last executing test programs: 29.048562143s ago: executing program 4 (id=2838): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffffffd9}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 28.046695625s ago: executing program 4 (id=2848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) 27.795744858s ago: executing program 4 (id=2851): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000500)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x5, 0x5, 0x60, @mcast1, @remote, 0x1, 0x80, 0x6, 0x5}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x40000100) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000250000000003000000eba6ce84807c5da511de207fec9608f026e728326236f2da7b2721b6"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) sendto$packet(r0, &(0x7f0000000000)="003400000081003400000081f360705eb6710f1d4d38a830440488fb", 0x1c, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001c0016801800018014000b000000e7ffffffffffffff00000000000008000d"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xfc, 0xbe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x8000, 0x80000001, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x2, 0x2, {{0x18, 0x4, 0x2, 0x19, 0x60, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x2b, 0xc9, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @loopback, @local]}, @ssrr={0x89, 0xf, 0xb2, [@empty, @private=0xa010101, @multicast2]}, @cipso={0x86, 0x6, 0x1}, @noop, @timestamp={0x44, 0x8, 0x10, 0x0, 0x9, [0xfffffffc]}]}}}}}) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) 27.092797199s ago: executing program 4 (id=2855): syz_clone(0x26180200, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 26.897818327s ago: executing program 4 (id=2857): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000f80)="990e0c0eadc3fb46ba6b74c1b7707224ccfcd08e2e784324433c7fb152c89305f6cabd7938862e09a185cf4f06335008ee96b94e4e7d77591cd4d001524e1c8b7e8eff6132dff8bb6fb86532ceac76c39f2f19b9a55957ba8d6ae96a6f73624a4918af718cbb9732e5eb58c13a976cfbce791d3bb06871722c5dadbf3fa9a151d1", 0x81}], 0x1}}], 0x1, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80004700) 26.443324542s ago: executing program 4 (id=2861): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xffffff00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000ae00)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f000000adc0), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) 8.27696241s ago: executing program 1 (id=2940): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x300048c1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) getdents64(0xffffffffffffffff, &(0x7f000001c0c0)=""/56, 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0xc0585604, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/102383, 0x18fef}, {0x0}], 0x2, 0x0, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r5, 0x12, 0x0, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"/305], 0x21c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0) mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x2032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) 4.880971682s ago: executing program 2 (id=2954): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=bp850,umask=00000000000000000000011,iocharset=koi8-u,errors=continue,umask=00000000000000000425072,iocharset=macroman,errors=remount-ro,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp852,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6f626a5f757365723d402f2e247d2c212c646f6e745f6d6561737572652c646566636f6e746578743d73797361646d5f752c7365636c6162656c2c61707072616973652c7375626a5f757365723d2b5ef22d472c00"], 0x5, 0x1510, &(0x7f0000002280)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000017c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB='iocharset=cp857,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c6e616d65636173653d312c646973636172642c666d61736b3d30303030303030303030303030303030303030303030342c757466382c696f636861727365743d63703737352c6e616d65636173653d312c696f636861727365743d69736f383835392d372c696f636861727365743d63703836392c00057f176dfea6f567fb2cd50c072d3e1328f3f5f3ebef1473155480f8a10dfd03b9c7ace76b9cbd3df4541cf369f1e44ff87f6eda91c680cb3b968f2f81cb585e"], 0x1, 0x1509, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 4.480275055s ago: executing program 2 (id=2957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000d400000010000000350000000000000095000000000000005727f060e0b274e73dbd0f85d0cd2a1fc5c546297f000000d870402345f4cd32986892c237bec9e7604d0ffcf86e2f89820d233697b0f0a23c7aa27429916b566f48ced9dba83f1d32743dfadedcb674e0a75cacbbc0df8d43627b0bacfed05f3df0f47d5114c516c44048712b753711651d760ccfd477785226b6e714aaa5c94145e2c8061d1b877a4831fc946568a845c36344c25056aecc0d902c9fc6b03e0f5d7d28"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) 4.413751864s ago: executing program 1 (id=2958): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffeed) 4.134839063s ago: executing program 1 (id=2959): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06000d"], 0x9) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aa4000"/18, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r4, 0x8401}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r5 = syz_io_uring_setup(0x24f9, &(0x7f0000000080), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc4424b61c9f5fc7}}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.087868109s ago: executing program 2 (id=2961): creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, &(0x7f0000001080)) 4.012625194s ago: executing program 3 (id=2962): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) 3.932668s ago: executing program 2 (id=2963): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001500)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 3.837003177s ago: executing program 0 (id=2964): socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000500), 0x4) unshare(0x26020480) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\a'], 0xd) 2.707998866s ago: executing program 2 (id=2965): r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.626093216s ago: executing program 3 (id=2966): syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "e256b28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x4, "8475"}]}]}}}}}}}, 0x0) 2.530253522s ago: executing program 0 (id=2967): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c0000001500eb05c84e21000ab16d6e230675f802e8ff00440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.360403634s ago: executing program 1 (id=2968): mkdir(&(0x7f0000000300)='./file0\x00', 0x1d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4106, 0x100a}], 0x1, 0x7a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='objagg_obj_put\x00', r3}, 0x10) epoll_create(0x802) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) fchdir(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0/file0\x00', 0x2) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioprio_get$pid(0x1, r0) mmap(&(0x7f000062d000/0x1000)=nil, 0x1000, 0x0, 0x28011, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x0, 0x5}, 0x48) listen(0xffffffffffffffff, 0x0) 2.34618564s ago: executing program 3 (id=2969): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffeed) 2.012592524s ago: executing program 0 (id=2970): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87ea487e223ac37264833d618e92eac195f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d29c7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b356fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff53902a8f57000000009700cf0b4b8bc2294133000000007900000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645463dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a80741f0adba07f01d25eb3d1e23e0f2645d1cdfabfa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361cfbc61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e7567335dc3008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c7ba599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b96a81232fbef665f6212f875b2a0000000000000000000000000000f841b35af2e300000000000000000087a5f4bca39ad01340e98399f47f81d522dddcabc93ca6b082eb6be80b24b87652f76c3042ce504ac67b01a62451724b9257a0edceacb715a627247d11689663302f02b90fd6e10638b372c3413ee3066af68ce7ae685ccbd815c567fc50947703444e5625daea863219ebccf6cb3bd813e011097619c3f3c5f72c08ac0fa8f7e2536073bfd9f326f7369a3b4f000c4a300d3ef04db5fcf063e7f92711d1eb068d789e6c4d85c34c89e3e5f73178067e2976212ffe3ec8c284389ec7197a382bcba30b101938062e292e5185d8c1893f90cad3d8cac60b84b39843eed5fa17c362977c788361346eeca1d69fe200bd55a8d7ee48e80266661574f362e2069cec64e7e4426eb0a76a9a72887f68b5081aaf99f4d0a863cf47798cbe87b00663da6c834674fc2160d047e95f011b64a06576016f074e9e6afbe7675636fcd7e8abf2d788f5c8b31857"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='sched_kthread_stop_ret\x00', r2}, 0x10) close(r1) 1.736525321s ago: executing program 3 (id=2971): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000380)={'netdevsim0\x00', 0x7fff}) 1.595137395s ago: executing program 0 (id=2972): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x3}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1}, {{@in=@multicast2}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x111091, 0x0) fchdir(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.504919737s ago: executing program 3 (id=2973): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.440792126s ago: executing program 0 (id=2974): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 1.295454091s ago: executing program 1 (id=2975): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001500)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 1.294400578s ago: executing program 3 (id=2976): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x120001e, &(0x7f0000000240)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000400)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x0, 0x140) getsockopt$inet6_opts(r3, 0x29, 0x1, 0x0, &(0x7f0000000340)) 1.217277881s ago: executing program 2 (id=2977): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000000c0)='./file1\x00', 0x2210810, &(0x7f00000001c0), 0x1, 0x50d4, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) 1.211749068s ago: executing program 0 (id=2978): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06000d"], 0x9) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aa4000"/18, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r4, 0x8401}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r5 = syz_io_uring_setup(0x24f9, &(0x7f0000000080), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc4424b61c9f5fc7}}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 0s ago: executing program 1 (id=2979): syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000011a40)='./file0\x00', 0x1200014, &(0x7f00000006c0)=ANY=[@ANYBLOB='data_checksum=xxhash,str_hash=siphash,data_checksum=xxhash,compression=gzip,euid=', @ANYRESDEC=0x0, @ANYRES8], 0x1, 0x119fc, &(0x7f0000011ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x5}}) write$binfmt_script(r0, &(0x7f0000000340), 0x3000) kernel console output (not intermixed with test programs): aa:aa:3f) already exists on: batadv_slave_1 [ 366.599438][ T5096] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 366.605963][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.609462][ T5096] error writing reg: 0xff, val: 0x00 [ 366.658220][T11762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.672230][ T6468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.720452][T11762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.763067][T11762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.782443][T11762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.807325][T11762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.808944][ T5096] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 366.911535][ T5096] usb 2-1: USB disconnect, device number 30 [ 367.047363][ T29] audit: type=1326 audit(1719345714.781:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12049 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1f75ae9 code=0x7ffc0000 [ 367.180559][ T29] audit: type=1326 audit(1719345714.781:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12049 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1f75ae9 code=0x7ffc0000 [ 367.302313][ T29] audit: type=1326 audit(1719345714.781:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12049 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fc6d1f75ae9 code=0x7ffc0000 [ 367.366455][ T2845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.379364][T12031] loop0: detected capacity change from 0 to 32768 [ 367.395863][ T29] audit: type=1326 audit(1719345714.781:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12049 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d1f75ae9 code=0x7ffc0000 [ 367.408728][ T2845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.457459][T12031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2284 (12031) [ 367.528575][T12060] loop1: detected capacity change from 0 to 128 [ 367.545589][T12031] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 367.568973][T11747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.574739][T12031] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 367.598572][T11747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.640566][T12031] BTRFS info (device loop0): using free-space-tree [ 368.085390][ T29] audit: type=1804 audit(1719345715.821:64): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2361" name="/root/syzkaller.sVFNFh/8/cgroup.controllers" dev="sda1" ino=1987 res=1 errno=0 [ 368.114301][T11662] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 368.201114][T12090] loop4: detected capacity change from 0 to 256 [ 368.298503][T12096] loop3: detected capacity change from 0 to 8 [ 368.373734][T12094] loop2: detected capacity change from 0 to 2048 [ 368.403043][T12096] SQUASHFS error: Failed to read block 0x4e8: -5 [ 368.457828][T12094] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.468341][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 368.475749][ T29] audit: type=1800 audit(1719345716.181:65): pid=12096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2366" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 368.490216][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 368.601173][T12094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.601675][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 368.707320][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 368.773470][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 368.807834][T12091] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2364: bg 0: block 234: padding at end of block bitmap is not set [ 368.845910][T12102] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 368.871889][T12107] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 368.920767][T12091] EXT4-fs (loop2): Remounting filesystem read-only [ 368.930921][T12107] EXT4-fs (loop2): Remounting filesystem read-only [ 368.944675][T12102] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 368.977613][T12102] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 368.993802][T12112] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2368'. [ 369.032331][T12102] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.096626][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.157698][T12102] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.180563][T12102] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.241255][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.290926][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.344115][T12102] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.365414][T11762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.374759][ T5096] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 369.383731][T12102] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.421737][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.428643][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.432397][T12125] loop4: detected capacity change from 0 to 128 [ 369.437502][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.460348][T12096] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 369.593121][ T5096] usb 2-1: Using ep0 maxpacket: 32 [ 369.614342][ T5096] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 369.646696][ T5096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.694613][ T5096] usb 2-1: config 0 descriptor?? [ 369.715282][ T5096] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 369.722768][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 369.747109][ T5096] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 369.791859][ T5096] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 369.838916][ T5096] usb 2-1: media controller created [ 369.920248][ T5201] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 369.938653][ T5096] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.988125][ T5096] usb 2-1: selecting invalid altsetting 1 [ 370.015401][ T5096] set interface failed [ 370.015446][ T5096] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 370.058727][ T5096] error writing reg: 0xff, val: 0x00 [ 370.159628][ T5201] usb 3-1: Using ep0 maxpacket: 16 [ 370.201469][ T5201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 370.565436][ T5201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 370.575552][ T5201] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 370.577306][ T5096] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 370.611020][ T5096] usb 2-1: USB disconnect, device number 31 [ 370.619749][ T5201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.687016][ T5201] usb 3-1: config 0 descriptor?? [ 371.153881][T12140] loop0: detected capacity change from 0 to 32768 [ 371.214584][T12140] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2375 (12140) [ 371.263543][T12159] loop4: detected capacity change from 0 to 1024 [ 371.322694][T12140] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 371.333117][T12159] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 371.370231][ T5201] usbhid 3-1:0.0: can't add hid device: -71 [ 371.376329][ T5201] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 371.384978][T12140] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 371.414704][T12140] BTRFS info (device loop0): using free-space-tree [ 371.461253][ T5201] usb 3-1: USB disconnect, device number 16 [ 371.516600][T12159] loop4: detected capacity change from 0 to 1024 [ 371.524462][T12159] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 371.758436][T11662] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 371.953745][ T57] block nbd2: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 30 seconds [ 373.048689][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 373.262054][T12231] loop0: detected capacity change from 0 to 8 [ 373.365140][T12231] SQUASHFS error: Failed to read block 0x4e8: -5 [ 373.410263][ T29] audit: type=1800 audit(1719345721.141:66): pid=12231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2396" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 373.435600][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.505738][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.551938][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.574456][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.625607][T12245] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.679699][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.693604][T12245] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.701806][T12245] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.708665][T12245] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.734724][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.746188][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.746348][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.748943][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.772808][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.838096][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.862822][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.959862][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 373.989924][T12231] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 375.311541][T12283] loop1: detected capacity change from 0 to 16 [ 375.349159][T12283] erofs: (device loop1): mounted with root inode @ nid 36. [ 376.049390][ T5139] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 376.249421][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 376.272543][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 376.288877][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 376.300294][ T5139] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 376.510312][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.645721][ T5139] usb 2-1: config 0 descriptor?? [ 376.923428][T12313] loop0: detected capacity change from 0 to 1024 [ 377.000059][T12313] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 377.124033][T12301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.150034][T12301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.191583][ T5139] hid (null): bogus close delimiter [ 377.242782][ T5139] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 377.272311][ T5139] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 377.318018][ T5139] hid-generic 0003:0158:0100.0006: bogus close delimiter [ 377.335208][T12313] loop0: detected capacity change from 0 to 1024 [ 377.342417][ T5139] hid-generic 0003:0158:0100.0006: item 0 0 2 10 parsing failed [ 377.378727][ T5139] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 377.408576][T12319] loop4: detected capacity change from 0 to 2048 [ 377.425769][T12313] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 377.448402][T12319] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.469535][ T5139] usb 2-1: USB disconnect, device number 32 [ 377.540717][T12319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.667362][T12293] loop3: detected capacity change from 0 to 32768 [ 377.795378][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.185890][T12332] loop3: detected capacity change from 32768 to 0 [ 378.300943][ C0] I/O error, dev loop3, sector 288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 378.310387][ C0] metapage_read_end_io: I/O error [ 378.367631][T12337] read_mapping_page failed! [ 378.429384][T12337] diRead: read_metapage failed [ 378.476908][T12337] jfs_lookup: iget failed on inum 32 [ 378.499834][T12293] bio_check_eod: 17 callbacks suppressed [ 378.499859][T12293] syz.3.2413: attempt to access beyond end of device [ 378.499859][T12293] loop3: rw=0, sector=288, nr_sectors = 8 limit=0 [ 378.966158][T12293] metapage_read_end_io: I/O error [ 379.004688][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.013748][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.058380][T12293] read_mapping_page failed! [ 379.109489][T12293] diRead: read_metapage failed [ 379.199640][T12293] jfs_lookup: iget failed on inum 32 [ 379.711949][ T4480] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 379.722299][ T4480] Bluetooth: hci7: Injecting HCI hardware error event [ 379.732244][ T4480] Bluetooth: hci7: hardware error 0x00 [ 379.911149][ T6468] syz-executor: attempt to access beyond end of device [ 379.911149][ T6468] loop3: rw=0, sector=288, nr_sectors = 8 limit=0 [ 379.939448][ T6468] metapage_read_end_io: I/O error [ 379.944546][ T6468] read_mapping_page failed! [ 379.995246][ T6468] diRead: read_metapage failed [ 380.019432][ T6468] jfs_lookup: iget failed on inum 32 [ 380.077021][ T6468] syz-executor: attempt to access beyond end of device [ 380.077021][ T6468] loop3: rw=0, sector=288, nr_sectors = 8 limit=0 [ 380.165011][ T6468] metapage_read_end_io: I/O error [ 380.221421][ T6468] read_mapping_page failed! [ 380.225993][ T6468] diRead: read_metapage failed [ 380.287358][ T6468] jfs_lookup: iget failed on inum 32 [ 380.304003][T12373] fuse: Unknown parameter 'fd0x0000000000000004' [ 380.330242][ T29] audit: type=1804 audit(1719345728.061:67): pid=12373 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2448" name="/root/syzkaller.raQBTl/507/file0" dev="sda1" ino=2024 res=1 errno=0 [ 380.571208][T12371] loop2: detected capacity change from 0 to 4096 [ 380.627131][T12371] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 380.704272][T12382] loop1: detected capacity change from 0 to 1024 [ 380.722011][T12371] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 380.755680][T12382] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 380.765922][T12371] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 380.779046][T11747] kworker/u8:15: attempt to access beyond end of device [ 380.779046][T11747] loop3: rw=1, sector=264, nr_sectors = 8 limit=0 [ 380.830127][T12371] ntfs3: loop2: ino=1e, "file1" encrypted i/o not supported [ 380.837691][ T29] audit: type=1800 audit(1719345728.571:68): pid=12371 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2447" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 380.840728][T11747] metapage_write_end_io: I/O error [ 380.866470][T11747] kworker/u8:15: attempt to access beyond end of device [ 380.866470][T11747] loop3: rw=2049, sector=30752, nr_sectors = 8 limit=0 [ 380.907393][ T8154] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 380.940195][T11747] lbmIODone: I/O error in JFS log [ 380.976894][T12382] loop1: detected capacity change from 0 to 1024 [ 381.005371][T12382] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 381.009784][T11747] kworker/u8:15: attempt to access beyond end of device [ 381.009784][T11747] loop3: rw=1, sector=352, nr_sectors = 24 limit=0 [ 381.142179][T11747] kworker/u8:15: attempt to access beyond end of device [ 381.142179][T11747] loop3: rw=1, sector=160, nr_sectors = 8 limit=0 [ 381.210071][T11747] metapage_write_end_io: I/O error [ 381.230520][T12280] syz.3.2410: attempt to access beyond end of device [ 381.230520][T12280] loop3: rw=2049, sector=30752, nr_sectors = 8 limit=0 [ 381.299442][T12280] lbmIODone: I/O error in JFS log [ 381.321927][T12280] syz.3.2410: attempt to access beyond end of device [ 381.321927][T12280] loop3: rw=1, sector=160, nr_sectors = 8 limit=0 [ 381.393980][T12280] metapage_write_end_io: I/O error [ 381.472108][T12280] syz.3.2410: attempt to access beyond end of device [ 381.472108][T12280] loop3: rw=1, sector=264, nr_sectors = 8 limit=0 [ 381.587954][T12280] metapage_write_end_io: I/O error [ 381.614642][T12280] metapage_write_end_io: I/O error [ 381.632278][T12280] metapage_write_end_io: I/O error [ 381.670145][T12280] metapage_write_end_io: I/O error [ 381.693658][T12280] metapage_write_end_io: I/O error [ 381.699216][T12280] metapage_write_end_io: I/O error [ 381.759671][T12280] metapage_write_end_io: I/O error [ 381.770193][T12280] metapage_write_end_io: I/O error [ 381.780301][T12280] metapage_write_end_io: I/O error [ 381.787535][T12280] lbmIODone: I/O error in JFS log [ 381.794602][T12280] lbmIODone: I/O error in JFS log [ 381.800139][T12280] lbmIODone: I/O error in JFS log [ 381.805601][T12280] lmLogShutdown: exit(-5) [ 381.813797][T12280] jfs_umount failed with return code -5 [ 381.872405][ T4480] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 381.886159][T12407] loop4: detected capacity change from 0 to 512 [ 382.016722][T12407] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 382.129566][T12407] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 382.229613][T12407] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2461: inode #15: comm syz.4.2461: iget: illegal inode # [ 382.294895][T12407] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2461: couldn't read orphan inode 15 (err -117) [ 382.349755][ T4480] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 382.359446][ T4480] Bluetooth: hci3: Injecting HCI hardware error event [ 382.370068][ T53] Bluetooth: hci3: hardware error 0x00 [ 382.440166][T12407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.848754][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.876262][T11747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.109104][T11747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.228087][T12423] loop2: detected capacity change from 0 to 1024 [ 383.290493][T12423] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 383.342323][ T29] audit: type=1326 audit(1719345731.081:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12424 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d8775ae9 code=0x7ffc0000 [ 383.406288][ T29] audit: type=1326 audit(1719345731.101:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12424 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d8775ae9 code=0x7ffc0000 [ 383.465211][T11747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.486745][ T29] audit: type=1326 audit(1719345731.101:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12424 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f79d8775ae9 code=0x7ffc0000 [ 383.570463][ T29] audit: type=1326 audit(1719345731.101:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12424 comm="syz.4.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d8775ae9 code=0x7ffc0000 [ 383.613353][T12423] loop2: detected capacity change from 0 to 1024 [ 383.664557][T12423] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 383.772117][T11747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.295584][T11747] bridge_slave_1: left allmulticast mode [ 384.315910][T11747] bridge_slave_1: left promiscuous mode [ 384.360059][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.429842][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 384.457022][T12438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2474'. [ 384.520976][T11747] bridge_slave_0: left allmulticast mode [ 384.526694][T11747] bridge_slave_0: left promiscuous mode [ 384.581649][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.689050][T12447] input: syz0 as /devices/virtual/input/input44 [ 385.107206][ T4480] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.135551][ T4480] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.148950][ T4480] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.159774][ T4480] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.167723][ T4480] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 385.177398][ T4480] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.280401][ T1150] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 385.509733][ T1150] usb 2-1: Using ep0 maxpacket: 16 [ 385.525436][ T1150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 385.556000][ T1150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 385.589356][ T1150] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 385.617477][ T1150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.644629][ T1150] usb 2-1: config 0 descriptor?? [ 386.086770][T12453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.111547][T12453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.151927][ T1150] hid (null): bogus close delimiter [ 386.188066][ T1150] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 386.208699][ T1150] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 386.227726][ T1150] hid-generic 0003:0158:0100.0007: bogus close delimiter [ 386.248377][ T1150] hid-generic 0003:0158:0100.0007: item 0 0 2 10 parsing failed [ 386.267726][ T1150] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 386.373380][ T1150] usb 2-1: USB disconnect, device number 33 [ 386.624292][T12471] loop0: detected capacity change from 0 to 1024 [ 386.689536][T12471] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 386.765700][T12471] loop0: detected capacity change from 0 to 1024 [ 386.780180][T11747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.830120][T12471] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 386.868561][T11747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.904093][T11747] bond0 (unregistering): Released all slaves [ 386.934584][T11747] bond1 (unregistering): Released all slaves [ 387.229874][ T4480] Bluetooth: hci5: command tx timeout [ 388.468233][T12506] loop4: detected capacity change from 0 to 16 [ 388.556913][T12506] erofs: (device loop4): mounted with root inode @ nid 36. [ 388.929340][T11747] hsr_slave_0: left promiscuous mode [ 388.996181][T11747] hsr_slave_1: left promiscuous mode [ 389.040288][T11747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.077575][T11747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.093451][T11747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.136588][T11747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.223733][T11747] veth1_macvtap: left promiscuous mode [ 389.259544][T11747] veth0_macvtap: left promiscuous mode [ 389.265321][T11747] veth1_vlan: left promiscuous mode [ 389.289501][T11747] veth0_vlan: left promiscuous mode [ 389.311033][ T4480] Bluetooth: hci5: command tx timeout [ 389.349594][ T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 389.539464][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 389.571662][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 389.604346][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 389.652446][ T25] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 389.709540][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.756869][ T25] usb 5-1: config 0 descriptor?? [ 390.159210][T12518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.260608][T12518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.550636][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 390.556950][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 390.638761][ T25] usb 5-1: USB disconnect, device number 32 [ 391.389470][ T4480] Bluetooth: hci5: command tx timeout [ 391.427086][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 391.657665][T11747] team0 (unregistering): Port device team_slave_1 removed [ 391.738860][T11747] team0 (unregistering): Port device team_slave_0 removed [ 392.395748][T12563] loop4: detected capacity change from 0 to 1024 [ 392.405516][T12563] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 392.554041][T12565] loop4: detected capacity change from 0 to 16 [ 392.576399][T12565] erofs: (device loop4): mounted with root inode @ nid 36. [ 392.856601][T12455] chnl_net:caif_netlink_parms(): no params data found [ 393.412540][T12455] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.430732][T12455] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.441533][T12455] bridge_slave_0: entered allmulticast mode [ 393.455268][T12455] bridge_slave_0: entered promiscuous mode [ 393.469592][ T4480] Bluetooth: hci5: command tx timeout [ 393.488489][T12455] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.527397][T12455] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.559008][T12455] bridge_slave_1: entered allmulticast mode [ 393.595798][T12455] bridge_slave_1: entered promiscuous mode [ 393.762991][T12455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.821413][T12455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.045619][T12616] loop1: detected capacity change from 0 to 16 [ 394.053734][T12455] team0: Port device team_slave_0 added [ 394.081486][T12616] erofs: (device loop1): mounted with root inode @ nid 36. [ 394.105018][T12455] team0: Port device team_slave_1 added [ 394.320750][T12455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.346542][T12455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.434976][T12455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.454639][T12455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.475090][T12455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.558808][T12455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.906536][T12455] hsr_slave_0: entered promiscuous mode [ 394.968705][T12455] hsr_slave_1: entered promiscuous mode [ 394.996270][T12455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.033320][T12455] Cannot create hsr debugfs directory [ 395.744181][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 396.808396][T12661] loop4: detected capacity change from 0 to 32768 [ 396.849516][T12661] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2523 (12661) [ 396.930097][T12661] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 396.979459][T12661] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 397.021131][T12661] BTRFS info (device loop4): using free-space-tree [ 397.656769][T12455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.753141][T12455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 397.831774][T12455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 397.905211][T12455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.465765][T12455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.581465][T12455] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.637150][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.644393][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.782409][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.789672][ T5201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.612443][T12455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.805198][T12455] veth0_vlan: entered promiscuous mode [ 399.867424][T12455] veth1_vlan: entered promiscuous mode [ 400.045834][T12455] veth0_macvtap: entered promiscuous mode [ 400.084892][T12455] veth1_macvtap: entered promiscuous mode [ 400.168574][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.242909][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.269992][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.330992][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.373894][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.408509][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.447335][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.509619][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.552676][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.590191][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.619475][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.658528][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.671955][ T4480] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 400.681137][ T4480] Bluetooth: hci6: Injecting HCI hardware error event [ 400.691042][ T4480] Bluetooth: hci6: hardware error 0x00 [ 400.713637][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.769338][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.821739][T12455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.862876][ T5873] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 400.949464][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.990097][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.053172][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.102478][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.132902][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.189589][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.229642][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.255310][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.281132][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.309500][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.319631][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.349662][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.363563][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.389897][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.418248][T12455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.464448][T12455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.529366][T12455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.538214][T12455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.547189][ T5137] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 401.594073][T12455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.740161][ T5137] usb 3-1: device descriptor read/64, error -71 [ 401.949795][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.979605][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.030075][ T5137] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 402.062137][ T57] block nbd2: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 60 seconds [ 402.219540][ T5137] usb 3-1: device descriptor read/64, error -71 [ 402.226018][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.253632][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.308664][ T29] audit: type=1326 audit(1719345750.041:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12793 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d8775ae9 code=0x7ffc0000 [ 402.358782][ T5137] usb usb3-port1: attempt power cycle [ 402.411064][ T29] audit: type=1326 audit(1719345750.071:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12793 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f79d8775ae9 code=0x7ffc0000 [ 402.469373][ T29] audit: type=1326 audit(1719345750.071:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12793 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d8775ae9 code=0x7ffc0000 [ 402.523817][T12798] 9pnet_fd: Insufficient options for proto=fd [ 402.523911][ T29] audit: type=1326 audit(1719345750.081:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12793 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d8775ae9 code=0x7ffc0000 [ 402.809457][ T5137] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 402.878447][ T5137] usb 3-1: device descriptor read/8, error -71 [ 403.099795][T12778] loop0: detected capacity change from 0 to 32768 [ 403.171838][ T5137] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 403.260509][ T5137] usb 3-1: device descriptor read/8, error -71 [ 403.381224][T12813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2553'. [ 403.408800][ T5137] usb usb3-port1: unable to enumerate USB device [ 403.479745][ T4480] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 403.749817][T12819] loop0: detected capacity change from 32768 to 0 [ 404.064291][T11662] bio_check_eod: 13 callbacks suppressed [ 404.064316][T11662] syz-executor: attempt to access beyond end of device [ 404.064316][T11662] loop0: rw=0, sector=288, nr_sectors = 8 limit=0 [ 404.130221][T11662] metapage_read_end_io: I/O error [ 404.146657][T11662] read_mapping_page failed! [ 404.178271][T11662] diRead: read_metapage failed [ 404.204697][T11662] jfs_lookup: iget failed on inum 32 [ 404.233618][T11662] syz-executor: attempt to access beyond end of device [ 404.233618][T11662] loop0: rw=0, sector=288, nr_sectors = 8 limit=0 [ 404.247362][T12809] loop4: detected capacity change from 0 to 32768 [ 404.282935][T11662] metapage_read_end_io: I/O error [ 404.288526][T12809] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2552 (12809) [ 404.359446][T12809] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 404.393994][T12809] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 404.416637][T12809] BTRFS info (device loop4): using free-space-tree [ 404.455477][T11662] read_mapping_page failed! [ 404.493027][T11662] diRead: read_metapage failed [ 404.503640][ T29] audit: type=1804 audit(1719345752.241:77): pid=12832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2557" name="/root/syzkaller.qxBnwi/37/cgroup.controllers" dev="sda1" ino=2019 res=1 errno=0 [ 404.541761][T11662] jfs_lookup: iget failed on inum 32 [ 404.953953][T11735] kworker/u8:8: attempt to access beyond end of device [ 404.953953][T11735] loop0: rw=1, sector=264, nr_sectors = 8 limit=0 [ 405.014578][T11735] metapage_write_end_io: I/O error [ 405.039175][T11735] kworker/u8:8: attempt to access beyond end of device [ 405.039175][T11735] loop0: rw=2049, sector=30752, nr_sectors = 8 limit=0 [ 405.105811][T11735] lbmIODone: I/O error in JFS log [ 405.129754][T11735] kworker/u8:8: attempt to access beyond end of device [ 405.129754][T11735] loop0: rw=1, sector=352, nr_sectors = 16 limit=0 [ 405.174559][T11735] kworker/u8:8: attempt to access beyond end of device [ 405.174559][T11735] loop0: rw=1, sector=160, nr_sectors = 8 limit=0 [ 405.228649][T11735] metapage_write_end_io: I/O error [ 405.250109][T12722] syz.0.2533: attempt to access beyond end of device [ 405.250109][T12722] loop0: rw=2049, sector=30752, nr_sectors = 8 limit=0 [ 405.296398][T12722] lbmIODone: I/O error in JFS log [ 405.317182][T12722] syz.0.2533: attempt to access beyond end of device [ 405.317182][T12722] loop0: rw=1, sector=160, nr_sectors = 8 limit=0 [ 405.358510][T12722] metapage_write_end_io: I/O error [ 405.375474][T12722] syz.0.2533: attempt to access beyond end of device [ 405.375474][T12722] loop0: rw=1, sector=264, nr_sectors = 8 limit=0 [ 405.434047][T12722] metapage_write_end_io: I/O error [ 405.448601][T12722] syz.0.2533: attempt to access beyond end of device [ 405.448601][T12722] loop0: rw=1, sector=224, nr_sectors = 8 limit=0 [ 405.493997][T12722] metapage_write_end_io: I/O error [ 405.513619][T12722] metapage_write_end_io: I/O error [ 405.540182][T12722] metapage_write_end_io: I/O error [ 405.568536][T12722] metapage_write_end_io: I/O error [ 405.596798][T12722] metapage_write_end_io: I/O error [ 405.617334][T12722] metapage_write_end_io: I/O error [ 405.639554][T12722] metapage_write_end_io: I/O error [ 405.660831][T12722] metapage_write_end_io: I/O error [ 405.693387][T12722] lbmIODone: I/O error in JFS log [ 405.706596][T12887] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2566'. [ 405.730053][T12722] lbmIODone: I/O error in JFS log [ 405.750901][T12722] lbmIODone: I/O error in JFS log [ 405.780676][T12722] lmLogShutdown: exit(-5) [ 405.790062][T12722] jfs_umount failed with return code -5 [ 406.169440][ T5201] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 406.349430][ T5201] usb 4-1: device descriptor read/64, error -71 [ 406.485457][T11733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.739768][ T5201] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 406.753944][T11733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.929421][ T5201] usb 4-1: device descriptor read/64, error -71 [ 406.975224][T11733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.052062][ T5201] usb usb4-port1: attempt power cycle [ 407.249469][T12917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.366270][T11733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.509680][ T5201] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 407.560538][ T5201] usb 4-1: device descriptor read/8, error -71 [ 407.869466][ T5201] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 407.920389][ T5201] usb 4-1: device descriptor read/8, error -71 [ 408.020335][T11733] bridge_slave_1: left allmulticast mode [ 408.026069][T11733] bridge_slave_1: left promiscuous mode [ 408.051219][ T5201] usb usb4-port1: unable to enumerate USB device [ 408.101271][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.260383][T11733] bridge_slave_0: left allmulticast mode [ 408.279231][T11733] bridge_slave_0: left promiscuous mode [ 408.328277][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.648452][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 408.661045][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 408.671910][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 408.682333][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 408.690290][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 408.697629][ T5873] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 408.697828][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 410.079513][T12959] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2579'. [ 410.426135][T12965] 9pnet_fd: Insufficient options for proto=fd [ 410.839214][ T4480] Bluetooth: hci6: command tx timeout [ 410.991282][T11733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.045352][T11733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.061278][T12980] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2585'. [ 411.123863][T11733] bond0 (unregistering): Released all slaves [ 411.741749][T12994] nbd4: detected capacity change from 0 to 8388607 [ 411.976681][T11733] hsr_slave_0: left promiscuous mode [ 412.010607][T11733] hsr_slave_1: left promiscuous mode [ 412.030543][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.059645][T11733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.077352][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.088239][T11733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.200808][T11733] veth1_macvtap: left promiscuous mode [ 412.219476][T11733] veth0_macvtap: left promiscuous mode [ 412.229836][T11733] veth1_vlan: left promiscuous mode [ 412.239665][T11733] veth0_vlan: left promiscuous mode [ 412.450135][ T4480] block nbd4: Receive control failed (result -104) [ 412.910197][ T4480] Bluetooth: hci6: command tx timeout [ 413.902450][T13028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2596'. [ 414.174296][T11733] team0 (unregistering): Port device team_slave_1 removed [ 414.308522][T11733] team0 (unregistering): Port device team_slave_0 removed [ 414.347630][T13037] loop3: detected capacity change from 0 to 4096 [ 414.366723][T13037] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 414.418753][T13037] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 414.510191][T13037] ntfs3: loop3: ino=0, ntfs_iget5 [ 414.990438][ T53] Bluetooth: hci6: command tx timeout [ 415.655289][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2599'. [ 415.672728][T13039] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 415.937794][T12933] chnl_net:caif_netlink_parms(): no params data found [ 416.607966][T13070] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2607'. [ 416.636681][T12933] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.656079][T12933] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.668004][T12933] bridge_slave_0: entered allmulticast mode [ 416.689974][T12933] bridge_slave_0: entered promiscuous mode [ 416.739038][T12933] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.757783][T12933] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.769702][T12933] bridge_slave_1: entered allmulticast mode [ 416.779691][ T1150] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 416.787773][T12933] bridge_slave_1: entered promiscuous mode [ 416.891453][T12933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.915598][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 416.923602][T13076] loop1: detected capacity change from 0 to 4096 [ 416.972244][T12933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.982858][ T1150] usb 3-1: Using ep0 maxpacket: 32 [ 417.041847][ T1150] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 417.052251][T13076] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 417.070549][ T4480] Bluetooth: hci6: command tx timeout [ 417.085192][ T1150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.161082][ T1150] usb 3-1: config 0 descriptor?? [ 417.219893][ T1150] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 417.240895][T13076] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 417.255601][ T1150] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 417.282919][ T1150] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 417.294861][T12933] team0: Port device team_slave_0 added [ 417.309813][ T1150] usb 3-1: media controller created [ 417.334118][T12933] team0: Port device team_slave_1 added [ 417.404588][T13076] ntfs3: loop1: ino=0, ntfs_iget5 [ 417.428863][ T1150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.515654][ T1150] usb 3-1: selecting invalid altsetting 1 [ 417.523101][ T1150] set interface failed [ 417.523135][ T1150] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 417.553976][ T1150] error writing reg: 0xff, val: 0x00 [ 417.560126][T12933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.594239][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.626305][ T1150] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 417.649837][T12933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.674120][ T1150] usb 3-1: USB disconnect, device number 21 [ 417.695768][T12933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.729921][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.817809][T12933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.217189][T12933] hsr_slave_0: entered promiscuous mode [ 418.289817][T12933] hsr_slave_1: entered promiscuous mode [ 418.314293][T12933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.337966][T12933] Cannot create hsr debugfs directory [ 418.506854][T13102] loop3: detected capacity change from 0 to 4096 [ 418.550617][T13102] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 418.599161][T13102] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 418.650468][T13102] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 418.738394][T13102] ntfs3: loop3: ino=1e, "file1" encrypted i/o not supported [ 418.798387][ T29] audit: type=1800 audit(1719345766.531:78): pid=13102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2615" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 420.473541][ T29] audit: type=1804 audit(1719345768.211:79): pid=13159 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2626" name="/root/syzkaller.Ytpyqt/25/cgroup.controllers" dev="sda1" ino=1993 res=1 errno=0 [ 420.649063][T12933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.693949][T12933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.753559][T12933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.771174][T12933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.163411][T12933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.217427][T12933] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.277344][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.284618][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.344164][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.351438][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.389579][ T5137] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 421.506363][T12933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.580737][ T5137] usb 4-1: Using ep0 maxpacket: 32 [ 421.617799][ T5137] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 421.651123][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.705156][ T5137] usb 4-1: config 0 descriptor?? [ 421.742855][ T5137] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 421.843494][T13193] loop2: detected capacity change from 0 to 8 [ 421.859065][T13195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2639'. [ 421.923780][T13193] SQUASHFS error: Failed to read block 0x4e8: -5 [ 421.962242][ T29] audit: type=1800 audit(1719345769.701:80): pid=13193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2637" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 422.014740][T13193] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.058205][T13193] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.084425][T13193] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.116450][T13199] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.138663][T13199] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.152862][ T5137] gspca_sunplus: reg_w_riv err -71 [ 422.158173][ T5137] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 422.192463][T13199] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.224261][ T5137] usb 4-1: USB disconnect, device number 30 [ 422.259825][T13199] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.268136][T13193] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.298990][T13193] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.328962][T13199] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.339974][T12933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.359462][T13199] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.366441][T13199] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 422.513853][T12933] veth0_vlan: entered promiscuous mode [ 422.583708][T12933] veth1_vlan: entered promiscuous mode [ 422.681497][T12933] veth0_macvtap: entered promiscuous mode [ 422.733506][T12933] veth1_macvtap: entered promiscuous mode [ 422.828096][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.877285][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.919342][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.938862][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 422.951615][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.979718][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 422.989725][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 423.012394][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 423.016940][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.070533][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 423.101787][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 423.111514][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.136160][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.148598][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.178426][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.221425][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.231526][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.242634][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.252641][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.264720][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.277945][T12933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.319198][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.349824][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.381372][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.411317][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.423837][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.436337][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.483754][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.510803][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.529453][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.563623][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.589572][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.606391][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2645'. [ 423.623263][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.649390][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.678440][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.703817][T12933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.749224][T12933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.763655][T13201] loop1: detected capacity change from 0 to 32768 [ 423.792855][T12933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.823386][T12933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.865206][T12933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.279194][T11521] non-latin1 character 0x2e66 found in JFS file name [ 424.347309][T11521] mount with iocharset=utf8 to access [ 424.719450][T11733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.727479][T11733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.848814][ T2845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.872854][ T2845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.896257][T13213] chnl_net:caif_netlink_parms(): no params data found [ 424.933257][T13264] loop3: detected capacity change from 0 to 4096 [ 424.975274][T13264] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 425.107683][T13264] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 425.140041][T11740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.169874][T13264] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 425.207722][T13264] ntfs3: loop3: ino=1e, "file1" encrypted i/o not supported [ 425.218332][ T29] audit: type=1800 audit(1719345772.951:81): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2651" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 425.238444][ T4480] Bluetooth: hci8: command tx timeout [ 425.554417][T11740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.893863][T11740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.272855][T11740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.333455][T13213] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.368454][T13213] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.392929][T13213] bridge_slave_0: entered allmulticast mode [ 426.416177][T13213] bridge_slave_0: entered promiscuous mode [ 426.447538][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.457854][T13213] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.467859][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.478704][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.485671][T13213] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.485929][T13213] bridge_slave_1: entered allmulticast mode [ 426.487736][T13213] bridge_slave_1: entered promiscuous mode [ 426.515192][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.524198][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 426.532789][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.708268][T13213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.738505][T13213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.885403][T13213] team0: Port device team_slave_0 added [ 426.926322][T13213] team0: Port device team_slave_1 added [ 427.030883][T11740] bridge_slave_1: left allmulticast mode [ 427.036829][T11740] bridge_slave_1: left promiscuous mode [ 427.043040][T11740] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.063676][T11740] bridge_slave_0: left allmulticast mode [ 427.073891][T11740] bridge_slave_0: left promiscuous mode [ 427.081237][T11740] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.318134][ T4480] Bluetooth: hci8: command tx timeout [ 427.438095][ T4480] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 427.442646][ T53] Bluetooth: hci5: hardware error 0x09 [ 428.056047][T11740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.112150][T11740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.121256][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 428.136257][T11740] bond0 (unregistering): Released all slaves [ 428.205395][T13213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.217580][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.264714][T13213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.286669][T13213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.294468][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.322680][T13213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.329472][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 428.341162][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 428.359355][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.401695][ T25] usb 1-1: config 0 descriptor?? [ 428.421999][ T25] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 428.443526][ T25] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 428.487007][ T25] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 428.509010][ T25] usb 1-1: media controller created [ 428.564601][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.590081][ T4480] Bluetooth: hci3: command tx timeout [ 428.660392][ T25] usb 1-1: selecting invalid altsetting 1 [ 428.666993][ T25] set interface failed [ 428.667023][ T25] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 428.708961][ T25] error writing reg: 0xff, val: 0x00 [ 429.110198][T13303] chnl_net:caif_netlink_parms(): no params data found [ 429.121689][ T25] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 429.158980][ T25] usb 1-1: USB disconnect, device number 22 [ 429.205893][ T4480] Bluetooth: hci5: unexpected event for opcode 0x000d [ 429.226910][T13213] hsr_slave_0: entered promiscuous mode [ 429.288921][T13213] hsr_slave_1: entered promiscuous mode [ 429.308619][T13213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.330864][T13213] Cannot create hsr debugfs directory [ 429.389463][ T4480] Bluetooth: hci8: command tx timeout [ 429.552349][ T53] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 429.652195][T11740] hsr_slave_0: left promiscuous mode [ 429.679028][T11740] hsr_slave_1: left promiscuous mode [ 429.699971][T11740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.722604][T11740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.749000][T11740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.774804][T11740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.798742][ T53] Bluetooth: hci6: unexpected event 0x01 length: 4 > 1 [ 429.803879][ T4480] Bluetooth: hci6: hardware error 0x09 [ 429.874787][T11740] veth1_macvtap: left promiscuous mode [ 429.896920][T11740] veth0_macvtap: left promiscuous mode [ 429.903621][T11740] veth1_vlan: left promiscuous mode [ 429.909118][T11740] veth0_vlan: left promiscuous mode [ 430.359719][ T29] audit: type=1326 audit(1719345778.091:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.0.2673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f764c375ae9 code=0x0 [ 430.674353][ T53] Bluetooth: hci3: command tx timeout [ 430.906708][T11740] team0 (unregistering): Port device team_slave_1 removed [ 430.981194][T11740] team0 (unregistering): Port device team_slave_0 removed [ 431.478336][ T53] Bluetooth: hci8: command tx timeout [ 431.492609][T13372] loop0: detected capacity change from 0 to 512 [ 431.527372][T13372] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 431.541137][T13372] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 431.552774][T13372] EXT4-fs (loop0): 1 truncate cleaned up [ 431.562904][T13372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.591942][T13372] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 431.637377][T12933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.875750][ T4480] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 432.116422][ T57] block nbd2: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 90 seconds [ 432.538061][T13303] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.553384][T13303] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.568787][T13303] bridge_slave_0: entered allmulticast mode [ 432.599062][T13303] bridge_slave_0: entered promiscuous mode [ 432.649664][T13303] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.670061][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.677414][T13303] bridge_slave_1: entered allmulticast mode [ 432.701253][T13303] bridge_slave_1: entered promiscuous mode [ 432.759786][ T4480] Bluetooth: hci3: command tx timeout [ 432.903086][T13303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.997082][T13405] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2684'. [ 433.096850][T13213] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.146404][T13303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.281541][T13303] team0: Port device team_slave_0 added [ 433.366715][T13213] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.412040][T13303] team0: Port device team_slave_1 added [ 433.612802][T13213] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.651398][T13303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.658849][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.700905][T13303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.734022][T13303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.764969][T13303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.812406][T13303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.858767][T13213] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.988827][T13303] hsr_slave_0: entered promiscuous mode [ 434.005765][T13303] hsr_slave_1: entered promiscuous mode [ 434.032834][T13303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.049408][T13303] Cannot create hsr debugfs directory [ 434.466398][T13213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.514786][T13213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.534412][T13213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.562169][T13213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.829807][ T4480] Bluetooth: hci3: command tx timeout [ 434.842504][T13438] loop0: detected capacity change from 0 to 128 [ 434.943119][T13426] loop3: detected capacity change from 0 to 32768 [ 435.374693][T12455] non-latin1 character 0x2e66 found in JFS file name [ 435.391967][T12455] mount with iocharset=utf8 to access [ 435.672815][T13371] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.685712][T13371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.700615][T13371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.710901][T13371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.718813][T13371] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 435.723824][T13213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.736582][T13371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 435.853157][T13213] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.988082][T11735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.096006][T13213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 436.119692][T13213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.282215][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.289621][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.308021][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.315315][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.359103][T13461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.095283][T11735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.263811][T11735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.309329][T13303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.341709][T13303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.681888][T11735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.723467][T13303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.732219][T13371] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 437.747264][T13371] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 437.755242][T13303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.770563][T13371] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 437.785852][T13371] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 437.808260][T13371] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 437.817767][T13371] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 437.873153][ T4480] Bluetooth: hci5: command tx timeout [ 438.247202][T13213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.396783][T11735] bridge_slave_1: left allmulticast mode [ 438.406591][T11735] bridge_slave_1: left promiscuous mode [ 438.430239][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.451671][T11735] bridge_slave_0: left allmulticast mode [ 438.457375][T11735] bridge_slave_0: left promiscuous mode [ 438.469889][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.942469][T13482] loop0: detected capacity change from 0 to 32768 [ 438.955409][T13482] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2706 (13482) [ 439.042927][T13482] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 439.099939][T13482] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 439.108763][T13482] BTRFS info (device loop0): using free-space-tree [ 439.885440][T11735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.912259][T11735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.928762][T11735] bond0 (unregistering): Released all slaves [ 439.949700][ T5092] Bluetooth: hci9: command tx timeout [ 439.958153][ T4480] Bluetooth: hci5: command tx timeout [ 440.432587][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.439086][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.778429][T13451] chnl_net:caif_netlink_parms(): no params data found [ 440.926687][T11735] hsr_slave_0: left promiscuous mode [ 440.959736][T11735] hsr_slave_1: left promiscuous mode [ 440.980674][T11735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.988227][T11735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.022612][T11735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.039556][T11735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.096693][T11735] veth1_macvtap: left promiscuous mode [ 441.109820][T11735] veth0_macvtap: left promiscuous mode [ 441.115554][T11735] veth1_vlan: left promiscuous mode [ 441.133442][T11735] veth0_vlan: left promiscuous mode [ 441.271708][T12933] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 442.029658][ T5092] Bluetooth: hci9: command tx timeout [ 442.035236][ T4480] Bluetooth: hci5: command tx timeout [ 442.258607][T11735] team0 (unregistering): Port device team_slave_1 removed [ 442.319110][T11735] team0 (unregistering): Port device team_slave_0 removed [ 442.367514][ T57] block nbd4: Possible stuck request ffff888020de8000: control (read@0,4096B). Runtime 30 seconds [ 443.577101][T13303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.825430][T13451] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.841232][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.857469][T13451] bridge_slave_0: entered allmulticast mode [ 443.870016][T13451] bridge_slave_0: entered promiscuous mode [ 443.878606][T13469] chnl_net:caif_netlink_parms(): no params data found [ 443.919171][T13303] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.927190][T13451] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.936039][T13451] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.943832][T13451] bridge_slave_1: entered allmulticast mode [ 443.955925][T13451] bridge_slave_1: entered promiscuous mode [ 444.107481][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.111588][ T5092] Bluetooth: hci9: command tx timeout [ 444.114743][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.121793][ T4480] Bluetooth: hci5: command tx timeout [ 444.138119][T13213] veth0_vlan: entered promiscuous mode [ 444.156921][T13451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.211994][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.219164][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.256892][T13213] veth1_vlan: entered promiscuous mode [ 444.280659][T13451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.520819][T13451] team0: Port device team_slave_0 added [ 444.685266][T13451] team0: Port device team_slave_1 added [ 444.732953][T13469] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.740476][T13469] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.747827][T13469] bridge_slave_0: entered allmulticast mode [ 444.756761][T13469] bridge_slave_0: entered promiscuous mode [ 444.853321][T13451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.864015][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.929930][T13451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.965511][T13451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.986101][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.049355][T13451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.072066][T13469] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.089479][T13469] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.096889][T13469] bridge_slave_1: entered allmulticast mode [ 445.128258][T13469] bridge_slave_1: entered promiscuous mode [ 445.233169][T13469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.322839][T13469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.532591][T13213] veth0_macvtap: entered promiscuous mode [ 445.554552][T13451] hsr_slave_0: entered promiscuous mode [ 445.588971][T13451] hsr_slave_1: entered promiscuous mode [ 445.630409][T13451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.638066][T13451] Cannot create hsr debugfs directory [ 445.702124][T13469] team0: Port device team_slave_0 added [ 445.743933][T13213] veth1_macvtap: entered promiscuous mode [ 445.763302][T13303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.844531][T13469] team0: Port device team_slave_1 added [ 446.061447][T13469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.068595][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.095902][T13469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.115499][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.129142][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.139841][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.152880][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.163373][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.175613][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.189814][ T4480] Bluetooth: hci9: command tx timeout [ 446.198693][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.219604][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.239358][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.251278][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.262307][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.273263][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.287018][T13213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.334396][T13469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.348457][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.378729][T13469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.486471][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.498389][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.515598][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.527471][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.537923][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.549167][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.562232][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.574008][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.585770][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.598985][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.612883][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.624761][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.637905][T13213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.736218][T13213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.760615][T13213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.789342][T13213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.798133][T13213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.966492][T13303] veth0_vlan: entered promiscuous mode [ 447.015349][T13469] hsr_slave_0: entered promiscuous mode [ 447.050843][T13469] hsr_slave_1: entered promiscuous mode [ 447.079546][T13469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.087201][T13469] Cannot create hsr debugfs directory [ 447.207603][T13303] veth1_vlan: entered promiscuous mode [ 447.540108][T13451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.749024][T13451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.911717][T13451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.053332][T13303] veth0_macvtap: entered promiscuous mode [ 448.091510][T13451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.177358][T13303] veth1_macvtap: entered promiscuous mode [ 448.190699][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.203798][ T5096] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 448.209692][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.222290][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.236730][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.247406][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.260580][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.270996][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.281671][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.292430][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.303298][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.313249][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.323929][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.333828][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.344809][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.358406][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.369084][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.381507][T13303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.399734][ T5096] usb 1-1: Using ep0 maxpacket: 32 [ 448.412254][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.424330][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.434871][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.437619][ T5096] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 448.445487][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.445513][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.445535][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.445554][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.445571][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.445590][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.445607][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.445625][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.445648][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.445666][T13303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.478822][ T5096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.491262][T13303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.516412][ T5096] usb 1-1: config 0 descriptor?? [ 448.544443][T13303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.601071][T13303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.609934][T13303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.618731][ T5096] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 448.619308][T13303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.633965][T13303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.831614][T11735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.849486][T11735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.930823][T11740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.938910][T11740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.039614][ T5096] gspca_sunplus: reg_w_riv err -71 [ 449.044880][ T5096] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 449.090835][ T5096] usb 1-1: USB disconnect, device number 23 [ 449.213432][T13451] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.241016][ T29] audit: type=1804 audit(1719345796.961:83): pid=13687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2638" name="/root/syzkaller.8MpOQB/0/cgroup.controllers" dev="sda1" ino=2038 res=1 errno=0 [ 449.278172][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.288809][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.458482][T13451] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.503757][T13451] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.528567][T13451] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 450.103533][T13707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.394853][T13451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.671039][ T29] audit: type=1326 audit(1719345799.411:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13727 comm="syz.1.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c0375ae9 code=0x7ffc0000 [ 451.736516][T13451] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.748742][ T29] audit: type=1326 audit(1719345799.411:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13727 comm="syz.1.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c0375ae9 code=0x7ffc0000 [ 451.805096][T13608] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.812330][T13608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.824666][ T29] audit: type=1326 audit(1719345799.411:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13727 comm="syz.1.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f78c0375ae9 code=0x7ffc0000 [ 451.849007][ T29] audit: type=1326 audit(1719345799.411:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13727 comm="syz.1.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c0375ae9 code=0x7ffc0000 [ 451.984132][T13736] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.994123][T13736] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.051704][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.058988][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.191545][T13469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 452.256211][T13469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 452.350724][T13469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 452.381092][T13469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 452.986615][T13469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.133516][T13469] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.193599][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.200917][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.280961][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.288242][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.411912][T13451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.523335][T13469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.569928][T13469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.692622][T13777] loop4: detected capacity change from 0 to 1024 [ 453.762510][T13777] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 453.786661][T13451] veth0_vlan: entered promiscuous mode [ 453.879036][T13451] veth1_vlan: entered promiscuous mode [ 453.937530][ T5135] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 453.994199][T13777] loop4: detected capacity change from 0 to 1024 [ 454.008483][ T5135] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 454.054080][ T5135] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.066742][T13451] veth0_macvtap: entered promiscuous mode [ 454.107526][ T5135] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.136313][T13777] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 454.148110][T13451] veth1_macvtap: entered promiscuous mode [ 454.284525][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.312917][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.337954][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.369775][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.401282][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.413466][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.425457][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.451662][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.472023][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.500365][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.524018][T13790] loop1: detected capacity change from 0 to 4096 [ 454.530401][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.530431][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.530451][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.530474][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.530492][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.530508][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.533099][T13451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.617275][T13790] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 454.779748][T13790] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 454.803725][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.840943][T13790] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 454.869995][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.916045][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.958692][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.993484][T13790] ntfs3: loop1: ino=1e, "file1" encrypted i/o not supported [ 454.998316][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.024198][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.034558][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.060975][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.083855][ T29] audit: type=1800 audit(1719345802.801:88): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2758" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 455.085397][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.130892][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.175721][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.187192][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.199691][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.228897][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.244732][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.260460][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.306858][T13451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.395162][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.403498][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.503037][T13451] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.529328][T13451] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.556620][T13451] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.592855][T13451] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.793943][T13469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.963778][T11733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.994131][T11733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.016617][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2764'. [ 456.143527][T13469] veth0_vlan: entered promiscuous mode [ 456.273292][T11733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.283742][T13469] veth1_vlan: entered promiscuous mode [ 456.299319][T11733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.586278][T13469] veth0_macvtap: entered promiscuous mode [ 456.633489][T13469] veth1_macvtap: entered promiscuous mode [ 456.810825][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.847251][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.915738][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.937595][ T4480] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 456.940268][ T4480] Bluetooth: hci3: hardware error 0x09 [ 456.990103][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.001200][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.012515][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.026569][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.045022][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.062781][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.110323][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.168450][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.219534][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.252939][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.321816][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.356097][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.373195][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.401768][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.433802][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.477006][T13469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.565296][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.579974][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.602999][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.689409][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.745067][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.791940][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.829360][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.866336][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.908901][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.939410][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.991219][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.049321][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.083599][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.097871][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 458.119320][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.149342][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.190038][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.219557][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.249654][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.301415][T13469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.441936][T13469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.472968][T13469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.500736][T13846] loop2: detected capacity change from 0 to 32768 [ 458.538426][T13469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.566839][T13469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.099435][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.130686][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.282511][ T2845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.295046][ T2845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.559760][ T4480] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 460.304820][T13925] loop3: detected capacity change from 0 to 128 [ 460.415770][T13900] loop4: detected capacity change from 0 to 32768 [ 460.452105][T13900] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2783 (13900) [ 460.519428][ T5096] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 460.561201][T13900] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 460.608845][T13900] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 460.644915][T13900] BTRFS info (device loop4): using free-space-tree [ 460.749724][ T5096] usb 2-1: Using ep0 maxpacket: 32 [ 460.830254][ T5096] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 460.849336][ T5096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.870347][ T5096] usb 2-1: config 0 descriptor?? [ 460.875381][ T29] audit: type=1326 audit(1719345808.611:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13942 comm="syz.2.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f5b75ae9 code=0x7ffc0000 [ 460.911278][ T4480] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 460.920969][ T4480] Bluetooth: hci8: Injecting HCI hardware error event [ 460.930313][ T5092] Bluetooth: hci8: hardware error 0x00 [ 460.951711][ T29] audit: type=1326 audit(1719345808.611:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13942 comm="syz.2.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f39f5b75ae9 code=0x7ffc0000 [ 460.954479][ T5096] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 460.982782][ T29] audit: type=1326 audit(1719345808.611:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13942 comm="syz.2.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f5b75ae9 code=0x7ffc0000 [ 461.078941][ T29] audit: type=1326 audit(1719345808.611:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13942 comm="syz.2.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f5b75ae9 code=0x7ffc0000 [ 461.786018][ T5096] gspca_sunplus: reg_w_riv err -110 [ 461.803058][ T5096] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 461.863802][ T5096] usb 2-1: USB disconnect, device number 34 [ 462.189778][ T57] block nbd2: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 120 seconds [ 462.489987][T13213] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 463.310430][ T5092] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 463.827402][ T29] audit: type=1326 audit(1719345811.561:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764c375ae9 code=0x7ffc0000 [ 463.870846][T13983] loop2: detected capacity change from 0 to 1024 [ 463.909410][ T29] audit: type=1326 audit(1719345811.561:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764c375ae9 code=0x7ffc0000 [ 463.963249][T13983] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 464.058673][ T29] audit: type=1326 audit(1719345811.561:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f764c375ae9 code=0x7ffc0000 [ 464.122698][T13983] loop2: detected capacity change from 0 to 1024 [ 464.163616][ T29] audit: type=1326 audit(1719345811.561:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764c375ae9 code=0x7ffc0000 [ 464.182314][T13983] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 464.199681][T13992] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.207498][T13992] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.272832][ T29] audit: type=1326 audit(1719345811.561:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.0.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764c375ae9 code=0x7ffc0000 [ 464.295033][T13994] loop0: detected capacity change from 0 to 2048 [ 464.323661][T13994] EXT4-fs: Ignoring removed mblk_io_submit option [ 464.415321][T13994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.603003][T14001] loop1: detected capacity change from 0 to 128 [ 464.653801][T13994] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2809: bg 0: block 234: padding at end of block bitmap is not set [ 464.710375][T13994] EXT4-fs (loop0): Remounting filesystem read-only [ 464.959060][T12933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.230402][ T29] audit: type=1326 audit(1719345812.971:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14022 comm="syz.0.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764c375ae9 code=0x7ffc0000 [ 465.609639][T14028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.393059][T14031] loop3: detected capacity change from 0 to 512 [ 466.505891][T14031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 466.519788][T14031] System zones: 1-12 [ 466.537499][T14031] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.2823: invalid block [ 466.722788][T14031] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2823: invalid indirect mapped block 1819239214 (level 1) [ 466.800446][T14031] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2823: bg 0: block 361: padding at end of block bitmap is not set [ 466.849596][T14031] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 466.872341][T14031] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2823: attempt to clear invalid blocks 33619980 len 1 [ 466.938992][T14031] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2823: invalid indirect mapped block 1819239214 (level 0) [ 466.982232][T14031] EXT4-fs (loop3): 1 truncate cleaned up [ 467.036418][T14031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.084843][T14031] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.2823: Directory hole found for htree index block [ 467.213496][T13469] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.746033][T14068] loop0: detected capacity change from 0 to 512 [ 467.850471][T14068] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 467.869684][T14068] System zones: 1-12 [ 467.891538][T14068] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2835: invalid indirect mapped block 1819239214 (level 1) [ 467.933163][T14068] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2835: bg 0: block 361: padding at end of block bitmap is not set [ 468.032502][T14068] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 468.074044][T14068] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2835: attempt to clear invalid blocks 33619980 len 1 [ 468.136158][T14068] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2835: invalid indirect mapped block 1819239214 (level 0) [ 468.154498][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2836'. [ 468.192524][T14068] EXT4-fs (loop0): 1 truncate cleaned up [ 468.229897][T14068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.247857][T14068] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz.0.2835: Directory hole found for htree index block [ 468.385093][T12933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.764368][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 468.764389][ T29] audit: type=1804 audit(1719345816.501:103): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2844" name="/root/syzkaller.yWxHW2/16/cgroup.controllers" dev="sda1" ino=2050 res=1 errno=0 [ 469.531486][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2851'. [ 470.461657][ T29] audit: type=1804 audit(1719345818.191:104): pid=14142 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2857" name="/root/syzkaller.8MpOQB/29/cgroup.controllers" dev="sda1" ino=2049 res=1 errno=0 [ 470.590804][ T5092] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 470.601459][ T5092] Bluetooth: hci5: Injecting HCI hardware error event [ 470.611993][ T5092] Bluetooth: hci5: hardware error 0x00 [ 470.780794][T14147] loop0: detected capacity change from 0 to 2048 [ 470.788806][T14147] EXT4-fs: Ignoring removed mblk_io_submit option [ 470.868942][T14086] loop2: detected capacity change from 0 to 32768 [ 470.881549][T14147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.883411][T14086] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2840 (14086) [ 470.948045][T14086] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 471.019644][T14086] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 471.028446][T14086] BTRFS info (device loop2): using free-space-tree [ 471.039397][T14147] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2860: bg 0: block 234: padding at end of block bitmap is not set [ 471.128676][T14147] EXT4-fs (loop0): Remounting filesystem read-only [ 471.240777][T12933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.891067][T14086] BTRFS error (device loop2): open_ctree failed [ 472.115188][ T29] audit: type=1804 audit(1719345819.851:105): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2871" name="/root/syzkaller.yWxHW2/26/cgroup.controllers" dev="sda1" ino=2035 res=1 errno=0 [ 472.435423][ T57] block nbd4: Possible stuck request ffff888020de8000: control (read@0,4096B). Runtime 60 seconds [ 472.909677][ T5092] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 473.418750][T14211] loop3: detected capacity change from 0 to 4096 [ 473.474938][T14211] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 473.536736][T14211] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 473.557820][T14211] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 473.611046][T14211] ntfs3: loop3: ino=1e, "file1" encrypted i/o not supported [ 473.649360][ T29] audit: type=1800 audit(1719345821.371:106): pid=14211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2878" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 474.749104][T14218] loop0: detected capacity change from 0 to 32768 [ 474.805405][T14218] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2882 (14218) [ 474.902633][T14218] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 474.969392][T14218] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 474.998517][T14218] BTRFS info (device loop0): using free-space-tree [ 475.171143][ T5140] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 475.369515][ T5140] usb 4-1: device descriptor read/64, error -71 [ 475.609356][ T5136] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 475.688681][ T5140] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 475.808352][T14262] loop2: detected capacity change from 0 to 2048 [ 475.842551][ T5136] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 475.882730][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.899869][ T5140] usb 4-1: device descriptor read/64, error -71 [ 475.941401][ T5136] usb 2-1: config 0 descriptor?? [ 475.949312][T14262] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.020026][ T5140] usb usb4-port1: attempt power cycle [ 476.075389][T14262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.449506][ T5140] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 476.524205][ T5140] usb 4-1: device descriptor read/8, error -71 [ 476.709537][T14262] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2893: bg 0: block 234: padding at end of block bitmap is not set [ 476.775594][T14262] EXT4-fs (loop2): Remounting filesystem read-only [ 476.829562][ T5140] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 476.890249][ T5140] usb 4-1: device descriptor read/8, error -71 [ 477.007866][T13451] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.037948][ T5136] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 477.041308][ T5140] usb usb4-port1: unable to enumerate USB device [ 477.109424][ T5136] usb 2-1: USB disconnect, device number 35 [ 477.408034][T14270] 9pnet_fd: Insufficient options for proto=fd [ 477.611160][T12933] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 479.708934][T14301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.883975][T14304] 9pnet_fd: Insufficient options for proto=fd [ 480.319575][ T1150] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 480.489425][ T1150] usb 1-1: device descriptor read/64, error -71 [ 480.789988][ T1150] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 480.974200][ T1150] usb 1-1: device descriptor read/64, error -71 [ 481.110051][ T1150] usb usb1-port1: attempt power cycle [ 481.552405][ T4480] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 481.573235][ T4480] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 481.582916][ T4480] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 481.595224][ T4480] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 481.599817][ T1150] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 481.611923][ T4480] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 481.619926][ T4480] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 481.651892][ T1150] usb 1-1: device descriptor read/8, error -71 [ 481.925729][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 481.965606][ T1150] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 482.013107][T14309] loop2: detected capacity change from 0 to 32768 [ 482.032921][ T1150] usb 1-1: device descriptor read/8, error -71 [ 482.069539][T14309] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2907 (14309) [ 482.128183][T14309] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 482.160046][ T1150] usb usb1-port1: unable to enumerate USB device [ 482.170824][T14309] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 482.179900][T14309] BTRFS info (device loop2): using free-space-tree [ 482.492908][T14356] 9pnet_fd: Insufficient options for proto=fd [ 482.573289][T14319] chnl_net:caif_netlink_parms(): no params data found [ 482.837291][T14361] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2922'. [ 483.162965][T14319] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.517492][T14373] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2925'. [ 483.529132][T14319] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.554023][T14319] bridge_slave_0: entered allmulticast mode [ 483.563632][T14319] bridge_slave_0: entered promiscuous mode [ 483.575049][T14319] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.588900][T14319] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.597840][T14319] bridge_slave_1: entered allmulticast mode [ 483.607611][T14319] bridge_slave_1: entered promiscuous mode [ 483.693985][T14319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.709659][ T4480] Bluetooth: hci10: command tx timeout [ 483.710789][T14319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.010564][T13451] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 484.045839][T14319] team0: Port device team_slave_0 added [ 484.155904][T14319] team0: Port device team_slave_1 added [ 484.339539][ T5139] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 484.857608][T14319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.939108][T14319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.084571][T14319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.252431][T14319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.269571][T14319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.359583][T14319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.361555][ T5139] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 485.433599][ T5139] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 485.449561][T14387] loop3: detected capacity change from 0 to 1024 [ 485.460977][ T5139] usb 2-1: config 0 interface 0 has no altsetting 0 [ 485.497766][ T5139] usb 2-1: New USB device found, idVendor=18ef, idProduct=e025, bcdDevice=6a.22 [ 485.542759][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.575292][ T5139] usb 2-1: config 0 descriptor?? [ 485.587245][ T5139] cp210x 2-1:0.0: cp210x converter detected [ 485.591207][T14387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.756834][T14319] hsr_slave_0: entered promiscuous mode [ 485.789487][ T4480] Bluetooth: hci10: command tx timeout [ 486.036351][T14319] hsr_slave_1: entered promiscuous mode [ 486.882900][T14319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.951882][T14319] Cannot create hsr debugfs directory [ 486.981320][T13469] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.300786][T14407] loop3: detected capacity change from 0 to 128 [ 487.335545][T14407] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 487.870290][ T4480] Bluetooth: hci10: command tx timeout [ 488.432437][ T5139] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 488.449361][ T5139] cp210x 2-1:0.0: querying part number failed [ 488.451763][T14412] pimreg: entered allmulticast mode [ 488.541224][ T5139] usb 2-1: cp210x converter now attached to ttyUSB0 [ 488.638510][ T5139] usb 2-1: USB disconnect, device number 36 [ 489.117700][T14319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.500197][T14426] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2939'. [ 489.843753][ T5139] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 489.860642][ T5139] cp210x 2-1:0.0: device disconnected [ 489.949826][ T4480] Bluetooth: hci10: command tx timeout [ 490.253865][T14319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.299643][T14435] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2940'. [ 490.419419][ T5139] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 490.457384][T14319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.620540][ T5139] usb 2-1: Using ep0 maxpacket: 32 [ 490.640086][ T5139] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 490.662322][T14319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.671613][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.698599][ T5139] usb 2-1: config 0 descriptor?? [ 490.715960][ T5139] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 490.752652][ T5139] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 490.780509][ T5139] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 490.807844][ T5139] usb 2-1: media controller created [ 490.897962][ T5139] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.998452][ T5139] usb 2-1: selecting invalid altsetting 1 [ 491.006875][ T5139] set interface failed [ 491.007346][ T5139] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 491.020367][ T5139] error writing reg: 0xff, val: 0x00 [ 491.901435][ T5139] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 492.172054][ T5139] usb 2-1: USB disconnect, device number 37 [ 492.254019][T14470] loop2: detected capacity change from 0 to 256 [ 492.270660][ T57] block nbd2: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 150 seconds [ 492.297067][T14468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2953'. [ 492.311015][T14319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 492.334293][T14470] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 492.356467][T14319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 492.394204][T14319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 492.432760][T14319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 492.666805][ T5133] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 492.977317][T14319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.116386][T14319] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.193206][T14493] loop3: detected capacity change from 0 to 64 [ 493.242862][ T1665] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.250131][ T1665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.297245][ T1665] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.304596][ T1665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.603977][T14319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.719902][T14512] netlink: 'syz.0.2967': attribute type 2 has an invalid length. [ 495.855910][T14319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.925320][T14537] loop3: detected capacity change from 0 to 512 [ 495.964624][T14537] EXT4-fs: Ignoring removed mblk_io_submit option [ 497.046205][T14537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 497.060249][T14537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 497.157867][T14537] EXT4-fs (loop3): 1 truncate cleaned up [ 497.170755][T14537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.391029][ T30] INFO: task udevd:5314 blocked for more than 143 seconds. [ 497.398422][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 497.519339][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.538322][ T30] task:udevd state:D stack:22656 pid:5314 tgid:5314 ppid:4536 flags:0x00000002 [ 497.872224][T14557] EXT4-fs error (device loop3): ext4_lookup:1854: inode #15: comm syz.3.2976: iget: bad extra_isize 46 (inode size 256) [ 497.879682][ T30] Call Trace: [ 497.970349][ T30] [ 497.973466][ T30] __schedule+0x1796/0x49d0 [ 498.004838][ T30] ? __pfx___schedule+0x10/0x10 [ 498.019377][ T30] ? __pfx_lock_release+0x10/0x10 [ 498.024671][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 498.033171][ T30] ? schedule+0x90/0x320 [ 498.037583][ T30] schedule+0x14b/0x320 [ 498.043848][ T30] schedule_preempt_disabled+0x13/0x30 [ 498.089339][ T30] __mutex_lock+0x6a4/0xd70 [ 498.120375][ T30] ? __mutex_lock+0x527/0xd70 [ 498.127199][ T30] ? bdev_open+0xe5/0xc60 [ 498.151126][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 498.183477][ T30] ? __pfx___might_resched+0x10/0x10 [ 498.199353][ T30] ? disk_block_events+0xa9/0x120 [ 498.227844][ T30] ? bdev_open+0xac/0xc60 [ 498.262100][ T30] bdev_open+0xe5/0xc60 [ 498.279325][ T30] blkdev_open+0x20d/0x2e0 [ 498.294010][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 498.313176][ T30] do_dentry_open+0x95a/0x1720 [ 498.326688][ T30] path_openat+0x289f/0x3280 [ 498.336608][ T30] ? mark_lock+0x9a/0x350 [ 498.346934][ T30] ? mark_lock+0x9a/0x350 [ 498.357027][ T30] ? __pfx_path_openat+0x10/0x10 [ 498.368394][ T30] do_filp_open+0x235/0x490 [ 498.378435][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 498.397289][ T30] ? _raw_spin_unlock+0x28/0x50 [ 498.413572][ T30] ? alloc_fd+0x5a1/0x640 [ 498.439021][ T30] do_sys_openat2+0x13e/0x1d0 [ 498.462445][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 498.482176][ T30] __x64_sys_openat+0x247/0x2a0 [ 498.505869][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 498.523419][ T30] ? do_syscall_64+0x100/0x230 [ 498.549608][ T30] ? do_syscall_64+0xb6/0x230 [ 498.554414][ T30] do_syscall_64+0xf3/0x230 [ 498.558981][ T30] ? clear_bhb_loop+0x35/0x90 [ 498.593009][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.599016][ T30] RIP: 0033:0x7fe5ba9169a4 [ 498.617997][T14319] veth0_vlan: entered promiscuous mode [ 498.623874][ T30] RSP: 002b:00007ffe44c6f750 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 498.659322][ T30] RAX: ffffffffffffffda RBX: 000055fa9541f500 RCX: 00007fe5ba9169a4 [ 498.667410][ T30] RDX: 00000000000a0800 RSI: 000055fa95420560 RDI: 00000000ffffff9c [ 498.686588][T14319] veth1_vlan: entered promiscuous mode [ 498.699914][ T30] RBP: 000055fa95420560 R08: 0000000000000001 R09: 7fffffffffffffff [ 498.723493][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 498.757078][ T30] R13: 000055fa95440570 R14: 0000000000000001 R15: 000055fa9541f910 [ 498.768526][T14540] loop2: detected capacity change from 0 to 32768 [ 498.789528][ T30] [ 498.802770][T14540] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2977 (14540) [ 498.803346][ T30] INFO: task syz.2.2260:11556 blocked for more than 144 seconds. [ 498.821132][T14552] loop1: detected capacity change from 0 to 32768 [ 498.828804][T14319] veth0_macvtap: entered promiscuous mode [ 498.855354][T13469] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.868209][T14319] veth1_macvtap: entered promiscuous mode [ 498.874598][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 498.884846][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.914755][ T30] task:syz.2.2260 state:D stack:26256 pid:11556 tgid:11555 ppid:9402 flags:0x00004004 [ 498.964065][ T30] Call Trace: [ 498.967515][ T30] [ 498.970798][ T30] __schedule+0x1796/0x49d0 [ 498.973401][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.976605][ T30] ? __pfx___schedule+0x10/0x10 [ 498.991269][ T30] ? __pfx_lock_release+0x10/0x10 [ 498.996465][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 499.002147][ T30] ? schedule+0x90/0x320 [ 499.006510][ T30] schedule+0x14b/0x320 [ 499.010908][ T30] schedule_preempt_disabled+0x13/0x30 [ 499.016527][ T30] __mutex_lock+0x6a4/0xd70 [ 499.021271][ T30] ? __mutex_lock+0x527/0xd70 [ 499.026115][ T30] ? bdev_release+0x184/0x700 [ 499.031069][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.045249][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 499.050491][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 499.057770][ T30] bdev_release+0x184/0x700 [ 499.063138][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.074780][ T30] blkdev_release+0x15/0x20 [ 499.079612][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 499.085080][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.096288][ T30] __fput+0x406/0x8b0 [ 499.100653][ T30] task_work_run+0x24f/0x310 [ 499.105419][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.116308][ T30] ? __pfx_task_work_run+0x10/0x10 [ 499.125674][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 499.131800][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.151602][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 499.179747][ T30] do_syscall_64+0x100/0x230 [ 499.185674][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.198157][ T30] ? clear_bhb_loop+0x35/0x90 [ 499.203285][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.209620][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.219871][ T30] RIP: 0033:0x7f1b15175ae9 [ 499.224489][ T30] RSP: 002b:00007f1b15f20048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.233442][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.249442][ T30] RAX: 0000000000000000 RBX: 00007f1b15303fa0 RCX: 00007f1b15175ae9 [ 499.257676][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 499.266171][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.276487][ T30] RBP: 00007f1b151f6746 R08: 0000000000000000 R09: 0000000000000000 [ 499.284939][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.296047][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.305077][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.316864][ T30] R13: 000000000000000b R14: 00007f1b15303fa0 R15: 00007ffe17ff0e38 [ 499.325519][ T30] [ 499.328699][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.339669][ T30] INFO: task syz.2.2260:11561 blocked for more than 145 seconds. [ 499.365564][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 499.369285][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.373861][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.394584][ T30] task:syz.2.2260 state:D stack:20592 pid:11561 tgid:11555 ppid:9402 flags:0x00004004 [ 499.409351][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.420101][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.430803][ T30] Call Trace: [ 499.434132][ T30] [ 499.437102][ T30] __schedule+0x1796/0x49d0 [ 499.451558][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.462371][ T30] ? __pfx___schedule+0x10/0x10 [ 499.467311][ T30] ? __pfx_lock_release+0x10/0x10 [ 499.469102][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.503294][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.509367][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 499.527715][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.539943][ T30] ? schedule+0x90/0x320 [ 499.544282][ T30] schedule+0x14b/0x320 [ 499.548653][ T30] io_schedule+0x8d/0x110 [ 499.570313][T14319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.602834][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.613600][ T30] folio_wait_bit_common+0x882/0x12b0 [ 499.640078][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 499.650509][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.664387][T14552] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names [ 499.679079][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 499.688258][ T30] ? __filemap_get_folio+0x769/0xc10 [ 499.694062][ T30] do_read_cache_folio+0xb9/0x820 [ 499.699686][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 499.705209][ T30] read_part_sector+0xb3/0x330 [ 499.707497][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.711251][ T30] adfspart_check_POWERTEC+0xc8/0x8f0 [ 499.729107][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 499.729493][T14552] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 499.735216][ T30] ? snprintf+0xda/0x120 [ 499.743055][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.759826][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 499.765921][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 499.771491][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.786306][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 499.793042][ T30] ? vsnprintf+0x184/0x1da0 [ 499.794500][T14552] bcachefs (loop1): alloc_read... [ 499.797618][ T30] ? __pfx_snprintf+0x10/0x10 [ 499.803587][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.818140][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 499.821762][T14552] done [ 499.825938][T14552] bcachefs (loop1): stripes_read... done [ 499.833953][ T30] bdev_disk_changed+0x72c/0x13d0 [ 499.839118][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 499.844942][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.856096][T14552] bcachefs (loop1): snapshots_read... [ 499.856504][ T30] ? __pfx___might_resched+0x10/0x10 [ 499.862445][T14552] done [ 499.872912][ T30] blkdev_get_whole+0x315/0x470 [ 499.874162][T14552] bcachefs (loop1): journal_replay... done [ 499.877887][ T30] bdev_open+0x2e9/0xc60 [ 499.888597][ T30] blkdev_open+0x20d/0x2e0 [ 499.889329][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.895024][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 499.910103][ T30] do_dentry_open+0x95a/0x1720 [ 499.913856][T14552] bcachefs (loop1): resume_logged_ops... [ 499.914936][ T30] path_openat+0x289f/0x3280 [ 499.923573][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.926206][ T30] ? mark_lock+0x9a/0x350 [ 499.941592][T14552] done [ 499.943729][ T30] ? mark_lock+0x9a/0x350 [ 499.948837][ T30] ? __pfx_path_openat+0x10/0x10 [ 499.950501][T14552] bcachefs (loop1): going read-write [ 499.966674][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.977150][ T30] do_filp_open+0x235/0x490 [ 499.977456][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.992496][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.002490][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.014094][T14552] bcachefs (loop1): done starting filesystem [ 500.021302][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 500.026450][ T30] ? _raw_spin_unlock+0x28/0x50 [ 500.035861][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.040258][ T30] ? alloc_fd+0x5a1/0x640 [ 500.060937][ T30] do_sys_openat2+0x13e/0x1d0 [ 500.084634][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 500.090054][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.100981][ T30] __x64_sys_openat+0x247/0x2a0 [ 500.110530][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 500.120539][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.130545][ T30] ? do_syscall_64+0x100/0x230 [ 500.135496][ T30] ? do_syscall_64+0xb6/0x230 [ 500.150859][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.154100][ T30] do_syscall_64+0xf3/0x230 [ 500.171848][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.185183][ T30] ? clear_bhb_loop+0x35/0x90 [ 500.196018][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.211412][ T30] RIP: 0033:0x7f1b15174550 [ 500.221321][ T30] RSP: 002b:00007f1b15efeb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 500.230197][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b15174550 [ 500.238271][ T30] RDX: 0000000000000000 RSI: 00007f1b15efec20 RDI: 00000000ffffff9c [ 500.246531][ T30] RBP: 00007f1b15efec20 R08: 0000000000000000 R09: 002364626e2f7665 [ 500.254854][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 500.263163][ T30] R13: 000000000000006e R14: 00007f1b15304070 R15: 00007ffe17ff0e38 [ 500.275027][ T30] [ 500.278291][ T30] [ 500.278291][ T30] Showing all locks held in the system: [ 500.287446][ T30] 1 lock held by khungtaskd/30: [ 500.292460][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 500.292810][T14319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.302463][ T30] 3 locks held by kworker/u8:5/1033: [ 500.302483][ T30] #0: ffff88802ac59948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 500.325210][T14552] syz.1.2979 (14552) used greatest stack depth: 13200 bytes left [ 500.338368][ T30] #1: ffffc90004537d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 500.351392][T14319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.352178][ T30] #2: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 500.373005][T14319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.415227][T14319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.426002][ T30] 3 locks held by kworker/u8:11/2845: [ 500.433443][ T30] #0: ffff88802ac59948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 500.452308][T14319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.479507][ T30] #1: ffffc90009937d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 500.492574][T14319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.492618][T14319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.501807][ T30] #2: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 500.501904][ T30] 2 locks held by getty/4837: [ 500.529354][ T30] #0: ffff88801e5480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 500.539575][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 500.551344][ T30] 3 locks held by kworker/0:5/5140: [ 500.558774][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 500.570880][ T30] #1: ffffc90004637d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 500.588614][ T30] #2: ffff888023aa0240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 500.601578][ T30] 1 lock held by udevd/5314: [ 500.606228][ T30] #0: ffff8880207854c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 500.616039][ T30] 1 lock held by udevd/8154: [ 500.621116][ T30] #0: ffff888020c594c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 500.630877][ T30] 1 lock held by syz.2.2260/11556: [ 500.636031][ T30] #0: ffff8880207854c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 500.646450][ T30] 1 lock held by syz.2.2260/11561: [ 500.651694][ T30] #0: ffff8880207854c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 500.661814][ T30] 1 lock held by syz.4.2589/12994: [ 500.667014][ T30] #0: ffff888020c594c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 500.683891][ T30] 1 lock held by syz.4.2589/12999: [ 500.689430][ T30] #0: ffff888020c594c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 500.698867][ T30] 1 lock held by syz.2.2647/13247: [ 500.704271][ T30] #0: ffff8880207854c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 500.713856][ T30] 1 lock held by syz.2.2647/13251: [ 500.719101][ T30] #0: ffff8880207854c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 500.728921][ T30] 1 lock held by syz-executor/13303: [ 500.734363][ T30] #0: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 500.746005][ T30] 1 lock held by syz.4.2861/14153: [ 500.752432][ T30] #0: ffff888020c594c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 500.762117][ T30] 1 lock held by syz.4.2861/14154: [ 500.767276][ T30] #0: ffff888020c594c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 500.777246][ T30] 3 locks held by syz-executor/14319: [ 500.785727][ T30] #0: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 500.795615][ T30] #1: ffff88806371d408 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x22d/0x420 [ 500.805477][ T30] #2: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 500.816862][ T30] [ 500.819584][ T30] ============================================= [ 500.819584][ T30] [ 500.834337][ T30] NMI backtrace for cpu 0 [ 500.838755][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 500.848903][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 500.860172][ T30] Call Trace: [ 500.863486][ T30] [ 500.866444][ T30] dump_stack_lvl+0x241/0x360 [ 500.871186][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.876712][ T30] ? __pfx__printk+0x10/0x10 [ 500.881520][ T30] ? vprintk_emit+0x631/0x770 [ 500.886265][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 500.891457][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 500.891474][T13303] bcachefs (loop1): shutting down [ 500.896617][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 500.907542][ T30] ? _printk+0xd5/0x120 [ 500.911742][ T30] ? __pfx__printk+0x10/0x10 [ 500.916437][ T30] ? __wake_up_klogd+0xcc/0x110 [ 500.921445][ T30] ? __pfx__printk+0x10/0x10 [ 500.926054][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 500.931103][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 500.937226][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 500.943505][ T30] watchdog+0xfde/0x1020 [ 500.947792][ T30] ? watchdog+0x1ea/0x1020 [ 500.952245][ T30] ? __pfx_watchdog+0x10/0x10 [ 500.956945][ T30] kthread+0x2f0/0x390 [ 500.961034][ T30] ? __pfx_watchdog+0x10/0x10 [ 500.965919][ T30] ? __pfx_kthread+0x10/0x10 [ 500.970561][ T30] ret_from_fork+0x4b/0x80 [ 500.975001][ T30] ? __pfx_kthread+0x10/0x10 [ 500.979613][ T30] ret_from_fork_asm+0x1a/0x30 [ 500.984426][ T30] [ 500.989862][ T30] Sending NMI from CPU 0 to CPUs 1: [ 500.997179][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 500.999187][T13303] bcachefs (loop1): going read-only [ 501.022968][T13303] bcachefs (loop1): finished waiting for writes to stop [ 501.055097][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 501.062212][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 501.072237][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 501.082698][ T30] Call Trace: [ 501.086014][ T30] [ 501.089079][ T30] dump_stack_lvl+0x241/0x360 [ 501.093836][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.099100][ T30] ? __pfx__printk+0x10/0x10 [ 501.103799][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 501.109945][ T30] ? vscnprintf+0x5d/0x90 [ 501.114358][ T30] panic+0x349/0x860 [ 501.118329][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 501.124528][ T30] ? __pfx_panic+0x10/0x10 [ 501.128995][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 501.134428][ T30] ? __irq_work_queue_local+0x137/0x410 [ 501.140037][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 501.145461][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 501.151712][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 501.157934][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 501.164179][ T30] watchdog+0x101d/0x1020 [ 501.168662][ T30] ? watchdog+0x1ea/0x1020 [ 501.173206][ T30] ? __pfx_watchdog+0x10/0x10 [ 501.177950][ T30] kthread+0x2f0/0x390 [ 501.182077][ T30] ? __pfx_watchdog+0x10/0x10 [ 501.186900][ T30] ? __pfx_kthread+0x10/0x10 [ 501.191539][ T30] ret_from_fork+0x4b/0x80 [ 501.196090][ T30] ? __pfx_kthread+0x10/0x10 [ 501.200817][ T30] ret_from_fork_asm+0x1a/0x30 [ 501.205723][ T30] [ 501.209058][ T30] Kernel Offset: disabled [ 501.213411][ T30] Rebooting in 86400 seconds..