last executing test programs: 11.223711012s ago: executing program 1 (id=2): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000000c0)) 10.990685867s ago: executing program 1 (id=6): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@shortname_win95}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@usefree}, {@fat=@nocase}, {@rodir}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x2a1, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000004d80)={0x2020}, 0x2020) 10.175595757s ago: executing program 1 (id=9): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) listen(r0, 0x10001) connect$bt_sco(r0, &(0x7f0000000940)={0x1f, @none}, 0x8) 7.739238572s ago: executing program 1 (id=42): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x100}}, {@errors_remount}, {@nolazytime}, {@block_validity}]}, 0x0, 0x60c, &(0x7f0000001b40)="$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") syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="87ef"], 0x0) 7.706158515s ago: executing program 32 (id=42): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x100}}, {@errors_remount}, {@nolazytime}, {@block_validity}]}, 0x0, 0x60c, &(0x7f0000001b40)="$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") syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="87ef"], 0x0) 1.767877227s ago: executing program 5 (id=120): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x149441, 0x110) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r0, 0x0, 0x3, 0x7) 1.627875552s ago: executing program 5 (id=124): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000140)={[{@cache_strategy_disabled}, {@noacl}, {@noacl}, {}, {@nouser_xattr}]}, 0x1, 0x177, &(0x7f0000000240)="$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") llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1.479649404s ago: executing program 5 (id=129): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 1.429976421s ago: executing program 5 (id=130): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) close_range(r0, 0xffffffffffffffff, 0x0) 1.307217613s ago: executing program 3 (id=134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)=""/18, &(0x7f0000000440)=0xfd3a) 1.256010651s ago: executing program 2 (id=135): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000740)={[{@test_dummy_encryption}, {@resuid}, {@jqfmt_vfsold}], [{@appraise_type}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt}]}, 0x3, 0x475, &(0x7f0000000280)="$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") write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) 1.251241321s ago: executing program 3 (id=136): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 1.14798432s ago: executing program 2 (id=138): openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/slabinfo\x00', 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7, "b4c408213d36be01d70000e1100ad985ddf6f016d4947e070000eaff00", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.147863815s ago: executing program 5 (id=139): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000003"], 0x60) 1.136349419s ago: executing program 2 (id=141): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 1.036084973s ago: executing program 2 (id=142): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) 1.03594549s ago: executing program 3 (id=143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) 1.031091538s ago: executing program 2 (id=144): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x80000001, 0x3a, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x3a, '/dev/kvm\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/18, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503162ed3fc140820004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 983.909577ms ago: executing program 3 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000640), 0x9, 0x12d600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x4040810) 948.17246ms ago: executing program 2 (id=147): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_open_procfs(0x0, 0x0) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x3, 0x4, 0x0, 0x1}, 0x8) bind$bt_hci(r0, 0x0, 0x0) 489.72205ms ago: executing program 4 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuseblk(&(0x7f00000003c0), &(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000008c0), 0x800000, &(0x7f0000000a80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 489.512058ms ago: executing program 0 (id=151): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000003c0)={[{@nouser_xattr}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvTH8gP0oXxB8gyioSG9GWFlQOXjSacDEx0YMea6kEWcDQmgghUo3Bo/EvUI8m/gWe9GLUk8ar3o0JMVxED2bN7M7Att2tbbfbBefzSab73vx6782b13kzb2cDKK1q9ieJ2BERv0TEaDO6eIVq8+PG9cszf12/PJNEvf7KH0ljvT+vX54pVt2Rf27P9zmWRqQfJrHQJt25i5fOTNdqsxfy+MT82bcn5i5eevL02elTs6dmz00dP37s6OQzT089tSHlHMnyuu+98/v3nnj9k5dmYuGN77/M8j+QL28tR1Ol6zSrUY16vV5PF80dbvw91PXeby8jLeFksI8ZYU2y8z+rrqFG+x+NgbhVeaPx4gd9zRzQU9n1adeyuc2rYnooaSwH/q+0cSir4oqf3f8W0+b2QPrr2nPNG6Cs3DfyqblkMLL79qTSvGMf6FH6OyLitYW/P82maPscAgBgY32d9X+eaNf/S+PelvV25mNDlYg4HBG7I+LuiNgTEfdENNa9LyLuX2P61SXx5f2fn7auq2CrlPX/ns3Hthb3/26O2lQG8thIo/xDyZuna7NH8mMyFkNbsvjkCml888LPH3daVm3p/2VTln7RF8zz8fvglsXbnJyen+6mzK2uvR+xb7Bd+ZObIwFJROyNiH3r2H92zE4//sX+LLxz+/Ll/13+FWzAOFP984jHmvW/EEvKX0iaKXUan5y4K2qzRyaKs2K5H368+nJrfKgl3FX5N0BW/9vanv95+YtmUIzXzq09jau/ftTxnma95/9w8mojPJzPe3d6fv7CZMRwPmPR/Klb2xbxYv2s/GMH27f/3RH/fJZv90BEZCfxgxHxUEQcyPP+cEQ8EhEHVyj/d88/+tbKR6i/9X+yQ/3nZ0AlaR2vX0dg4My3X3VKf3X1f6wRGsvnrOb/32oz2N3RAwAAgDtD2hiDTtLxm+E0HR9vfod/T2xLa+fn5g9X451zJ5tj1ZUYSosnXaMtz0Mn82fDRXxqSfxoROxqfNNoayM+PnO+NtLvwkPJbe/Q/jO/9epLL8DtY03jaEnv8gFsPu9rQnlp/1Be2j+Ul/YP5dWu/V+JuNGHrACbzPUfykv7h/LS/qG8tH8opeWvxBc/t7KeN/1vBXaf6GrzEgUGutt8IiLaLorWH+3oQSDSPh66+pV6vZv9pP2v9wtzB/LAlohY7VZXelqnS8+fFXk7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCP8GwAA///IPOO2") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 450.102251ms ago: executing program 5 (id=152): syz_usb_connect(0x2, 0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405035d5c"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 356.138447ms ago: executing program 0 (id=153): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x1}, 0x50) 272.384067ms ago: executing program 4 (id=154): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) 272.176828ms ago: executing program 0 (id=155): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 272.050011ms ago: executing program 0 (id=156): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 271.956612ms ago: executing program 4 (id=157): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 271.624836ms ago: executing program 0 (id=158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) fanotify_init(0x8, 0x400) 271.23297ms ago: executing program 0 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 258.795657ms ago: executing program 4 (id=160): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2a8c1, 0x40) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) 230.063447ms ago: executing program 4 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000850000006100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08ff88a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 114.701471ms ago: executing program 4 (id=162): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_open_procfs(0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508", @ANYBLOB="e7947d"], 0x0) 113.237909ms ago: executing program 3 (id=163): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r1, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x89b}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}, @iv={0x18, 0x117, 0x2, 0x3, "a6af88"}], 0x60, 0xc1}], 0x1, 0x40484) 0s ago: executing program 3 (id=164): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01"], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2c09e8dbe10859892787030000000000000020a1c80d83f6d3819e01177d3d458dac000000000000000000000000000000000000fe5f00", "90f2091e2012406c7f000000dd3c00", [0x4, 0x40000000000000]}}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 30.233462][ T6531] cgroup: Unknown subsys name 'net' [ 30.356039][ T6531] cgroup: Unknown subsys name 'cpuset' [ 30.357898][ T6531] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.475467][ T6531] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.542472][ T6547] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.545676][ T6549] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.546001][ T6549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.548121][ T6549] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.548212][ T6549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.558430][ T6552] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.569735][ T6553] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.569913][ T6553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.570349][ T6557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.570741][ T6557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.571317][ T6553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.571568][ T6553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.571716][ T6553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.572738][ T6553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.572911][ T6553] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.573110][ T6553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.574406][ T6558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.574713][ T6558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.576786][ T6558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.577300][ T6558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.577571][ T6557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.577964][ T6557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.578177][ T6557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.579642][ T6558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.580564][ T6549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.749674][ T6543] chnl_net:caif_netlink_parms(): no params data found [ 31.772333][ T6545] chnl_net:caif_netlink_parms(): no params data found [ 31.802760][ T6541] chnl_net:caif_netlink_parms(): no params data found [ 31.846150][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.846455][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.846532][ T6543] bridge_slave_0: entered allmulticast mode [ 31.846989][ T6543] bridge_slave_0: entered promiscuous mode [ 31.847980][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 31.861341][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.862855][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.864128][ T6545] bridge_slave_0: entered allmulticast mode [ 31.865750][ T6545] bridge_slave_0: entered promiscuous mode [ 31.866566][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.866593][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.866661][ T6543] bridge_slave_1: entered allmulticast mode [ 31.867054][ T6543] bridge_slave_1: entered promiscuous mode [ 31.880608][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.880684][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.880742][ T6545] bridge_slave_1: entered allmulticast mode [ 31.881163][ T6545] bridge_slave_1: entered promiscuous mode [ 31.898956][ T6543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.899858][ T6543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.912074][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.918128][ T6543] team0: Port device team_slave_0 added [ 31.919249][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 31.928653][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.930848][ T6543] team0: Port device team_slave_1 added [ 31.942285][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.942545][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.942634][ T6541] bridge_slave_0: entered allmulticast mode [ 31.943057][ T6541] bridge_slave_0: entered promiscuous mode [ 31.943772][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.943792][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.943834][ T6541] bridge_slave_1: entered allmulticast mode [ 31.944229][ T6541] bridge_slave_1: entered promiscuous mode [ 31.959227][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.959252][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.959266][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.967023][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.967096][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.967165][ T6542] bridge_slave_0: entered allmulticast mode [ 31.967596][ T6542] bridge_slave_0: entered promiscuous mode [ 31.968230][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.968244][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.968288][ T6542] bridge_slave_1: entered allmulticast mode [ 31.968695][ T6542] bridge_slave_1: entered promiscuous mode [ 31.976792][ T6545] team0: Port device team_slave_0 added [ 31.977955][ T6545] team0: Port device team_slave_1 added [ 31.984240][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.984266][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.984283][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.000598][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.005141][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.006196][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.006525][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.006533][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.006544][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.007531][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.007548][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.007566][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.008808][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.036384][ T6542] team0: Port device team_slave_0 added [ 32.043117][ T6541] team0: Port device team_slave_0 added [ 32.044167][ T6541] team0: Port device team_slave_1 added [ 32.049468][ T6542] team0: Port device team_slave_1 added [ 32.053965][ T6543] hsr_slave_0: entered promiscuous mode [ 32.054840][ T6543] hsr_slave_1: entered promiscuous mode [ 32.066757][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.066976][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.066990][ T6541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.067494][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.067500][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.067511][ T6541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.084117][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.085373][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.085393][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.085732][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.086115][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.086206][ T6544] bridge_slave_0: entered allmulticast mode [ 32.086650][ T6544] bridge_slave_0: entered promiscuous mode [ 32.087533][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.087549][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.087596][ T6544] bridge_slave_1: entered allmulticast mode [ 32.088040][ T6544] bridge_slave_1: entered promiscuous mode [ 32.097721][ T6541] hsr_slave_0: entered promiscuous mode [ 32.098026][ T6541] hsr_slave_1: entered promiscuous mode [ 32.098233][ T6541] debugfs: 'hsr0' already exists in 'hsr' [ 32.098274][ T6541] Cannot create hsr debugfs directory [ 32.112566][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.112594][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.112610][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.126004][ T6545] hsr_slave_0: entered promiscuous mode [ 32.126283][ T6545] hsr_slave_1: entered promiscuous mode [ 32.126460][ T6545] debugfs: 'hsr0' already exists in 'hsr' [ 32.126475][ T6545] Cannot create hsr debugfs directory [ 32.143182][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.147372][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.160984][ T6542] hsr_slave_0: entered promiscuous mode [ 32.161293][ T6542] hsr_slave_1: entered promiscuous mode [ 32.161476][ T6542] debugfs: 'hsr0' already exists in 'hsr' [ 32.161486][ T6542] Cannot create hsr debugfs directory [ 32.188026][ T6544] team0: Port device team_slave_0 added [ 32.188748][ T6544] team0: Port device team_slave_1 added [ 32.210736][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.212018][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.215103][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.215737][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.215744][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.215756][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.250843][ T6544] hsr_slave_0: entered promiscuous mode [ 32.252194][ T6544] hsr_slave_1: entered promiscuous mode [ 32.253333][ T6544] debugfs: 'hsr0' already exists in 'hsr' [ 32.254428][ T6544] Cannot create hsr debugfs directory [ 32.330558][ T6541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.333765][ T6541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.336345][ T6541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.344010][ T6541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.363222][ T6545] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.366446][ T6545] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.368499][ T6545] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.372022][ T6545] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.380826][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.380890][ T6541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.381039][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.381067][ T6541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.403673][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.403711][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.403768][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.403791][ T6545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.411490][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.418235][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.419647][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.423402][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.427199][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.437426][ T6541] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.439984][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.440037][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.440393][ T6543] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.442372][ T6543] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.447952][ T6543] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.455646][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.455874][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.456284][ T6543] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.495011][ T6544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.497684][ T6544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.501524][ T6541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.512819][ T6544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.515640][ T6544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.541718][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.549449][ T6541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.558997][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.564513][ T6542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.567454][ T6542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.569554][ T6542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.573602][ T6542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.587525][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.592892][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.592940][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.596088][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.608275][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.608316][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.608638][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.608658][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.621270][ T6541] veth0_vlan: entered promiscuous mode [ 32.623832][ T6541] veth1_vlan: entered promiscuous mode [ 32.631921][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.637021][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.640280][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.640327][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.658681][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.658726][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.671667][ T6541] veth0_macvtap: entered promiscuous mode [ 32.672736][ T6541] veth1_macvtap: entered promiscuous mode [ 32.678052][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.679114][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.691131][ T5178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.691370][ T5178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.691387][ T5178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.691401][ T5178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.701560][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.701595][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.734151][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.740486][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.751901][ T6542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.760323][ T6542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.763212][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.763270][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.763765][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.763779][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.801616][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.805061][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.830259][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.844937][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.846450][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.846481][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.856462][ T6543] veth0_vlan: entered promiscuous mode [ 32.874082][ T6543] veth1_vlan: entered promiscuous mode [ 32.879069][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.886531][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.894205][ T6543] veth0_macvtap: entered promiscuous mode [ 32.906482][ T6543] veth1_macvtap: entered promiscuous mode [ 32.911062][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.914121][ T6541] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.923014][ T6542] veth0_vlan: entered promiscuous mode [ 32.925785][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.931935][ T6542] veth1_vlan: entered promiscuous mode [ 32.942633][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.942690][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.942718][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.942736][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.974222][ T6542] veth0_macvtap: entered promiscuous mode [ 33.002750][ T6544] veth0_vlan: entered promiscuous mode [ 33.006161][ T6544] veth1_vlan: entered promiscuous mode [ 33.007207][ T6542] veth1_macvtap: entered promiscuous mode [ 33.010770][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.012182][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.038061][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.038098][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.049546][ T6544] veth0_macvtap: entered promiscuous mode [ 33.057558][ T6545] veth0_vlan: entered promiscuous mode [ 33.060899][ T6545] veth1_vlan: entered promiscuous mode [ 33.062508][ T6544] veth1_macvtap: entered promiscuous mode [ 33.066843][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.066956][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.066976][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.067016][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.068737][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.068753][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.326005][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.329002][ T6659] syz_tun: entered allmulticast mode [ 33.336671][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.347476][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.349459][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.350940][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.350977][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.361535][ T6545] veth0_macvtap: entered promiscuous mode [ 33.392822][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.392854][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.398366][ T6664] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.403159][ T6664] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.413767][ T6545] veth1_macvtap: entered promiscuous mode [ 33.424375][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.424409][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.438596][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.444890][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.474036][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.474067][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.479736][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.479768][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.480026][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.480057][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.480073][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.480086][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.515870][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.515897][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.527081][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.527111][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.609711][ T6676] loop1: detected capacity change from 0 to 128 [ 33.611595][ T6676] ======================================================= [ 33.611595][ T6676] WARNING: The mand mount option has been deprecated and [ 33.611595][ T6676] and is ignored by this kernel. Remove the mand [ 33.611595][ T6676] option from the mount to silence this warning. [ 33.611595][ T6676] ======================================================= [ 33.618064][ T6136] Bluetooth: hci3: command tx timeout [ 33.618209][ T6136] Bluetooth: hci4: command tx timeout [ 33.618265][ T6136] Bluetooth: hci0: command tx timeout [ 33.623182][ T6673] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.642406][ T6678] loop3: detected capacity change from 0 to 256 [ 33.695109][ T6552] Bluetooth: hci1: command tx timeout [ 33.705266][ T6552] Bluetooth: hci2: command tx timeout [ 34.327463][ T6678] exFAT-fs (loop3): error, The cluster chain has a loop [ 34.329514][ T6678] exFAT-fs (loop3): failed to count the number of clusters in root [ 34.331033][ T6678] exFAT-fs (loop3): failed to recognize exfat type [ 34.364032][ T6683] loop3: detected capacity change from 0 to 512 [ 34.369251][ T6683] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.371715][ T6683] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.386538][ T6656] syz_tun: left allmulticast mode [ 34.418044][ T6683] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.423097][ T6683] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.471730][ T6683] EXT4-fs (loop3): 1 truncate cleaned up [ 34.472404][ T6683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.237586][ T6545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.312914][ T6712] loop2: detected capacity change from 0 to 512 [ 35.374180][ T6720] loop3: detected capacity change from 0 to 256 [ 35.385386][ T6720] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 35.436325][ T6724] loop4: detected capacity change from 0 to 4096 [ 35.447910][ T6712] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.21: bad orphan inode 11862016 [ 35.452539][ T6724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.457425][ T6712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 35.488842][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.575352][ T6612] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 35.616934][ T6541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.681809][ T6740] loop2: detected capacity change from 0 to 256 [ 35.684357][ T6740] exfat: Bad value for 'uid' [ 35.684392][ T6740] exfat: Bad value for 'uid' [ 35.694708][ T6552] Bluetooth: hci0: command tx timeout [ 35.694746][ T6552] Bluetooth: hci4: command tx timeout [ 35.774712][ T6136] Bluetooth: hci2: command tx timeout [ 35.776418][ T6136] Bluetooth: hci1: command tx timeout [ 35.921439][ T6612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.925179][ T6612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.931628][ T6612] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 35.933470][ T6612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.938881][ T6612] usb 1-1: config 0 descriptor?? [ 36.347357][ T6612] wacom 0003:056A:00C6.0002: unbalanced collection at end of report description [ 36.349562][ T6612] wacom 0003:056A:00C6.0002: parse failed [ 36.350806][ T6612] wacom 0003:056A:00C6.0002: probe with driver wacom failed with error -22 [ 36.513295][ T6760] loop4: detected capacity change from 0 to 1024 [ 36.530642][ T6760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.551544][ T6608] usb 1-1: USB disconnect, device number 2 [ 36.558809][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.598615][ T6767] loop4: detected capacity change from 0 to 128 [ 36.603980][ T6767] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.609077][ T6767] warning: `syz.4.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 36.622914][ T6544] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.638765][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.640783][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.919682][ T6136] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.921106][ T6136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.922278][ T6136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.922703][ T6136] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.922897][ T6136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.001849][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.082404][ T6772] chnl_net:caif_netlink_parms(): no params data found [ 37.103048][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.103113][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.103171][ T6772] bridge_slave_0: entered allmulticast mode [ 37.103593][ T6772] bridge_slave_0: entered promiscuous mode [ 37.104348][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.104402][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.104470][ T6772] bridge_slave_1: entered allmulticast mode [ 37.105956][ T6772] bridge_slave_1: entered promiscuous mode [ 37.124450][ T6772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.126092][ T6772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.133556][ T6772] team0: Port device team_slave_0 added [ 37.136128][ T6772] team0: Port device team_slave_1 added [ 37.143860][ T6787] Zero length message leads to an empty skb [ 37.156524][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.158053][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.162361][ T6772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.165527][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.166690][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.170903][ T6772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.187894][ T6772] hsr_slave_0: entered promiscuous mode [ 37.190060][ T6772] hsr_slave_1: entered promiscuous mode [ 37.191672][ T6772] debugfs: 'hsr0' already exists in 'hsr' [ 37.192697][ T6772] Cannot create hsr debugfs directory [ 37.209598][ T6791] input: syz0 as /devices/virtual/input/input3 [ 37.280553][ T6772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.284278][ T6772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.288831][ T6772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.295387][ T6772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.321699][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.321745][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.321825][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.321854][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.340286][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.351330][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.353325][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.360324][ T6772] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.361830][ T6807] mmap: syz.3.52 (6807) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.367000][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.367044][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.371369][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.371410][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.438207][ T6816] loop3: detected capacity change from 0 to 1024 [ 37.465344][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.480535][ T6772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.481426][ T6816] hfsplus: catalog searching failed [ 37.490698][ T6816] hfsplus: walked past end of dir [ 37.510152][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.521811][ T14] hfsplus: b-tree write err: -5, ino 8 [ 37.557373][ T6827] loop3: detected capacity change from 0 to 128 [ 37.574075][ T6827] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 37.599178][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.774773][ T6552] Bluetooth: hci0: command tx timeout [ 37.777063][ T6136] Bluetooth: hci4: command tx timeout [ 37.864877][ T6136] Bluetooth: hci1: command tx timeout [ 37.864918][ T6136] Bluetooth: hci2: command tx timeout [ 37.872481][ T6772] veth0_vlan: entered promiscuous mode [ 37.874422][ T6772] veth1_vlan: entered promiscuous mode [ 37.879298][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.879502][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.892958][ T6772] veth0_macvtap: entered promiscuous mode [ 37.894004][ T6772] veth1_macvtap: entered promiscuous mode [ 37.902195][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.904396][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.909808][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.909850][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.910142][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.910177][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.953204][ T42] bridge_slave_1: left allmulticast mode [ 37.954475][ T42] bridge_slave_1: left promiscuous mode [ 37.956070][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.963954][ T42] bridge_slave_0: left allmulticast mode [ 37.963988][ T42] bridge_slave_0: left promiscuous mode [ 37.964092][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.133680][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.167927][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.195856][ T42] bond0 (unregistering): Released all slaves [ 38.217872][ T5178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.217911][ T5178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.238666][ T6843] loop2: detected capacity change from 0 to 512 [ 38.268941][ T5178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.269109][ T5178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.287574][ T6843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.316115][ T6541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.417026][ T6863] loop4: detected capacity change from 0 to 512 [ 38.418621][ T6863] EXT4-fs: Ignoring removed orlov option [ 38.419964][ T6863] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.439177][ T6863] EXT4-fs (loop4): 1 orphan inode deleted [ 38.439217][ T6863] EXT4-fs (loop4): 1 truncate cleaned up [ 38.439671][ T6863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.458698][ T6863] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz.4.65: bad entry in directory: rec_len is too small for name_len - offset=4, inode=13, rec_len=16, size=60 fake=0 [ 38.466103][ T6863] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 13, rec_len 16, name_len 53inline size 60 [ 38.489402][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.539328][ T6871] xt_TPROXY: Can be used only with -p tcp or -p udp [ 38.541497][ T6871] 9pnet_fd: Insufficient options for proto=fd [ 38.616232][ T6885] syz.3.73 uses obsolete (PF_INET,SOCK_PACKET) [ 38.633752][ T6881] loop5: detected capacity change from 0 to 1024 [ 38.636042][ T6881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.639652][ T6881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.641455][ T6881] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.653589][ T6888] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967286. macoff=82 [ 38.661844][ T6881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.727034][ T6772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.765884][ T6894] loop2: detected capacity change from 0 to 2048 [ 38.975054][ T6552] Bluetooth: hci3: command tx timeout [ 39.008232][ T6894] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 39.008951][ T6894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 39.020098][ T42] hsr_slave_0: left promiscuous mode [ 39.025753][ T42] hsr_slave_1: left promiscuous mode [ 39.026066][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.026086][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.076219][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.076257][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.139591][ T42] veth1_macvtap: left promiscuous mode [ 39.139714][ T42] veth0_macvtap: left promiscuous mode [ 39.139772][ T42] veth1_vlan: left promiscuous mode [ 39.139828][ T42] veth0_vlan: left promiscuous mode [ 39.290103][ T6931] loop2: detected capacity change from 0 to 512 [ 39.290471][ T6931] EXT4-fs: Ignoring removed i_version option [ 39.290500][ T6931] EXT4-fs: Ignoring removed bh option [ 39.350086][ T6931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.369166][ T6938] loop4: detected capacity change from 0 to 1024 [ 39.395478][ T6938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.398759][ T6541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.823031][ T6959] loop0: detected capacity change from 0 to 512 [ 39.824015][ T6959] EXT4-fs: Ignoring removed nobh option [ 39.832755][ T6959] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.89: casefold flag without casefold feature [ 39.832885][ T6959] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.89: couldn't read orphan inode 15 (err -117) [ 39.833367][ T6959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.856524][ T6552] Bluetooth: hci4: command tx timeout [ 39.857785][ T6552] Bluetooth: hci0: command tx timeout [ 39.862879][ T6542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.933100][ T6964] loop0: detected capacity change from 0 to 2048 [ 39.935534][ T6136] Bluetooth: hci2: command tx timeout [ 39.936682][ T6136] Bluetooth: hci1: command tx timeout [ 39.950214][ T6964] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 39.950919][ T6964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 39.957366][ T6964] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 40.725837][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.765748][ T6979] loop0: detected capacity change from 0 to 8 [ 40.784044][ T6979] squashfs image failed sanity check [ 40.889504][ T6988] loop4: detected capacity change from 0 to 16 [ 40.891446][ T6988] erofs (device loop4): mounted with root inode @ nid 36. [ 40.898295][ T6988] erofs (device loop4): readahead error at folio 3600 @ nid 36 [ 40.898330][ T6988] erofs (device loop4): readahead error at folio 3599 @ nid 36 [ 40.898740][ T6988] erofs (device loop4): read error -117 @ 8200 of nid 36 [ 41.054789][ T6552] Bluetooth: hci3: command tx timeout [ 41.143874][ T6989] loop3: detected capacity change from 0 to 1024 [ 41.168586][ T6989] hfsplus: keylen 65060 too large [ 41.168633][ T6989] hfsplus: keylen 65060 too large [ 41.168738][ T6989] hfsplus: keylen 65060 too large [ 41.168742][ T6989] hfsplus: xattr search failed [ 41.220849][ T6997] loop4: detected capacity change from 0 to 512 [ 41.224332][ T6997] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.275883][ T6664] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.283278][ T6997] EXT4-fs error (device loop4): __ext4_iget:5464: inode #11: block 2: comm syz.4.102: invalid block [ 41.285499][ T6997] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.102: couldn't read orphan inode 11 (err -117) [ 41.288292][ T6997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.318456][ T42] team0 (unregistering): Port device team_slave_1 removed [ 41.585903][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.598373][ T42] team0 (unregistering): Port device team_slave_0 removed [ 41.654747][ T6664] usb 1-1: Using ep0 maxpacket: 32 [ 41.658810][ T6664] usb 1-1: config 0 interface 0 has no altsetting 0 [ 41.658850][ T6664] usb 1-1: New USB device found, idVendor=056a, idProduct=0032, bcdDevice= 0.00 [ 41.658865][ T6664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.665941][ T6664] usb 1-1: config 0 descriptor?? [ 42.080610][ T6664] wacom 0003:056A:0032.0003: unknown main item tag 0x0 [ 42.081949][ T6664] wacom 0003:056A:0032.0003: unknown main item tag 0x0 [ 42.083157][ T6664] wacom 0003:056A:0032.0003: unknown main item tag 0x0 [ 42.084378][ T6664] wacom 0003:056A:0032.0003: unknown main item tag 0x0 [ 42.086156][ T6664] wacom 0003:056A:0032.0003: unknown main item tag 0x0 [ 42.087552][ T6664] wacom 0003:056A:0032.0003: unknown main item tag 0x0 [ 42.130587][ T7018] loop3: detected capacity change from 0 to 128 [ 42.238583][ T7026] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.112'. [ 42.289430][ T6595] usb 1-1: USB disconnect, device number 3 [ 42.388768][ T7028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.850921][ T7059] batadv_slave_0: entered promiscuous mode [ 42.851450][ T7058] batadv_slave_0: left promiscuous mode [ 42.854495][ T7056] loop5: detected capacity change from 0 to 1024 [ 42.893985][ T7063] loop2: detected capacity change from 0 to 512 [ 42.896298][ T7056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.909914][ T7056] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.120: lblock 0 mapped to illegal pblock 0 (length 6) [ 42.914212][ T7056] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 42.914281][ T7056] EXT4-fs (loop5): This should not happen!! Data will be lost [ 42.914281][ T7056] [ 42.916547][ T7056] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: comm syz.5.120: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.934398][ T7063] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.949195][ T7063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.977622][ T295] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 42.987182][ T295] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 42.987215][ T295] EXT4-fs (loop5): This should not happen!! Data will be lost [ 42.987215][ T295] [ 42.987237][ T295] EXT4-fs (loop5): Total free blocks count 0 [ 42.987249][ T295] EXT4-fs (loop5): Free/Dirty block details [ 42.987264][ T295] EXT4-fs (loop5): free_blocks=4293918720 [ 42.987278][ T295] EXT4-fs (loop5): dirty_blocks=32 [ 42.987287][ T295] EXT4-fs (loop5): Block reservation details [ 43.010863][ T6541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.083303][ T7086] loop5: detected capacity change from 0 to 16 [ 43.089603][ T7086] erofs (device loop5): mounted with root inode @ nid 36. [ 43.145448][ T6552] Bluetooth: hci3: command tx timeout [ 43.277559][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 43.330349][ T7114] loop2: detected capacity change from 0 to 512 [ 43.334083][ T7114] ext4: Unknown parameter 'appraise_type' [ 43.428648][ T9] kernel write not supported for file /slabinfo (pid: 9 comm: kworker/0:0) [ 43.443045][ T7124] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 43.443071][ T7124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 43.447511][ T7124] vhci_hcd vhci_hcd.0: Device attached [ 43.451626][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.453687][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.457012][ T7125] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 43.468242][ T295] vhci_hcd: stop threads [ 43.468506][ T295] vhci_hcd: release socket [ 43.468525][ T295] vhci_hcd: disconnect device [ 43.472338][ T7128] loop3: detected capacity change from 0 to 128 [ 43.472700][ T7128] EXT4-fs: Ignoring removed nobh option [ 43.490017][ T7133] loop4: detected capacity change from 0 to 128 [ 43.500595][ T7128] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.500903][ T7133] EXT4-fs: Ignoring removed nobh option [ 43.518416][ T7133] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.534067][ T6545] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.626796][ T6544] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.982986][ T7152] loop4: detected capacity change from 0 to 1024 [ 44.039958][ T7152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.078755][ T7152] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.146: Freeing blocks not in datazone - block = 0, count = 16 [ 44.102673][ T7155] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 44.111005][ T7155] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 44.118706][ T7155] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.118706][ T7155] [ 44.118761][ T7155] EXT4-fs (loop4): Total free blocks count 0 [ 44.118777][ T7155] EXT4-fs (loop4): Free/Dirty block details [ 44.118793][ T7155] EXT4-fs (loop4): free_blocks=4293918736 [ 44.118808][ T7155] EXT4-fs (loop4): dirty_blocks=16 [ 44.118819][ T7155] EXT4-fs (loop4): Block reservation details [ 44.118828][ T7155] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 44.133210][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.148311][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.148510][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.161506][ T7176] loop0: detected capacity change from 0 to 512 [ 44.161875][ T7176] ext4: Unknown parameter 'nouser_xattr' [ 44.209224][ T7180] capability: warning: `syz.0.153' uses deprecated v2 capabilities in a way that may be insecure [ 44.443902][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.444080][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.570566][ T7230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.570760][ T7230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.576207][ T7230] loop9: detected capacity change from 0 to 7 [ 44.595819][ T7230] [ 44.596252][ T7230] ====================================================== [ 44.597406][ T7230] WARNING: possible circular locking dependency detected [ 44.598558][ T7230] syzkaller #0 Not tainted [ 44.599314][ T7230] ------------------------------------------------------ [ 44.600518][ T7230] syz.3.164/7230 is trying to acquire lock: [ 44.601520][ T7230] ffff0000c184ba20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0xa0/0x410 [ 44.603292][ T7230] [ 44.603292][ T7230] but task is already holding lock: [ 44.604506][ T7230] ffff0000ca23f608 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x11dc/0x1778 [ 44.606012][ T7230] [ 44.606012][ T7230] which lock already depends on the new lock. [ 44.606012][ T7230] [ 44.607638][ T7230] [ 44.607638][ T7230] the existing dependency chain (in reverse order) is: [ 44.609058][ T7230] [ 44.609058][ T7230] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 44.610618][ T7230] blk_alloc_queue+0x48c/0x54c [ 44.611470][ T7230] __blk_mq_alloc_disk+0x124/0x304 [ 44.612333][ T7230] loop_add+0x324/0x880 [ 44.613049][ T7230] loop_init+0xe8/0x10c [ 44.613787][ T7230] do_one_initcall+0x250/0x990 [ 44.614571][ T7230] do_initcall_level+0x128/0x1c4 [ 44.615371][ T7230] do_initcalls+0x70/0xd0 [ 44.616110][ T7230] do_basic_setup+0x78/0x8c [ 44.616929][ T7230] kernel_init_freeable+0x268/0x39c [ 44.617846][ T7230] kernel_init+0x24/0x1dc [ 44.618691][ T7230] ret_from_fork+0x10/0x20 [ 44.619496][ T7230] [ 44.619496][ T7230] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 44.620704][ T7230] fs_reclaim_acquire+0x8c/0x118 [ 44.621604][ T7230] kmem_cache_alloc_noprof+0x58/0x3e8 [ 44.622637][ T7230] __kernfs_iattrs+0xd4/0x2d8 [ 44.623525][ T7230] kernfs_iop_setattr+0xdc/0x374 [ 44.624375][ T7230] notify_change+0x9a4/0xc50 [ 44.625106][ T7230] do_truncate+0x198/0x210 [ 44.625865][ T7230] path_openat+0x25a0/0x2c40 [ 44.626600][ T7230] do_filp_open+0x18c/0x36c [ 44.627308][ T7230] do_sys_openat2+0x11c/0x1b4 [ 44.628146][ T7230] __arm64_sys_openat+0x120/0x158 [ 44.629009][ T7230] invoke_syscall+0x98/0x254 [ 44.629791][ T7230] el0_svc_common+0x130/0x23c [ 44.630571][ T7230] do_el0_svc+0x48/0x58 [ 44.631239][ T7230] el0_svc+0x5c/0x254 [ 44.631996][ T7230] el0t_64_sync_handler+0x84/0x12c [ 44.632895][ T7230] el0t_64_sync+0x198/0x19c [ 44.633676][ T7230] [ 44.633676][ T7230] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 44.635056][ T7230] __lock_acquire+0x1774/0x30a4 [ 44.635928][ T7230] lock_acquire+0x14c/0x2e0 [ 44.636716][ T7230] down_read+0x58/0x2f8 [ 44.637514][ T7230] kernfs_iop_getattr+0xa0/0x410 [ 44.638380][ T7230] vfs_getattr_nosec+0x254/0x38c [ 44.639245][ T7230] vfs_getattr+0x60/0x84 [ 44.640016][ T7230] loop_assign_backing_file+0x1d8/0x390 [ 44.641034][ T7230] lo_ioctl+0x1230/0x1778 [ 44.641798][ T7230] blkdev_ioctl+0x610/0xac0 [ 44.642614][ T7230] __arm64_sys_ioctl+0x14c/0x1c4 [ 44.643549][ T7230] invoke_syscall+0x98/0x254 [ 44.644435][ T7230] el0_svc_common+0x130/0x23c [ 44.645361][ T7230] do_el0_svc+0x48/0x58 [ 44.646139][ T7230] el0_svc+0x5c/0x254 [ 44.646876][ T7230] el0t_64_sync_handler+0x84/0x12c [ 44.647807][ T7230] el0t_64_sync+0x198/0x19c [ 44.648614][ T7230] [ 44.648614][ T7230] other info that might help us debug this: [ 44.648614][ T7230] [ 44.650267][ T7230] Chain exists of: [ 44.650267][ T7230] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 44.650267][ T7230] [ 44.652852][ T7230] Possible unsafe locking scenario: [ 44.652852][ T7230] [ 44.654022][ T7230] CPU0 CPU1 [ 44.654934][ T7230] ---- ---- [ 44.655739][ T7230] lock(&q->q_usage_counter(io)#26); [ 44.656654][ T7230] lock(fs_reclaim); [ 44.657712][ T7230] lock(&q->q_usage_counter(io)#26); [ 44.659047][ T7230] rlock(&root->kernfs_iattr_rwsem); [ 44.659902][ T7230] [ 44.659902][ T7230] *** DEADLOCK *** [ 44.659902][ T7230] [ 44.661177][ T7230] 3 locks held by syz.3.164/7230: [ 44.661946][ T7230] #0: ffff0000ca37f400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xd1c/0x1778 [ 44.663331][ T7230] #1: ffff0000ca23f608 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x11dc/0x1778 [ 44.664816][ T7230] #2: ffff0000ca23f640 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: lo_ioctl+0x11dc/0x1778 [ 44.666432][ T7230] [ 44.666432][ T7230] stack backtrace: [ 44.667320][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT [ 44.668698][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.670177][ T7230] Call trace: [ 44.670680][ T7230] show_stack+0x2c/0x3c (C) [ 44.671354][ T7230] __dump_stack+0x30/0x40 [ 44.671988][ T7230] dump_stack_lvl+0xd8/0x12c [ 44.672691][ T7230] dump_stack+0x1c/0x28 [ 44.673272][ T7230] print_circular_bug+0x324/0x32c [ 44.674007][ T7230] check_noncircular+0x154/0x174 [ 44.674729][ T7230] __lock_acquire+0x1774/0x30a4 [ 44.675443][ T7230] lock_acquire+0x14c/0x2e0 [ 44.676093][ T7230] down_read+0x58/0x2f8 [ 44.676687][ T7230] kernfs_iop_getattr+0xa0/0x410 [ 44.677500][ T7230] vfs_getattr_nosec+0x254/0x38c [ 44.678306][ T7230] vfs_getattr+0x60/0x84 [ 44.678971][ T7230] loop_assign_backing_file+0x1d8/0x390 [ 44.679862][ T7230] lo_ioctl+0x1230/0x1778 [ 44.680524][ T7230] blkdev_ioctl+0x610/0xac0 [ 44.681252][ T7230] __arm64_sys_ioctl+0x14c/0x1c4 [ 44.682035][ T7230] invoke_syscall+0x98/0x254 [ 44.682862][ T7230] el0_svc_common+0x130/0x23c [ 44.683668][ T7230] do_el0_svc+0x48/0x58 [ 44.684372][ T7230] el0_svc+0x5c/0x254 [ 44.685037][ T7230] el0t_64_sync_handler+0x84/0x12c [ 44.685842][ T7230] el0t_64_sync+0x198/0x19c [ 44.703718][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.703871][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.703952][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.704031][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.704226][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.710092][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.710646][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.710748][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.710926][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.711066][ T6535] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.214614][ T6552] Bluetooth: hci3: command tx timeout