last executing test programs: 3m5.49811174s ago: executing program 4 (id=2476): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x21, 0x9d, 0xf1, 0x0, 0x1b80, 0xd700, 0xd046, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 2m36.85049319s ago: executing program 4 (id=2476): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x21, 0x9d, 0xf1, 0x0, 0x1b80, 0xd700, 0xd046, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 1m53.640888419s ago: executing program 4 (id=2476): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x21, 0x9d, 0xf1, 0x0, 0x1b80, 0xd700, 0xd046, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 1m24.898605591s ago: executing program 4 (id=2476): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x21, 0x9d, 0xf1, 0x0, 0x1b80, 0xd700, 0xd046, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 1m1.148310026s ago: executing program 4 (id=2476): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x21, 0x9d, 0xf1, 0x0, 0x1b80, 0xd700, 0xd046, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 40.633554002s ago: executing program 2 (id=4583): setpriority(0x5, 0x0, 0x0) 40.473354233s ago: executing program 2 (id=4585): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) syz_io_uring_setup(0x7213, &(0x7f0000000240)={0x0, 0x0, 0x200}, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000240)=ANY=[], 0x46) 40.338024178s ago: executing program 2 (id=4588): syz_open_dev$video4linux(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40046104, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0x52b, 0x3}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) 39.286881051s ago: executing program 2 (id=4592): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='D'], 0x8, 0x0) 38.937670834s ago: executing program 2 (id=4595): openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 38.220307267s ago: executing program 2 (id=4597): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000095000000000000000000000000000000a0ae1945dc205d591cc7e8d916bf9244d46e82988d65a6228ba17a4ecb75588e69f05285583f9efae6f3215de19e1e81fae1f0d9b9d0cbb5f4eed3166297938a4b7e919e73e11f48188b74f79559826f72777c0936b57de9b480afde835a408284e1032a559ca1d52c4dc1c127f2e2aefc6c5d5a31ec02ab45cbcebc7519b0d0207891fa387ff469"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702504000000002020207b1af8ff00000000bfa100000000000007387022eaffffffb702000008000000b7030000000000008500000070000000", @ANYBLOB="e38a64dd1b1f46716417a3ede310bc72b4073dafb3e8ec7b01927fdb53834fa9bc0692fdd06a16797d2957e723ce26a3a7d4674bcca4ac3e9f6c6c7a3644ceeb94ab0c483ccce4f8f52562a419481a5a3c8ac54b20f05d63cdd991eb1c887004ff0946fcee71e9040dbc0f26112074b9460142bae8c80c547271bb97e288356ff9183ec81a787618b6cc584ef76f5274d3703ab05303d4827b2cca0fdb38aeda06318c0c1c455a554261b2cce9441ce735b522e699331938a95342894f42"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749baca85309be96d5a45bbb29ea06f9cbc7eea15bc1ee369d2707231280f0415df341ab76de90db5ff7ffffffd075b373f51be98db7efbbe8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eacb4389adbb47efb7b3f19046c7f1bd1bf56e58555d96137f95b3aacd74ed1c8a8676468cf2405e48723c6b1ff3698422f88ffed8617dd64330f4c38ba86e3b50da03f4b1e4808aa5c9e9546d7190747c6abc5beab28cec4ff7faa3fab48cdb3d64cfd5d698416752a16f32a54ccef577832e4cf684fce2cb0bab7f6a5821b26483322000000000000596c6e1ac996b8a0924948750b6e52c09d53950e5c8143db8669f8a5bf6511df822532e3c78d019149651255048aab0399e5d6e317b6f3fbc2600ffc3c66c7244b7bcf6b78b5e8c0ee04ce344ceb084b4f2ef09b59a36a92b3874edc559e5bf58a567d385ba92df9121dfa257e60655dcbff581c75107b01b5baaf29ebaf24861c538fefcaecb52a6b69fc450e10645df60a9d50131466113c6aac5abbcf9e9f2f0384da3f9892af413bd87f51f7f0cf61096fd79327fa66effe89a72d7a75d40f0c1ad299f55eafcd52a39649ab6021e30f901933f11092"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000280)=0x19) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) 36.407758188s ago: executing program 4 (id=2476): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x21, 0x9d, 0xf1, 0x0, 0x1b80, 0xd700, 0xd046, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 17.711186036s ago: executing program 3 (id=4671): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x2a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476709f00000001028010000600000000000000"], 0xfd12}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$netlink(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}, 0x0, 0x0, 0x200}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0, r1, 0xa000000}}, 0x18) 17.165541978s ago: executing program 3 (id=4679): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000240)=ANY=[], 0x46) 17.008795714s ago: executing program 3 (id=4681): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0x2020) sendto$inet6(r0, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 16.66054183s ago: executing program 3 (id=4683): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0x0, 0xfffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0) r2 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000880)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0xa0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1000000201005) 14.277600549s ago: executing program 0 (id=4690): syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = memfd_create(&(0x7f0000000e80)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = dup3(r0, r1, 0x0) fchdir(r2) timer_create(0x0, &(0x7f0000533fa0), 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 14.179412053s ago: executing program 0 (id=4692): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELTABLE={0x138, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_USERDATA={0x9, 0x6, "ffd8047fd0"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xc9, 0x6, "a4fb07f0f80319fd73c242e578c5cd1704ed8b1f32f7149c0b421eb4568004cc4edbd013f6e018cb70c0ee596ec6d9344d2806d5fb27ba1793b226fa5392064185b89a11f487eb1e1d44761c5a2e90a2224840f0d1367fe53a33846499d6bcb6a601467b2fe42f052023bed039e72a0da2a060c21df5dbb7802324eeb5d58f5313db1eb990ddfd7025dca76e3b9250d0b0cbe84076f870838670ea5bc0971f90cc6febef99634bd0b0b7f798189559848ac3d21a1baf787d99b93d4d47f7bf1371a2fceac6"}]}, @NFT_MSG_DELSETELEM={0x27c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x220, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x9, 0x1, "ce38e14c2a"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x114, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x5, 0x1, '\v'}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x89, 0x1, "08d3c7e1014336273d95a4aa1eb847a9c0937862983db6e5351fc1fca94cc11d2d104f78409f01d64533f94f90f7ada3342c4176665ea2f1d5b822b58eee4464f358b9f82c9c6c5c42ea0bdcaa89168ca73989bf482031673856d4c88bf3a5bfaae42e9d9d75aea956c2b6ea9f1e777741e0f9ffaea9bdfb7fe28437fde5f0635d8c3abe9e"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}]}}}]}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8, 0x6, 0x1, 0x0, "a81bc491"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x3dc}}, 0x0) 14.07357563s ago: executing program 3 (id=4693): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000240)=ANY=[], 0x46) 14.060633874s ago: executing program 0 (id=4694): syz_open_dev$video4linux(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40046104, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x2, 0x52b, 0x3}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 13.002263531s ago: executing program 0 (id=4697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000380140003800c000180080001000000000004fc0080180001801400020076657468315f746f5f626174616476"], 0x44}}, 0x0) 12.801922053s ago: executing program 0 (id=4698): r0 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendto(r2, &(0x7f0000000000)="e5", 0x1, 0x24000800, 0x0, 0x0) 12.481471394s ago: executing program 0 (id=4699): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf250200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="15e501020303060204c6190c1facfe466818176d06801f5a01ad"], 0x1a) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@local, 0x0, r6}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'cp855'}}, {@gid}, {@gid}, {@uid}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000000680)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0xc8, 0x4c, 0x232, 0x0, 0x5, 0x248, 0x2e8, 0x2e8, 0x248, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'veth1_to_bond\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip6tnl0\x00', {}, 'veth1_to_bond\x00', {}, 0x0, 0x3a}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) 12.398227351s ago: executing program 3 (id=4700): syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-(\xb94\xf1\x9c\x83\nbo<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<>\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000003c0)=0xff, 0x4) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000000800)=[0x0]) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x80000}, 0x20) 7.937215651s ago: executing program 5 (id=4713): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0xd8, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8e}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="d6f30b983cb3", 0x6}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00h'], 0x9) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000004000000000000000002500000000000000c700000000"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002800800", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f40704000000000000000001000000000000", 0x1c) 6.900992418s ago: executing program 5 (id=4715): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x5, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x83, 0x4003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x6c}) dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x6, 0xf3, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x6, 0x1000, 0x9}) 6.769592387s ago: executing program 5 (id=4717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELTABLE={0x138, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_USERDATA={0x9, 0x6, "ffd8047fd0"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xc9, 0x6, "a4fb07f0f80319fd73c242e578c5cd1704ed8b1f32f7149c0b421eb4568004cc4edbd013f6e018cb70c0ee596ec6d9344d2806d5fb27ba1793b226fa5392064185b89a11f487eb1e1d44761c5a2e90a2224840f0d1367fe53a33846499d6bcb6a601467b2fe42f052023bed039e72a0da2a060c21df5dbb7802324eeb5d58f5313db1eb990ddfd7025dca76e3b9250d0b0cbe84076f870838670ea5bc0971f90cc6febef99634bd0b0b7f798189559848ac3d21a1baf787d99b93d4d47f7bf1371a2fceac6"}]}, @NFT_MSG_DELSETELEM={0x27c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x220, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x9, 0x1, "ce38e14c2a"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x114, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x5, 0x1, '\v'}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x89, 0x1, "08d3c7e1014336273d95a4aa1eb847a9c0937862983db6e5351fc1fca94cc11d2d104f78409f01d64533f94f90f7ada3342c4176665ea2f1d5b822b58eee4464f358b9f82c9c6c5c42ea0bdcaa89168ca73989bf482031673856d4c88bf3a5bfaae42e9d9d75aea956c2b6ea9f1e777741e0f9ffaea9bdfb7fe28437fde5f0635d8c3abe9e"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}]}}}]}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8, 0x6, 0x1, 0x0, "a81bc491"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x3dc}}, 0x0) 6.648926062s ago: executing program 5 (id=4718): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0x0, 0xfffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffb) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000880)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0xa0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000000201005) 4.654006923s ago: executing program 5 (id=4723): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x2000040, &(0x7f0000000380)=ANY=[], 0xfe, 0xc3a, &(0x7f0000000f00)="$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") unlink(&(0x7f0000000140)='./file1\x00') fspick(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.416650058s ago: executing program 1 (id=4726): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0xd8, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8e}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="d6f30b983cb3", 0x6}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00h'], 0x9) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000004000000000000000002500000000000000c700000000"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002800800", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f40704000000000000000001000000000000", 0x1c) 2.037518589s ago: executing program 5 (id=4728): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x4, 0x5, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x83, 0x4003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x6c}) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x6, 0xf3, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x6, 0x1000, 0x9}) 1.415274385s ago: executing program 1 (id=4729): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELTABLE={0x138, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_USERDATA={0x9, 0x6, "ffd8047fd0"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xc9, 0x6, "a4fb07f0f80319fd73c242e578c5cd1704ed8b1f32f7149c0b421eb4568004cc4edbd013f6e018cb70c0ee596ec6d9344d2806d5fb27ba1793b226fa5392064185b89a11f487eb1e1d44761c5a2e90a2224840f0d1367fe53a33846499d6bcb6a601467b2fe42f052023bed039e72a0da2a060c21df5dbb7802324eeb5d58f5313db1eb990ddfd7025dca76e3b9250d0b0cbe84076f870838670ea5bc0971f90cc6febef99634bd0b0b7f798189559848ac3d21a1baf787d99b93d4d47f7bf1371a2fceac6"}]}, @NFT_MSG_DELSETELEM={0xcc, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "a81bc491d0"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x22c}}, 0x0) 1.329541256s ago: executing program 1 (id=4730): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x26) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = dup2(r2, r0) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) 525.647731ms ago: executing program 1 (id=4731): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/110, 0x6e) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6) 94.904458ms ago: executing program 1 (id=4732): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x2a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}, 0x0, 0x0, 0x200}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0, r1, 0xa000000}}, 0x18) 0s ago: executing program 1 (id=4733): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T1142] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1106.005158][ T1142] imon 3-1:0.0: unable to initialize intf0, err -19 [ 1106.038169][ T1142] imon:imon_probe: failed to initialize context! [ 1106.067998][ T1142] imon 3-1:0.0: unable to register, err -19 [ 1106.553344][ T1142] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1106.679564][ T5093] libceph: connect (1)[c::]:6789 error -101 [ 1106.709380][ T5093] libceph: mon0 (1)[c::]:6789 connect error [ 1106.800592][T19208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.876903][ T1142] usb 1-1: Using ep0 maxpacket: 32 [ 1106.984833][T19383] ceph: No mds server is up or the cluster is laggy [ 1106.997666][T19208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.023269][ T1142] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1107.085208][T19208] bridge_slave_0: entered allmulticast mode [ 1107.115165][ T1142] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1107.138958][T19208] bridge_slave_0: entered promiscuous mode [ 1107.145108][ T1142] usb 1-1: can't read configurations, error -61 [ 1107.194779][T19208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.223089][T19208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.230455][T19208] bridge_slave_1: entered allmulticast mode [ 1107.239891][T18546] usb 3-1: USB disconnect, device number 89 [ 1107.249566][T19208] bridge_slave_1: entered promiscuous mode [ 1107.343692][ T1142] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1107.373435][ T5159] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1107.461379][T19208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.499520][T19208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.563259][ T5159] usb 2-1: Using ep0 maxpacket: 16 [ 1107.573342][ T1142] usb 1-1: Using ep0 maxpacket: 32 [ 1107.581250][ T5159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1107.582209][ T1142] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1107.612730][ T5159] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1107.619861][ T1142] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1107.641266][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.657368][ T5159] usb 2-1: config 0 descriptor?? [ 1107.680184][T19208] team0: Port device team_slave_0 added [ 1107.686864][ T1142] usb 1-1: can't read configurations, error -61 [ 1107.695921][T19399] loop2: detected capacity change from 0 to 1024 [ 1107.702047][ T1142] usb usb1-port1: attempt power cycle [ 1107.712504][T19208] team0: Port device team_slave_1 added [ 1107.767290][T19208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.775233][T19208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.801723][T19208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.817399][T19208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.825023][T19208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.853455][T19208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.882062][T19381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4271'. [ 1107.953804][T19208] hsr_slave_0: entered promiscuous mode [ 1107.964600][T19208] hsr_slave_1: entered promiscuous mode [ 1107.974601][T19208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.984064][T19208] Cannot create hsr debugfs directory [ 1108.146465][ T1142] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1108.174540][T19381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.184193][T19381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.195167][T19381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.204481][ T1142] usb 1-1: Using ep0 maxpacket: 32 [ 1108.205258][T19381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.221166][ T5159] hid (null): report_id 2838798905 is invalid [ 1108.230966][ T5159] hid (null): unknown global tag 0xc [ 1108.236707][ T5159] hid (null): unknown global tag 0xa5 [ 1108.242578][ T5159] hid (null): unknown global tag 0xd [ 1108.256683][ T1142] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1108.268698][ T5159] hid-generic 0003:0158:0100.0045: unknown main item tag 0x1 [ 1108.279010][ T5159] hid-generic 0003:0158:0100.0045: unexpected long global item [ 1108.289457][ T1142] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1108.289953][ T5159] hid-generic 0003:0158:0100.0045: probe with driver hid-generic failed with error -22 [ 1108.318714][ T1142] usb 1-1: can't read configurations, error -61 [ 1108.429410][ T5159] usb 2-1: USB disconnect, device number 98 [ 1108.492426][ T1142] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1109.458593][ T1142] usb 1-1: Using ep0 maxpacket: 32 [ 1109.515716][ T1142] usb 1-1: device descriptor read/all, error -71 [ 1109.532190][ T1142] usb usb1-port1: unable to enumerate USB device [ 1109.922753][T19208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1109.944554][T19208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1109.975576][T19208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1110.142430][ T25] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1110.173117][T19208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1110.255166][T13948] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1110.361562][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1110.397023][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1110.664027][T19443] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1110.909947][ T25] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1110.948077][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.973854][ T25] usb 1-1: Product: syz [ 1110.980453][ T25] usb 1-1: Manufacturer: syz [ 1110.998555][ T25] usb 1-1: SerialNumber: syz [ 1111.051222][T13948] usb 3-1: Using ep0 maxpacket: 8 [ 1111.140517][ T25] usb 1-1: config 0 descriptor?? [ 1111.155206][ T25] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1111.163176][ T25] imon 1-1:0.0: unable to initialize intf0, err -19 [ 1111.169799][ T25] imon:imon_probe: failed to initialize context! [ 1111.176338][ T25] imon 1-1:0.0: unable to register, err -19 [ 1111.182883][T13948] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1111.224966][T13948] usb 3-1: config 0 has no interface number 0 [ 1111.247252][T19450] 9pnet: p9_errstr2errno: server reported unknown error [ 1111.259961][T13948] usb 3-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1111.290876][T13948] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1111.328912][T13948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.343817][T19208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.372182][T13948] usb 3-1: config 0 descriptor?? [ 1111.399843][T13948] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1111.480268][T19208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.498541][ T5159] usb 1-1: USB disconnect, device number 71 [ 1111.514050][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.521325][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.536534][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.543822][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.616551][ T1142] usb 3-1: USB disconnect, device number 90 [ 1111.635279][T19460] loop5: detected capacity change from 0 to 1024 [ 1112.820692][T14789] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1113.030967][T14789] usb 4-1: Using ep0 maxpacket: 16 [ 1113.053758][T14789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1113.112633][T14789] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1113.159940][T14789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.194381][T14789] usb 4-1: config 0 descriptor?? [ 1113.333191][T19208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.354444][T19481] Illegal XDP return value 1188801171 on prog (id 323) dev syz_tun, expect packet loss! [ 1113.447000][T19462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4296'. [ 1114.090402][T19462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.248798][T19501] ceph: No mds server is up or the cluster is laggy [ 1114.300682][T19462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.381148][T19462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.443107][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'. [ 1114.459615][T19462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.555634][T14789] hid (null): report_id 2838798905 is invalid [ 1114.569351][T14789] hid (null): unknown global tag 0xc [ 1114.574720][T14789] hid (null): unknown global tag 0xa5 [ 1114.586802][T14789] hid (null): unknown global tag 0xd [ 1114.603255][T14789] hid-generic 0003:0158:0100.0046: unknown main item tag 0x1 [ 1114.629226][T14789] hid-generic 0003:0158:0100.0046: unexpected long global item [ 1114.637874][T14789] hid-generic 0003:0158:0100.0046: probe with driver hid-generic failed with error -22 [ 1114.726777][ T25] usb 4-1: USB disconnect, device number 82 [ 1114.846533][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.778280][T19208] veth0_vlan: entered promiscuous mode [ 1115.877625][T19208] veth1_vlan: entered promiscuous mode [ 1115.963112][T19521] loop0: detected capacity change from 0 to 1024 [ 1116.120756][T19208] veth0_macvtap: entered promiscuous mode [ 1116.191435][T19208] veth1_macvtap: entered promiscuous mode [ 1116.282564][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.308395][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.338694][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.364679][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.377250][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.401280][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.418144][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.429524][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.444623][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.460882][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.650967][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.697112][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.712327][ T8] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1116.733061][T19208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.771706][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.791543][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.804683][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.857118][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.046970][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.216097][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.276067][T19562] ceph: No mds server is up or the cluster is laggy [ 1117.323023][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.343114][ T25] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 1117.375140][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.425225][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.466678][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.497467][T19208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.510887][T19208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.524131][T19208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.538400][T19208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.547473][T19208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.559968][T19208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.569247][T19208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.607966][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1117.618578][ T8] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 1117.638410][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.656947][ T8] usb 4-1: config 0 descriptor?? [ 1117.666780][ T8] usb 4-1: probing VID:PID(2201:012C) [ 1117.681199][ T8] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1117.703047][T19561] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1117.709313][T19561] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1117.717425][ T25] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1117.722866][ T8] vub300 4-1:0.0: probe with driver vub300 failed with error -22 [ 1117.778003][ T1142] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1117.979099][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.013571][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.023098][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1118.037003][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1118.041746][ T1142] usb 6-1: Using ep0 maxpacket: 8 [ 1118.065926][ T1142] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1118.073547][ T25] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1118.086315][ T1142] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1118.109953][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.120137][ T1142] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1118.127883][T19554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.139472][T10089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.148988][ T25] usb 2-1: config 0 descriptor?? [ 1118.161943][ T1142] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.162730][T19554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.177380][T10089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.207742][ T1142] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1118.226055][ T1142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.269278][T14789] usb 4-1: USB disconnect, device number 83 [ 1118.379605][T19569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4330'. [ 1118.455172][ T1142] usb 6-1: usb_control_msg returned -32 [ 1118.476142][ T1142] usbtmc 6-1:16.0: can't read capabilities [ 1118.521336][ T1142] usb 6-1: USB disconnect, device number 62 [ 1118.701991][T19573] loop0: detected capacity change from 0 to 32768 [ 1118.720519][T19573] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4323 (19573) [ 1118.759455][T19573] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1118.772022][T19573] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1118.784039][T19569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.797545][T19573] BTRFS info (device loop0): using free-space-tree [ 1118.807936][T19569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.845867][T19569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.862326][T19569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.872401][ T25] hid (null): report_id 2838798905 is invalid [ 1118.878739][ T25] hid (null): unknown global tag 0xc [ 1118.884902][ T25] hid (null): unknown global tag 0xa5 [ 1118.892243][ T25] hid (null): unknown global tag 0xd [ 1118.921953][ T25] hid-generic 0003:0158:0100.0047: unknown main item tag 0x1 [ 1118.935170][T19605] loop2: detected capacity change from 0 to 1024 [ 1118.939221][ T25] hid-generic 0003:0158:0100.0047: unexpected long global item [ 1118.952538][T19573] BTRFS info (device loop0): rebuilding free space tree [ 1118.963643][ T25] hid-generic 0003:0158:0100.0047: probe with driver hid-generic failed with error -22 [ 1119.025202][ T29] audit: type=1804 audit(1719654393.447:558): pid=19573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4323" name="/root/syzkaller.0Ma5zm/266/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 1119.081198][T14789] usb 2-1: USB disconnect, device number 99 [ 1119.134620][T13914] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1119.193583][T19612] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1119.223939][T19612] unsupported nlmsg_type 40 [ 1120.203019][ T2434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.920087][T19635] ceph: No mds server is up or the cluster is laggy [ 1121.095842][ T2434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.310238][ T2434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.417441][ T2434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.535800][ T2434] bridge_slave_1: left allmulticast mode [ 1121.541509][ T2434] bridge_slave_1: left promiscuous mode [ 1121.547680][ T2434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.561205][ T2434] bridge_slave_0: left allmulticast mode [ 1121.567022][ T2434] bridge_slave_0: left promiscuous mode [ 1121.572781][ T2434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.449989][T19657] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4354'. [ 1122.506407][ T5222] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1122.585300][ T5159] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1122.710941][ T5222] usb 4-1: Using ep0 maxpacket: 8 [ 1122.735869][ T5222] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1122.760688][ T5222] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1122.778203][ T5159] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1122.821872][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.830209][ T5222] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1122.854765][ T5159] usb 2-1: config 0 descriptor?? [ 1122.864709][ T5222] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.885383][ T5222] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1122.895509][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.013907][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1123.027610][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1123.038489][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1123.049181][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1123.076413][ T2434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.090128][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1123.108803][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1123.119390][T19673] loop0: detected capacity change from 0 to 512 [ 1123.130295][T19648] loop5: detected capacity change from 0 to 32768 [ 1123.138848][T19674] loop2: detected capacity change from 0 to 1024 [ 1123.143731][ T5222] usb 4-1: usb_control_msg returned -32 [ 1123.156871][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1123.157249][T19648] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4350 (19648) [ 1123.164075][ T5222] usbtmc 4-1:16.0: can't read capabilities [ 1123.188914][ T5222] usb 4-1: USB disconnect, device number 84 [ 1123.195557][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1123.203517][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1123.220535][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1123.231250][ T2434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.241727][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1123.251356][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1123.256104][ T2434] bond0 (unregistering): Released all slaves [ 1123.271285][T19673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.305100][T19673] ext4 filesystem being mounted at /root/syzkaller.0Ma5zm/272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.347284][T19648] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1123.364908][T19648] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 1123.408693][T19648] BTRFS info (device loop5): using free-space-tree [ 1123.440645][T19669] wg0 speed is unknown, defaulting to 1000 [ 1123.463421][T19673] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4358: corrupted inode contents [ 1123.514814][T19673] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.4358: mark_inode_dirty error [ 1123.576060][T19673] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4358: corrupted inode contents [ 1123.643127][T19673] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.4358: mark_inode_dirty error [ 1123.733457][T19648] BTRFS info (device loop5): rebuilding free space tree [ 1123.736977][T19673] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1123.815557][ T29] audit: type=1804 audit(1719654398.249:559): pid=19648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4350" name="/root/syzkaller.0qwKML/29/bus/bus" dev="loop5" ino=263 res=1 errno=0 [ 1123.914546][T19694] overlayfs: failed to resolve './file0': -2 [ 1123.982919][T13914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.986350][T19694] Process accounting resumed [ 1124.019518][T19697] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1124.039146][T19697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1124.097968][T18654] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1124.146254][T19699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1125.001536][ T5093] libceph: connect (1)[c::]:6789 error -1 [ 1125.057668][ T5093] libceph: mon0 (1)[c::]:6789 connect error [ 1125.072730][T19704] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1125.080318][T19704] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1125.088812][T19709] ceph: No mds server is up or the cluster is laggy [ 1125.149264][ T5159] pegasus 2-1:0.0: setup Pegasus II specific registers [ 1125.287311][ T2434] hsr_slave_0: left promiscuous mode [ 1125.344978][ T2434] hsr_slave_1: left promiscuous mode [ 1125.347861][ T5159] pegasus 2-1:0.0: can't locate MII phy, using default [ 1125.390680][ T2434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.426374][ T2434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.428567][ T29] audit: type=1800 audit(1719654399.850:560): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4362" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 1125.485035][ T2434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.492700][ T2434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.495195][ T29] audit: type=1800 audit(1719654399.850:561): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4362" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 1125.662663][ T2434] veth1_macvtap: left promiscuous mode [ 1125.713713][ T2434] veth0_macvtap: left promiscuous mode [ 1125.728758][ T2434] veth1_vlan: left promiscuous mode [ 1125.755821][ T2434] veth0_vlan: left promiscuous mode [ 1125.853257][T19740] loop3: detected capacity change from 0 to 512 [ 1125.942199][T19740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.962021][T19740] ext4 filesystem being mounted at /root/syzkaller.pZSVPG/638/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.007111][T19740] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.4373: path /root/syzkaller.pZSVPG/638/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1126.048961][T19740] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz.3.4373: path /root/syzkaller.pZSVPG/638/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1126.071815][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.086557][T19746] loop5: detected capacity change from 0 to 1024 [ 1126.094247][T19740] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.4373: path /root/syzkaller.pZSVPG/638/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1126.154321][T19748] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.4373: corrupted inode contents [ 1126.171949][T19748] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.4373: mark_inode_dirty error [ 1126.222391][T19748] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.4373: corrupted inode contents [ 1126.237495][T19748] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.4373: mark_inode_dirty error [ 1126.256046][T19740] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz.3.4373: path /root/syzkaller.pZSVPG/638/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1126.283792][T19740] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz.3.4373: path /root/syzkaller.pZSVPG/638/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1126.306004][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.337395][T19740] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.4373: path /root/syzkaller.pZSVPG/638/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1126.695631][ T9016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.192399][ T2434] team0 (unregistering): Port device team_slave_1 removed [ 1127.261664][ T2434] team0 (unregistering): Port device team_slave_0 removed [ 1127.314586][T19751] loop3: detected capacity change from 0 to 32768 [ 1127.332371][T19751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4374 (19751) [ 1127.362832][T19751] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1127.376694][T19751] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1127.385765][T19751] BTRFS info (device loop3): using free-space-tree [ 1127.520727][T19751] BTRFS info (device loop3): rebuilding free space tree [ 1127.566753][ T29] audit: type=1804 audit(1719654402.001:562): pid=19751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4374" name="/root/syzkaller.pZSVPG/639/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 1127.589500][ C1] vkms_vblank_simulate: vblank timer overrun [ 1127.689488][ T9016] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1128.154675][T19768] overlayfs: failed to resolve './file0': -2 [ 1128.175077][T19768] Process accounting resumed [ 1128.304238][T19772] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1128.324987][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1128.571256][ T5159] pegasus 2-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 9e:19:c7:32:3b:e9 [ 1128.582009][ T5159] usb 2-1: USB disconnect, device number 100 [ 1128.602219][T19774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1128.888916][T19669] chnl_net:caif_netlink_parms(): no params data found [ 1129.584786][ T5093] libceph: connect (1)[c::]:6789 error -1 [ 1129.594808][ T29] audit: type=1800 audit(1719654403.992:563): pid=19789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4383" name="file2" dev="sda1" ino=2035 res=0 errno=0 [ 1129.688017][ T5093] libceph: mon0 (1)[c::]:6789 connect error [ 1129.715691][T19795] ceph: No mds server is up or the cluster is laggy [ 1129.894535][ T29] audit: type=1800 audit(1719654404.072:564): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4383" name="file2" dev="sda1" ino=2035 res=0 errno=0 [ 1130.053183][T19809] loop1: detected capacity change from 0 to 512 [ 1130.153604][T19809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.247736][T19669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.255182][T19809] ext4 filesystem being mounted at /root/syzkaller.1FLQKw/827/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.298550][T19669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.362336][T19669] bridge_slave_0: entered allmulticast mode [ 1130.364174][T19809] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.4386: path /root/syzkaller.1FLQKw/827/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1130.392944][T19669] bridge_slave_0: entered promiscuous mode [ 1130.414081][T19669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.430143][T19822] overlayfs: failed to resolve './file0': -2 [ 1130.459908][T19822] Process accounting resumed [ 1130.460787][T19669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.481566][ T5093] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1130.490645][T19824] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4386: corrupted inode contents [ 1130.501507][T19669] bridge_slave_1: entered allmulticast mode [ 1130.510174][T19669] bridge_slave_1: entered promiscuous mode [ 1130.544783][T19824] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.4386: mark_inode_dirty error [ 1130.614909][T19824] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4386: corrupted inode contents [ 1130.637577][T19824] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.4386: mark_inode_dirty error [ 1130.681414][ T5093] usb 4-1: Using ep0 maxpacket: 16 [ 1130.689972][T19809] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.4386: path /root/syzkaller.1FLQKw/827/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1130.701497][ T5093] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1130.751691][T19809] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.4386: path /root/syzkaller.1FLQKw/827/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1130.762654][T19669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.787213][ T5093] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1130.796635][ T5093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.807338][ T5093] usb 4-1: config 0 descriptor?? [ 1130.827666][T19669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.848314][T19809] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.4386: path /root/syzkaller.1FLQKw/827/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1131.038078][T19816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4388'. [ 1131.087059][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.204259][T19834] loop5: detected capacity change from 0 to 1024 [ 1131.346368][T19669] team0: Port device team_slave_0 added [ 1131.422861][T19669] team0: Port device team_slave_1 added [ 1131.447946][T19839] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1131.468724][T19816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.474197][T19811] loop2: detected capacity change from 0 to 32768 [ 1131.494808][T19816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.495264][T19839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1131.536518][T19816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.574150][T19816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.599607][T19811] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4387 (19811) [ 1131.622817][ T5093] hid (null): report_id 2838798905 is invalid [ 1131.629041][ T5093] hid (null): unknown global tag 0xc [ 1131.648365][ T5093] hid (null): unknown global tag 0xa5 [ 1131.666301][T19839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1131.681880][T19669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.688877][T19669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.720270][T19811] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1131.721774][ T5093] hid (null): unknown global tag 0xd [ 1131.745486][T19811] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 1131.773840][T19811] BTRFS info (device loop2): using free-space-tree [ 1131.774674][ T5093] hid-generic 0003:0158:0100.0048: unknown main item tag 0x1 [ 1131.814372][T19669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.820764][ T5093] hid-generic 0003:0158:0100.0048: unexpected long global item [ 1131.829179][T19669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.848583][T19669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.875395][ T5093] hid-generic 0003:0158:0100.0048: probe with driver hid-generic failed with error -22 [ 1131.888884][ T5093] usb 4-1: USB disconnect, device number 85 [ 1131.902524][T19669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.976225][T19811] BTRFS info (device loop2): rebuilding free space tree [ 1132.092875][T19669] hsr_slave_0: entered promiscuous mode [ 1132.117780][T19669] hsr_slave_1: entered promiscuous mode [ 1132.144962][ T29] audit: type=1804 audit(1719654406.573:565): pid=19811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4387" name="/root/syzkaller.WNrUxm/143/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 1132.167698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.183942][T19669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1132.195960][T19669] Cannot create hsr debugfs directory [ 1132.273138][ T29] audit: type=1800 audit(1719654406.703:566): pid=19875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4400" name="file1" dev="sda1" ino=2044 res=0 errno=0 [ 1132.303892][T17016] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1132.337094][ T29] audit: type=1800 audit(1719654406.723:567): pid=19875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4400" name="file2" dev="sda1" ino=2045 res=0 errno=0 [ 1132.462259][ T29] audit: type=1800 audit(1719654406.743:568): pid=19875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4400" name="file2" dev="sda1" ino=2045 res=0 errno=0 [ 1132.535644][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.878449][ T5222] libceph: connect (1)[c::]:6789 error -1 [ 1132.973300][ T5222] libceph: mon0 (1)[c::]:6789 connect error [ 1133.034863][T19879] ceph: No mds server is up or the cluster is laggy [ 1133.206216][T19885] Process accounting resumed [ 1133.240284][T19887] loop1: detected capacity change from 0 to 512 [ 1133.495569][T19887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.508433][T19887] ext4 filesystem being mounted at /root/syzkaller.1FLQKw/830/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.543479][T19887] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.4405: path /root/syzkaller.1FLQKw/830/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1133.586674][T19887] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.4405: path /root/syzkaller.1FLQKw/830/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1133.653217][T19887] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.4405: path /root/syzkaller.1FLQKw/830/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1133.712868][T19891] loop0: detected capacity change from 0 to 1024 [ 1133.770159][T19904] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4405: corrupted inode contents [ 1133.810684][T19904] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.4405: mark_inode_dirty error [ 1133.834375][T19908] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4411'. [ 1133.844713][T19904] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4405: corrupted inode contents [ 1133.859767][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4411'. [ 1133.928789][T19904] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.4405: mark_inode_dirty error [ 1133.952433][T19887] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.4405: path /root/syzkaller.1FLQKw/830/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1133.998341][T19908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4411'. [ 1134.053142][T19887] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.4405: path /root/syzkaller.1FLQKw/830/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1134.138202][T19887] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.4405: path /root/syzkaller.1FLQKw/830/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1134.354172][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.506927][ T29] audit: type=1800 audit(1719654408.934:569): pid=19925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4416" name="file1" dev="sda1" ino=2035 res=0 errno=0 [ 1134.567859][ T29] audit: type=1800 audit(1719654408.964:570): pid=19925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4416" name="file2" dev="sda1" ino=2006 res=0 errno=0 [ 1134.605168][ T29] audit: type=1800 audit(1719654408.984:571): pid=19925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4416" name="file2" dev="sda1" ino=2006 res=0 errno=0 [ 1134.699261][ T1142] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1134.919483][ T1142] usb 6-1: Using ep0 maxpacket: 16 [ 1134.930288][T19934] Process accounting resumed [ 1134.934976][ T1142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1134.982236][ T1142] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1135.017182][ T1142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.047442][ T1142] usb 6-1: config 0 descriptor?? [ 1135.298252][T19923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4415'. [ 1135.690239][ T25] libceph: connect (1)[c::]:6789 error -101 [ 1135.776546][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1135.833943][T19940] ceph: No mds server is up or the cluster is laggy [ 1135.934656][T19669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1136.052159][T19919] loop2: detected capacity change from 0 to 32768 [ 1136.091022][T19669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1136.121280][T19919] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4414 (19919) [ 1136.173586][T19669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1136.232790][T19923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.248869][T19919] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1136.266247][T19923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.288793][T19919] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 1136.295006][T19669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1136.297308][T19919] BTRFS info (device loop2): using free-space-tree [ 1136.313284][T19923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.335454][T19923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.386119][ T1142] hid (null): report_id 2838798905 is invalid [ 1136.413266][ T1142] hid (null): unknown global tag 0xc [ 1136.449046][ T1142] hid (null): unknown global tag 0xa5 [ 1136.454511][ T1142] hid (null): unknown global tag 0xd [ 1136.516249][ T1142] hid-generic 0003:0158:0100.0049: unknown main item tag 0x1 [ 1136.542698][T19919] BTRFS info (device loop2): rebuilding free space tree [ 1136.577180][T19950] loop3: detected capacity change from 0 to 1024 [ 1136.595290][ T1142] hid-generic 0003:0158:0100.0049: unexpected long global item [ 1136.640234][ T1142] hid-generic 0003:0158:0100.0049: probe with driver hid-generic failed with error -22 [ 1136.683912][T19976] loop0: detected capacity change from 0 to 512 [ 1136.704298][ T1142] usb 6-1: USB disconnect, device number 63 [ 1136.734304][ T29] audit: type=1804 audit(1719654411.165:572): pid=19919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4414" name="/root/syzkaller.WNrUxm/145/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 1136.773645][T19976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.810096][T19669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.833736][T19976] ext4 filesystem being mounted at /root/syzkaller.0Ma5zm/290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.894572][T19669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.912064][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.919316][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.942191][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.949456][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.987085][T17016] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1137.012635][T19976] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.4428: path /root/syzkaller.0Ma5zm/290/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1137.064405][T19983] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1137.092140][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1137.127160][T19976] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.4428: path /root/syzkaller.0Ma5zm/290/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1137.149990][ C1] vkms_vblank_simulate: vblank timer overrun [ 1137.226777][T19986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1137.251538][T19984] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4428: corrupted inode contents [ 1137.360408][T19984] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.4428: mark_inode_dirty error [ 1137.428785][T19984] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4428: corrupted inode contents [ 1137.473000][T19984] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.4428: mark_inode_dirty error [ 1137.548838][T19976] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.4428: path /root/syzkaller.0Ma5zm/290/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1137.649958][T19976] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.4428: path /root/syzkaller.0Ma5zm/290/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1137.674137][T19998] Process accounting resumed [ 1137.751110][T19976] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.4428: path /root/syzkaller.0Ma5zm/290/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1137.930699][T19984] EXT4-fs: error -4 creating inode table initialization thread [ 1137.983473][T19984] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1138.400664][T18546] libceph: connect (1)[c::]:6789 error -101 [ 1138.489023][T20011] ceph: No mds server is up or the cluster is laggy [ 1138.530544][T18546] libceph: mon0 (1)[c::]:6789 connect error [ 1138.646279][T19669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.675815][ T29] audit: type=1800 audit(1719654413.106:573): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4432" name="file1" dev="sda1" ino=2027 res=0 errno=0 [ 1138.696562][ C1] vkms_vblank_simulate: vblank timer overrun [ 1138.814031][ T29] audit: type=1800 audit(1719654413.217:574): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4432" name="file2" dev="sda1" ino=2007 res=0 errno=0 [ 1138.902358][ T29] audit: type=1800 audit(1719654413.217:575): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4432" name="file2" dev="sda1" ino=2007 res=0 errno=0 [ 1138.911804][T13914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.498421][T20048] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1139.521305][T20045] loop2: detected capacity change from 0 to 1024 [ 1139.547037][T20048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1139.658367][T19669] veth0_vlan: entered promiscuous mode [ 1139.696184][T20048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1139.735280][T19669] veth1_vlan: entered promiscuous mode [ 1139.942424][T19669] veth0_macvtap: entered promiscuous mode [ 1140.011518][T19669] veth1_macvtap: entered promiscuous mode [ 1140.044032][T20064] loop0: detected capacity change from 0 to 512 [ 1140.083028][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.112717][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.138091][T20064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.146581][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.172358][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.185850][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.196622][T20064] ext4 filesystem being mounted at /root/syzkaller.0Ma5zm/293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.228240][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.238772][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.249365][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.259906][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.270721][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.280626][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.292077][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.349301][T19669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.447792][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.492482][T20064] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.4451: path /root/syzkaller.0Ma5zm/293/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1140.495597][T20050] loop3: detected capacity change from 0 to 32768 [ 1140.634366][T20050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4445 (20050) [ 1140.712713][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.837760][T20080] loop2: detected capacity change from 0 to 8 [ 1140.882828][T20076] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4451: corrupted inode contents [ 1140.912356][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.989684][T20078] ceph: No mds server is up or the cluster is laggy [ 1140.997383][ T5159] libceph: connect (1)[c::]:6789 error -1 [ 1141.003305][ T5159] libceph: mon0 (1)[c::]:6789 connect error [ 1141.050225][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.061061][T20076] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.4451: mark_inode_dirty error [ 1141.106022][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.123415][T20076] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4451: corrupted inode contents [ 1141.161071][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.174763][T20076] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.4451: mark_inode_dirty error [ 1141.181573][T20050] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1141.195915][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.207865][T20050] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1141.213837][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.224856][T20050] BTRFS info (device loop3): using free-space-tree [ 1141.228262][T20064] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.4451: path /root/syzkaller.0Ma5zm/293/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1141.269415][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.283240][T20064] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.4451: path /root/syzkaller.0Ma5zm/293/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1141.290216][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.320440][T20064] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.4451: path /root/syzkaller.0Ma5zm/293/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1141.323491][T19669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.342757][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.354390][ T25] libceph: connect (1)[c::]:6789 error -1 [ 1141.359495][T19669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.373061][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1141.409353][T19669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.419652][T20064] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.4451: path /root/syzkaller.0Ma5zm/293/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1141.424325][T19669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.450911][T19669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.464383][T19669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.473421][T19669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.476100][ T29] audit: type=1800 audit(1719654415.848:576): pid=20091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4456" name="file1" dev="sda1" ino=2032 res=0 errno=0 [ 1141.490885][T20064] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.4451: path /root/syzkaller.0Ma5zm/293/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1141.525911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.559723][ T29] audit: type=1800 audit(1719654415.888:577): pid=20091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4456" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 1141.613470][ T29] audit: type=1800 audit(1719654415.898:578): pid=20091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4456" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 1141.624352][T20076] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1141.748067][T13914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.935120][T10089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.935828][T20050] BTRFS info (device loop3): rebuilding free space tree [ 1141.945504][T10089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.006925][ T29] audit: type=1804 audit(1719654416.448:579): pid=20050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4445" name="/root/syzkaller.pZSVPG/658/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 1142.137802][ T2434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.156192][ T2434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.257521][ T9016] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1142.483125][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4462'. [ 1143.063967][T20135] loop5: detected capacity change from 0 to 2048 [ 1143.070324][T20139] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4464'. [ 1143.070369][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4464'. [ 1143.151614][T20142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4464'. [ 1143.233262][T20135] loop5: p1 p2 p3 [ 1143.243919][T20135] loop5: p3 size 2164260864 extends beyond EOD, truncated [ 1143.400985][T20148] loop0: detected capacity change from 0 to 512 [ 1143.628465][ T29] audit: type=1800 audit(1719654418.069:580): pid=20155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4471" name="file1" dev="sda1" ino=2046 res=0 errno=0 [ 1143.636114][T20148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.680977][ T29] audit: type=1800 audit(1719654418.089:581): pid=20155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4471" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 1143.927059][ T29] audit: type=1800 audit(1719654418.089:582): pid=20155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4471" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 1144.002083][T20148] ext4 filesystem being mounted at /root/syzkaller.0Ma5zm/297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.145407][T20157] ceph: No mds server is up or the cluster is laggy [ 1144.398836][T20148] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.4469: path /root/syzkaller.0Ma5zm/297/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1144.530291][T20148] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.4469: path /root/syzkaller.0Ma5zm/297/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1144.619956][T20161] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4469: corrupted inode contents [ 1144.685317][T20161] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.4469: mark_inode_dirty error [ 1144.728225][T20161] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4469: corrupted inode contents [ 1144.741336][T20161] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.4469: mark_inode_dirty error [ 1144.794234][T20148] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.4469: path /root/syzkaller.0Ma5zm/297/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1144.849584][T20148] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.4469: path /root/syzkaller.0Ma5zm/297/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1144.874183][T20148] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.4469: path /root/syzkaller.0Ma5zm/297/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1144.900647][T20148] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.4469: path /root/syzkaller.0Ma5zm/297/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1144.934134][T20161] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1144.946115][T10083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.127752][T10083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.153116][T13914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.271288][T10083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.400179][T10083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.582488][T10083] bridge_slave_1: left allmulticast mode [ 1145.588498][T10083] bridge_slave_1: left promiscuous mode [ 1145.594427][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.604642][T10083] bridge_slave_0: left allmulticast mode [ 1145.610376][T10083] bridge_slave_0: left promiscuous mode [ 1145.616413][T10083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.215092][T10083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.229446][T10083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.243708][T10083] bond0 (unregistering): Released all slaves [ 1146.965776][T10083] hsr_slave_0: left promiscuous mode [ 1146.981695][T10083] hsr_slave_1: left promiscuous mode [ 1147.000367][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.015240][T10083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.030849][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1147.049595][T10083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.158587][T10083] veth1_macvtap: left promiscuous mode [ 1147.174364][T10083] veth0_macvtap: left promiscuous mode [ 1147.189428][T10083] veth1_vlan: left promiscuous mode [ 1147.207976][T10083] veth0_vlan: left promiscuous mode [ 1147.250805][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1147.548551][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1147.561703][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1147.586298][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1147.610065][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1147.621455][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1147.633961][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1147.661663][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1147.673859][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1147.681503][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1147.691121][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1147.703164][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1147.710760][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1147.764692][T20203] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4483'. [ 1147.774037][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4483'. [ 1147.871189][T20207] loop5: detected capacity change from 0 to 512 [ 1147.980366][T20207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.032285][T20207] ext4 filesystem being mounted at /root/syzkaller.0qwKML/52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.187188][T20207] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 3: comm syz.5.4484: path /root/syzkaller.0qwKML/52/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1148.257493][T20207] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 12: comm syz.5.4484: path /root/syzkaller.0qwKML/52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1148.281412][T20207] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 13: comm syz.5.4484: path /root/syzkaller.0qwKML/52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1148.634183][T20220] EXT4-fs error (device loop5): ext4_do_update_inode:5075: inode #2: comm syz.5.4484: corrupted inode contents [ 1148.692999][ T25] libceph: connect (1)[c::]:6789 error -101 [ 1148.767594][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 1148.818390][T20220] EXT4-fs error (device loop5): ext4_dirty_inode:5935: inode #2: comm syz.5.4484: mark_inode_dirty error [ 1148.851949][T20222] ceph: No mds server is up or the cluster is laggy [ 1148.962533][T20220] EXT4-fs error (device loop5): ext4_do_update_inode:5075: inode #2: comm syz.5.4484: corrupted inode contents [ 1149.017892][T20220] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.4484: mark_inode_dirty error [ 1149.061213][T20207] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 14: comm syz.5.4484: path /root/syzkaller.0qwKML/52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1149.086381][T20207] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 15: comm syz.5.4484: path /root/syzkaller.0qwKML/52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1149.108557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.121073][ T29] audit: type=1800 audit(1719654423.552:583): pid=20227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4488" name="file1" dev="sda1" ino=2046 res=0 errno=0 [ 1149.155154][T20220] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1149.172221][ T29] audit: type=1800 audit(1719654423.552:584): pid=20227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4488" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 1149.187622][T20207] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 16: comm syz.5.4484: path /root/syzkaller.0qwKML/52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1149.204868][ T29] audit: type=1800 audit(1719654423.552:585): pid=20227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4488" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 1149.385692][T18654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.406489][T20230] loop2: detected capacity change from 0 to 2048 [ 1149.446550][T20230] loop2: p1 p2 p3 [ 1149.471160][T20230] loop2: p3 size 2164260864 extends beyond EOD, truncated [ 1149.819988][ T5111] Bluetooth: hci2: command tx timeout [ 1150.054566][T10083] team0 (unregistering): Port device team_slave_1 removed [ 1150.155906][T10083] team0 (unregistering): Port device team_slave_0 removed [ 1151.154967][T20203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4483'. [ 1151.225339][T20221] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1151.231860][T20221] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1151.244716][T20198] wg0 speed is unknown, defaulting to 1000 [ 1151.478399][T20266] loop0: detected capacity change from 0 to 512 [ 1151.597977][ T29] audit: type=1800 audit(1719654426.023:586): pid=20264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4501" name="file1" dev="sda1" ino=2029 res=0 errno=0 [ 1151.659640][T20266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.675995][ T29] audit: type=1800 audit(1719654426.073:587): pid=20264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4501" name="file2" dev="sda1" ino=2020 res=0 errno=0 [ 1151.764432][T20266] ext4 filesystem being mounted at /root/syzkaller.0Ma5zm/300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.807818][ T29] audit: type=1800 audit(1719654426.073:588): pid=20264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4501" name="file2" dev="sda1" ino=2020 res=0 errno=0 [ 1151.840587][T20275] loop2: detected capacity change from 0 to 2048 [ 1151.922467][T20275] loop2: p1 p2 p3 [ 1151.933744][T20266] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.4502: path /root/syzkaller.0Ma5zm/300/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1151.987061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.015975][T20275] loop2: p3 size 2164260864 extends beyond EOD, truncated [ 1152.053615][T20266] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.4502: path /root/syzkaller.0Ma5zm/300/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1152.184428][T20289] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4502: corrupted inode contents [ 1152.240395][T20289] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.4502: mark_inode_dirty error [ 1152.323845][T20289] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4502: corrupted inode contents [ 1152.384361][T20289] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.4502: mark_inode_dirty error [ 1152.440024][T20266] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.4502: path /root/syzkaller.0Ma5zm/300/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1152.498875][T20198] chnl_net:caif_netlink_parms(): no params data found [ 1152.507581][T20266] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.4502: path /root/syzkaller.0Ma5zm/300/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1152.547586][T20289] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1152.574547][T20266] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.4502: path /root/syzkaller.0Ma5zm/300/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1152.634514][T20266] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.4502: path /root/syzkaller.0Ma5zm/300/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1152.657578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.762808][T20310] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4514'. [ 1152.780544][T14789] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1152.797520][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4514'. [ 1152.822298][T13914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.869224][T20198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.903087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.911927][T20198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.929036][T20198] bridge_slave_0: entered allmulticast mode [ 1152.938519][T20198] bridge_slave_0: entered promiscuous mode [ 1152.962405][T20310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4514'. [ 1152.982549][T20198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.992072][T14789] usb 4-1: Using ep0 maxpacket: 8 [ 1153.012207][T20198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.040344][T14789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1153.054879][T20198] bridge_slave_1: entered allmulticast mode [ 1153.069323][T14789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1153.081870][T20198] bridge_slave_1: entered promiscuous mode [ 1153.110597][T14789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1153.158420][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4515'. [ 1153.201843][T14789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.270240][T14789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1153.290916][T14789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.320397][T20198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.557807][ T5222] libceph: connect (1)[c::]:6789 error -1 [ 1153.670000][ T5222] libceph: mon0 (1)[c::]:6789 connect error [ 1153.747222][T20198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.817955][T20327] ceph: No mds server is up or the cluster is laggy [ 1153.919784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.203613][T20198] team0: Port device team_slave_0 added [ 1154.248441][T20198] team0: Port device team_slave_1 added [ 1154.267470][T14789] usb 4-1: GET_CAPABILITIES returned 0 [ 1154.291477][T14789] usbtmc 4-1:16.0: can't read capabilities [ 1154.433695][ T29] audit: type=1800 audit(1719654428.874:589): pid=20342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4522" name="file1" dev="sda1" ino=2037 res=0 errno=0 [ 1154.482242][T20198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.516547][T20198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.529700][ T29] audit: type=1800 audit(1719654428.874:590): pid=20342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4522" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 1154.542578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.586182][T20347] loop2: detected capacity change from 0 to 2048 [ 1154.593440][T14789] usb 4-1: USB disconnect, device number 86 [ 1154.599420][T20198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.602240][T20198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.630327][T20198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.656303][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.669340][ T29] audit: type=1800 audit(1719654428.874:591): pid=20342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4522" name="file2" dev="sda1" ino=2038 res=0 errno=0 [ 1154.679309][T20198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.699268][T20347] loop2: p1 p2 p3 [ 1154.736167][T20347] loop2: p3 size 2164260864 extends beyond EOD, truncated [ 1154.897233][T20198] hsr_slave_0: entered promiscuous mode [ 1155.001841][T20198] hsr_slave_1: entered promiscuous mode [ 1155.022415][T20198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1155.042699][T20362] loop2: detected capacity change from 0 to 512 [ 1155.049016][T20198] Cannot create hsr debugfs directory [ 1155.133699][T20362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.133987][T20365] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4531'. [ 1155.166862][T20362] ext4 filesystem being mounted at /root/syzkaller.WNrUxm/175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.219083][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4531'. [ 1155.362756][T20375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4531'. [ 1155.456591][T20362] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.4529: path /root/syzkaller.WNrUxm/175/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1155.867251][T14789] libceph: connect (1)[c::]:6789 error -1 [ 1155.980785][T20383] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.4529: corrupted inode contents [ 1155.999449][T14789] libceph: mon0 (1)[c::]:6789 connect error [ 1156.038638][T20380] ceph: No mds server is up or the cluster is laggy [ 1156.131999][T20383] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.4529: mark_inode_dirty error [ 1156.229348][T20383] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.4529: corrupted inode contents [ 1156.447970][T20383] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.4529: mark_inode_dirty error [ 1156.494468][T20362] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.4529: path /root/syzkaller.WNrUxm/175/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1156.588857][T20362] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.4529: path /root/syzkaller.WNrUxm/175/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1156.646702][T20391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4536'. [ 1156.654267][T20383] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1156.696759][T20362] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.4529: path /root/syzkaller.WNrUxm/175/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1156.763552][T20362] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.4529: path /root/syzkaller.WNrUxm/175/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1156.818586][T20362] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.4529: path /root/syzkaller.WNrUxm/175/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1156.983596][T17016] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.133806][T20400] loop3: detected capacity change from 0 to 2048 [ 1157.239194][T20400] loop3: p1 p2 p3 [ 1157.256502][T20400] loop3: p3 size 2164260864 extends beyond EOD, truncated [ 1157.547791][ T5093] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1157.611271][T20420] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4548'. [ 1157.632561][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4548'. [ 1157.644485][T20198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1157.668726][T20198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1157.692534][T20198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1157.755969][T20198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1157.787128][ T5093] usb 1-1: Using ep0 maxpacket: 8 [ 1157.819890][ T5093] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1157.849838][ T5093] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1157.889900][ T5093] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1157.930994][ T5093] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1157.991643][ T5093] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1158.040269][ T5093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.694324][T20433] ceph: No mds server is up or the cluster is laggy [ 1158.760665][T20198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.903645][T20440] loop3: detected capacity change from 0 to 512 [ 1158.907127][ T5093] usb 1-1: GET_CAPABILITIES returned 0 [ 1158.915488][ T5093] usbtmc 1-1:16.0: can't read capabilities [ 1158.929642][ T5093] usb 1-1: USB disconnect, device number 72 [ 1158.947714][T20198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.996909][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.004426][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.070970][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.078283][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.119036][T20440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.163176][T20440] ext4 filesystem being mounted at /root/syzkaller.pZSVPG/676/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.324785][T20440] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.4555: path /root/syzkaller.pZSVPG/676/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1159.368843][T20446] __nla_validate_parse: 1 callbacks suppressed [ 1159.368866][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4556'. [ 1159.400846][T20198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1159.468565][T20456] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.4555: corrupted inode contents [ 1159.514274][T20456] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.4555: mark_inode_dirty error [ 1159.703291][T20456] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.4555: corrupted inode contents [ 1159.870837][T20456] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.4555: mark_inode_dirty error [ 1160.280152][T20440] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz.3.4555: path /root/syzkaller.pZSVPG/676/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1160.456014][T20461] loop2: detected capacity change from 0 to 2048 [ 1160.497733][T20440] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.4555: path /root/syzkaller.pZSVPG/676/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1160.599938][T20440] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz.3.4555: path /root/syzkaller.pZSVPG/676/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1160.623323][T20461] loop2: p1 p2 p3 [ 1160.640306][T20461] loop2: p3 size 2164260864 extends beyond EOD, truncated [ 1160.743307][ T9016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.812050][T20198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.006782][T20482] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1161.017417][T20482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1161.057067][T20482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1163.055057][ T5222] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1163.258331][T20502] ceph: No mds server is up or the cluster is laggy [ 1163.285079][ T5097] libceph: connect (1)[c::]:6789 error -1 [ 1163.291031][ T5097] libceph: mon0 (1)[c::]:6789 connect error [ 1163.367212][T20507] Process accounting resumed [ 1163.784772][ T5222] usb 2-1: Using ep0 maxpacket: 8 [ 1163.806515][ T5222] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1163.824844][ T5222] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1163.836658][ T5222] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1163.846846][ T5222] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.860113][ T5222] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1163.869838][ T5222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.957541][T20522] loop0: detected capacity change from 0 to 2048 [ 1164.037035][T20522] loop0: p1 p2 p3 [ 1164.048891][T20522] loop0: p3 size 2164260864 extends beyond EOD, truncated [ 1164.109734][ T5222] usb 2-1: GET_CAPABILITIES returned 0 [ 1164.130181][T20198] veth0_vlan: entered promiscuous mode [ 1164.140642][ T5222] usbtmc 2-1:16.0: can't read capabilities [ 1164.163512][T20198] veth1_vlan: entered promiscuous mode [ 1164.307002][T20198] veth0_macvtap: entered promiscuous mode [ 1164.332279][T20198] veth1_macvtap: entered promiscuous mode [ 1164.367343][ T5159] usb 2-1: USB disconnect, device number 101 [ 1164.427393][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.460710][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.497246][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.585806][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.729904][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.818269][T20547] Process accounting resumed [ 1164.940733][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.156150][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.276093][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.359984][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.389094][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.400924][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.411912][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.428006][T20198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.438451][T20539] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4587'. [ 1165.511981][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.548010][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.578468][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.601081][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.611055][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.621745][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.642901][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.690605][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.745539][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.798077][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.808073][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.818615][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.831369][T20198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.024895][T20198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.177541][T20198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.233144][T14789] libceph: connect (1)[c::]:6789 error -101 [ 1166.324548][T20565] ceph: No mds server is up or the cluster is laggy [ 1166.352168][T14789] libceph: mon0 (1)[c::]:6789 connect error [ 1166.372487][T20198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.422922][T20198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.673586][ T5159] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1166.803746][T20574] lo speed is unknown, defaulting to 1000 [ 1166.923113][ T5159] usb 2-1: Using ep0 maxpacket: 8 [ 1166.929202][T20578] loop3: detected capacity change from 0 to 2048 [ 1166.951810][T20574] lo speed is unknown, defaulting to 1000 [ 1166.975615][ T5159] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1167.012617][ T5159] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1167.028600][T20574] lo speed is unknown, defaulting to 1000 [ 1167.029508][T20578] loop3: p1 p2 p3 [ 1167.065407][ T5159] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1167.088211][T20578] loop3: p3 size 2164260864 extends beyond EOD, truncated [ 1167.123108][ T2434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.144971][ T2434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.153917][ T5159] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1167.196782][ T5159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.235363][ T5159] usb 2-1: Product: syz [ 1167.252741][ T5159] usb 2-1: Manufacturer: syz [ 1167.257646][ T5159] usb 2-1: SerialNumber: syz [ 1167.308563][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.315375][ T5159] usb 2-1: config 0 descriptor?? [ 1167.338637][ T5159] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1167.343728][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.363038][ T5159] imon 2-1:0.0: unable to initialize intf0, err -19 [ 1167.382898][ T5159] imon:imon_probe: failed to initialize context! [ 1167.410712][ T5159] imon 2-1:0.0: unable to register, err -19 [ 1168.568494][ T5159] usb 2-1: USB disconnect, device number 102 [ 1168.602310][T14789] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1168.656101][T10088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.737032][T20574] infiniband syz0: set active [ 1168.741825][ T5097] lo speed is unknown, defaulting to 1000 [ 1168.752758][T20574] infiniband syz0: added lo [ 1168.762467][T20574] syz0: rxe_create_cq: returned err = -12 [ 1168.771688][T20574] infiniband syz0: Couldn't create ib_mad CQ [ 1168.792582][T20574] infiniband syz0: Couldn't open port 1 [ 1168.842104][T14789] usb 4-1: Using ep0 maxpacket: 8 [ 1168.849674][T14789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1168.871638][T14789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1168.897394][T10088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.912470][T14789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1168.942107][T14789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1168.952518][T20574] RDS/IB: syz0: added [ 1168.965585][T14789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1168.970442][T20574] smc: adding ib device syz0 with port count 1 [ 1168.981998][T14789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.993537][T20574] smc: ib device syz0 port 1 has pnetid [ 1169.002179][ T5156] lo speed is unknown, defaulting to 1000 [ 1169.068860][T10088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.097983][T20574] lo speed is unknown, defaulting to 1000 [ 1169.194665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.211098][T14789] usb 4-1: GET_CAPABILITIES returned 0 [ 1169.227004][T14789] usbtmc 4-1:16.0: can't read capabilities [ 1169.236805][T10088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.423591][T14789] usb 4-1: USB disconnect, device number 87 [ 1169.572986][T10088] bridge_slave_1: left allmulticast mode [ 1169.578766][T10088] bridge_slave_1: left promiscuous mode [ 1169.611360][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.648233][T10088] bridge_slave_0: left allmulticast mode [ 1169.654433][T10088] bridge_slave_0: left promiscuous mode [ 1169.660318][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.556552][T10088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.570522][T10088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.583194][T10088] bond0 (unregistering): Released all slaves [ 1170.611466][T20574] lo speed is unknown, defaulting to 1000 [ 1170.914055][T20606] Process accounting resumed [ 1171.034209][T20604] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4608'. [ 1171.163388][T20603] loop0: detected capacity change from 0 to 1024 [ 1171.180252][T20574] lo speed is unknown, defaulting to 1000 [ 1172.003159][T20622] ceph: No mds server is up or the cluster is laggy [ 1172.525833][ T29] audit: type=1800 audit(1719654446.973:592): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4615" name="file1" dev="sda1" ino=2045 res=0 errno=0 [ 1172.580720][ T29] audit: type=1800 audit(1719654446.973:593): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4615" name="file2" dev="sda1" ino=2046 res=0 errno=0 [ 1172.608080][ T29] audit: type=1800 audit(1719654446.973:594): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4615" name="file2" dev="sda1" ino=2046 res=0 errno=0 [ 1172.689197][T20574] lo speed is unknown, defaulting to 1000 [ 1172.793630][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1172.821591][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1172.833676][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1172.853754][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1172.864946][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1172.875095][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1172.894186][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1172.901850][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1172.909332][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1172.918679][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1172.932312][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1172.947042][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1173.879651][ T8] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1174.063742][T20654] loop5: detected capacity change from 0 to 2048 [ 1174.129772][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 1174.150548][T20654] loop5: p1 p2 p3 [ 1174.155386][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1174.186967][T20654] loop5: p3 size 2164260864 extends beyond EOD, truncated [ 1174.209461][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1174.254631][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1174.327333][ T8] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1174.336627][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.364072][T20574] lo speed is unknown, defaulting to 1000 [ 1174.370041][ T8] usb 4-1: Product: syz [ 1174.374248][ T8] usb 4-1: Manufacturer: syz [ 1174.378870][ T8] usb 4-1: SerialNumber: syz [ 1174.415221][ T8] usb 4-1: config 0 descriptor?? [ 1174.438332][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1174.466495][ T8] imon 4-1:0.0: unable to initialize intf0, err -19 [ 1174.491678][ T8] imon:imon_probe: failed to initialize context! [ 1174.518461][ T8] imon 4-1:0.0: unable to register, err -19 [ 1174.644408][ T8] usb 4-1: USB disconnect, device number 88 [ 1174.703299][T20637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1174.772008][T20660] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4625'. [ 1174.935103][T20574] lo speed is unknown, defaulting to 1000 [ 1175.013502][T20655] loop0: detected capacity change from 0 to 32768 [ 1175.040026][T20655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4622 (20655) [ 1175.086289][T20655] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1175.108609][T20655] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1175.117239][T20655] BTRFS info (device loop0): using free-space-tree [ 1175.155420][ T5095] Bluetooth: hci2: command tx timeout [ 1175.294772][T20676] loop5: detected capacity change from 0 to 1024 [ 1175.313853][T20655] BTRFS info (device loop0): rebuilding free space tree [ 1175.383485][T20574] lo speed is unknown, defaulting to 1000 [ 1176.139564][T20693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1176.145683][T20693] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1176.154045][T20694] ceph: No mds server is up or the cluster is laggy [ 1176.221798][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.384237][T13914] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1176.575414][T20574] lo speed is unknown, defaulting to 1000 [ 1176.941625][T20707] loop3: detected capacity change from 0 to 2048 [ 1177.037569][T20707] loop3: p1 p2 p3 [ 1177.071893][T20707] loop3: p3 size 2164260864 extends beyond EOD, truncated [ 1177.238049][T20710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4638'. [ 1177.730227][T20634] wg0 speed is unknown, defaulting to 1000 [ 1178.302109][ T5111] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1178.313648][ T5111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1178.342306][ T5111] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1178.395453][ T5111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1178.414604][ T5111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1178.423609][ T5111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1178.443085][ T5095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1178.469803][ T5095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1178.490295][ T5095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1178.518856][ T5095] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1178.529171][ T5095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1178.536715][ T5095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1178.764996][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4639'. [ 1179.165198][T20738] syz.5.4646 (pid 20738) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1179.993211][T20743] ceph: No mds server is up or the cluster is laggy [ 1180.322945][T10088] hsr_slave_0: left promiscuous mode [ 1180.361102][T10088] hsr_slave_1: left promiscuous mode [ 1180.367795][T10088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.386455][T10088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.398214][T10088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.415669][T10088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.491188][T10088] veth1_macvtap: left promiscuous mode [ 1180.509543][T10088] veth0_macvtap: left promiscuous mode [ 1180.515334][T20732] loop0: detected capacity change from 0 to 32768 [ 1180.533031][T10088] veth1_vlan: left promiscuous mode [ 1180.545657][T10088] veth0_vlan: left promiscuous mode [ 1180.563704][T20732] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4643 (20732) [ 1180.609802][T20732] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1180.627654][T20762] loop3: detected capacity change from 0 to 1024 [ 1180.645864][T20732] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1180.666626][ T5095] Bluetooth: hci6: command tx timeout [ 1180.676020][T20732] BTRFS info (device loop0): using free-space-tree [ 1180.700599][T20766] loop5: detected capacity change from 0 to 2048 [ 1180.749338][T20766] loop5: p1 p2 p3 [ 1180.759016][T20766] loop5: p3 size 2164260864 extends beyond EOD, truncated [ 1180.816698][T20732] BTRFS info (device loop0): rebuilding free space tree [ 1181.103138][T13914] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1181.991230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1182.139524][T10088] team0 (unregistering): Port device team_slave_1 removed [ 1182.214281][T10088] team0 (unregistering): Port device team_slave_0 removed [ 1182.752577][ T5095] Bluetooth: hci6: command tx timeout [ 1183.051051][T20742] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1183.057243][T20742] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1183.072008][T20719] wg0 speed is unknown, defaulting to 1000 [ 1183.415202][T20800] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1183.580037][T20719] lo speed is unknown, defaulting to 1000 [ 1183.668962][T20807] loop1: detected capacity change from 0 to 2048 [ 1183.825926][T20807] loop1: p1 p2 p3 [ 1183.862219][T20634] chnl_net:caif_netlink_parms(): no params data found [ 1183.876768][T20807] loop1: p3 size 2164260864 extends beyond EOD, truncated [ 1184.311716][T20819] loop0: detected capacity change from 0 to 4096 [ 1184.372020][T20819] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1184.413990][T20819] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1184.453590][T20810] loop5: detected capacity change from 0 to 32768 [ 1184.529450][T20810] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4664 (20810) [ 1184.735770][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [ 1184.753181][T20634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.795930][T20634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.803322][T20634] bridge_slave_0: entered allmulticast mode [ 1184.811429][T20634] bridge_slave_0: entered promiscuous mode [ 1184.821486][T20634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.829128][T20634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.050932][T20634] bridge_slave_1: entered allmulticast mode [ 1186.693159][T20837] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1186.768595][T20634] bridge_slave_1: entered promiscuous mode [ 1186.823398][T20810] BTRFS error (device loop5): open_ctree failed [ 1187.293838][T10088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.316980][T10088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.407112][T20634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.458322][T20634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.627463][T20859] loop1: detected capacity change from 0 to 2048 [ 1187.695368][T20859] loop1: p1 p2 p3 [ 1187.704414][T20859] loop1: p3 size 2164260864 extends beyond EOD, truncated [ 1187.714500][T10088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.732695][T10088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.991782][T20875] loop5: detected capacity change from 0 to 1024 [ 1188.338039][T20634] team0: Port device team_slave_0 added [ 1188.590900][T20634] team0: Port device team_slave_1 added [ 1188.866741][T10088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.883087][T10088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.672318][T20887] ceph: No mds server is up or the cluster is laggy [ 1189.918066][T20879] loop3: detected capacity change from 0 to 32768 [ 1190.008193][T20879] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4683 (20879) [ 1190.024714][T10088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.042388][T20879] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1190.061774][T20879] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1190.070313][T20879] BTRFS info (device loop3): using free-space-tree [ 1190.110170][T10088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.184006][T20634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.191027][T20634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.226534][T20634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.240118][T20634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.261635][T20634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.298421][T20634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.308014][T20879] BTRFS info (device loop3): rebuilding free space tree [ 1190.344600][T20719] chnl_net:caif_netlink_parms(): no params data found [ 1190.550749][ T9016] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1190.583973][T20634] hsr_slave_0: entered promiscuous mode [ 1190.600985][T20634] hsr_slave_1: entered promiscuous mode [ 1190.639748][T20634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1190.656577][T20634] Cannot create hsr debugfs directory [ 1191.626029][T20931] loop1: detected capacity change from 0 to 2048 [ 1191.719878][T20931] loop1: p1 p2 p3 [ 1191.858549][T20931] loop1: p3 size 2164260864 extends beyond EOD, truncated [ 1192.195045][T20940] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.204365][T20940] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.213234][T20940] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.222343][T20940] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.231313][T20940] vxlan0: entered promiscuous mode [ 1192.236506][T20940] vxlan0: entered allmulticast mode [ 1192.248164][T20719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.278348][T20719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.332556][T20719] bridge_slave_0: entered allmulticast mode [ 1192.376818][T20719] bridge_slave_0: entered promiscuous mode [ 1192.423661][T10088] bridge_slave_1: left allmulticast mode [ 1192.440402][T10088] bridge_slave_1: left promiscuous mode [ 1192.448044][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.710979][T10088] bridge_slave_0: left allmulticast mode [ 1192.730211][T10088] bridge_slave_0: left promiscuous mode [ 1192.736105][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.014131][T14789] libceph: connect (1)[c::]:6789 error -101 [ 1193.038827][T14789] libceph: mon0 (1)[c::]:6789 connect error [ 1193.243902][T20961] ceph: No mds server is up or the cluster is laggy [ 1193.338254][T20967] loop0: detected capacity change from 0 to 1024 [ 1193.400588][T14789] libceph: connect (1)[c::]:6789 error -101 [ 1193.441946][T14789] libceph: mon0 (1)[c::]:6789 connect error [ 1194.239397][T20972] loop1: detected capacity change from 0 to 32768 [ 1194.250359][T20972] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4704 (20972) [ 1194.305077][T20972] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1194.326119][T20972] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1194.351911][T20972] BTRFS info (device loop1): using free-space-tree [ 1194.524033][T20972] BTRFS info (device loop1): rebuilding free space tree [ 1194.767864][ T5091] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1195.310059][T10088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.342598][T10088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.406582][T10088] bond0 (unregistering): Released all slaves [ 1195.447637][T20719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.468273][T20719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.482960][T20719] bridge_slave_1: entered allmulticast mode [ 1195.542109][T20719] bridge_slave_1: entered promiscuous mode [ 1196.542731][T20719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.614707][T20719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.769758][T21009] loop1: detected capacity change from 0 to 2048 [ 1196.921116][T21009] loop1: p1 p2 p3 [ 1196.931578][T21009] loop1: p3 size 2164260864 extends beyond EOD, truncated [ 1196.945332][T20719] team0: Port device team_slave_0 added [ 1196.992886][T20719] team0: Port device team_slave_1 added [ 1197.230946][T20719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.250344][T20719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.303643][T20719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.317564][T20719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.324829][T20719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.350821][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.357232][T20719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.503644][T20719] hsr_slave_0: entered promiscuous mode [ 1197.517121][T21016] loop1: detected capacity change from 0 to 2048 [ 1197.525543][T20719] hsr_slave_1: entered promiscuous mode [ 1197.534466][T20719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1197.545339][T20719] Cannot create hsr debugfs directory [ 1197.563796][T21016] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1197.596283][T21016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1198.057307][T20634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1198.076409][T20634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1198.193043][T20634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1198.227675][T20634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1198.719829][T20634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.797906][T20634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.888623][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.895914][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.908540][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4719'. [ 1198.982505][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.989816][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.033683][T20719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1199.058009][T20719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1199.079555][T21025] loop5: detected capacity change from 0 to 32768 [ 1199.088911][T21025] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4718 (21025) [ 1199.105890][T20719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1199.127513][T21025] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1199.161590][T20719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1199.176319][T21025] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 1199.202966][T21025] BTRFS info (device loop5): using free-space-tree [ 1199.599617][T21025] BTRFS info (device loop5): rebuilding free space tree [ 1199.622724][T20719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.692479][T20719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.731561][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.738858][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.810241][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.817522][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.082295][T18654] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1200.102059][T20634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.722290][T21054] loop1: detected capacity change from 0 to 32768 [ 1200.776616][T21054] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4722 (21054) [ 1200.831554][T21054] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1200.850706][T20719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.866315][T21054] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1200.874782][T21054] BTRFS info (device loop1): using free-space-tree [ 1201.179557][T21054] BTRFS info (device loop1): rebuilding free space tree [ 1201.190826][T20719] veth0_vlan: entered promiscuous mode [ 1201.290511][T20719] veth1_vlan: entered promiscuous mode [ 1201.319194][T20634] veth0_vlan: entered promiscuous mode [ 1201.355965][ T29] audit: type=1804 audit(1719654475.798:595): pid=21054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4722" name="/root/syzkaller.1FLQKw/898/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 1201.373759][T20634] veth1_vlan: entered promiscuous mode [ 1201.469605][ T5091] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1201.514274][T20634] veth0_macvtap: entered promiscuous mode [ 1201.598747][T20719] veth0_macvtap: entered promiscuous mode [ 1201.638651][T20634] veth1_macvtap: entered promiscuous mode [ 1201.703991][T20719] veth1_macvtap: entered promiscuous mode [ 1201.711016][T21081] loop5: detected capacity change from 0 to 2048 [ 1201.750487][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.779939][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.799693][T21081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1201.805803][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.835702][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.865737][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.885612][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.915565][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.945544][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.967295][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.968536][T21083] overlayfs: upper fs needs to support d_type. [ 1201.995654][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.013987][T21083] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1202.021209][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1202.034338][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.051664][T21083] overlayfs: failed to set xattr on upper [ 1202.079962][T21083] overlayfs: ...falling back to redirect_dir=nofollow. [ 1202.101670][T20634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1202.110585][T21083] overlayfs: ...falling back to index=off. [ 1202.124153][T21083] overlayfs: ...falling back to uuid=null. [ 1202.208061][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.245519][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.270379][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.432610][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.465665][T18654] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 1202.498154][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.542614][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.542874][T18654] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 1202.607119][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.635628][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.675152][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.699970][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.737557][T20634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.775123][T20634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.831175][T20634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1202.884653][T20634] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.919392][T20634] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.955075][T20634] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.963854][T20634] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.058087][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.080685][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.215899][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.261407][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.281784][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.292337][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.302657][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.314399][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.326377][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.336927][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.349192][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.359792][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.369730][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.381105][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.416502][T20719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.479678][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.504323][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.527119][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.538049][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.548683][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.560560][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.572904][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.583480][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.593367][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.604409][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.614427][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.625448][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.635367][T20719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.645933][T20719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.669240][T20719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.719620][T20719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.728931][T20719] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.743625][T20719] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.753450][T20719] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.917464][T21097] loop1: detected capacity change from 0 to 32768 [ 1203.926693][T21097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4730 (21097) [ 1203.948102][T21097] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1203.958361][T21097] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1203.967326][T21097] BTRFS info (device loop1): using free-space-tree [ 1204.034568][ T29] audit: type=1804 audit(1719654478.499:596): pid=21097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4730" name="/root/syzkaller.1FLQKw/902/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 1204.101318][ T5091] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1204.462125][T21114] loop1: detected capacity change from 0 to 256 [ 1204.483976][T21114] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1237.612521][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.011385][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1339.956664][ T30] INFO: task kworker/0:4:5093 blocked for more than 143 seconds. [ 1339.964453][ T30] Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1339.991104][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1340.000028][ T30] task:kworker/0:4 state:D stack:19760 pid:5093 tgid:5093 ppid:2 flags:0x00004000 [ 1340.010392][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 1340.017198][ T30] Call Trace: [ 1340.020497][ T30] [ 1340.023452][ T30] __schedule+0x17e8/0x4a20 [ 1340.028614][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.034296][ T30] ? __pfx___schedule+0x10/0x10 [ 1340.039280][ T30] ? __pfx_lock_release+0x10/0x10 [ 1340.044352][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.052871][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1340.060882][ T30] ? schedule+0x90/0x320 [ 1340.065181][ T30] schedule+0x14b/0x320 [ 1340.069527][ T30] schedule_preempt_disabled+0x13/0x30 [ 1340.075032][ T30] __mutex_lock+0x6a4/0xd70 [ 1340.079673][ T30] ? __mutex_lock+0x527/0xd70 [ 1340.084393][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1340.103403][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1340.108780][ T30] ? process_scheduled_works+0x945/0x1830 [ 1340.114550][ T30] ? process_scheduled_works+0x9cb/0x1830 [ 1340.133794][ T30] ? process_scheduled_works+0x945/0x1830 [ 1340.139799][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1340.145916][ T30] ? process_scheduled_works+0x945/0x1830 [ 1340.165939][ T30] process_scheduled_works+0xa2e/0x1830 [ 1340.171896][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1340.186782][ T30] ? assign_work+0x364/0x3d0 [ 1340.191458][ T30] worker_thread+0x86d/0xd50 [ 1340.196108][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1340.216433][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1340.221638][ T30] kthread+0x2f2/0x390 [ 1340.225766][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1340.231040][ T30] ? __pfx_kthread+0x10/0x10 [ 1340.235672][ T30] ret_from_fork+0x4d/0x80 [ 1340.240186][ T30] ? __pfx_kthread+0x10/0x10 [ 1340.244814][ T30] ret_from_fork_asm+0x1a/0x30 [ 1340.249780][ T30] [ 1340.252902][ T30] INFO: task kworker/u8:15:10088 blocked for more than 143 seconds. [ 1340.261189][ T30] Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1340.268971][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1340.278965][ T30] task:kworker/u8:15 state:D stack:20152 pid:10088 tgid:10088 ppid:2 flags:0x00004000 [ 1340.289249][ T30] Workqueue: netns cleanup_net [ 1340.294067][ T30] Call Trace: [ 1340.297421][ T30] [ 1340.300380][ T30] __schedule+0x17e8/0x4a20 [ 1340.304941][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.310684][ T30] ? __pfx___schedule+0x10/0x10 [ 1340.315577][ T30] ? __pfx_lock_release+0x10/0x10 [ 1340.321107][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1340.326673][ T30] ? kthread_data+0x52/0xd0 [ 1340.331214][ T30] ? schedule+0x90/0x320 [ 1340.335486][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.341931][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1340.356352][ T30] ? schedule+0x90/0x320 [ 1340.360645][ T30] schedule+0x14b/0x320 [ 1340.364837][ T30] schedule_preempt_disabled+0x13/0x30 [ 1340.383502][ T30] __mutex_lock+0x6a4/0xd70 [ 1340.389492][ T30] ? kobject_put+0x443/0x480 [ 1340.394152][ T30] ? __mutex_lock+0x527/0xd70 [ 1340.406298][ T30] ? rfkill_unregister+0xd0/0x230 [ 1340.411384][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1340.426298][ T30] ? __pfx_device_del+0x10/0x10 [ 1340.431237][ T30] rfkill_unregister+0xd0/0x230 [ 1340.436119][ T30] wiphy_unregister+0x22a/0xaa0 [ 1340.452007][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1340.462552][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 1340.468228][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.473903][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 1340.490686][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.497952][ T30] ? kfree+0x149/0x360 [ 1340.502086][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 1340.519970][ T30] mac80211_hwsim_del_radio+0x2c2/0x4c0 [ 1340.525603][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.531556][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1340.546216][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.551936][ T30] hwsim_exit_net+0x5c1/0x670 [ 1340.566201][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1340.571466][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.586186][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.591907][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 1340.616641][ T30] cleanup_net+0x804/0xcc0 [ 1340.621162][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1340.636202][ T30] ? process_scheduled_works+0x945/0x1830 [ 1340.641989][ T30] process_scheduled_works+0xa2e/0x1830 [ 1340.656182][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1340.662326][ T30] ? assign_work+0x364/0x3d0 [ 1340.679222][ T30] worker_thread+0x86d/0xd50 [ 1340.683912][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1340.689265][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1340.694422][ T30] kthread+0x2f2/0x390 [ 1340.706133][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1340.711298][ T30] ? __pfx_kthread+0x10/0x10 [ 1340.715927][ T30] ret_from_fork+0x4d/0x80 [ 1340.730874][ T30] ? __pfx_kthread+0x10/0x10 [ 1340.735540][ T30] ret_from_fork_asm+0x1a/0x30 [ 1340.747966][ T30] [ 1340.751059][ T30] INFO: task syz.0.4699:20947 blocked for more than 144 seconds. [ 1340.766175][ T30] Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1340.773844][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1340.793705][ T30] task:syz.0.4699 state:D stack:23152 pid:20947 tgid:20947 ppid:13914 flags:0x00004004 [ 1340.804242][ T30] Call Trace: [ 1340.816108][ T30] [ 1340.819099][ T30] __schedule+0x17e8/0x4a20 [ 1340.823664][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.842247][ T30] ? __pfx___schedule+0x10/0x10 [ 1340.848755][ T30] ? __pfx_lock_release+0x10/0x10 [ 1340.853841][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1340.870797][ T30] ? schedule+0x90/0x320 [ 1340.875109][ T30] schedule+0x14b/0x320 [ 1340.885409][ T30] schedule_preempt_disabled+0x13/0x30 [ 1340.896159][ T30] __mutex_lock+0x6a4/0xd70 [ 1340.900719][ T30] ? kobject_put+0x443/0x480 [ 1340.905352][ T30] ? __mutex_lock+0x527/0xd70 [ 1340.922941][ T30] ? rfkill_unregister+0xd0/0x230 [ 1340.928272][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1340.933359][ T30] ? __pfx_device_del+0x10/0x10 [ 1340.950634][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 1340.958350][ T30] rfkill_unregister+0xd0/0x230 [ 1340.963257][ T30] nfc_unregister_device+0x96/0x2a0 [ 1340.976013][ T30] virtual_ncidev_close+0x59/0x90 [ 1340.981103][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1340.996807][ T30] __fput+0x408/0x8b0 [ 1341.000891][ T30] task_work_run+0x251/0x310 [ 1341.005574][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1341.010987][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1341.017186][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 1341.022894][ T30] do_syscall_64+0x100/0x230 [ 1341.027703][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.033647][ T30] RIP: 0033:0x7f4357b75b99 [ 1341.038166][ T30] RSP: 002b:00007ffe2cb2b158 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1341.046706][ T30] RAX: 0000000000000000 RBX: 00007f4357d05aa0 RCX: 00007f4357b75b99 [ 1341.054719][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1341.062786][ T30] RBP: 00007f4357d05aa0 R08: 0000000000000006 R09: 0000001e2cb2b46f [ 1341.072622][ T30] R10: 00000000003ffbcc R11: 0000000000000246 R12: 00000000001239ce [ 1341.080734][ T30] R13: 0000000000000032 R14: 00007f4357d05aa0 R15: 00007ffe2cb2b240 [ 1341.089022][ T30] [ 1341.092176][ T30] INFO: task syz.3.4700:20960 blocked for more than 144 seconds. [ 1341.105918][ T30] Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1341.114037][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1341.133692][ T30] task:syz.3.4700 state:D stack:23440 pid:20960 tgid:20952 ppid:9016 flags:0x00004006 [ 1341.144244][ T30] Call Trace: [ 1341.148136][ T30] [ 1341.151103][ T30] __schedule+0x17e8/0x4a20 [ 1341.155664][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.161484][ T30] ? __pfx___schedule+0x10/0x10 [ 1341.166439][ T30] ? __pfx_lock_release+0x10/0x10 [ 1341.171511][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1341.178406][ T30] ? schedule+0x90/0x320 [ 1341.182687][ T30] schedule+0x14b/0x320 [ 1341.186920][ T30] schedule_preempt_disabled+0x13/0x30 [ 1341.192414][ T30] __mutex_lock+0x6a4/0xd70 [ 1341.197001][ T30] ? __mutex_lock+0x527/0xd70 [ 1341.201895][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 1341.207342][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1341.212411][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.218162][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1341.223415][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.243742][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1341.249973][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1341.265877][ T30] nfc_rfkill_set_block+0x50/0x310 [ 1341.271077][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1341.287300][ T30] rfkill_set_block+0x1f3/0x440 [ 1341.292298][ T30] rfkill_fop_write+0x5bb/0x790 [ 1341.305869][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.311595][ T30] ? common_file_perm+0x1a6/0x210 [ 1341.325852][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1341.331297][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.348646][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.354367][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 1341.359575][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1341.364994][ T30] vfs_write+0x2a4/0xc90 [ 1341.369475][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1341.374284][ T30] ? do_futex+0x33b/0x560 [ 1341.378735][ T30] ? __fget_files+0x29/0x470 [ 1341.383383][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.389242][ T30] ? __fget_files+0x3f6/0x470 [ 1341.393967][ T30] ? __fget_files+0x29/0x470 [ 1341.400001][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.405696][ T30] ksys_write+0x1a0/0x2c0 [ 1341.410151][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1341.415886][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1341.420791][ T30] ? do_syscall_64+0x100/0x230 [ 1341.425609][ T30] ? do_syscall_64+0xb6/0x230 [ 1341.430405][ T30] do_syscall_64+0xf3/0x230 [ 1341.434961][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.440978][ T30] RIP: 0033:0x7fc3dbd75b99 [ 1341.445425][ T30] RSP: 002b:00007fc3dca8f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1341.453962][ T30] RAX: ffffffffffffffda RBX: 00007fc3dbf04150 RCX: 00007fc3dbd75b99 [ 1341.462196][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000007 [ 1341.470294][ T30] RBP: 00007fc3dbdf677e R08: 0000000000000000 R09: 0000000000000000 [ 1341.478416][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1341.495725][ T30] R13: 000000000000006e R14: 00007fc3dbf04150 R15: 00007fff93b26bb8 [ 1341.504345][ T30] [ 1341.516935][ T30] [ 1341.516935][ T30] Showing all locks held in the system: [ 1341.524705][ T30] 1 lock held by khungtaskd/30: [ 1341.540731][ T30] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1341.559955][ T30] 2 locks held by getty/4844: [ 1341.564687][ T30] #0: ffff88802adac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1341.574842][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1341.585224][ T30] 3 locks held by kworker/0:4/5093: [ 1341.590484][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1341.601677][ T30] #1: ffffc90002dcfd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1341.615339][ T30] #2: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1341.628369][ T30] 5 locks held by kworker/u8:13/10083: [ 1341.633894][ T30] 4 locks held by kworker/u8:15/10088: [ 1341.639427][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1341.650480][ T30] #1: ffffc9000a8afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1341.661178][ T30] #2: ffffffff8f5da950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1341.670810][ T30] #3: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1341.681033][ T30] 1 lock held by syz-executor/18654: [ 1341.686423][ T30] #0: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1341.696745][ T30] 2 locks held by syz-executor/20634: [ 1341.702149][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1341.710977][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x131/0x850 [ 1341.721213][ T30] 1 lock held by syz-executor/20719: [ 1341.726564][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1341.735094][ T30] 2 locks held by syz.0.4699/20947: [ 1341.741610][ T30] #0: ffff88806efad100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 1341.751539][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1341.761759][ T30] 2 locks held by syz.3.4700/20960: [ 1341.767038][ T30] #0: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 1341.780304][ T30] #1: ffff88806efad100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 1341.795566][ T30] 2 locks held by syz-executor/21092: [ 1341.800968][ T30] #0: ffff8880192ca918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1341.821796][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1341.835708][ T30] 2 locks held by syz-executor/21095: [ 1341.841412][ T30] #0: ffff888067ce5918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1341.852950][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1341.863057][ T30] 1 lock held by syz.1.4733/21118: [ 1341.868345][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1341.876932][ T30] 1 lock held by syz-executor/21120: [ 1341.882240][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1341.890858][ T30] 1 lock held by syz-executor/21122: [ 1341.896264][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1341.904804][ T30] 1 lock held by syz-executor/21124: [ 1341.920829][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1341.929644][ T30] 1 lock held by syz-executor/21126: [ 1341.934959][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1341.954935][ T30] 1 lock held by syz-executor/21129: [ 1341.964751][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1341.984836][ T30] 1 lock held by syz-executor/21131: [ 1341.990385][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1341.999225][ T30] 1 lock held by syz-executor/21136: [ 1342.004534][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1342.024420][ T30] 1 lock held by syz-executor/21138: [ 1342.036351][ T30] #0: ffffffff8eb2f9c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1342.044910][ T30] [ 1342.047739][ T30] ============================================= [ 1342.047739][ T30] [ 1342.065564][ T30] NMI backtrace for cpu 1 [ 1342.069941][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1342.079864][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1342.089946][ T30] Call Trace: [ 1342.093237][ T30] [ 1342.096180][ T30] dump_stack_lvl+0x241/0x360 [ 1342.100896][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1342.106129][ T30] ? __pfx__printk+0x10/0x10 [ 1342.110745][ T30] ? vprintk_emit+0x631/0x770 [ 1342.115452][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1342.120513][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1342.125481][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1342.130954][ T30] ? _printk+0xd5/0x120 [ 1342.135131][ T30] ? __pfx__printk+0x10/0x10 [ 1342.139745][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1342.144627][ T30] ? __pfx__printk+0x10/0x10 [ 1342.149243][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1342.154889][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1342.159941][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1342.165943][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1342.171950][ T30] watchdog+0xfde/0x1020 [ 1342.176221][ T30] ? watchdog+0x1ea/0x1020 [ 1342.180699][ T30] ? __pfx_watchdog+0x10/0x10 [ 1342.185394][ T30] kthread+0x2f2/0x390 [ 1342.189493][ T30] ? __pfx_watchdog+0x10/0x10 [ 1342.194182][ T30] ? __pfx_kthread+0x10/0x10 [ 1342.198791][ T30] ret_from_fork+0x4d/0x80 [ 1342.203227][ T30] ? __pfx_kthread+0x10/0x10 [ 1342.207834][ T30] ret_from_fork_asm+0x1a/0x30 [ 1342.212641][ T30] [ 1342.216249][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1342.221491][ C0] NMI backtrace for cpu 0 [ 1342.221506][ C0] CPU: 0 PID: 5097 Comm: kworker/0:5 Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1342.221531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1342.221548][ C0] Workqueue: events nsim_dev_trap_report_work [ 1342.221593][ C0] RIP: 0010:unwind_next_frame+0x1359/0x2a00 [ 1342.221632][ C0] Code: 04 00 00 49 8d 44 24 08 4c 39 f0 0f 86 05 08 00 00 48 39 e8 0f 87 fc 07 00 00 e8 02 27 55 00 4c 89 e7 e8 3a 24 00 00 48 89 c3 <48> 8b 44 24 30 42 80 3c 28 00 48 8b 6c 24 20 4c 8b 74 24 48 74 08 [ 1342.221652][ C0] RSP: 0018:ffffc90002d5f5a8 EFLAGS: 00000293 [ 1342.221672][ C0] RAX: ffffffff870701b5 RBX: ffffffff870701b5 RCX: ffff88801af95a00 [ 1342.221691][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc90002d5fae0 [ 1342.221707][ C0] RBP: 1ffff920005abed2 R08: ffffffff8141008d R09: ffffffff8140ffe6 [ 1342.221725][ C0] R10: 0000000000000003 R11: ffff88801af95a00 R12: ffffc90002d5fae0 [ 1342.221742][ C0] R13: dffffc0000000000 R14: 1ffff920005abed1 R15: 1ffff920005abed0 [ 1342.221764][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1342.221785][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1342.221802][ C0] CR2: 00007fd4aa57d580 CR3: 000000000e132000 CR4: 0000000000350ef0 [ 1342.221821][ C0] Call Trace: [ 1342.221831][ C0] [ 1342.221841][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1342.221869][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1342.221899][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1342.221925][ C0] ? nmi_handle+0x2a/0x5a0 [ 1342.221975][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1342.222004][ C0] ? nmi_handle+0x151/0x5a0 [ 1342.222040][ C0] ? nmi_handle+0x2a/0x5a0 [ 1342.222078][ C0] ? unwind_next_frame+0x1359/0x2a00 [ 1342.222112][ C0] ? default_do_nmi+0x63/0x160 [ 1342.222140][ C0] ? exc_nmi+0x123/0x1f0 [ 1342.222166][ C0] ? end_repeat_nmi+0xf/0x53 [ 1342.222191][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 1342.222228][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 1342.222260][ C0] ? unwind_next_frame+0x109d/0x2a00 [ 1342.222291][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 1342.222329][ C0] ? unwind_next_frame+0x1359/0x2a00 [ 1342.222365][ C0] ? unwind_next_frame+0x1359/0x2a00 [ 1342.222401][ C0] ? unwind_next_frame+0x1359/0x2a00 [ 1342.222436][ C0] [ 1342.222444][ C0] [ 1342.222463][ C0] ? kmem_cache_free+0x145/0x350 [ 1342.222503][ C0] ? kmem_cache_free+0x145/0x350 [ 1342.222540][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1342.222566][ C0] arch_stack_walk+0x151/0x1b0 [ 1342.222615][ C0] ? kmem_cache_free+0x145/0x350 [ 1342.222657][ C0] stack_trace_save+0x118/0x1d0 [ 1342.222682][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1342.222708][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1342.222732][ C0] ? mark_lock+0x9a/0x350 [ 1342.222762][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1342.222791][ C0] kasan_save_track+0x3f/0x80 [ 1342.222818][ C0] ? kasan_save_track+0x3f/0x80 [ 1342.222843][ C0] ? kasan_save_free_info+0x40/0x50 [ 1342.222879][ C0] ? poison_slab_object+0xe0/0x150 [ 1342.222907][ C0] ? __kasan_slab_free+0x37/0x60 [ 1342.222933][ C0] ? kmem_cache_free+0x145/0x350 [ 1342.223015][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 1342.223049][ C0] kasan_save_free_info+0x40/0x50 [ 1342.223086][ C0] poison_slab_object+0xe0/0x150 [ 1342.223116][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 1342.223151][ C0] __kasan_slab_free+0x37/0x60 [ 1342.223179][ C0] kmem_cache_free+0x145/0x350 [ 1342.223221][ C0] nsim_dev_trap_report_work+0x765/0xaa0 [ 1342.223272][ C0] ? process_scheduled_works+0x945/0x1830 [ 1342.223298][ C0] process_scheduled_works+0xa2e/0x1830 [ 1342.223347][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1342.223381][ C0] ? assign_work+0x364/0x3d0 [ 1342.223409][ C0] worker_thread+0x86d/0xd50 [ 1342.223443][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1342.223473][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1342.223504][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1342.223530][ C0] kthread+0x2f2/0x390 [ 1342.223559][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1342.223589][ C0] ? __pfx_kthread+0x10/0x10 [ 1342.223619][ C0] ret_from_fork+0x4d/0x80 [ 1342.223651][ C0] ? __pfx_kthread+0x10/0x10 [ 1342.223681][ C0] ret_from_fork_asm+0x1a/0x30 [ 1342.223730][ C0] [ 1342.645627][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1342.652502][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1342.662425][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1342.672513][ T30] Call Trace: [ 1342.675812][ T30] [ 1342.678789][ T30] dump_stack_lvl+0x241/0x360 [ 1342.683544][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1342.688796][ T30] ? __pfx__printk+0x10/0x10 [ 1342.693428][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1342.699456][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1342.705115][ T30] ? vscnprintf+0x5d/0x90 [ 1342.709484][ T30] panic+0x349/0x860 [ 1342.713420][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1342.719084][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1342.725264][ T30] ? __pfx_panic+0x10/0x10 [ 1342.729699][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1342.735094][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1342.740737][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1342.746303][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1342.751951][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1342.757342][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1342.763509][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1342.769679][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1342.775329][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1342.781504][ T30] watchdog+0x101d/0x1020 [ 1342.785943][ T30] ? watchdog+0x1ea/0x1020 [ 1342.790378][ T30] ? __pfx_watchdog+0x10/0x10 [ 1342.795069][ T30] kthread+0x2f2/0x390 [ 1342.799165][ T30] ? __pfx_watchdog+0x10/0x10 [ 1342.803857][ T30] ? __pfx_kthread+0x10/0x10 [ 1342.808469][ T30] ret_from_fork+0x4d/0x80 [ 1342.812905][ T30] ? __pfx_kthread+0x10/0x10 [ 1342.817520][ T30] ret_from_fork_asm+0x1a/0x30 [ 1342.822328][ T30] [ 1342.825575][ T30] Kernel Offset: disabled [ 1342.829900][ T30] Rebooting in 86400 seconds..