last executing test programs: 11.008289917s ago: executing program 3 (id=656): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008804) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x40, 0x9, 0x68, "54bca329dc45006f8d274e5dc93f8adf147171221f76e286b8c8b0c289727d749f2ffa7c0af9d7d7ecea3dc60bf57a60d6979ebc434ce1d05d2e2a89a7a7646c258b5f677ffb68fee73389bf6e79b163796d3adf664060af15a7cfd06f3bd26a18d6495faaf39b8e"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1d}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000580)=ANY=[], &(0x7f0000000700)={0x40, 0x7, 0x2, 0xd816}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0xb, 0x2, '4m'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x13, 0x6, @random="2992522091e3"}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "0fa9"}, 0x0, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x21, 0x1}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000004c0)={0x0, 0x1, '\x00', [@pad1, @generic={0x0, 0x3, "e73cf3"}]}, 0x10) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) chdir(&(0x7f0000000280)='./file0\x00') prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r7, 0x0, 0x2}, 0x18) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x74}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) creat(0x0, 0x0) 7.2217193s ago: executing program 3 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r2, 0x0, 0x3c00) 5.818679082s ago: executing program 3 (id=683): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0xf67c}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.332660515s ago: executing program 3 (id=686): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008804) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x40, 0x9, 0x68, "54bca329dc45006f8d274e5dc93f8adf147171221f76e286b8c8b0c289727d749f2ffa7c0af9d7d7ecea3dc60bf57a60d6979ebc434ce1d05d2e2a89a7a7646c258b5f677ffb68fee73389bf6e79b163796d3adf664060af15a7cfd06f3bd26a18d6495faaf39b8e"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1d}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000580)=ANY=[], &(0x7f0000000700)={0x40, 0x7, 0x2, 0xd816}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0xb, 0x2, '4m'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x13, 0x6, @random="2992522091e3"}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "0fa9"}, 0x0, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x21, 0x1}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000004c0)={0x0, 0x1, '\x00', [@pad1, @generic={0x0, 0x3, "e73cf3"}]}, 0x10) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) chdir(&(0x7f0000000280)='./file0\x00') prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r7, 0x0, 0x2}, 0x18) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x74}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) creat(0x0, 0x0) 4.961133681s ago: executing program 0 (id=689): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001100000008000000000000000000000030000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.764028335s ago: executing program 2 (id=690): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 4.660278221s ago: executing program 4 (id=691): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 4.576064031s ago: executing program 1 (id=692): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @none, 0x1, 0x1}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32=r1], 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x163) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x12, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x0) 3.906261011s ago: executing program 4 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r2, 0x0, 0x3c00) 3.848221102s ago: executing program 0 (id=694): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)="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", 0x0, 0x6}, 0x38) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 3.44107217s ago: executing program 1 (id=695): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 3.432412657s ago: executing program 2 (id=696): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0xf67c}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.898781277s ago: executing program 2 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.83943709s ago: executing program 1 (id=698): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f0000000000)=0x9c) 2.368072195s ago: executing program 2 (id=699): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x808400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.237432348s ago: executing program 0 (id=700): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=r1, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e00000028"], 0xb4}}, 0x0) 2.215495326s ago: executing program 3 (id=701): socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c0002800600", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}}, 0x0) 2.163149767s ago: executing program 4 (id=702): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0xde, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="5ca86304000000f0099af29e96c8d42bd451039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf17b90f39e40a0389b9fc3644415bb6861be988e7af22fb4d27f3eb4a7c82698fd23a2015f954fb3e9c2b4629ec47b845de19989a6b38b0b6e26c74a680d6f04222f7fd8b490d59e132d5a52c3982a819b237f4a684bd42527f0694996bc7112", 0x0, 0xfffffffd, 0x0, 0x2, 0x0}) 1.977055421s ago: executing program 2 (id=703): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 1.656659457s ago: executing program 1 (id=704): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001100000008000000000000000000000030000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.649799946s ago: executing program 4 (id=705): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @none, 0x1, 0x1}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32=r1], 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x163) close(r2) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x12, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x0) 1.517901785s ago: executing program 0 (id=706): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.184266448s ago: executing program 1 (id=707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0xf67c}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 949.713729ms ago: executing program 4 (id=708): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 808.883184ms ago: executing program 0 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 776.354262ms ago: executing program 3 (id=710): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)="ebb5790b62b7f4a50783edf22e013de8a28738ed22ff903167e6fb6fc3a5eeeef9721f3c6f2ff2b396ef7e2e323cee5b84c880136239ba6149d142e96ae4adc161882eaae07ccc127777dfae438e7b5323ec64001a8c94ddf07579490a8e9d9aab0f6c2cf24be8517eb64410be1287a4b690e3e5e7f4f3722e70470a8b36f374f108fbe1098ede924b0491ef37f925ab5c65c5f408f2100b5a641fd32ae71636ee341a61a6e9f2a157c75c8a35e5c6afad3949309be03dd51c035ff56aa3ef58e7f556950974c14c920321d6de9cbd985b38e2f44c115e2bb68f2c5371578a13157087ebf9ff5fcd061f84c734c8a2bef42601e2a8e94dca14415e108a3c185a8843d46f6577180a0b4c6d0557d1a6d1b9e0c8ae0341596cb361e84d423c8f8eee5fd573fc9c61f9e55c23500eb3a48b93b428f724d414c6a78b41142cfb6cf9dd8e2098be3c7df26a83fb9acd05ba019db990b26b7161e5f7ad5edbb8ab13ee8ea9d4f8063f120478153a26482787a5eeed84b45ee4f9390e9edf0356c7357abc75f8d4c57e486654d5d68ad38cff7e8fd366e6b66faca4027841d88b33b456f52eb7fc0d380165dab4a01b2f5e04c32197bbe9731d0543760499881cce0312259fb2cd6186c9f3753513fb8da3a0d2e16feca4fbce14a19a2fcfecb817a7ab36a4b7a5bffe16b8f5e833d08e313a59c852ae3945c8a5b0129359e182b092185665297ea8e8a7589de710da495fb3399ee7897dee714d9c6856e408d9a9d3868d740c403ed37fde7d54de1a7dfd6604e5b80acb6bf9dc1515d6c0fecb5ebcb9ebea062d2909a782b0739688d1def1ce66ef99dacd440d2d6d3b002c95a5cca6b716c5f3695f176869e59f8dddf594b576c796f7f897717aea7385fecc371681180e2af4e4509890288dcc113f4423b9423d885b0d7fe0913896bf406e804d6106be7e47638381231be22684670687d743592fd188a115f2db54fdaaa9cdf9afd28ec3ad345b6e83f9ba14589aa472b9a2088499c155f9f863bd3f9e32801791dadd50f532da6160a52b1f06e5dec30411fc98bf97cf0a711d15bc5db7a568298de2b45422386afc786e1e8ec748603f52a095c45fe6bec35bfcdc7b7d39b79b2ef57d92f2b0bddf9f892dc3a596422fbf6f6859529dfe366da9a8507108117b746da303cbcac6e3359a9ef5c66e1cb0e0eccdae1776d4bbc30e8420c5ea3979123b5efe52e64e1979da4157fd3b7685867fc5c935c3cccaca5132e2c96d8482154b3a92945a9056d60ec393b270c3a93640064fc8f817401b6aa2f80cab3e004863d647988a724a1434318d462981eb1b9770e9b9c46879d07abedf307af51681185236109ba58d07157a45d23172e79c574321922e957d21d8be6b20d01e2f2e9bdc49180abc4dcd3a48122b31ffa76441c40764df7e64d8e703aa3a9a35b932c8f8a5f79935e525bd30ebbcbb6989c148cb2872287ce10111f73a5dca5b86de046df64a28d933f96ff86a1e1d0b990b1a9978610751570f6f76e6da4d4278d3771527586955f41ea17a3681ac61d9ce23a6e9cc707bd9768f7b20a658877315096b7597becf71a3d4e9ce807923d7609bb94d6f9f82b76f5ee31b00d1c204f993c0039cb4a2491fa86cafe02f71693a2017a58c706fa52d970d8ff16e2aae943d6e2f596f", 0x0, 0x6}, 0x38) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 694.646668ms ago: executing program 2 (id=711): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008804) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x40, 0x9, 0x68, "54bca329dc45006f8d274e5dc93f8adf147171221f76e286b8c8b0c289727d749f2ffa7c0af9d7d7ecea3dc60bf57a60d6979ebc434ce1d05d2e2a89a7a7646c258b5f677ffb68fee73389bf6e79b163796d3adf664060af15a7cfd06f3bd26a18d6495faaf39b8e"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1d}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000580)=ANY=[], &(0x7f0000000700)={0x40, 0x7, 0x2, 0xd816}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0xb, 0x2, '4m'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x13, 0x6, @random="2992522091e3"}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "0fa9"}, 0x0, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x21, 0x1}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000004c0)={0x0, 0x1, '\x00', [@pad1, @generic={0x0, 0x3, "e73cf3"}]}, 0x10) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) chdir(&(0x7f0000000280)='./file0\x00') prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setresgid(0xee00, 0x0, 0xee00) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x74}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) creat(0x0, 0x0) 341.031175ms ago: executing program 1 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r2, 0x0, 0x3c00) 168.471057ms ago: executing program 0 (id=713): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x808400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 4 (id=714): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)="d9536b9e4ec1457e", 0x8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 174.777760][ T5774] cgroup: Unknown subsys name 'net' [ 174.911522][ T5774] cgroup: Unknown subsys name 'cpuset' [ 174.930853][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 219.156022][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.162875][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.927543][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 223.661252][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.706187][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.727036][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.772165][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.784134][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.832365][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.840376][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.861569][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.873089][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.882991][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.893798][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.905063][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.916619][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.920591][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.930848][ T5806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.934990][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.944764][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.950501][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.965649][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.976037][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.987063][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.000757][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.010219][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.012585][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.035046][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.036801][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.047405][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.061071][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.071295][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.081367][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.222749][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 225.514559][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 226.029534][ T5795] Bluetooth: hci2: command tx timeout [ 226.093350][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 226.100674][ T5795] Bluetooth: hci0: command tx timeout [ 226.159891][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 226.179470][ T5795] Bluetooth: hci1: command tx timeout [ 226.199646][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 226.261156][ T5795] Bluetooth: hci3: command tx timeout [ 226.266824][ T5795] Bluetooth: hci4: command tx timeout [ 226.595831][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.604391][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.614795][ T5790] bridge_slave_0: entered allmulticast mode [ 226.625120][ T5790] bridge_slave_0: entered promiscuous mode [ 226.653175][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.661828][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.669792][ T5794] bridge_slave_0: entered allmulticast mode [ 226.678765][ T5794] bridge_slave_0: entered promiscuous mode [ 226.722395][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.730410][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.738189][ T5790] bridge_slave_1: entered allmulticast mode [ 226.747459][ T5790] bridge_slave_1: entered promiscuous mode [ 226.773179][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.781123][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.788853][ T5794] bridge_slave_1: entered allmulticast mode [ 226.800729][ T5794] bridge_slave_1: entered promiscuous mode [ 227.046225][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.067283][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.117169][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.138744][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.398499][ T5790] team0: Port device team_slave_0 added [ 227.413912][ T5794] team0: Port device team_slave_0 added [ 227.466405][ T5794] team0: Port device team_slave_1 added [ 227.550973][ T5790] team0: Port device team_slave_1 added [ 227.561929][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.570173][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.577897][ T5800] bridge_slave_0: entered allmulticast mode [ 227.587285][ T5800] bridge_slave_0: entered promiscuous mode [ 227.603929][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.615078][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.623013][ T5804] bridge_slave_0: entered allmulticast mode [ 227.632257][ T5804] bridge_slave_0: entered promiscuous mode [ 227.716722][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.724033][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.751914][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.845583][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.853873][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.861841][ T5796] bridge_slave_0: entered allmulticast mode [ 227.871214][ T5796] bridge_slave_0: entered promiscuous mode [ 227.898474][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.906559][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.914504][ T5800] bridge_slave_1: entered allmulticast mode [ 227.923512][ T5800] bridge_slave_1: entered promiscuous mode [ 227.990831][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.998847][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.006901][ T5804] bridge_slave_1: entered allmulticast mode [ 228.016349][ T5804] bridge_slave_1: entered promiscuous mode [ 228.030933][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.038339][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.065239][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.100915][ T5085] Bluetooth: hci2: command tx timeout [ 228.116780][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.124817][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.132723][ T5796] bridge_slave_1: entered allmulticast mode [ 228.147200][ T5796] bridge_slave_1: entered promiscuous mode [ 228.182392][ T5795] Bluetooth: hci0: command tx timeout [ 228.266065][ T5795] Bluetooth: hci1: command tx timeout [ 228.345306][ T5795] Bluetooth: hci4: command tx timeout [ 228.345352][ T5085] Bluetooth: hci3: command tx timeout [ 228.420696][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.427888][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.455549][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.477763][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.500496][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.575608][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.596244][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.607944][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.615486][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.642160][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.711811][ T5794] hsr_slave_0: entered promiscuous mode [ 228.721503][ T5794] hsr_slave_1: entered promiscuous mode [ 228.736926][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.758500][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.809877][ T5804] team0: Port device team_slave_0 added [ 228.921326][ T5804] team0: Port device team_slave_1 added [ 229.032287][ T5796] team0: Port device team_slave_0 added [ 229.115820][ T5800] team0: Port device team_slave_0 added [ 229.173986][ T5796] team0: Port device team_slave_1 added [ 229.193664][ T5790] hsr_slave_0: entered promiscuous mode [ 229.203246][ T5790] hsr_slave_1: entered promiscuous mode [ 229.214766][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.224396][ T5790] Cannot create hsr debugfs directory [ 229.234298][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.241695][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.268932][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.285456][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.292890][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.319370][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.338032][ T5800] team0: Port device team_slave_1 added [ 229.548808][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.556381][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.582994][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.644281][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.651608][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.678381][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.696165][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.703675][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.730147][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.745399][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.753252][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.780313][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.967832][ T5804] hsr_slave_0: entered promiscuous mode [ 229.977860][ T5804] hsr_slave_1: entered promiscuous mode [ 229.986789][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.996352][ T5804] Cannot create hsr debugfs directory [ 230.164062][ T5796] hsr_slave_0: entered promiscuous mode [ 230.173816][ T5796] hsr_slave_1: entered promiscuous mode [ 230.179896][ T5795] Bluetooth: hci2: command tx timeout [ 230.186495][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.194783][ T5796] Cannot create hsr debugfs directory [ 230.259496][ T5795] Bluetooth: hci0: command tx timeout [ 230.339445][ T5795] Bluetooth: hci1: command tx timeout [ 230.359685][ T5800] hsr_slave_0: entered promiscuous mode [ 230.372916][ T5800] hsr_slave_1: entered promiscuous mode [ 230.383158][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.391110][ T5800] Cannot create hsr debugfs directory [ 230.447001][ T5795] Bluetooth: hci3: command tx timeout [ 230.449383][ T5085] Bluetooth: hci4: command tx timeout [ 231.258838][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.425421][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.521293][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.543224][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.564170][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.597420][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.622784][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.758190][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.815132][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.897489][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.975038][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.060375][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.095048][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.186936][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.224973][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.254857][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.265830][ T5085] Bluetooth: hci2: command tx timeout [ 232.294261][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.322932][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.351195][ T5085] Bluetooth: hci0: command tx timeout [ 232.354308][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.428494][ T5085] Bluetooth: hci1: command tx timeout [ 232.429599][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.512386][ T5085] Bluetooth: hci3: command tx timeout [ 232.518053][ T5085] Bluetooth: hci4: command tx timeout [ 233.250371][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.282993][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.383523][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.421733][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.486405][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.494194][ T720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.579100][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.586952][ T720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.774523][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.807130][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.875892][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.907247][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.915037][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.966328][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.005457][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.013326][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.103668][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.111450][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.143640][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.151415][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.284561][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.324806][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.486180][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.493974][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.524188][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.532126][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.548168][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.556019][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.619737][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.627528][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.607653][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.780540][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.942681][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.120768][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.182220][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.209893][ T5794] veth0_vlan: entered promiscuous mode [ 237.382922][ T5794] veth1_vlan: entered promiscuous mode [ 237.476421][ T5804] veth0_vlan: entered promiscuous mode [ 237.662966][ T5790] veth0_vlan: entered promiscuous mode [ 237.692757][ T5804] veth1_vlan: entered promiscuous mode [ 237.822233][ T5800] veth0_vlan: entered promiscuous mode [ 237.835440][ T5790] veth1_vlan: entered promiscuous mode [ 237.847583][ T5794] veth0_macvtap: entered promiscuous mode [ 237.988476][ T5794] veth1_macvtap: entered promiscuous mode [ 238.044669][ T5800] veth1_vlan: entered promiscuous mode [ 238.094972][ T5804] veth0_macvtap: entered promiscuous mode [ 238.227036][ T5804] veth1_macvtap: entered promiscuous mode [ 238.251926][ T5790] veth0_macvtap: entered promiscuous mode [ 238.296838][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.342581][ T5790] veth1_macvtap: entered promiscuous mode [ 238.442785][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.510627][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.521676][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.537145][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.554044][ T5800] veth0_macvtap: entered promiscuous mode [ 238.615678][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.625981][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.635999][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.645311][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.679135][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.693161][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.703391][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.714265][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.729507][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.758577][ T5800] veth1_macvtap: entered promiscuous mode [ 238.823288][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.835514][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.851756][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.885036][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.896983][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.910775][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.921572][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.937611][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.008489][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.019592][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.028701][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.038151][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.071790][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.083165][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.093395][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.104518][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.114714][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.125769][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.142210][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.166696][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.176445][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.187103][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.196381][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.342821][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.355244][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.365571][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.376401][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.388801][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.400118][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.415272][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.665003][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.674911][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.684205][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.693406][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.081563][ T5796] veth0_vlan: entered promiscuous mode [ 240.184033][ T5796] veth1_vlan: entered promiscuous mode [ 240.584144][ T5796] veth0_macvtap: entered promiscuous mode [ 240.685962][ T5796] veth1_macvtap: entered promiscuous mode [ 240.973358][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.985286][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.996076][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.007153][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.017502][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.028501][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.038992][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.050048][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.068314][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.315787][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.326851][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.337473][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.348453][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.358847][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.369726][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.382074][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.393388][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.408859][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.517836][ T5796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.528493][ T5796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.541579][ T5796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.551476][ T5796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.179773][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.187904][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.361844][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.370669][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.701648][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 245.744574][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.753101][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.785311][ T4505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.794140][ T4505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.016586][ T4505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.034432][ T4505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.109892][ T4687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.118796][ T4687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.577083][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.585938][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.941049][ T720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.949444][ T720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.921167][ T5979] loop2: detected capacity change from 0 to 1024 [ 247.959374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 248.044272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 248.137195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 248.148963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 248.218590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 248.228871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 248.302827][ T5979] hfsplus: cannot replace xattr [ 248.326974][ T720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.335366][ T720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.445252][ T5973] loop1: detected capacity change from 0 to 4096 [ 248.491243][ T5973] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 248.549844][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.558248][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.843910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 248.884804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.855143][ T5973] ntfs3(loop1): Failed to read $UpCase (-4). [ 251.025618][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 251.903143][ T6017] loop4: detected capacity change from 0 to 512 [ 251.934936][ T6017] EXT4-fs: Ignoring removed oldalloc option [ 251.941882][ T6017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.981263][ T6014] loop3: detected capacity change from 0 to 2048 [ 252.023590][ T6017] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.17: corrupted in-inode xattr: invalid ea_ino [ 252.164001][ T6017] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.17: couldn't read orphan inode 15 (err -117) [ 252.284244][ T6017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.397680][ T6022] loop1: detected capacity change from 0 to 1024 [ 252.441672][ T6022] ======================================================= [ 252.441672][ T6022] WARNING: The mand mount option has been deprecated and [ 252.441672][ T6022] and is ignored by this kernel. Remove the mand [ 252.441672][ T6022] option from the mount to silence this warning. [ 252.441672][ T6022] ======================================================= [ 252.482630][ T6014] loop3: detected capacity change from 0 to 2085 [ 252.556846][ T6018] loop2: detected capacity change from 0 to 4096 [ 252.575971][ T6014] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 252.584376][ T6014] UDF-fs: Scanning with blocksize 512 failed [ 252.691502][ T6013] loop0: detected capacity change from 0 to 4096 [ 252.717704][ T6014] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 252.726164][ T6014] UDF-fs: Scanning with blocksize 1024 failed [ 252.740834][ T6013] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 252.772952][ T6022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.787606][ T6022] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.864400][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.905819][ T6014] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 252.914643][ T6014] UDF-fs: Scanning with blocksize 2048 failed [ 253.120053][ T6014] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 253.130655][ T6014] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 253.138811][ T6014] UDF-fs: Scanning with blocksize 4096 failed [ 253.145465][ T6014] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 253.208749][ T6027] loop4: detected capacity change from 0 to 16 [ 253.311953][ T6027] erofs: (device loop4): mounted with root inode @ nid 36. [ 253.937123][ T6030] loop2: detected capacity change from 0 to 256 [ 253.962903][ T6030] exfat: Deprecated parameter 'namecase' [ 253.968992][ T6030] exfat: Deprecated parameter 'utf8' [ 253.974916][ T6030] exfat: Deprecated parameter 'namecase' [ 254.324208][ T6032] loop3: detected capacity change from 0 to 4096 [ 254.335557][ T6032] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 254.420224][ T6013] ntfs3(loop0): Failed to read $UpCase (-4). [ 254.545289][ T6030] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 255.000118][ T6032] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 255.008731][ T6032] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 256.926487][ T6057] loop2: detected capacity change from 0 to 256 [ 257.133503][ T6057] exfat: Deprecated parameter 'namecase' [ 257.142489][ T6057] exfat: Deprecated parameter 'namecase' [ 260.388085][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.671063][ T6057] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 260.737772][ T6144] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 261.634563][ T6156] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 263.031225][ T6166] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 263.239793][ T6162] loop1: detected capacity change from 0 to 1024 [ 263.311592][ T6162] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 263.328229][ T6162] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 263.342290][ T6162] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 263.363219][ T6162] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.37: unexpected bad inode w/o EXT4_IGET_BAD [ 263.388759][ T6162] EXT4-fs (loop1): no journal found [ 263.394561][ T6162] EXT4-fs (loop1): can't get journal size [ 263.411652][ T6162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.488123][ T6162] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 16: comm syz.1.37: path /5/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 263.987110][ T6174] loop0: detected capacity change from 0 to 256 [ 264.027876][ T6174] exfat: Deprecated parameter 'namecase' [ 264.040999][ T6174] exfat: Deprecated parameter 'namecase' [ 264.087863][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.242738][ T6164] loop3: detected capacity change from 0 to 4096 [ 264.262494][ T6174] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 264.299122][ T6164] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 264.669572][ T6164] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 264.690035][ T6164] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 265.259987][ T6187] loop3: detected capacity change from 0 to 16 [ 265.335862][ T6187] erofs: (device loop3): mounted with root inode @ nid 36. [ 265.368973][ T6191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 266.449002][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 266.838953][ T6213] loop0: detected capacity change from 0 to 256 [ 266.842467][ T44] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 266.848244][ T6213] exfat: Deprecated parameter 'namecase' [ 266.855210][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.861446][ T6213] exfat: Deprecated parameter 'namecase' [ 266.868495][ T44] usb 2-1: Product: syz [ 266.879114][ T44] usb 2-1: Manufacturer: syz [ 266.884514][ T44] usb 2-1: SerialNumber: syz [ 266.988582][ T6213] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 267.065298][ T44] usb 2-1: config 0 descriptor?? [ 267.371690][ T44] hso 2-1:0.0: Failed to find BULK IN ep [ 267.423772][ T44] usb-storage 2-1:0.0: USB Mass Storage device detected [ 267.576729][ T6217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 267.864449][ T44] usb 2-1: USB disconnect, device number 2 [ 267.980713][ T6220] loop3: detected capacity change from 0 to 4096 [ 267.996304][ T6220] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 268.477433][ T6220] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 268.530159][ T6220] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 269.044882][ T6227] loop2: detected capacity change from 0 to 16 [ 269.105281][ T6227] erofs: (device loop2): mounted with root inode @ nid 36. [ 271.648313][ T6233] loop1: detected capacity change from 0 to 32768 [ 271.910804][ T6233] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 271.925542][ T6233] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 272.080239][ T6256] netlink: 'syz.0.73': attribute type 29 has an invalid length. [ 272.092674][ T6256] netlink: 'syz.0.73': attribute type 29 has an invalid length. [ 272.103590][ T6256] netlink: 'syz.0.73': attribute type 29 has an invalid length. [ 272.157823][ T6233] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 272.338527][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 272.463267][ T6261] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 272.500120][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 272.514491][ T44] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 272.523269][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.540936][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.551115][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.561513][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.575039][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.586552][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.043961][ T6233] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 273.084509][ T6263] loop0: detected capacity change from 0 to 4096 [ 273.182170][ T6263] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 273.384370][ T44] usb 5-1: GET_CAPABILITIES returned 2f [ 273.390500][ T44] usbtmc 5-1:16.0: can't read capabilities [ 273.483186][ T6266] loop2: detected capacity change from 0 to 16 [ 273.520137][ T6266] erofs: (device loop2): mounted with root inode @ nid 36. [ 273.940950][ T6263] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 274.017514][ T6263] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 274.512676][ T6278] binder: 6277:6278 ioctl c0306201 200003c0 returned -22 [ 274.551739][ T6269] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 54 [ 274.943561][ T6254] loop4: detected capacity change from 0 to 256 [ 275.168276][ T6254] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 276.403568][ T44] usb 5-1: USB disconnect, device number 2 [ 277.211738][ T6296] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 277.825123][ T6300] loop4: detected capacity change from 0 to 1024 [ 277.835025][ T6300] EXT4-fs: Ignoring removed orlov option [ 277.841303][ T6300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.427417][ T6305] loop1: detected capacity change from 0 to 16 [ 278.489853][ T6300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.500177][ T6305] erofs: (device loop1): mounted with root inode @ nid 36. [ 278.938264][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.456500][ T6316] 9pnet_fd: Insufficient options for proto=fd [ 280.602214][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.609019][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.764040][ T6324] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 282.013704][ T6331] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 282.064151][ T3054] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 282.229596][ T3054] usb 4-1: Using ep0 maxpacket: 8 [ 282.253922][ T3054] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 282.268711][ T3054] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.280533][ T3054] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.290771][ T3054] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.301088][ T3054] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.315179][ T3054] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.324627][ T3054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.691991][ T3054] usb 4-1: GET_CAPABILITIES returned 2f [ 282.697966][ T3054] usbtmc 4-1:16.0: can't read capabilities [ 282.959544][ T6348] loop2: detected capacity change from 0 to 16 [ 283.176079][ T6350] loop1: detected capacity change from 0 to 256 [ 283.187946][ T6350] exfat: Deprecated parameter 'namecase' [ 283.195860][ T6350] exfat: Deprecated parameter 'namecase' [ 283.228383][ T6348] erofs: (device loop2): mounted with root inode @ nid 36. [ 283.377096][ T6350] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 283.379412][ T6352] loop4: detected capacity change from 0 to 1024 [ 283.411247][ T6352] EXT4-fs: Ignoring removed orlov option [ 283.417351][ T6352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.625984][ T6357] Zero length message leads to an empty skb [ 283.658613][ T6352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.709616][ T6357] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 54 [ 283.919567][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 283.945537][ T3054] usb 4-1: USB disconnect, device number 2 [ 284.076307][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.161918][ T6375] binder: 6374:6375 ioctl c0306201 0 returned -14 [ 285.423267][ T6377] loop2: detected capacity change from 0 to 64 [ 285.801097][ T6377] capability: warning: `syz.2.116' uses deprecated v2 capabilities in a way that may be insecure [ 285.847573][ T6386] loop0: detected capacity change from 0 to 16 [ 285.898196][ T6386] erofs: (device loop0): mounted with root inode @ nid 36. [ 287.154229][ T6396] loop4: detected capacity change from 0 to 1024 [ 287.163821][ T6396] EXT4-fs: Ignoring removed orlov option [ 287.170067][ T6396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.297384][ T6399] loop3: detected capacity change from 0 to 512 [ 287.306813][ T6399] EXT4-fs: Ignoring removed oldalloc option [ 287.313647][ T6399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.396946][ T6399] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.123: corrupted in-inode xattr: invalid ea_ino [ 287.413154][ T6399] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.123: couldn't read orphan inode 15 (err -117) [ 287.416767][ T6396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.451303][ T6399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.866446][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.005299][ T3054] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 288.054343][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.190265][ T3054] usb 1-1: Using ep0 maxpacket: 8 [ 288.218341][ T3054] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 288.227210][ T3054] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.237760][ T3054] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.248015][ T3054] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.258579][ T3054] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.272882][ T3054] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.282976][ T3054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.658297][ T3054] usb 1-1: GET_CAPABILITIES returned 2f [ 288.664727][ T3054] usbtmc 1-1:16.0: can't read capabilities [ 288.763797][ T6416] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 288.874851][ T6419] loop2: detected capacity change from 0 to 16 [ 288.942096][ T6419] erofs: (device loop2): mounted with root inode @ nid 36. [ 289.320290][ T6421] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_OUT returned 54 [ 289.525747][ T3054] usb 1-1: USB disconnect, device number 2 [ 289.845299][ T6415] loop4: detected capacity change from 0 to 4096 [ 289.966904][ T6415] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 290.300423][ T6435] loop1: detected capacity change from 0 to 256 [ 290.312147][ T6435] exfat: Deprecated parameter 'namecase' [ 290.319012][ T6435] exfat: Deprecated parameter 'namecase' [ 290.670963][ T6437] loop0: detected capacity change from 0 to 256 [ 290.825013][ T6439] loop2: detected capacity change from 0 to 1024 [ 290.834655][ T6439] EXT4-fs: Ignoring removed orlov option [ 290.841104][ T6439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.886186][ T6435] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 290.933435][ T6439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.935983][ T6415] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 291.048089][ T6444] loop3: detected capacity change from 0 to 512 [ 291.050634][ T6415] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 291.119063][ T6444] EXT4-fs: Ignoring removed oldalloc option [ 291.125823][ T6444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.221926][ T6444] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.138: corrupted in-inode xattr: invalid ea_ino [ 291.305875][ T6444] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.138: couldn't read orphan inode 15 (err -117) [ 291.451458][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.530648][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.609555][ T6437] FAT-fs (loop0): Directory bread(block 64) failed [ 291.616413][ T6437] FAT-fs (loop0): Directory bread(block 65) failed [ 291.625852][ T6437] FAT-fs (loop0): Directory bread(block 66) failed [ 291.633214][ T6437] FAT-fs (loop0): Directory bread(block 67) failed [ 291.640493][ T6437] FAT-fs (loop0): Directory bread(block 68) failed [ 291.647286][ T6437] FAT-fs (loop0): Directory bread(block 69) failed [ 291.654437][ T6437] FAT-fs (loop0): Directory bread(block 70) failed [ 291.661453][ T6437] FAT-fs (loop0): Directory bread(block 71) failed [ 291.668381][ T6437] FAT-fs (loop0): Directory bread(block 72) failed [ 291.675395][ T6437] FAT-fs (loop0): Directory bread(block 73) failed [ 291.851355][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.498998][ T6457] loop3: detected capacity change from 0 to 16 [ 292.572948][ T6457] erofs: (device loop3): mounted with root inode @ nid 36. [ 293.512003][ T6471] loop1: detected capacity change from 0 to 256 [ 293.531580][ T6471] exfat: Deprecated parameter 'namecase' [ 293.538475][ T6471] exfat: Deprecated parameter 'namecase' [ 293.549636][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 293.671154][ T6471] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 293.718405][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 293.753982][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 293.762946][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.773400][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.783678][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.794065][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.807549][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 293.817254][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.333194][ T8] usb 3-1: GET_CAPABILITIES returned 2f [ 294.339137][ T8] usbtmc 3-1:16.0: can't read capabilities [ 294.799061][ T6481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 294.977052][ T6483] loop1: detected capacity change from 0 to 1024 [ 295.022292][ T6487] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 54 [ 295.030020][ T6483] EXT4-fs: Ignoring removed orlov option [ 295.036133][ T6483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.140765][ T6490] loop4: detected capacity change from 0 to 16 [ 295.156481][ T6490] erofs: (device loop4): mounted with root inode @ nid 36. [ 295.188969][ T6483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.243223][ T44] usb 3-1: USB disconnect, device number 2 [ 295.603037][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.735304][ T6510] loop0: detected capacity change from 0 to 256 [ 296.792152][ T6510] exfat: Deprecated parameter 'namecase' [ 296.799086][ T6510] exfat: Deprecated parameter 'namecase' [ 297.130190][ T6510] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 297.510033][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 297.751617][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 297.762344][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 297.773794][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 297.784178][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 297.793651][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.974742][ T44] usb 5-1: config 0 descriptor?? [ 298.194440][ T44] usb 5-1: USB disconnect, device number 3 [ 299.449557][ T5420] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 299.607725][ T5420] usb 3-1: device descriptor read/64, error -71 [ 299.849540][ T6552] loop4: detected capacity change from 0 to 256 [ 299.878445][ T5420] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 299.901891][ T6552] exfat: Deprecated parameter 'namecase' [ 299.908673][ T6552] exfat: Deprecated parameter 'namecase' [ 300.060466][ T5420] usb 3-1: device descriptor read/64, error -71 [ 300.068757][ T6552] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 300.175297][ T5420] usb usb3-port1: attempt power cycle [ 300.601732][ T5420] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 300.657380][ T5420] usb 3-1: device descriptor read/8, error -71 [ 300.901261][ T5420] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 300.982014][ T5420] usb 3-1: device descriptor read/8, error -71 [ 301.107587][ T5420] usb usb3-port1: unable to enumerate USB device [ 301.971396][ T3054] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 302.157277][ T3054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 302.167670][ T3054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 302.179284][ T3054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 302.191305][ T3054] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 302.201070][ T3054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.384472][ T3054] usb 1-1: config 0 descriptor?? [ 302.607043][ T3054] usb 1-1: USB disconnect, device number 3 [ 303.978920][ T6603] fuse: Bad value for 'fd' [ 305.724908][ T6616] loop4: detected capacity change from 0 to 512 [ 306.247081][ T6616] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.205: corrupted in-inode xattr: invalid ea_ino [ 306.384023][ T6616] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.205: couldn't read orphan inode 15 (err -117) [ 306.389733][ T5420] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 306.571883][ T6616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.637706][ T5420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 306.647999][ T5420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 306.659691][ T5420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 306.669932][ T5420] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 306.679518][ T5420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.814554][ T5420] usb 3-1: config 0 descriptor?? [ 306.860442][ T5847] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 307.008772][ T6635] fuse: Bad value for 'fd' [ 307.039036][ T5420] usb 3-1: USB disconnect, device number 7 [ 307.057637][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 307.143244][ T5847] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 307.155947][ T5847] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.166183][ T5847] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.176382][ T5847] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.187458][ T5847] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.201169][ T5847] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.210811][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.399468][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.514164][ T5847] usb 2-1: GET_CAPABILITIES returned 2f [ 307.520443][ T5847] usbtmc 2-1:16.0: can't read capabilities [ 308.078448][ T6645] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 54 [ 308.314403][ T6649] loop2: detected capacity change from 0 to 64 [ 308.457701][ T6627] loop1: detected capacity change from 0 to 256 [ 308.602174][ T6627] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 308.944189][ T6652] loop0: detected capacity change from 0 to 2048 [ 308.962667][ T6652] nilfs2: Bad value for 'cp' [ 309.390679][ T6656] loop4: detected capacity change from 0 to 1024 [ 309.508299][ T5847] usb 2-1: USB disconnect, device number 3 [ 311.019520][ T3054] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 311.187476][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.232'. [ 311.214822][ T3054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 311.225451][ T3054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 311.236785][ T3054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 311.252622][ T3054] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 311.264027][ T3054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.362327][ T3054] usb 1-1: config 0 descriptor?? [ 311.898869][ T44] usb 1-1: USB disconnect, device number 4 [ 312.072607][ T6694] loop2: detected capacity change from 0 to 1024 [ 312.110289][ T3054] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 312.279671][ T3054] usb 4-1: device descriptor read/64, error -71 [ 312.557818][ T3054] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 312.760335][ T3054] usb 4-1: device descriptor read/64, error -71 [ 312.896281][ T3054] usb usb4-port1: attempt power cycle [ 313.380054][ T3054] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 313.431894][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'. [ 313.549478][ T3054] usb 4-1: device descriptor read/8, error -71 [ 314.013793][ T3054] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 314.086784][ T3054] usb 4-1: device descriptor read/8, error -71 [ 314.240500][ T3054] usb usb4-port1: unable to enumerate USB device [ 314.919511][ T5420] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 315.089750][ T5420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 315.100096][ T5420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 315.111632][ T5420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 315.122117][ T5420] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 315.134528][ T5420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.402573][ T5420] usb 5-1: config 0 descriptor?? [ 315.637486][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.257'. [ 315.882265][ T5420] usb 5-1: USB disconnect, device number 4 [ 316.765955][ T6759] loop1: detected capacity change from 0 to 512 [ 316.927574][ T6759] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.264: corrupted in-inode xattr: invalid ea_ino [ 316.980304][ T6759] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.264: couldn't read orphan inode 15 (err -117) [ 317.005725][ T6759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.165820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 317.183595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 317.483073][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.230132][ T3054] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 318.539540][ T3054] usb 3-1: device descriptor read/64, error -71 [ 318.779501][ T3054] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 318.979620][ T3054] usb 3-1: device descriptor read/64, error -71 [ 319.093180][ T3054] usb usb3-port1: attempt power cycle [ 319.479587][ T3054] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 319.509746][ T3054] usb 3-1: device descriptor read/8, error -71 [ 319.777757][ T3054] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 319.835370][ T3054] usb 3-1: device descriptor read/8, error -71 [ 319.958893][ T3054] usb usb3-port1: unable to enumerate USB device [ 320.189774][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 320.416018][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 320.428101][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 320.440337][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 320.450597][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 320.465338][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.485391][ T6791] loop0: detected capacity change from 0 to 2048 [ 320.588907][ T44] usb 2-1: config 0 descriptor?? [ 320.632879][ T6791] loop0: detected capacity change from 0 to 2085 [ 320.832433][ T44] usb 2-1: USB disconnect, device number 4 [ 322.210705][ T6791] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 322.218844][ T6791] UDF-fs: Scanning with blocksize 512 failed [ 322.264974][ T6791] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 322.273325][ T6791] UDF-fs: Scanning with blocksize 1024 failed [ 322.330265][ T6791] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 322.338362][ T6791] UDF-fs: Scanning with blocksize 2048 failed [ 322.455368][ T6791] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 322.465964][ T6791] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 322.474164][ T6791] UDF-fs: Scanning with blocksize 4096 failed [ 322.480615][ T6791] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 322.664922][ T6799] loop3: detected capacity change from 0 to 512 [ 323.049778][ T6799] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.279: corrupted in-inode xattr: invalid ea_ino [ 323.219788][ T6799] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.279: couldn't read orphan inode 15 (err -117) [ 323.260386][ T6799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.541741][ T6813] loop4: detected capacity change from 0 to 1024 [ 323.797814][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.219888][ T5420] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 324.389748][ T3054] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 324.413134][ T5420] usb 1-1: no configurations [ 324.418220][ T5420] usb 1-1: can't read configurations, error -22 [ 324.575145][ T3054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 324.587018][ T3054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 324.598791][ T3054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 324.609469][ T3054] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 324.609901][ T5420] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 324.618740][ T3054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.746763][ T6829] loop1: detected capacity change from 0 to 2048 [ 324.781975][ T3054] usb 4-1: config 0 descriptor?? [ 324.896823][ T5420] usb 1-1: no configurations [ 324.903940][ T5420] usb 1-1: can't read configurations, error -22 [ 324.950945][ T5420] usb usb1-port1: attempt power cycle [ 325.082707][ T6829] loop1: detected capacity change from 0 to 2048 [ 325.254157][ T5847] usb 4-1: USB disconnect, device number 7 [ 325.329607][ T6829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.599622][ T5420] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 325.649966][ T5420] usb 1-1: no configurations [ 325.654866][ T5420] usb 1-1: can't read configurations, error -22 [ 325.869671][ T5420] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 325.981927][ T5420] usb 1-1: no configurations [ 325.990104][ T5420] usb 1-1: can't read configurations, error -22 [ 325.997577][ T5420] usb usb1-port1: unable to enumerate USB device [ 326.381040][ T6846] loop3: detected capacity change from 0 to 512 [ 326.470476][ T6846] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.301: corrupted in-inode xattr: invalid ea_ino [ 326.515128][ T6849] loop4: detected capacity change from 0 to 1024 [ 326.540567][ T6846] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.301: couldn't read orphan inode 15 (err -117) [ 326.655691][ T6846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.243119][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.231328][ T6866] loop1: detected capacity change from 0 to 2048 [ 328.893998][ T6866] loop1: detected capacity change from 0 to 2048 [ 329.020577][ T6877] loop3: detected capacity change from 0 to 1024 [ 329.088878][ T6866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.120947][ T6881] loop4: detected capacity change from 0 to 512 [ 329.274073][ T6881] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.316: corrupted in-inode xattr: invalid ea_ino [ 329.429563][ T6881] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.316: couldn't read orphan inode 15 (err -117) [ 329.447853][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.729159][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.683188][ T6912] loop3: detected capacity change from 0 to 2048 [ 331.832959][ T6912] loop3: detected capacity change from 0 to 2048 [ 331.955096][ T6912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.292742][ T6919] loop1: detected capacity change from 0 to 512 [ 332.350654][ T6916] loop4: detected capacity change from 0 to 1024 [ 332.377709][ T6919] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.332: corrupted in-inode xattr: invalid ea_ino [ 332.400912][ T6919] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.332: couldn't read orphan inode 15 (err -117) [ 332.416664][ T6919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.271353][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.889592][ T6949] loop2: detected capacity change from 0 to 512 [ 336.089670][ T6949] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.347: corrupted in-inode xattr: invalid ea_ino [ 336.116511][ T6948] loop0: detected capacity change from 0 to 1024 [ 336.133135][ T6950] loop3: detected capacity change from 0 to 2048 [ 336.180412][ T6949] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.347: couldn't read orphan inode 15 (err -117) [ 336.221270][ T6949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.838944][ T6948] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.346'. [ 336.939888][ T6950] loop3: detected capacity change from 0 to 2048 [ 337.009528][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.080602][ T6950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.952563][ T6974] loop2: detected capacity change from 0 to 16 [ 338.101062][ T6974] erofs: (device loop2): mounted with root inode @ nid 36. [ 339.907633][ T6992] loop2: detected capacity change from 0 to 512 [ 340.136145][ T6973] loop1: detected capacity change from 0 to 32768 [ 340.168721][ T6973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.357 (6973) [ 340.250857][ T6973] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.261776][ T6973] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 340.273305][ T6973] BTRFS info (device loop1): using free-space-tree [ 340.345405][ T6992] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.363: corrupted in-inode xattr: invalid ea_ino [ 340.500469][ T6992] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.363: couldn't read orphan inode 15 (err -117) [ 340.662474][ T6992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.943075][ T6973] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 340.944046][ T6973] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 340.955032][ T6973] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 340.980989][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.059982][ T7011] loop4: detected capacity change from 0 to 2048 [ 341.196407][ T7011] loop4: detected capacity change from 0 to 2048 [ 341.334739][ T7011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.766711][ T6973] BTRFS error (device loop1): open_ctree failed [ 341.981481][ T7026] loop3: detected capacity change from 0 to 16 [ 342.073325][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.080357][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.091942][ T7026] erofs: (device loop3): mounted with root inode @ nid 36. [ 342.600156][ T7028] loop0: detected capacity change from 0 to 2048 [ 342.609123][ T7028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.017532][ T7028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.677588][ T7047] loop2: detected capacity change from 0 to 512 [ 343.882584][ T7047] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.379: corrupted in-inode xattr: invalid ea_ino [ 343.962648][ T7047] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.379: couldn't read orphan inode 15 (err -117) [ 344.077552][ T7047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.354485][ T7052] loop1: detected capacity change from 0 to 2048 [ 344.494204][ T7052] loop1: detected capacity change from 0 to 2048 [ 344.596859][ T7052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.670386][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.090370][ T7056] loop1: detected capacity change from 0 to 16 [ 345.368649][ T7059] loop4: detected capacity change from 0 to 1024 [ 345.380236][ T6995] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 345.428444][ T7056] erofs: (device loop1): mounted with root inode @ nid 36. [ 345.529099][ T7061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 345.626191][ T6995] EXT4-fs (loop0): Remounting filesystem read-only [ 346.252566][ T7059] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.385'. [ 346.351945][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.601390][ T7067] binder: 7066:7067 ioctl c0306201 0 returned -14 [ 348.710127][ T7080] loop3: detected capacity change from 0 to 512 [ 349.092002][ T7080] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.393: corrupted in-inode xattr: invalid ea_ino [ 349.155996][ T7080] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.393: couldn't read orphan inode 15 (err -117) [ 349.267696][ T7089] loop4: detected capacity change from 0 to 16 [ 349.270321][ T7080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.289095][ T7089] erofs: (device loop4): mounted with root inode @ nid 36. [ 349.461611][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 349.463645][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 349.468308][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 349.476370][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 350.032989][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.194310][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 350.204706][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: kworker/u9:5 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 350.216008][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.226368][ T5802] Workqueue: hci4 hci_rx_work [ 350.231430][ T5802] Call Trace: [ 350.234930][ T5802] [ 350.238065][ T5802] dump_stack_lvl+0x216/0x2d0 [ 350.243125][ T5802] dump_stack+0x1e/0x30 [ 350.247608][ T5802] sysfs_create_dir_ns+0x45f/0x4c0 [ 350.253055][ T5802] kobject_add_internal+0xfe7/0x1900 [ 350.258665][ T5802] kobject_add+0x28c/0x3c0 [ 350.263445][ T5802] ? kmsan_get_metadata+0x13e/0x1c0 [ 350.269006][ T5802] device_add+0xa90/0x1ba0 [ 350.273763][ T5802] hci_conn_add_sysfs+0x161/0x2c0 [ 350.279119][ T5802] le_conn_complete_evt+0x1ae1/0x1fa0 [ 350.284885][ T5802] ? kmsan_get_metadata+0x13e/0x1c0 [ 350.290443][ T5802] hci_le_conn_complete_evt+0x15a/0x210 [ 350.296315][ T5802] hci_le_meta_evt+0x600/0x850 [ 350.301399][ T5802] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 350.307805][ T5802] hci_event_packet+0x11df/0x1c20 [ 350.313180][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 350.318803][ T5802] hci_rx_work+0x9d1/0x11f0 [ 350.323596][ T5802] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 350.329735][ T5802] ? __pfx_hci_rx_work+0x10/0x10 [ 350.334936][ T5802] ? __pfx_hci_rx_work+0x10/0x10 [ 350.340139][ T5802] process_scheduled_works+0xae0/0x1c40 [ 350.346026][ T5802] worker_thread+0xea7/0x14f0 [ 350.351026][ T5802] kthread+0x3e2/0x540 [ 350.355406][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 350.360817][ T5802] ? __pfx_kthread+0x10/0x10 [ 350.365720][ T5802] ret_from_fork+0x6d/0x90 [ 350.370438][ T5802] ? __pfx_kthread+0x10/0x10 [ 350.375379][ T5802] ret_from_fork_asm+0x1a/0x30 [ 350.380477][ T5802] [ 350.388404][ T5802] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 350.403651][ T5802] Bluetooth: hci4: failed to register connection device [ 350.595671][ T7098] binder: BINDER_SET_CONTEXT_MGR already set [ 350.602276][ T7098] binder: 7097:7098 ioctl 4018620d 20000040 returned -16 [ 350.702488][ T7098] binder: 7097:7098 ioctl c0306201 0 returned -14 [ 350.822941][ T7101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 351.420836][ T7105] process 'syz.2.401' launched './file0' with NULL argv: empty string added [ 351.516093][ T7109] loop3: detected capacity change from 0 to 16 [ 351.525690][ T7109] erofs: Unknown parameter 'GPL' [ 352.420099][ T51] Bluetooth: hci4: command tx timeout [ 352.495980][ T7109] loop3: detected capacity change from 0 to 4096 [ 352.536843][ T7109] ntfs3: Unknown parameter './bus' [ 352.544365][ T7124] loop4: detected capacity change from 0 to 1024 [ 352.701275][ T7124] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.406'. [ 353.004844][ T7126] loop2: detected capacity change from 0 to 512 [ 353.138024][ T7129] binder: BINDER_SET_CONTEXT_MGR already set [ 353.144512][ T7129] binder: 7128:7129 ioctl 4018620d 20000040 returned -16 [ 353.153945][ T7129] binder: 7128:7129 ioctl c0306201 0 returned -14 [ 353.342245][ T7126] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.408: corrupted in-inode xattr: invalid ea_ino [ 353.357531][ T7126] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.408: couldn't read orphan inode 15 (err -117) [ 353.397144][ T7135] loop1: detected capacity change from 0 to 16 [ 353.413821][ T7126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.415255][ T7135] erofs: (device loop1): mounted with root inode @ nid 36. [ 353.641906][ T7137] loop0: detected capacity change from 0 to 512 [ 354.133355][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.478238][ T7137] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.414: bad orphan inode 17 [ 354.490850][ T7137] ext4_test_bit(bit=16, block=4) = 1 [ 354.496609][ T7137] is_bad_inode(inode)=0 [ 354.502290][ T7137] NEXT_ORPHAN(inode)=0 [ 354.506631][ T7137] max_ino=32 [ 354.510167][ T7137] i_nlink=1 [ 354.515134][ T7137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.857096][ T7164] binder: BINDER_SET_CONTEXT_MGR already set [ 355.865172][ T7164] binder: 7163:7164 ioctl 4018620d 20000040 returned -16 [ 355.874868][ T7164] binder: 7163:7164 ioctl c0306201 0 returned -14 [ 356.184047][ T7167] loop4: detected capacity change from 0 to 64 [ 356.429016][ T7170] loop1: detected capacity change from 0 to 512 [ 356.736120][ T7170] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.425: corrupted in-inode xattr: invalid ea_ino [ 356.821262][ T7170] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.425: couldn't read orphan inode 15 (err -117) [ 356.847124][ T7170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.245715][ T7176] loop4: detected capacity change from 0 to 16 [ 357.356959][ T7176] erofs: (device loop4): mounted with root inode @ nid 36. [ 357.434926][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.543032][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.856870][ T7207] loop3: detected capacity change from 0 to 512 [ 360.088534][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 360.540527][ T7207] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.439: corrupted in-inode xattr: invalid ea_ino [ 360.615392][ T7207] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.439: couldn't read orphan inode 15 (err -117) [ 361.050827][ T7207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.922401][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.776568][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 363.931396][ T7258] binder: 7253:7258 ioctl c0306201 0 returned -14 [ 364.610611][ T7271] loop0: detected capacity change from 0 to 512 [ 365.034497][ T7282] loop1: detected capacity change from 0 to 16 [ 365.074161][ T7271] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.463: corrupted in-inode xattr: invalid ea_ino [ 365.115438][ T7271] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.463: couldn't read orphan inode 15 (err -117) [ 365.133211][ T7282] erofs: Unknown parameter 'GPL' [ 365.140907][ T7271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.523132][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.641299][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'. [ 366.621428][ T7299] capability: warning: `syz.0.474' uses 32-bit capabilities (legacy support in use) [ 366.671194][ T7282] loop1: detected capacity change from 0 to 4096 [ 366.685296][ T7282] ntfs3: Unknown parameter './bus' [ 366.862426][ T7301] loop4: detected capacity change from 0 to 128 [ 366.906245][ T7301] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 366.996809][ T7305] loop2: detected capacity change from 0 to 64 [ 367.020572][ T7301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.927205][ T7311] loop4: detected capacity change from 0 to 512 [ 368.053598][ T7311] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.480: corrupted in-inode xattr: invalid ea_ino [ 368.150048][ T7311] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.480: couldn't read orphan inode 15 (err -117) [ 368.196397][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 368.215582][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 368.246358][ T7311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.040342][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.705661][ T7322] loop2: detected capacity change from 0 to 4096 [ 370.011917][ T7322] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 370.867726][ T7343] loop0: detected capacity change from 0 to 64 [ 372.251416][ T7357] loop2: detected capacity change from 0 to 512 [ 372.502668][ T7357] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.496: corrupted in-inode xattr: invalid ea_ino [ 372.557463][ T7357] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.496: couldn't read orphan inode 15 (err -117) [ 372.576926][ T7357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.828078][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.877875][ T7367] loop0: detected capacity change from 0 to 1024 [ 374.885612][ T7379] loop2: detected capacity change from 0 to 4096 [ 374.919880][ T7379] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 375.634905][ T7395] loop1: detected capacity change from 0 to 4096 [ 375.668983][ T7395] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 375.695454][ T7401] loop0: detected capacity change from 0 to 1024 [ 376.361417][ T7410] 9pnet_fd: Insufficient options for proto=fd [ 376.646564][ T7395] ntfs3(loop1): failed to convert "c46c" to iso8859-4 [ 377.831618][ T7433] loop3: detected capacity change from 0 to 1024 [ 378.385692][ T7438] loop0: detected capacity change from 0 to 512 [ 378.554294][ T7438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.567874][ T7438] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.531609][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.623466][ T7442] loop4: detected capacity change from 0 to 4096 [ 379.640336][ T7436] loop1: detected capacity change from 0 to 4096 [ 379.684853][ T7436] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 379.694994][ T7442] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 379.961840][ T7457] 9pnet_fd: Insufficient options for proto=fd [ 380.166054][ T7453] loop3: detected capacity change from 0 to 4096 [ 380.215633][ T7453] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 381.714265][ T7468] loop2: detected capacity change from 0 to 1024 [ 383.371529][ T7496] 9pnet_fd: Insufficient options for proto=fd [ 383.378584][ T3054] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 383.577573][ T3054] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 383.587361][ T3054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.595847][ T3054] usb 4-1: Product: syz [ 383.600671][ T3054] usb 4-1: Manufacturer: syz [ 383.610818][ T3054] usb 4-1: SerialNumber: syz [ 383.689589][ T3054] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 383.917940][ T44] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 384.101324][ T7491] loop4: detected capacity change from 0 to 4096 [ 384.187236][ T7491] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 384.589989][ T3054] usb 4-1: USB disconnect, device number 8 [ 384.995728][ T44] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 385.004185][ T44] ath9k_htc: Failed to initialize the device [ 385.048594][ T7500] loop1: detected capacity change from 0 to 4096 [ 385.086820][ T7500] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 385.089937][ T3054] usb 4-1: ath9k_htc: USB layer deinitialized [ 386.322320][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 386.332431][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 386.343436][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 386.353796][ T51] Workqueue: hci0 hci_rx_work [ 386.358829][ T51] Call Trace: [ 386.362333][ T51] [ 386.365470][ T51] dump_stack_lvl+0x216/0x2d0 [ 386.370507][ T51] dump_stack+0x1e/0x30 [ 386.374995][ T51] sysfs_create_dir_ns+0x45f/0x4c0 [ 386.380435][ T51] kobject_add_internal+0xfe7/0x1900 [ 386.386120][ T51] kobject_add+0x28c/0x3c0 [ 386.390887][ T51] ? kmsan_get_metadata+0x13e/0x1c0 [ 386.396531][ T51] device_add+0xa90/0x1ba0 [ 386.401275][ T51] hci_conn_add_sysfs+0x161/0x2c0 [ 386.406704][ T51] le_conn_complete_evt+0x1ae1/0x1fa0 [ 386.412422][ T51] ? kmsan_get_metadata+0x13e/0x1c0 [ 386.417980][ T51] hci_le_conn_complete_evt+0x15a/0x210 [ 386.423855][ T51] hci_le_meta_evt+0x600/0x850 [ 386.429014][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 386.435413][ T51] hci_event_packet+0x11df/0x1c20 [ 386.440804][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 386.446450][ T51] hci_rx_work+0x9d1/0x11f0 [ 386.451291][ T51] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 386.457486][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 386.463169][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 386.468511][ T51] process_scheduled_works+0xae0/0x1c40 [ 386.474542][ T51] worker_thread+0xea7/0x14f0 [ 386.479579][ T51] kthread+0x3e2/0x540 [ 386.483974][ T51] ? __pfx_worker_thread+0x10/0x10 [ 386.489515][ T51] ? __pfx_kthread+0x10/0x10 [ 386.494446][ T51] ret_from_fork+0x6d/0x90 [ 386.499217][ T51] ? __pfx_kthread+0x10/0x10 [ 386.504146][ T51] ret_from_fork_asm+0x1a/0x30 [ 386.509251][ T51] [ 386.518843][ T51] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 386.536058][ T51] Bluetooth: hci0: failed to register connection device [ 386.832837][ T7518] loop2: detected capacity change from 0 to 128 [ 386.942550][ T7518] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 387.675726][ T7518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.770956][ T7533] 9pnet_fd: Insufficient options for proto=fd [ 387.969741][ T5420] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 388.201888][ T5420] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 388.211645][ T5420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.220126][ T5420] usb 2-1: Product: syz [ 388.224729][ T5420] usb 2-1: Manufacturer: syz [ 388.229783][ T5420] usb 2-1: SerialNumber: syz [ 388.319899][ T5420] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 388.583037][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 388.677842][ T5847] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 389.058630][ T44] usb 2-1: USB disconnect, device number 5 [ 389.165833][ T7528] loop4: detected capacity change from 0 to 4096 [ 389.187292][ T7528] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 389.248781][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 389.258853][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: kworker/u9:5 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 389.270026][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 389.280370][ T5802] Workqueue: hci3 hci_rx_work [ 389.285354][ T5802] Call Trace: [ 389.288842][ T5802] [ 389.291970][ T5802] dump_stack_lvl+0x216/0x2d0 [ 389.296979][ T5802] dump_stack+0x1e/0x30 [ 389.301454][ T5802] sysfs_create_dir_ns+0x45f/0x4c0 [ 389.306879][ T5802] kobject_add_internal+0xfe7/0x1900 [ 389.312551][ T5802] kobject_add+0x28c/0x3c0 [ 389.317301][ T5802] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.322828][ T5802] device_add+0xa90/0x1ba0 [ 389.327565][ T5802] hci_conn_add_sysfs+0x161/0x2c0 [ 389.332903][ T5802] le_conn_complete_evt+0x1ae1/0x1fa0 [ 389.338565][ T5802] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.344187][ T5802] hci_le_conn_complete_evt+0x15a/0x210 [ 389.350019][ T5802] hci_le_meta_evt+0x600/0x850 [ 389.355043][ T5802] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 389.361398][ T5802] hci_event_packet+0x11df/0x1c20 [ 389.366841][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 389.372451][ T5802] hci_rx_work+0x9d1/0x11f0 [ 389.377294][ T5802] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 389.383469][ T5802] ? __pfx_hci_rx_work+0x10/0x10 [ 389.388727][ T5802] ? __pfx_hci_rx_work+0x10/0x10 [ 389.393957][ T5802] process_scheduled_works+0xae0/0x1c40 [ 389.399864][ T5802] worker_thread+0xea7/0x14f0 [ 389.404865][ T5802] kthread+0x3e2/0x540 [ 389.409225][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 389.414640][ T5802] ? __pfx_kthread+0x10/0x10 [ 389.419541][ T5802] ret_from_fork+0x6d/0x90 [ 389.424223][ T5802] ? __pfx_kthread+0x10/0x10 [ 389.429114][ T5802] ret_from_fork_asm+0x1a/0x30 [ 389.434218][ T5802] [ 389.443799][ T5802] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 389.460242][ T5802] Bluetooth: hci3: failed to register connection device [ 389.818989][ T5847] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 389.826803][ T5847] ath9k_htc: Failed to initialize the device [ 389.850355][ T44] usb 2-1: ath9k_htc: USB layer deinitialized [ 390.536314][ T7560] loop2: detected capacity change from 0 to 128 [ 390.572885][ T7560] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 390.632294][ T7560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.330659][ T7571] 9pnet_fd: Insufficient options for proto=fd [ 391.540168][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 392.071487][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 392.081375][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 392.089571][ T5847] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 392.092351][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 392.092457][ T51] Workqueue: hci1 hci_rx_work [ 392.115314][ T51] Call Trace: [ 392.118785][ T51] [ 392.122077][ T51] dump_stack_lvl+0x216/0x2d0 [ 392.127070][ T51] dump_stack+0x1e/0x30 [ 392.131520][ T51] sysfs_create_dir_ns+0x45f/0x4c0 [ 392.136931][ T51] kobject_add_internal+0xfe7/0x1900 [ 392.142521][ T51] kobject_add+0x28c/0x3c0 [ 392.147303][ T51] ? kmsan_get_metadata+0x13e/0x1c0 [ 392.152823][ T51] device_add+0xa90/0x1ba0 [ 392.157529][ T51] hci_conn_add_sysfs+0x161/0x2c0 [ 392.162847][ T51] le_conn_complete_evt+0x1ae1/0x1fa0 [ 392.168564][ T51] ? kmsan_get_metadata+0x13e/0x1c0 [ 392.174132][ T51] hci_le_conn_complete_evt+0x15a/0x210 [ 392.180080][ T51] hci_le_meta_evt+0x600/0x850 [ 392.185115][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 392.191488][ T51] hci_event_packet+0x11df/0x1c20 [ 392.196823][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 392.202914][ T51] hci_rx_work+0x9d1/0x11f0 [ 392.207679][ T51] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 392.213802][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 392.219012][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 392.224237][ T51] process_scheduled_works+0xae0/0x1c40 [ 392.230264][ T51] worker_thread+0xea7/0x14f0 [ 392.235412][ T51] kthread+0x3e2/0x540 [ 392.239786][ T51] ? __pfx_worker_thread+0x10/0x10 [ 392.245225][ T51] ? __pfx_kthread+0x10/0x10 [ 392.250116][ T51] ret_from_fork+0x6d/0x90 [ 392.254805][ T51] ? __pfx_kthread+0x10/0x10 [ 392.259688][ T51] ret_from_fork_asm+0x1a/0x30 [ 392.264753][ T51] [ 392.274183][ T51] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 392.294288][ T51] Bluetooth: hci1: failed to register connection device [ 392.532562][ T7585] netlink: 72 bytes leftover after parsing attributes in process `syz.4.588'. [ 392.814988][ T5847] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 392.824987][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.833782][ T5847] usb 2-1: Product: syz [ 392.838201][ T5847] usb 2-1: Manufacturer: syz [ 392.843226][ T5847] usb 2-1: SerialNumber: syz [ 392.927977][ T5847] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 393.109622][ T5420] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 393.141424][ T7587] loop2: detected capacity change from 0 to 4096 [ 393.455369][ T7587] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 393.496082][ T5847] usb 2-1: USB disconnect, device number 6 [ 393.818010][ T7597] loop0: detected capacity change from 0 to 128 [ 393.909958][ T7597] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 393.967935][ T7597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.210478][ T5420] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 394.218247][ T5420] ath9k_htc: Failed to initialize the device [ 394.251203][ T5847] usb 2-1: ath9k_htc: USB layer deinitialized [ 394.339775][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 394.877637][ T7609] loop1: detected capacity change from 0 to 4096 [ 394.894632][ T7609] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 395.053898][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 395.065666][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: kworker/u9:5 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 395.076858][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.087169][ T5802] Workqueue: hci2 hci_rx_work [ 395.092145][ T5802] Call Trace: [ 395.095602][ T5802] [ 395.098710][ T5802] dump_stack_lvl+0x216/0x2d0 [ 395.103695][ T5802] dump_stack+0x1e/0x30 [ 395.108234][ T5802] sysfs_create_dir_ns+0x45f/0x4c0 [ 395.113763][ T5802] kobject_add_internal+0xfe7/0x1900 [ 395.119353][ T5802] kobject_add+0x28c/0x3c0 [ 395.124134][ T5802] ? kmsan_get_metadata+0x13e/0x1c0 [ 395.129677][ T5802] device_add+0xa90/0x1ba0 [ 395.134410][ T5802] hci_conn_add_sysfs+0x161/0x2c0 [ 395.139737][ T5802] le_conn_complete_evt+0x1ae1/0x1fa0 [ 395.145391][ T5802] ? kmsan_get_metadata+0x13e/0x1c0 [ 395.150910][ T5802] hci_le_conn_complete_evt+0x15a/0x210 [ 395.156788][ T5802] hci_le_meta_evt+0x600/0x850 [ 395.161838][ T5802] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 395.168204][ T5802] hci_event_packet+0x11df/0x1c20 [ 395.173619][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 395.179195][ T5802] hci_rx_work+0x9d1/0x11f0 [ 395.183969][ T5802] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 395.190115][ T5802] ? __pfx_hci_rx_work+0x10/0x10 [ 395.195351][ T5802] ? __pfx_hci_rx_work+0x10/0x10 [ 395.200633][ T5802] process_scheduled_works+0xae0/0x1c40 [ 395.206503][ T5802] worker_thread+0xea7/0x14f0 [ 395.211505][ T5802] kthread+0x3e2/0x540 [ 395.215969][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 395.221398][ T5802] ? __pfx_kthread+0x10/0x10 [ 395.226337][ T5802] ret_from_fork+0x6d/0x90 [ 395.231014][ T5802] ? __pfx_kthread+0x10/0x10 [ 395.235905][ T5802] ret_from_fork_asm+0x1a/0x30 [ 395.241007][ T5802] [ 395.244894][ T5802] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 395.262296][ T5802] Bluetooth: hci2: failed to register connection device [ 395.672003][ T7615] tun0: tun_chr_ioctl cmd 1076925497 [ 395.807503][ T7619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 395.815460][ T7619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 395.846316][ T7619] hsr_slave_0: left promiscuous mode [ 395.969747][ T7619] hsr_slave_1: left promiscuous mode [ 397.185609][ T7636] loop2: detected capacity change from 0 to 128 [ 397.264320][ T7636] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 397.290811][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 397.312008][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 397.394892][ T7636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.519616][ T44] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 397.529131][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.538157][ T44] usb 2-1: Product: syz [ 397.542854][ T44] usb 2-1: Manufacturer: syz [ 397.547818][ T44] usb 2-1: SerialNumber: syz [ 397.683512][ T44] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 397.847747][ T3054] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 397.985215][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 399.625363][ T7631] loop4: detected capacity change from 0 to 4096 [ 400.222921][ T3054] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 400.268169][ T3054] ath9k_htc: Failed to initialize the device [ 402.013580][ T7649] loop1: detected capacity change from 0 to 256 [ 402.099785][ T7649] vfat: Unknown parameter '‹ni_xlate' [ 403.476396][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.483214][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.427152][ T44] usb 2-1: USB disconnect, device number 7 [ 405.476412][ T44] usb 2-1: ath9k_htc: USB layer deinitialized [ 405.520836][ T7655] loop2: detected capacity change from 0 to 4096 [ 405.709008][ T7655] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 406.058398][ T7668] loop4: detected capacity change from 0 to 128 [ 406.217338][ T7668] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 406.360178][ T7668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.877277][ T5802] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 407.920089][ T7693] loop1: detected capacity change from 0 to 16 [ 407.928772][ T7693] erofs: Unknown parameter 'GPL' [ 408.846428][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 408.856034][ T7704] netlink: 92 bytes leftover after parsing attributes in process `syz.2.641'. [ 408.865531][ T7704] vlan0: entered allmulticast mode [ 408.871096][ T7704] veth0_vlan: entered allmulticast mode [ 409.060809][ T7693] loop1: detected capacity change from 0 to 4096 [ 409.070216][ T7693] ntfs3: Unknown parameter './bus' [ 409.353225][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.642'. [ 409.362662][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 410.917469][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.655'. [ 410.927734][ T7739] netlink: 92 bytes leftover after parsing attributes in process `syz.4.655'. [ 410.937879][ T7739] vlan0: entered allmulticast mode [ 410.943473][ T7739] veth0_vlan: entered allmulticast mode [ 411.404266][ T7746] loop2: detected capacity change from 0 to 16 [ 411.422165][ T7746] erofs: Unknown parameter 'GPL' [ 411.889949][ T44] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 412.027645][ T7750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.659'. [ 412.038239][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 412.101776][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 412.122345][ T44] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 412.131640][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 412.142001][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 412.152264][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 412.162697][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.176191][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 412.186889][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.772688][ T44] usb 4-1: GET_CAPABILITIES returned 0 [ 412.778727][ T44] usbtmc 4-1:16.0: can't read capabilities [ 413.542436][ T7773] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 54 [ 413.611591][ T7775] loop2: detected capacity change from 0 to 1024 [ 413.624890][ T7773] loop3: detected capacity change from 0 to 256 [ 413.874223][ T7773] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 414.269664][ T7784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.669'. [ 414.279048][ T7784] netlink: 92 bytes leftover after parsing attributes in process `syz.4.669'. [ 414.584411][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.673'. [ 414.593804][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 414.900882][ T44] usb 4-1: USB disconnect, device number 9 [ 416.597608][ T7814] loop0: detected capacity change from 0 to 1024 [ 417.192870][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 417.202504][ T7825] netlink: 92 bytes leftover after parsing attributes in process `syz.2.685'. [ 417.241097][ T7823] netlink: 'syz.4.688': attribute type 15 has an invalid length. [ 417.249473][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 417.422014][ T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 417.619819][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 417.678446][ T44] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 417.687159][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.697416][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.707628][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.718025][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.731954][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 417.746758][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.090001][ T44] usb 4-1: GET_CAPABILITIES returned 0 [ 418.096151][ T44] usbtmc 4-1:16.0: can't read capabilities [ 418.702531][ T7843] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 54 [ 418.844424][ T7843] loop3: detected capacity change from 0 to 256 [ 419.033178][ T7843] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 419.740281][ T44] usb 4-1: USB disconnect, device number 10 [ 419.885122][ T7856] loop2: detected capacity change from 0 to 1024 [ 420.175212][ T7858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.700'. [ 420.184798][ T7858] netlink: 52 bytes leftover after parsing attributes in process `syz.0.700'. [ 420.197826][ T7858] vlan0: entered allmulticast mode [ 420.203465][ T7858] veth0_vlan: entered allmulticast mode [ 420.697123][ T7860] netlink: 'syz.3.701': attribute type 15 has an invalid length. [ 420.708230][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 421.858774][ T44] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 422.059569][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 422.084928][ T44] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 422.093860][ T44] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.104370][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.114572][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.125247][ T44] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.144795][ T44] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 422.156030][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.315740][ T7888] ===================================================== [ 422.323186][ T7888] BUG: KMSAN: uninit-value in nr_route_frame+0x4bb/0xfe0 [ 422.330700][ T7888] nr_route_frame+0x4bb/0xfe0 [ 422.335626][ T7888] nr_xmit+0x5a/0x1c0 [ 422.340132][ T7888] dev_hard_start_xmit+0x247/0xa20 [ 422.345502][ T7888] __dev_queue_xmit+0x3562/0x56d0 [ 422.350884][ T7888] raw_sendmsg+0x64e/0xc10 [ 422.355585][ T7888] ieee802154_sock_sendmsg+0x96/0xd0 [ 422.361293][ T7888] __sock_sendmsg+0x30f/0x380 [ 422.366261][ T7888] ____sys_sendmsg+0x877/0xb60 [ 422.371428][ T7888] ___sys_sendmsg+0x28d/0x3c0 [ 422.376336][ T7888] __sys_sendmsg+0x252/0x3c0 [ 422.381409][ T7888] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 422.387136][ T7888] ia32_sys_call+0x3aac/0x40d0 [ 422.392316][ T7888] __do_fast_syscall_32+0xb0/0x110 [ 422.397674][ T7888] do_fast_syscall_32+0x38/0x80 [ 422.402955][ T7888] do_SYSENTER_32+0x1f/0x30 [ 422.407750][ T7888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.414444][ T7888] [ 422.416875][ T7888] Uninit was created at: [ 422.421499][ T7888] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 422.427655][ T7888] kmalloc_reserve+0x13d/0x4a0 [ 422.432812][ T7888] __alloc_skb+0x363/0x7b0 [ 422.437443][ T7888] alloc_skb_with_frags+0xc8/0xd00 [ 422.438762][ T44] usb 3-1: GET_CAPABILITIES returned 11 [ 422.442903][ T7888] sock_alloc_send_pskb+0xa81/0xbf0 [ 422.454010][ T7888] raw_sendmsg+0x367/0xc10 [ 422.456828][ T44] usbtmc 3-1:16.0: can't read capabilities [ 422.458571][ T7888] ieee802154_sock_sendmsg+0x96/0xd0 [ 422.470615][ T7888] __sock_sendmsg+0x30f/0x380 [ 422.475623][ T7888] ____sys_sendmsg+0x877/0xb60 [ 422.480805][ T7888] ___sys_sendmsg+0x28d/0x3c0 [ 422.485714][ T7888] __sys_sendmsg+0x252/0x3c0 [ 422.490645][ T7888] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 422.496364][ T7888] ia32_sys_call+0x3aac/0x40d0 [ 422.501591][ T7888] __do_fast_syscall_32+0xb0/0x110 [ 422.506957][ T7888] do_fast_syscall_32+0x38/0x80 [ 422.512187][ T7888] do_SYSENTER_32+0x1f/0x30 [ 422.516924][ T7888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.523627][ T7888] [ 422.526069][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: syz.4.714 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 422.537268][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.547705][ T7888] ===================================================== [ 422.554893][ T7888] Disabling lock debugging due to kernel taint [ 422.561329][ T7888] Kernel panic - not syncing: kmsan.panic set ... [ 422.567911][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: syz.4.714 Tainted: G B 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 422.580302][ T7888] Tainted: [B]=BAD_PAGE [ 422.584597][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.594816][ T7888] Call Trace: [ 422.598229][ T7888] [ 422.601282][ T7888] dump_stack_lvl+0x216/0x2d0 [ 422.606203][ T7888] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.612287][ T7888] dump_stack+0x1e/0x30 [ 422.616679][ T7888] panic+0x4e2/0xcf0 [ 422.620830][ T7888] ? kmsan_get_metadata+0x41/0x1c0 [ 422.626301][ T7888] kmsan_report+0x2c7/0x2d0 [ 422.631048][ T7888] ? kmsan_internal_poison_memory+0x7d/0x90 [ 422.637191][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.642632][ T7888] ? kmsan_internal_poison_memory+0x49/0x90 [ 422.648840][ T7888] ? kmsan_slab_alloc+0xdf/0x160 [ 422.654195][ T7888] ? __msan_warning+0x95/0x120 [ 422.659197][ T7888] ? nr_route_frame+0x4bb/0xfe0 [ 422.664402][ T7888] ? nr_xmit+0x5a/0x1c0 [ 422.668754][ T7888] ? dev_hard_start_xmit+0x247/0xa20 [ 422.674451][ T7888] ? __dev_queue_xmit+0x3562/0x56d0 [ 422.679869][ T7888] ? raw_sendmsg+0x64e/0xc10 [ 422.684660][ T7888] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 422.690351][ T7888] ? __sock_sendmsg+0x30f/0x380 [ 422.695397][ T7888] ? ____sys_sendmsg+0x877/0xb60 [ 422.700576][ T7888] ? ___sys_sendmsg+0x28d/0x3c0 [ 422.705640][ T7888] ? __sys_sendmsg+0x252/0x3c0 [ 422.710615][ T7888] ? __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 422.716571][ T7888] ? ia32_sys_call+0x3aac/0x40d0 [ 422.721751][ T7888] ? __do_fast_syscall_32+0xb0/0x110 [ 422.727342][ T7888] ? do_fast_syscall_32+0x38/0x80 [ 422.732634][ T7888] ? do_SYSENTER_32+0x1f/0x30 [ 422.737544][ T7888] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.744415][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.749944][ T7888] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.756005][ T7888] ? kmem_cache_alloc_node_noprof+0x70/0xb80 [ 422.762242][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.767703][ T7888] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.773783][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.779223][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.784695][ T7888] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.790760][ T7888] ? __rcu_read_unlock+0x7b/0xe0 [ 422.795918][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.801367][ T7888] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.807445][ T7888] __msan_warning+0x95/0x120 [ 422.812262][ T7888] nr_route_frame+0x4bb/0xfe0 [ 422.817254][ T7888] ? validate_xmit_xfrm+0x8b/0x1bc0 [ 422.822793][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.828255][ T7888] nr_xmit+0x5a/0x1c0 [ 422.832451][ T7888] ? __pfx_nr_xmit+0x10/0x10 [ 422.837235][ T7888] dev_hard_start_xmit+0x247/0xa20 [ 422.842588][ T7888] __dev_queue_xmit+0x3562/0x56d0 [ 422.847833][ T7888] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.853997][ T7888] ? _copy_from_iter+0x9ae/0x2b00 [ 422.859327][ T7888] ? __dev_queue_xmit+0x355/0x56d0 [ 422.864694][ T7888] raw_sendmsg+0x64e/0xc10 [ 422.869327][ T7888] ? __pfx_raw_sendmsg+0x10/0x10 [ 422.874475][ T7888] ieee802154_sock_sendmsg+0x96/0xd0 [ 422.879979][ T7888] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 422.886255][ T7888] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 422.892451][ T7888] __sock_sendmsg+0x30f/0x380 [ 422.897339][ T7888] ____sys_sendmsg+0x877/0xb60 [ 422.902322][ T7888] ___sys_sendmsg+0x28d/0x3c0 [ 422.907190][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.912606][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.918046][ T7888] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.924079][ T7888] ? __rcu_read_unlock+0x7b/0xe0 [ 422.929206][ T7888] ? __fget_files+0x4f5/0x5c0 [ 422.934086][ T7888] ? kmsan_get_metadata+0x13e/0x1c0 [ 422.939499][ T7888] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.945528][ T7888] __sys_sendmsg+0x252/0x3c0 [ 422.950331][ T7888] ? perf_mmap+0x1310/0x28d0 [ 422.955119][ T7888] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 422.960805][ T7888] ia32_sys_call+0x3aac/0x40d0 [ 422.965788][ T7888] __do_fast_syscall_32+0xb0/0x110 [ 422.971124][ T7888] ? irqentry_exit+0x16/0x60 [ 422.975908][ T7888] do_fast_syscall_32+0x38/0x80 [ 422.980967][ T7888] do_SYSENTER_32+0x1f/0x30 [ 422.985683][ T7888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.992231][ T7888] RIP: 0023:0xf7fd4579 [ 422.996451][ T7888] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 423.016275][ T7888] RSP: 002b:00000000f575655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 423.024927][ T7888] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000200 [ 423.033069][ T7888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.041209][ T7888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.049331][ T7888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 423.057447][ T7888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.065582][ T7888] [ 423.070877][ T7888] Kernel Offset: disabled [ 423.075266][ T7888] Rebooting in 86400 seconds..