306][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.481727][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.484852][ T2119] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 225.488019][ T2119] XFS (loop0): page discard on page 0000000035c73fe9, inode 0x1806, pos 524288. [ 225.491570][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 225.513745][ T8] XFS (loop0): Unmount and run xfs_repair [ 225.515276][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 225.517315][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.522793][T10838] loop1: detected capacity change from 0 to 256 [ 225.541611][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.544070][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 225.547926][ T9104] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 225.561286][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 225.564286][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 225.567051][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.588265][T10838] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 225.593889][T10843] loop3: detected capacity change from 0 to 512 [ 225.595356][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.598127][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.605149][ T2119] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 225.609448][ T2119] XFS (loop0): page discard on page 00000000a662294c, inode 0x1806, pos 1048576. [ 225.615025][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 225.618347][ T8] XFS (loop0): Unmount and run xfs_repair [ 225.618618][T10843] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 225.620300][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 225.624735][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.627180][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.627460][T10843] EXT4-fs (loop3): orphan cleanup on readonly fs [ 225.629969][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 225.633898][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 225.636200][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 225.638507][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.641081][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.643466][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.655390][T10843] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 225.655415][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 225.663691][ T8] XFS (loop0): Unmount and run xfs_repair [ 225.665239][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 225.667299][T10843] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 225.667939][T10843] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1020: bg 0: block 40: padding at end of block bitmap is not set [ 225.670798][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.675960][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.678337][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 225.681576][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 225.683909][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 225.686369][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.688939][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.692079][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.701455][ T27] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 225.714735][ T27] XFS (loop0): Unmount and run xfs_repair [ 225.716286][ T27] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 225.718330][ T27] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.733179][T10843] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 225.738820][T10843] EXT4-fs (loop3): 1 truncate cleaned up [ 225.758901][ T27] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.765318][T10848] loop4: detected capacity change from 0 to 1024 [ 225.768334][ T27] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 225.771220][T10843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.780715][ T27] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 225.783218][ T27] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 225.809298][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.812392][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.814870][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.979393][ T25] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 225.985596][T10848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.989383][ T25] XFS (loop0): Unmount and run xfs_repair [ 225.990954][ T25] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 225.993003][ T25] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 225.995714][ T25] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 225.998012][ T25] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 226.000704][ T25] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 226.003148][ T25] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 226.005515][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.007934][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.010636][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.013601][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 226.018177][ T8] XFS (loop0): Unmount and run xfs_repair [ 226.028222][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 226.058527][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 226.133697][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 226.215462][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 226.291904][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 226.369844][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 226.442673][ T7837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.469475][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.519833][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.575793][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.624792][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 226.633718][ T8] XFS (loop0): Unmount and run xfs_repair [ 226.636529][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 226.640771][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 226.645442][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 226.652176][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 226.657966][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 226.662796][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 226.716916][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.725637][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.728175][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.769743][ T25] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 226.783809][ T25] XFS (loop0): Unmount and run xfs_repair [ 226.785399][ T25] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 226.787406][ T25] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 226.810682][ T25] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 226.813236][ T25] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 226.815670][ T25] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 226.817993][ T25] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 226.838918][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.846460][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.854075][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 226.911303][ T25] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 226.914290][ T25] XFS (loop0): Unmount and run xfs_repair [ 226.915903][ T25] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 226.917918][ T25] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 226.989376][ T25] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 226.991824][ T25] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 226.994225][ T25] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 226.996633][ T25] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 226.999043][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.072474][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.092556][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.135764][ T25] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 227.166491][ T25] XFS (loop0): Unmount and run xfs_repair [ 227.177002][ T25] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 227.186233][ T25] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 227.188708][ T25] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 227.219937][ T25] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 227.235842][ T25] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 227.251811][ T25] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 227.257255][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.275061][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.280579][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.291315][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 227.299459][ T8] XFS (loop0): Unmount and run xfs_repair [ 227.307774][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 227.313638][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 227.323856][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 227.339339][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 227.347850][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 227.354970][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 227.362977][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.379289][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.389442][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.403800][ T25] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 227.406881][ T25] XFS (loop0): Unmount and run xfs_repair [ 227.426343][ T25] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 227.431508][ T25] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 227.443700][ T25] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 227.462622][ T25] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 227.470586][ T25] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 227.487740][ T25] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 227.494612][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.502053][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.515452][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.528327][ T25] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 227.549014][ T25] XFS (loop0): Unmount and run xfs_repair [ 227.554769][ T25] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 227.556821][ T25] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 227.566741][ T25] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 227.573117][ T25] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 227.579854][ T25] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 227.585915][ T25] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 227.609290][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.611840][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.614235][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.622517][ T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 227.635783][ T8] XFS (loop0): Unmount and run xfs_repair [ 227.637392][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 227.655489][ T8] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 227.668332][ T8] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 227.669000][T10880] loop2: detected capacity change from 0 to 256 [ 227.672147][ T8] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 227.674977][ T8] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 227.677432][ T8] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 227.696139][T10880] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 227.699367][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.699387][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.699399][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.702958][T10873] loop1: detected capacity change from 0 to 32768 [ 227.716990][ T8082] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 227.739513][T10873] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1029 (10873) [ 227.759169][ T8082] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 227.768121][T10873] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 227.779690][T10873] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 227.802825][T10873] BTRFS info (device loop1): using free-space-tree [ 227.916023][T10896] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1033'. [ 228.139126][ T7921] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 228.149691][ T9803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.915897][T10914] loop1: detected capacity change from 0 to 1024 [ 228.933739][T10917] loop3: detected capacity change from 0 to 512 [ 228.945801][T10917] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 228.978917][T10914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.998206][T10917] EXT4-fs (loop3): 1 truncate cleaned up [ 229.009633][T10917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.012386][T10926] loop0: detected capacity change from 0 to 256 [ 229.061823][T10926] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 229.088823][ T7921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.211497][T10935] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1044'. [ 229.286941][T10942] bridge0: port 3(vlan3) entered blocking state [ 229.288880][T10942] bridge0: port 3(vlan3) entered disabled state [ 229.299572][T10942] vlan3: entered allmulticast mode [ 229.310298][T10942] vlan3: left allmulticast mode [ 229.332288][T10944] loop0: detected capacity change from 0 to 512 [ 229.357982][T10944] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 229.366766][T10944] EXT4-fs (loop0): orphan cleanup on readonly fs [ 229.374371][T10944] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 229.393020][T10944] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 229.397543][T10944] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1048: bg 0: block 40: padding at end of block bitmap is not set [ 229.423847][T10944] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 229.454287][T10944] EXT4-fs (loop0): 1 truncate cleaned up [ 229.456314][T10944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.349980][ T8082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.435534][ T6311] Bluetooth: hci1: command 0x0406 tx timeout [ 230.470437][T10937] loop1: detected capacity change from 0 to 32768 [ 230.473489][T10937] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1046 (10937) [ 230.498268][T10958] loop2: detected capacity change from 0 to 1024 [ 230.589937][T10958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.609553][T10937] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 230.612409][T10937] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 230.614934][T10937] BTRFS info (device loop1): using free-space-tree [ 230.665696][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.904431][ T7921] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 231.002066][T10987] pimreg: entered allmulticast mode [ 231.014882][T10989] bridge0: port 3(vlan3) entered blocking state [ 231.018263][T10989] bridge0: port 3(vlan3) entered disabled state [ 231.025232][T10989] vlan3: entered allmulticast mode [ 231.030092][T10989] vlan3: left allmulticast mode [ 231.148363][T11000] loop2: detected capacity change from 0 to 1024 [ 231.190412][T11000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.224055][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.456709][ T9803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.462846][T11011] loop0: detected capacity change from 0 to 512 [ 231.465363][T11011] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.484351][T11011] EXT4-fs (loop0): 1 truncate cleaned up [ 231.509983][T11011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.578510][T11006] loop4: detected capacity change from 0 to 32768 [ 231.610781][T11006] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1066 (11006) [ 231.635916][T11006] BTRFS info (device loop4): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 231.638776][T11006] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 231.649371][T11006] BTRFS info (device loop4): using free-space-tree [ 231.699761][ T6311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.705521][ T6311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.713302][ T6311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.716103][ T6311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.720546][ T6311] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.724355][ T6311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.827380][ T7837] BTRFS info (device loop4): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 231.860566][ T9588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.010990][ T9588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.211962][ T9588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.228200][T11041] loop4: detected capacity change from 0 to 4096 [ 232.411479][ T9588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.437113][T11045] syzkaller1: entered promiscuous mode [ 232.438772][T11045] syzkaller1: entered allmulticast mode [ 232.478270][T11051] loop4: detected capacity change from 0 to 1024 [ 232.547422][T11051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.571937][T11028] chnl_net:caif_netlink_parms(): no params data found [ 232.593182][ T7837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.655462][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 232.861214][T11059] loop1: detected capacity change from 0 to 32768 [ 232.866878][T11059] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1080 (11059) [ 232.877585][T11028] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.880585][T11028] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.894719][T11028] bridge_slave_0: entered allmulticast mode [ 232.900103][T11059] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 232.900969][T11028] bridge_slave_0: entered promiscuous mode [ 232.903144][T11059] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 232.915763][T11059] BTRFS info (device loop1): using free-space-tree [ 232.919170][T11065] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1079'. [ 232.942023][T11028] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.958059][T11028] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.979111][T11028] bridge_slave_1: entered allmulticast mode [ 232.986359][T11028] bridge_slave_1: entered promiscuous mode [ 233.028461][ T8082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.205086][T11028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.238775][ T9588] bridge_slave_1: left allmulticast mode [ 233.239860][ T7921] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 233.251543][ T9588] bridge_slave_1: left promiscuous mode [ 233.258866][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.285219][ T9588] bridge_slave_0: left allmulticast mode [ 233.291871][ T9588] bridge_slave_0: left promiscuous mode [ 233.296395][ T6311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.309060][ T6311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.310730][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.313785][ T6311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.317691][ T6311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.399030][T11098] loop1: detected capacity change from 0 to 1024 [ 233.458138][ T6311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.473020][ T6311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.474039][T11098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.533585][ T7921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.539670][T11103] loop2: detected capacity change from 0 to 512 [ 233.542395][T11103] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.619938][T11103] EXT4-fs (loop2): 1 truncate cleaned up [ 233.622204][T11103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.783511][ T52] Bluetooth: hci2: command tx timeout [ 235.177190][ T9588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.206611][ T9588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.242320][ T9588] bond0 (unregistering): Released all slaves [ 235.248385][T11028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.270631][T11106] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1091'. [ 235.277120][T11028] team0: Port device team_slave_0 added [ 235.412590][T11028] team0: Port device team_slave_1 added [ 235.540786][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.545483][ T52] Bluetooth: hci1: command tx timeout [ 235.617902][T11119] loop1: detected capacity change from 0 to 32768 [ 235.649510][T11119] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1096 (11119) [ 235.670162][T11119] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 235.673030][T11119] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 235.675596][T11119] BTRFS info (device loop1): using free-space-tree [ 235.778186][ T6311] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.791462][ T6311] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.794268][ T6311] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.804092][ T6311] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.806520][ T6311] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 235.808768][ T6311] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.809700][T11028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.813105][T11028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.833919][T11028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.838693][ T7921] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 235.856547][T11028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.858485][T11028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.866866][ T6311] Bluetooth: hci2: command tx timeout [ 235.868674][T11028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.110859][T11178] loop1: detected capacity change from 0 to 1024 [ 236.144925][T11178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.151493][T11028] hsr_slave_0: entered promiscuous mode [ 236.172798][ T7921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.190536][T11028] hsr_slave_1: entered promiscuous mode [ 236.298531][ T9588] hsr_slave_0: left promiscuous mode [ 236.354296][ T9588] hsr_slave_1: left promiscuous mode [ 236.439904][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.442128][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.447813][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.450385][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.482645][ T9588] veth1_macvtap: left promiscuous mode [ 236.484231][ T9588] veth0_macvtap: left promiscuous mode [ 236.485876][ T9588] veth1_vlan: left promiscuous mode [ 236.487339][ T9588] veth0_vlan: left promiscuous mode [ 237.055774][T11191] syz.4.1113 (11191): drop_caches: 2 [ 237.158527][T11199] loop4: detected capacity change from 0 to 1024 [ 237.189263][T11199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.202756][ T7837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.619361][ T6311] Bluetooth: hci1: command tx timeout [ 237.859618][ T6311] Bluetooth: hci6: command tx timeout [ 237.949861][ T6311] Bluetooth: hci2: command tx timeout [ 238.303574][ T9588] team0 (unregistering): Port device team_slave_1 removed [ 238.480930][ T9588] team0 (unregistering): Port device team_slave_0 removed [ 239.699608][ T6311] Bluetooth: hci1: command tx timeout [ 239.939514][ T6311] Bluetooth: hci6: command tx timeout [ 240.019384][ T6311] Bluetooth: hci2: command tx timeout [ 240.878450][T11093] chnl_net:caif_netlink_parms(): no params data found [ 241.014318][T11159] chnl_net:caif_netlink_parms(): no params data found [ 241.098567][T11229] syzkaller1: entered promiscuous mode [ 241.108360][T11229] syzkaller1: entered allmulticast mode [ 241.236011][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.242631][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.247029][T11093] bridge_slave_0: entered allmulticast mode [ 241.258437][T11093] bridge_slave_0: entered promiscuous mode [ 241.264079][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.266031][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.268093][T11093] bridge_slave_1: entered allmulticast mode [ 241.270719][T11093] bridge_slave_1: entered promiscuous mode [ 241.315665][T11247] loop4: detected capacity change from 0 to 1024 [ 241.338750][T11247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.369154][ T7837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.401887][T11159] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.404086][T11159] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.406396][T11159] bridge_slave_0: entered allmulticast mode [ 241.408837][T11159] bridge_slave_0: entered promiscuous mode [ 241.455250][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.458173][T11159] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.460663][T11159] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.462975][T11159] bridge_slave_1: entered allmulticast mode [ 241.465285][T11159] bridge_slave_1: entered promiscuous mode [ 241.568370][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.585056][T11159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.590272][T11159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.631992][T11093] team0: Port device team_slave_0 added [ 241.656231][T11159] team0: Port device team_slave_0 added [ 241.666616][T11159] team0: Port device team_slave_1 added [ 241.673730][T11093] team0: Port device team_slave_1 added [ 241.697934][T11159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.709343][T11159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.716728][T11159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.737401][T11093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.744225][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.756243][T11093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.779856][ T6311] Bluetooth: hci1: command tx timeout [ 242.019360][ T6311] Bluetooth: hci6: command tx timeout [ 242.231386][T11159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.233322][T11159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.241236][T11159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.251901][T11093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.253846][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.266718][T11093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.353444][ T9588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.382520][T11265] syzkaller1: entered promiscuous mode [ 242.384063][T11265] syzkaller1: entered allmulticast mode [ 242.401919][T11093] hsr_slave_0: entered promiscuous mode [ 242.439848][T11093] hsr_slave_1: entered promiscuous mode [ 242.479395][T11093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.481529][T11093] Cannot create hsr debugfs directory [ 242.630770][ T9588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.681250][T11271] loop4: detected capacity change from 0 to 1024 [ 242.682876][T11159] hsr_slave_0: entered promiscuous mode [ 242.709526][T11271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.722894][ T7837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.735826][T11159] hsr_slave_1: entered promiscuous mode [ 242.769388][T11159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.771598][T11159] Cannot create hsr debugfs directory [ 242.879151][ T9588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.040940][ T9588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.051688][T11028] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.070902][T11028] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.086894][T11028] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.099323][T11028] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.204533][T11028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.237596][T11309] syzkaller1: entered promiscuous mode [ 243.246006][T11309] syzkaller1: entered allmulticast mode [ 243.325486][T11028] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.351010][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.353076][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.356019][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.358072][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.452697][ T9588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.483924][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 243.498221][T11028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.517629][T11028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.604180][ T9588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.790831][ T9588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.905324][ T9588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.921073][T11028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.967844][T11028] veth0_vlan: entered promiscuous mode [ 243.985466][T11028] veth1_vlan: entered promiscuous mode [ 244.139345][ T6311] Bluetooth: hci6: command tx timeout [ 244.257911][T11028] veth0_macvtap: entered promiscuous mode [ 244.283075][T11028] veth1_macvtap: entered promiscuous mode [ 244.312147][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.315206][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.318006][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.321594][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.324500][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.327774][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.334062][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.341561][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.348097][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.354553][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.361700][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.367940][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.375634][T11028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.390580][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.396751][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.400659][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.403721][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.406534][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.411078][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.413935][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.416975][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.419896][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.424878][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.427562][T11028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.430646][T11028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.434318][T11028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.463998][T11028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.466485][T11028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.483263][T11028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.485701][T11028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.557531][ T9588] bridge_slave_1: left allmulticast mode [ 244.559115][ T9588] bridge_slave_1: left promiscuous mode [ 244.571283][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.607432][ T9588] bridge_slave_0: left allmulticast mode [ 244.609007][ T9588] bridge_slave_0: left promiscuous mode [ 244.618361][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.623134][ T9588] bridge_slave_1: left allmulticast mode [ 244.624720][ T9588] bridge_slave_1: left promiscuous mode [ 244.626353][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.635864][ T9588] bridge_slave_0: left allmulticast mode [ 244.637577][ T9588] bridge_slave_0: left promiscuous mode [ 244.639863][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.454197][ T9588] team0: Port device vlan2 removed [ 247.073705][ T9588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.112821][ T9588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.152090][ T9588] bond0 (unregistering): Released all slaves [ 247.843186][ T9588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.882021][ T9588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.932421][ T9588] bond0 (unregistering): Released all slaves [ 248.001264][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.003537][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.070275][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.072483][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.094011][T11159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.113281][T11159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.245400][T11159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.280786][T11159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.287389][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 248.648823][T11398] loop3: detected capacity change from 0 to 32768 [ 248.658119][T11398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1070 (11398) [ 248.663545][T11398] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.666377][T11398] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 248.671385][T11398] BTRFS info (device loop3): using free-space-tree [ 248.839637][ T2311] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.841827][ T2311] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.844822][ T2311] lapb6 selects TX queue 0, but real number of TX queues is 0 [ 249.003047][T11028] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.254600][T11159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.327339][T11159] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.339451][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 249.352638][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.354751][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.579686][T11462] syzkaller1: entered promiscuous mode [ 249.581327][T11462] syzkaller1: entered allmulticast mode [ 249.592974][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.594892][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.665465][ T6311] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 249.831370][T11461] loop3: detected capacity change from 0 to 32768 [ 249.838931][T11461] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1166 (11461) [ 249.857096][T11461] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.862670][T11461] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 249.875882][T11461] BTRFS info (device loop3): using free-space-tree [ 249.939098][T11159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.949053][T11093] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.967445][T11093] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.011388][T11028] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.076907][ T9588] hsr_slave_0: left promiscuous mode [ 250.132244][ T9588] hsr_slave_1: left promiscuous mode [ 250.199774][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.201926][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.214436][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.217953][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.234790][ T30] audit: type=1326 audit(250.205:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.248536][ T9588] hsr_slave_0: left promiscuous mode [ 250.257427][ T30] audit: type=1326 audit(250.205:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.264350][ T30] audit: type=1326 audit(250.215:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.274020][ T30] audit: type=1326 audit(250.215:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.281824][ T30] audit: type=1326 audit(250.215:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.288017][ T30] audit: type=1326 audit(250.215:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.295661][ T30] audit: type=1326 audit(250.215:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.305149][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 250.308081][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 250.308099][ T9588] hsr_slave_1: left promiscuous mode [ 250.316048][ T30] audit: type=1326 audit(250.235:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.329794][ T30] audit: type=1326 audit(250.235:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.349123][ T30] audit: type=1326 audit(250.255:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 250.361278][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.366390][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.399650][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.402272][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.408490][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.412610][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.471275][ T9588] veth1_macvtap: left promiscuous mode [ 250.475283][ T9588] veth0_macvtap: left promiscuous mode [ 250.478117][ T9588] veth1_vlan: left promiscuous mode [ 250.482114][ T9588] veth0_vlan: left promiscuous mode [ 250.487597][ T9588] veth1_macvtap: left promiscuous mode [ 250.493942][ T9588] veth0_macvtap: left promiscuous mode [ 250.495581][ T9588] veth1_vlan: left promiscuous mode [ 250.497073][ T9588] veth0_vlan: left promiscuous mode [ 252.552890][ T9588] team0 (unregistering): Port device team_slave_1 removed [ 252.752209][ T9588] team0 (unregistering): Port device team_slave_0 removed [ 257.124696][ T9588] team0 (unregistering): Port device team_slave_1 removed [ 257.304138][ T9588] team0 (unregistering): Port device team_slave_0 removed [ 259.786703][T11093] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.790927][T11093] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.825956][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 259.908766][T11159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.927072][T11159] veth0_vlan: entered promiscuous mode [ 259.933909][T11159] veth1_vlan: entered promiscuous mode [ 259.945054][T11159] veth0_macvtap: entered promiscuous mode [ 259.948624][T11159] veth1_macvtap: entered promiscuous mode [ 259.957295][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.962535][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.965396][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.968433][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.994375][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.997461][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.009300][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.012294][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.029585][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.032734][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.048567][T11159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.051696][T11543] loop3: detected capacity change from 0 to 32768 [ 260.053995][T11543] XFS: attr2 mount option is deprecated. [ 260.055568][T11543] XFS: noikeep mount option is deprecated. [ 260.076562][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.087299][ T6311] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 260.095638][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.098492][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.117844][T11543] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 260.133656][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.136352][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.139124][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.164466][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.167301][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.176595][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.186222][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.193436][T11159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.233250][T11093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.248682][T11159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.258292][T11543] XFS (loop3): Ending clean mount [ 260.261016][T11159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.263385][T11159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.265750][T11159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.269489][T11543] XFS (loop3): Quotacheck needed: Please wait. [ 260.282112][T11545] loop1: detected capacity change from 0 to 32768 [ 260.286393][T11545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1178 (11545) [ 260.294373][T11545] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.297191][T11545] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 260.309310][T11545] BTRFS info (device loop1): using free-space-tree [ 260.312804][T11543] XFS (loop3): Quotacheck: Done. [ 260.456536][T11093] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.499633][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.501582][ T6381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.521420][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.523440][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.775458][T11093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.778337][T11093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.922453][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.924727][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.959729][ T7921] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.963980][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.980844][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.013076][T11028] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 261.123217][T11093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.209316][T11588] binder: 11586:11588 ioctl 4018620d 0 returned -22 [ 261.220214][T11588] binder: 11586:11588 Acquire 1 refcount change on invalid ref 0 ret -22 [ 261.220796][T11093] veth0_vlan: entered promiscuous mode [ 261.232689][T11588] binder: 11586:11588 got transaction to invalid handle, 1 [ 261.268945][T11588] binder: 11588:11586 cannot find target node [ 261.270584][T11591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.273138][T11591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.277675][T11588] binder: 11586:11588 transaction call to 0:0 failed 3/29201/-22, size 112-24 line 3066 [ 261.284561][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 261.284575][ T30] audit: type=1326 audit(261.245:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11587 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed41e28 code=0x7ffc0000 [ 261.296416][ T30] audit: type=1326 audit(261.265:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11587 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffff8ed41e28 code=0x7ffc0000 [ 261.298068][T11591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.303863][ T30] audit: type=1326 audit(261.265:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11587 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed41e28 code=0x7ffc0000 [ 261.316322][T11591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.323101][ T30] audit: type=1326 audit(261.265:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11587 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8ed41e28 code=0x7ffc0000 [ 261.328943][ T30] audit: type=1326 audit(261.265:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11587 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ed41e28 code=0x7ffc0000 [ 261.338285][ T30] audit: type=1326 audit(261.265:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11587 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff8ed41e28 code=0x7ffc0000 [ 261.348610][T11588] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1100'. [ 261.355269][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.364833][T11093] veth1_vlan: entered promiscuous mode [ 261.406995][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 261.412362][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 261.438950][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.461973][T11093] veth0_macvtap: entered promiscuous mode [ 261.464292][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 261.474720][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.538274][T11093] veth1_macvtap: entered promiscuous mode [ 261.578856][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.585217][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.588215][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.598423][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.604003][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.607124][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.611209][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.615347][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.618449][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.626574][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.630675][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.636210][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.641844][T11093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.647964][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.666974][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.670288][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.673335][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.676184][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.679345][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.685478][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.691365][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.694353][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.697376][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.700451][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.703549][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.707976][T11093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.715060][T11093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.717816][T11093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.720511][T11093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.723014][T11093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.805720][ T9588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.808003][ T9588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.846599][ T9588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.853179][ T9588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.858635][T11607] loop1: detected capacity change from 0 to 32768 [ 261.867533][T11607] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1188 (11607) [ 261.904177][T11607] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.910506][T11607] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 261.916299][T11607] BTRFS info (device loop1): using free-space-tree [ 262.101295][T11609] loop3: detected capacity change from 0 to 32768 [ 262.103426][T11609] XFS: attr2 mount option is deprecated. [ 262.105102][T11609] XFS: noikeep mount option is deprecated. [ 262.157499][ T7921] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.160006][T11626] loop0: detected capacity change from 0 to 4096 [ 262.178839][T11609] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 262.266414][ T6311] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 262.301813][T11609] XFS (loop3): Ending clean mount [ 262.304562][T11609] XFS (loop3): Quotacheck needed: Please wait. [ 262.344564][T11609] XFS (loop3): Quotacheck: Done. [ 263.027520][T11028] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 263.100929][T11647] binder: 11646:11647 ioctl 4018620d 0 returned -22 [ 263.111129][T11647] binder: 11646:11647 Acquire 1 refcount change on invalid ref 0 ret -22 [ 263.129563][T11647] binder: 11646:11647 got transaction to invalid handle, 1 [ 263.131510][T11647] binder: 11647:11646 cannot find target node [ 263.133185][T11647] binder: 11646:11647 transaction call to 0:0 failed 5/29201/-22, size 112-24 line 3066 [ 263.154637][T11647] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1193'. [ 263.165493][ T6288] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.169847][ T6369] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 263.208227][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.212484][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.221412][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.224297][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.358888][ T6369] usb 1-1: config 0 has no interfaces? [ 263.360827][ T6369] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 263.363378][ T6369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.374463][ T6369] usb 1-1: config 0 descriptor?? [ 263.395194][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.398412][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.417621][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.427424][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.444984][T11649] input: syz0 as /devices/virtual/input/input3 [ 263.450450][ T6311] Bluetooth: hci5: unexpected event for opcode 0x0c1a [ 263.591657][T11641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.594166][T11641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.677692][T11667] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1200'. [ 263.896411][T11671] loop3: detected capacity change from 0 to 32768 [ 263.898770][T11671] XFS: attr2 mount option is deprecated. [ 263.900553][T11671] XFS: noikeep mount option is deprecated. [ 263.971585][T11671] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 264.038168][T11671] XFS (loop3): Ending clean mount [ 264.046808][T11671] XFS (loop3): Quotacheck needed: Please wait. [ 264.093831][T11671] XFS (loop3): Quotacheck: Done. [ 264.601036][T11691] binder: 11690:11691 ioctl 4018620d 0 returned -22 [ 264.606708][T11691] binder: 11690:11691 Acquire 1 refcount change on invalid ref 0 ret -22 [ 264.618713][T11691] binder: 11690:11691 got transaction to invalid handle, 1 [ 264.631068][T11691] binder: 11691:11690 cannot find target node [ 264.642775][T11691] binder: 11690:11691 transaction call to 0:0 failed 7/29201/-22, size 112-24 line 3066 [ 264.663674][T11691] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1205'. [ 264.682990][ T3723] binder: undelivered TRANSACTION_ERROR: 29201 [ 264.758682][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 264.811210][T11028] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 264.988569][T11712] atomic_op 000000005a27f918 conn xmit_atomic 0000000000000000 [ 265.003416][T11712] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1214'. [ 265.014303][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 265.030121][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 265.140890][T11719] binder: 11718:11719 ioctl 4018620d 0 returned -22 [ 265.294944][T11713] loop2: detected capacity change from 0 to 32768 [ 265.331280][T11713] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1215 (11713) [ 265.370547][T11723] loop4: detected capacity change from 0 to 32768 [ 265.372755][T11723] XFS: attr2 mount option is deprecated. [ 265.374263][T11723] XFS: noikeep mount option is deprecated. [ 265.381351][ T6311] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 265.383907][ T6311] Bluetooth: hci2: Injecting HCI hardware error event [ 265.386804][ T6311] Bluetooth: hci2: hardware error 0x00 [ 265.402386][T11713] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.407709][T11713] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 265.416400][T11713] BTRFS info (device loop2): using free-space-tree [ 265.429038][ T6092] usb 1-1: USB disconnect, device number 4 [ 265.443816][T11723] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 265.516068][T11723] XFS (loop4): Ending clean mount [ 265.518665][T11723] XFS (loop4): Quotacheck needed: Please wait. [ 265.554695][T11723] XFS (loop4): Quotacheck: Done. [ 265.593201][T11159] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.629552][T11759] atomic_op 00000000cb1f485c conn xmit_atomic 0000000000000000 [ 265.718198][T11759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1223'. [ 266.122037][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 266.170213][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 266.285115][ T7837] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 266.322145][T11770] netlink: 'syz.2.1225': attribute type 4 has an invalid length. [ 266.377748][T11770] netlink: 'syz.2.1225': attribute type 4 has an invalid length. [ 266.397822][T11772] binder: 11771:11772 ioctl 4018620d 0 returned -22 [ 266.440098][T11776] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1230'. [ 266.519707][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'. [ 266.579109][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 266.708348][T11801] Invalid architecture in ELF header: 62 [ 266.760817][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 266.888513][T11799] loop1: detected capacity change from 0 to 32768 [ 266.891769][T11799] XFS: attr2 mount option is deprecated. [ 266.893340][T11799] XFS: noikeep mount option is deprecated. [ 266.942862][T11799] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 267.005430][T11799] XFS (loop1): Ending clean mount [ 267.007987][T11799] XFS (loop1): Quotacheck needed: Please wait. [ 267.090127][T11822] binder: 11821:11822 ioctl 4018620d 0 returned -22 [ 267.108249][T11799] XFS (loop1): Quotacheck: Done. [ 267.284264][ T30] audit: type=1326 audit(267.255:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11823 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7741e28 code=0x7ffc0000 [ 267.295908][ T30] audit: type=1326 audit(267.265:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11823 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffffa7741e28 code=0x7ffc0000 [ 267.305375][ T52] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 267.305518][ T30] audit: type=1326 audit(267.265:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11823 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7741e28 code=0x7ffc0000 [ 267.309022][ T52] Bluetooth: hci6: Injecting HCI hardware error event [ 267.366670][ T30] audit: type=1326 audit(267.265:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11823 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7741e28 code=0x7ffc0000 [ 267.418841][ T6310] Bluetooth: hci6: hardware error 0x00 [ 267.460037][ T52] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 267.462834][ T52] Bluetooth: hci5: Injecting HCI hardware error event [ 267.468111][ T52] Bluetooth: hci5: hardware error 0x00 [ 267.470203][ T6311] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 267.560082][ T30] audit: type=1326 audit(267.265:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11823 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa7741e28 code=0x7ffc0000 [ 267.565791][ T30] audit: type=1326 audit(267.265:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11823 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7741e28 code=0x7ffc0000 [ 267.603369][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 267.614322][ T30] audit: type=1326 audit(267.265:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11823 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7741e28 code=0x7ffc0000 [ 267.630469][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.633025][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.655256][ T30] audit: type=1326 audit(267.265:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11823 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa7741e28 code=0x7ffc0000 [ 267.772778][ T7921] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 267.826510][T11836] atomic_op 000000007c223c9b conn xmit_atomic 0000000000000000 [ 268.066877][T11849] binder: 11848:11849 ioctl 4018620d 0 returned -22 [ 268.070955][T11849] binder: 11848:11849 Acquire 1 refcount change on invalid ref 0 ret -22 [ 268.079068][T11849] binder: 11848:11849 got transaction to invalid handle, 1 [ 268.087376][T11849] binder: 11849:11848 cannot find target node [ 268.094981][T11849] binder: 11848:11849 transaction call to 0:0 failed 8/29201/-22, size 112-24 line 3066 [ 268.099486][ T6311] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 268.109043][ T6311] Bluetooth: hci1: Injecting HCI hardware error event [ 268.109614][ T6351] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.113193][ T6311] Bluetooth: hci1: hardware error 0x00 [ 268.138868][T11857] Invalid architecture in ELF header: 62 [ 268.352636][T11861] loop0: detected capacity change from 0 to 32768 [ 268.354855][T11861] XFS: attr2 mount option is deprecated. [ 268.356467][T11861] XFS: noikeep mount option is deprecated. [ 268.388700][T11861] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 268.423888][T11861] XFS (loop0): Ending clean mount [ 268.426369][T11861] XFS (loop0): Quotacheck needed: Please wait. [ 268.483120][T11861] XFS (loop0): Quotacheck: Done. [ 269.165144][ T30] audit: type=1326 audit(269.135:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11879 comm="syz.3.1257" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 269.187911][ T30] audit: type=1326 audit(269.145:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11879 comm="syz.3.1257" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffff80141e28 code=0x7ffc0000 [ 269.223241][T11093] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 269.290353][T11880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.292871][T11880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.631240][ T52] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 269.633536][ T6310] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 270.016046][T11909] loop0: detected capacity change from 0 to 128 [ 270.225530][T11913] loop1: detected capacity change from 0 to 32768 [ 270.227918][T11913] XFS: attr2 mount option is deprecated. [ 270.229609][T11913] XFS: noikeep mount option is deprecated. [ 270.272726][T11913] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 270.292165][ T6310] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 270.322787][T11913] XFS (loop1): Ending clean mount [ 270.325799][T11913] XFS (loop1): Quotacheck needed: Please wait. [ 270.420595][T11913] XFS (loop1): Quotacheck: Done. [ 270.432293][ T6311] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 271.134427][ T7921] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 271.209527][T11956] __nla_validate_parse: 12 callbacks suppressed [ 271.209544][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 271.257050][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 271.897929][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 272.188447][T11994] loop0: detected capacity change from 0 to 32768 [ 272.190785][T11994] XFS: attr2 mount option is deprecated. [ 272.192396][T11994] XFS: noikeep mount option is deprecated. [ 272.294202][T11994] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 272.490616][T11994] XFS (loop0): Ending clean mount [ 272.503557][T11994] XFS (loop0): Quotacheck needed: Please wait. [ 272.527137][T11994] XFS (loop0): Quotacheck: Done. [ 272.960245][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 273.040724][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 273.206732][T11093] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 273.718468][T12039] atomic_op 00000000bedcbfc2 conn xmit_atomic 0000000000000000 [ 273.753006][T12039] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1297'. [ 273.772393][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 273.795422][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'. [ 273.809725][T12041] netlink: 'syz.3.1303': attribute type 4 has an invalid length. [ 273.821512][T12041] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1303'. [ 274.100116][T12050] loop3: detected capacity change from 0 to 32768 [ 274.102610][T12050] XFS: attr2 mount option is deprecated. [ 274.104230][T12050] XFS: noikeep mount option is deprecated. [ 274.116233][T12054] netlink: 'syz.0.1308': attribute type 4 has an invalid length. [ 274.140030][T12054] netlink: 'syz.0.1308': attribute type 4 has an invalid length. [ 274.187719][T12050] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 274.244238][T12050] XFS (loop3): Ending clean mount [ 274.253930][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 274.256784][T12050] XFS (loop3): Quotacheck needed: Please wait. [ 274.313850][T12050] XFS (loop3): Quotacheck: Done. [ 275.034001][T11028] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 275.163278][T12097] atomic_op 00000000ac8ad49b conn xmit_atomic 0000000000000000 [ 275.265685][T12101] netlink: 'syz.3.1317': attribute type 4 has an invalid length. [ 275.706635][T12118] loop2: detected capacity change from 0 to 32768 [ 275.708882][T12118] XFS: attr2 mount option is deprecated. [ 275.710704][T12118] XFS: noikeep mount option is deprecated. [ 275.784797][T12118] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 275.879986][T12118] XFS (loop2): Ending clean mount [ 275.882686][T12118] XFS (loop2): Quotacheck needed: Please wait. [ 275.943885][T12118] XFS (loop2): Quotacheck: Done. [ 275.973185][T12149] atomic_op 000000007f93de8c conn xmit_atomic 0000000000000000 [ 276.700406][ T6311] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 276.706374][T11159] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 276.852913][T12173] syz.1.1339 (12173): drop_caches: 2 [ 276.863415][T12167] syz.1.1339 (12167): drop_caches: 2 [ 276.998581][T12182] __nla_validate_parse: 10 callbacks suppressed [ 276.998598][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 277.087017][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 277.125086][T12191] Invalid architecture in ELF header: 62 [ 277.426126][T12196] loop1: detected capacity change from 0 to 32768 [ 277.428424][T12196] XFS: attr2 mount option is deprecated. [ 277.430079][T12196] XFS: noikeep mount option is deprecated. [ 277.471979][T12196] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 277.492935][T12180] loop2: detected capacity change from 0 to 40427 [ 277.509654][T12180] F2FS-fs (loop2): invalid crc value [ 277.516333][T12196] XFS (loop1): Ending clean mount [ 277.518829][T12196] XFS (loop1): Quotacheck needed: Please wait. [ 277.540889][T12180] F2FS-fs (loop2): Found nat_bits in checkpoint [ 277.557593][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 277.588928][T12196] XFS (loop1): Quotacheck: Done. [ 277.595980][T12219] netlink: 'syz.0.1350': attribute type 4 has an invalid length. [ 277.624881][T12180] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 278.719044][T11159] syz-executor: attempt to access beyond end of device [ 278.719044][T11159] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.768666][T11159] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 278.888585][ T7921] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 278.895585][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 278.900824][T12236] syz.3.1354 (12236): drop_caches: 2 [ 278.966906][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 278.980802][T12236] syz.3.1354 (12236): drop_caches: 2 [ 279.398530][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 279.552493][T12271] Invalid architecture in ELF header: 62 [ 279.899949][T12275] loop0: detected capacity change from 0 to 32768 [ 279.902138][T12275] XFS: attr2 mount option is deprecated. [ 279.903642][T12275] XFS: noikeep mount option is deprecated. [ 279.924649][T12261] loop4: detected capacity change from 0 to 40427 [ 279.944652][T12261] F2FS-fs (loop4): invalid crc value [ 279.950947][T12275] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 279.966367][T12261] F2FS-fs (loop4): Found nat_bits in checkpoint [ 279.995287][T12275] XFS (loop0): Ending clean mount [ 279.997845][T12275] XFS (loop0): Quotacheck needed: Please wait. [ 280.046472][T12261] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 280.059940][T12275] XFS (loop0): Quotacheck: Done. [ 280.239936][T12270] loop1: detected capacity change from 0 to 40427 [ 281.019375][T12270] F2FS-fs (loop1): invalid crc value [ 281.075780][T12270] F2FS-fs (loop1): Found nat_bits in checkpoint [ 281.138202][T12270] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 281.325284][ T7837] syz-executor: attempt to access beyond end of device [ 281.325284][ T7837] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.336684][T11093] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 281.348739][ T7837] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 281.485442][T12302] syz.1.1365: attempt to access beyond end of device [ 281.485442][T12302] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 281.490921][T12302] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 281.493760][T12302] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 282.033050][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 282.329758][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 282.367767][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 282.417693][T12331] Invalid architecture in ELF header: 62 [ 282.618870][T12334] loop4: detected capacity change from 0 to 32768 [ 282.621301][T12334] XFS: attr2 mount option is deprecated. [ 282.622833][T12334] XFS: noikeep mount option is deprecated. [ 282.652008][T12334] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 282.690118][T12334] XFS (loop4): Ending clean mount [ 282.692983][T12334] XFS (loop4): Quotacheck needed: Please wait. [ 282.754994][T12334] XFS (loop4): Quotacheck: Done. [ 282.769153][T12352] syzkaller1: entered promiscuous mode [ 282.773332][T12352] syzkaller1: entered allmulticast mode [ 283.494176][T12364] netlink: 'syz.3.1389': attribute type 12 has an invalid length. [ 283.496360][T12364] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1389'. [ 283.506364][ T7837] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 283.574505][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 283.659902][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 283.773511][T12373] atomic_op 0000000092ad6a3d conn xmit_atomic 0000000000000000 [ 283.801792][T12373] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1392'. [ 284.088607][T12385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1395'. [ 284.191869][T12358] loop2: detected capacity change from 0 to 40427 [ 284.203290][T12392] fuse: Bad value for 'fd' [ 284.209826][T12358] F2FS-fs (loop2): invalid crc value [ 284.235716][T12397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1398'. [ 284.238698][T12358] F2FS-fs (loop2): Found nat_bits in checkpoint [ 284.256576][T12358] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 284.546720][T12403] syz.2.1386: attempt to access beyond end of device [ 284.546720][T12403] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 284.550778][T12403] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 284.552862][T12403] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 284.884961][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 285.005158][T12418] atomic_op 000000008d2b4b82 conn xmit_atomic 0000000000000000 [ 285.723876][T12427] loop3: detected capacity change from 0 to 40427 [ 285.752891][T12427] F2FS-fs (loop3): invalid crc value [ 285.782367][T12427] F2FS-fs (loop3): Found nat_bits in checkpoint [ 285.831060][T12427] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 285.942946][T12431] loop0: detected capacity change from 0 to 40427 [ 285.960209][T12431] F2FS-fs (loop0): invalid crc value [ 285.999733][T12431] F2FS-fs (loop0): Found nat_bits in checkpoint [ 286.027279][T12431] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 286.113327][T12456] syz.3.1408: attempt to access beyond end of device [ 286.113327][T12456] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 286.117460][T12456] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 286.119583][T12456] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 286.526876][T12458] syz.0.1410: attempt to access beyond end of device [ 286.526876][T12458] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 286.531055][T12458] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 286.533120][T12458] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 286.828028][T12441] loop1: detected capacity change from 0 to 32768 [ 286.846006][T12441] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1414 (12441) [ 286.883079][T12441] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 286.901143][T12441] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 286.903731][T12441] BTRFS info (device loop1): disk space caching is enabled [ 286.917327][T12463] Invalid architecture in ELF header: 62 [ 286.979627][ T6311] Bluetooth: hci0: command 0x0406 tx timeout [ 287.042417][T12441] BTRFS info (device loop1): rebuilding free space tree [ 287.079162][T12441] BTRFS info (device loop1): disabling free space tree [ 287.081321][T12441] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 287.084097][T12441] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 287.520346][T12485] BTRFS info (device loop1): balance: start [ 287.525516][T12485] BTRFS info (device loop1): balance: ended with status: 0 [ 287.831759][T12488] __nla_validate_parse: 3 callbacks suppressed [ 287.831776][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 287.842765][ T7921] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 287.906343][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 288.199885][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1422'. [ 288.292028][T12491] loop0: detected capacity change from 0 to 40427 [ 288.304867][T12491] F2FS-fs (loop0): invalid crc value [ 288.327619][T12491] F2FS-fs (loop0): Found nat_bits in checkpoint [ 288.388565][T12517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1427'. [ 288.402275][T12491] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 288.415604][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.429285][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.694074][T12524] syz.0.1418: attempt to access beyond end of device [ 288.694074][T12524] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 288.698296][T12524] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 288.700502][T12524] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 289.251666][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 289.307155][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 289.913498][T12549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'. [ 290.223027][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 290.374347][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 290.452492][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 290.526443][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.536279][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.725639][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.737132][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.756915][T12560] loop4: detected capacity change from 0 to 40427 [ 290.776067][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.778824][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.793107][T12560] F2FS-fs (loop4): invalid crc value [ 290.805683][T12560] F2FS-fs (loop4): Found nat_bits in checkpoint [ 290.843718][T12560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 291.114570][T12585] syz.4.1440: attempt to access beyond end of device [ 291.114570][T12585] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 291.118952][T12585] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 291.121160][T12585] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 292.171647][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.179138][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.972206][T12638] syzkaller1: entered promiscuous mode [ 292.976362][T12638] syzkaller1: entered allmulticast mode [ 293.053160][T12646] __nla_validate_parse: 3 callbacks suppressed [ 293.053176][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'. [ 293.105520][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'. [ 293.157947][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 293.782189][T12672] loop1: detected capacity change from 0 to 32768 [ 294.407774][T12689] syzkaller1: entered promiscuous mode [ 294.410046][T12689] syzkaller1: entered allmulticast mode [ 294.480333][ T6288] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 294.538949][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 294.610169][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 294.670449][ T6288] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.673295][ T6288] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 294.676049][ T6288] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.694354][ T6288] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 294.697495][ T6288] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 294.716253][ T6288] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.718957][ T6288] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.725685][ T6288] usb 1-1: Product: syz [ 294.734416][ T6288] usb 1-1: Manufacturer: syz [ 294.743803][T12679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.754496][ T6288] cdc_wdm 1-1:1.0: skipping garbage [ 294.759329][ T6288] cdc_wdm 1-1:1.0: skipping garbage [ 294.771681][ T6288] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 294.773367][ T6288] cdc_wdm 1-1:1.0: Unknown control protocol [ 295.000312][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 295.021042][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.022999][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.024863][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.026752][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.028687][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.030567][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.032331][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.034119][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.036008][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.037828][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.039539][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.041382][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.043189][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.044980][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.046754][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.048535][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.050369][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.052193][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.054021][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 295.055858][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 295.069824][ C0] ------------[ cut here ]------------ [ 295.071664][ C0] WARNING: CPU: 0 PID: 680 at kernel/kcov.c:871 kcov_remote_start+0x3ec/0x524 [ 295.074322][ C0] Modules linked in: [ 295.075483][ C0] CPU: 0 PID: 680 Comm: kworker/u8:8 Not tainted 6.10.0-rc7-syzkaller-gef445d1539dd #0 [ 295.078191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 295.080986][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 295.082746][ C0] pstate: 004000c5 (nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 295.085131][ C0] pc : kcov_remote_start+0x3ec/0x524 [ 295.086759][ C0] lr : kcov_remote_start+0xac/0x524 [ 295.088319][ C0] sp : ffff800080006740 [ 295.089595][ C0] x29: ffff800080006750 x28: ffff0000c5a29a00 x27: 1fffe0001a798088 [ 295.092015][ C0] x26: dfff800000000000 x25: ffff0000d3cc0400 x24: ffff80008f04ba30 [ 295.094498][ C0] x23: 00000000000000c0 x22: ffff80008f101120 x21: 0000000000ff0100 [ 295.096781][ C0] x20: 0100000000000001 x19: ffff0000c7118000 x18: ffff0000cc5b4bfc [ 295.099108][ C0] x17: ffff800124d1e000 x16: ffff800082f8f174 x15: 0000000000000001 [ 295.101586][ C0] x14: ffff80008f100568 x13: dfff800000000000 x12: 00000000dddee05e [ 295.104110][ C0] x11: 0000000000040000 x10: 0000000000000003 x9 : 0000000000010101 [ 295.106371][ C0] x8 : 0000000000000001 x7 : ffff80008054ca4c x6 : 0000000000000000 [ 295.108590][ C0] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 295.110764][ C0] x2 : 0000000000000008 x1 : ffff80008b1414a0 x0 : 0000000000000000 [ 295.112975][ C0] Call trace: [ 295.113909][ C0] kcov_remote_start+0x3ec/0x524 [ 295.115297][ C0] __usb_hcd_giveback_urb+0x2e8/0x570 [ 295.116865][ C0] usb_hcd_giveback_urb+0x108/0x3ac [ 295.118392][ C0] dummy_timer+0x630/0x346c [ 295.119671][ C0] __hrtimer_run_queues+0x494/0xce0 [ 295.121113][ C0] hrtimer_interrupt+0x2c0/0xb64 [ 295.122506][ C0] arch_timer_handler_virt+0x74/0x88 [ 295.124015][ C0] handle_percpu_devid_irq+0x174/0x308 [ 295.125567][ C0] generic_handle_domain_irq+0x7c/0xc4 [ 295.127093][ C0] gic_handle_irq+0x6c/0x190 [ 295.128396][ C0] do_interrupt_handler+0xe0/0x138 [ 295.129899][ C0] el1_interrupt+0x34/0x68 [ 295.131139][ C0] el1h_64_irq_handler+0x18/0x24 [ 295.132506][ C0] el1h_64_irq+0x64/0x68 [ 295.133732][ C0] __sanitizer_cov_trace_pc+0x48/0x6c [ 295.135263][ C0] cfg80211_inform_single_bss_data+0x204/0x1ed0 [ 295.137107][ C0] cfg80211_inform_bss_data+0x2e8/0x47e8 [ 295.138701][ C0] cfg80211_inform_bss_frame_data+0x300/0x700 [ 295.140515][ C0] ieee80211_bss_info_update+0x704/0x9d4 [ 295.142191][ C0] ieee80211_scan_rx+0x478/0x8c8 [ 295.143609][ C0] ieee80211_rx_list+0x21c4/0x2c60 [ 295.145035][ C0] ieee80211_rx_napi+0x164/0x34c [ 295.146457][ C0] ieee80211_handle_queued_frames+0xec/0x180 [ 295.148150][ C0] ieee80211_tasklet_handler+0x20/0x30 [ 295.149769][ C0] tasklet_action_common+0x318/0x3f4 [ 295.151229][ C0] tasklet_action+0x68/0x8c [ 295.152489][ C0] handle_softirqs+0x2e4/0xbfc [ 295.153877][ C0] __do_softirq+0x14/0x20 [ 295.155093][ C0] ____do_softirq+0x14/0x20 [ 295.156313][ C0] call_on_irq_stack+0x24/0x4c [ 295.157657][ C0] do_softirq_own_stack+0x20/0x2c [ 295.159119][ C0] do_softirq+0x90/0xf8 [ 295.160304][ C0] __local_bh_enable_ip+0x288/0x44c [ 295.161792][ C0] local_bh_enable+0x28/0x34 [ 295.163066][ C0] __ieee80211_tx_skb_tid_band+0x45c/0x590 [ 295.164768][ C0] ieee80211_handle_roc_started+0x254/0x3b8 [ 295.166512][ C0] _ieee80211_start_next_roc+0x6a4/0x9ac [ 295.168173][ C0] __ieee80211_roc_work+0x1d4/0x2d0 [ 295.169688][ C0] ieee80211_roc_work+0xc4/0xf0 [ 295.171043][ C0] cfg80211_wiphy_work+0x1fc/0x240 [ 295.172541][ C0] process_one_work+0x79c/0x15b8 [ 295.174040][ C0] worker_thread+0x938/0xecc [ 295.175298][ C0] kthread+0x288/0x310 [ 295.176421][ C0] ret_from_fork+0x10/0x20 [ 295.177708][ C0] irq event stamp: 5646149 [ 295.178961][ C0] hardirqs last enabled at (5646148): [] kcov_remote_start+0x368/0x524 [ 295.181636][ C0] hardirqs last disabled at (5646149): [] el1_interrupt+0x24/0x68 [ 295.184349][ C0] softirqs last enabled at (5646140): [] local_bh_enable+0x10/0x34 [ 295.187094][ C0] softirqs last disabled at (5646141): [] __do_softirq+0x14/0x20 [ 295.189764][ C0] ---[ end trace 0000000000000000 ]--- [ 295.326737][T12721] Invalid architecture in ELF header: 62 [ 295.415224][ T6381] usb 1-1: USB disconnect, device number 5 [ 295.416927][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 295.482066][T12710] loop2: detected capacity change from 0 to 32768